last executing test programs: 1m25.65028396s ago: executing program 0 (id=601): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) io_uring_setup(0x315f, &(0x7f0000000040)={0x0, 0x5f2, 0x20000, 0x3, 0x2c5, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, 0x0, &(0x7f0000000200)=r6}, 0xfffffffffffffc3e) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x6, 0x0, 0x0, 0x4c}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lseek(r3, 0x1000, 0x3) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) 1m24.946860814s ago: executing program 0 (id=605): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x100, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 1m24.574473043s ago: executing program 0 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x6c, "9b167b78af64046919c9527a7bfb979a39a10ea2f843f515ecf3cac9ae19fb210d7e93d49c81b3aed70c454aa43aaacf07a5962299380ef0c0c86c507ed8fadf1fe73087429f02bed1dc6b8096f903d7a6f97a2dfbe73d0566d58f64102ffe905a29e9305e577dd3f46ce3b2"}, &(0x7f0000000480)=0x74) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000004c0)={r4, 0x407}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f00000000c0)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @random="c1ab34a9b9e3", {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0xa, "99be1d76480d9934b32b"}]}, 0x34) 1m22.610304907s ago: executing program 0 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 1m22.500003573s ago: executing program 0 (id=617): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x100000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x8, 0x4) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000001600), 0x4) r7 = socket$netlink(0x10, 0x3, 0x12) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) read$FUSE(r4, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) write$FUSE_DIRENT(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00', @ANYRES64=r8, @ANYBLOB], 0x60) connect$pppl2tp(r0, 0x0, 0xfffffd72) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1m20.526367578s ago: executing program 0 (id=629): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r4 = mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) lseek(r4, 0x401, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) (async) dup(r1) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x4) (async) mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) (async) lseek(r4, 0x401, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x24) (async) 1m4.830730771s ago: executing program 32 (id=629): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r4 = mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) lseek(r4, 0x401, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) (async) dup(r1) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x4) (async) mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) (async) lseek(r4, 0x401, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x24) (async) 7.829601216s ago: executing program 1 (id=929): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001, r0}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000100)) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 7.53859692s ago: executing program 1 (id=932): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 7.492531309s ago: executing program 1 (id=933): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000600), 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200425000000252109000000a6202623a5f02f64dd9c1728665ad9f7aa65ce3a376fc9309d5def37a8e13f"], &(0x7f0000000780)=ANY=[@ANYBLOB="00c7e204030934477d36094cf79f28ef445edd4f22a000"/33], &(0x7f0000000380)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@generic={0x3, 0x10, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1a, 0xb, 0x0, 0x8, 0x8b}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0xf6, 0x3, "36937b00", "8fdf78b6"}}, 0x0}, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x79, "4bbf05655b4e4790f23df2c973e81ed113c0a3322906b5e4f09e859022dfedde675165b0b23c8f7a2df370759b88adc4bffbdc06a79a66a44e62f6c025a5405ba8f7ef3cb8bbd95f8878468b870ac5c4328077559214f45efb439d0df53cbd13cab93d02dcc4552985e978e73d962814bee940321efc8d5dd6"}, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0xb, 0x2, "9fab"}, 0x0, &(0x7f00000007c0)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x3}, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000300)='./file0/bus\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) 6.011838704s ago: executing program 5 (id=936): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x9, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000001c0)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = syz_io_uring_setup(0x1719, &(0x7f0000000080)={0x0, 0x6edc, 0x400, 0x1, 0x244}, &(0x7f0000000100), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x8, 0x10010, r2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000003900)}, {&(0x7f0000000000)="987aa1", 0x41}], 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_flags_required={0x3, 0x3}, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_register_op={0x0, 0x5}, @ioring_restriction_sqe_flags_allowed={0x2, 0xa}, @ioring_restriction_sqe_op={0x1, 0x21}, @ioring_restriction_sqe_flags_required={0x3, 0x13}], 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="08001ebbb07d586e", 0x8}, {&(0x7f0000000540)}, {&(0x7f0000000780)="1a1ae3222fb7b2b30cc8cd6b37caeae4755db651a936000000000000", 0x1c}], 0x3, 0x0, 0x0, 0xe0000000}, 0x8040) 5.627182238s ago: executing program 5 (id=940): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/6, 0x6}], 0x1) accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @mss={0x2, 0x8}, @window, @window={0x3, 0x3, 0x5}, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x2000000000000135) write$binfmt_elf64(r1, &(0x7f00000011c0)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000005c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38674f9862cda312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361aeae956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695ad", 0xf0, 0x805, 0x0, 0x0) 5.444069717s ago: executing program 5 (id=942): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x9) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa0100fe}}], 0x1c) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbbad4f943162486dd6000000000283afffe04000000000000000000de9c0c3001ff0200000000000000fe800000000000000000000000000008fe8000000000000000000000000000006185be3cc79906b2cef44982f542f45f9549d6bf3bb2de92c0e3ff00"/121], 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) prlimit64(0x0, 0x0, &(0x7f0000000100)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102374, 0x18fe6) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000280)={0x2, 0xfe}, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) 4.731238669s ago: executing program 1 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81e5, 0x20000008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b6a27bd70c5fbdbdf03240000000a000100"], 0x20}}, 0x894) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtaction={0x164, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdbff, {}, [{0x150, 0x1, [@m_skbmod={0x14c, 0x14, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0xda3, 0x6, 0x0, 0x8000}, 0x4}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}]}, {0xef, 0x6, "98703da857c6eba42329ae06047ade231249515d092205d44f884aa1e95958fdf970860da18aa5135302dbaf3f5d02e23469ccdf22f416347483153ccde9050a0de4e68d1fa4669ecce3b199be7ed49edde48172f6d42a1297f1df3f584ea244f9805b52a57b50829702be7ac83e3d1f9ab027a1f909333d3afd35cb47bf1ff8dba06d10837d160bd2b131e5be82bf9d88212fc5ef7999666b8f0d65337e610369218598a71257e989089cd38641dfb0ec9ad506917f01f504567756803acb1a3345352044246a7f543492b2613ef16e25a0e4869fb63dd08f3a24d3b342ad002b1a5a79f25a4b91c0ab8e"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x38}}, 0x4040000) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r9, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 4.096196724s ago: executing program 5 (id=950): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000003600)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0x820020, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x9004, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) 3.694549096s ago: executing program 4 (id=951): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="134b3dd21ddd73d399ce0ba7024bc1e05c9e5d581a16d08479b48dae6a67b6d9970e4f210c5e5835c103007d77225e7c782e4787b8e007000000000000a8da3611f6c9aac261e72b2cc25bb1efaaa90ab260e8f8344982a133f0328d47fc9c83010000000000000010bca8b163fda78a2a"], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000007004000612200000200000000080000", @ANYRES32, @ANYBLOB="000000af2fb73b9cab568f0000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f00000003c0)="c81103c041", &(0x7f0000000080)=@udp, 0x2}, 0xfc24) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) sync() r5 = socket$nl_rdma(0x10, 0x3, 0x14) creat(&(0x7f0000000400)='./bus\x00', 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(r6, 0x0, 0x100000000000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r5, @ANYRES8=r4, @ANYRES64=r6, @ANYRESDEC=r2], 0x20}}, 0x4008080) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_setup(0x28c6, &(0x7f0000000340)={0x0, 0x511a, 0x1cc40, 0x1, 0x159, 0x0, r1}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.576106336s ago: executing program 5 (id=953): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x8000}, {r0, 0x20}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x2]}, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @empty}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @empty}, &(0x7f0000000300)=0xc) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000006c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r6, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000500)=""/39, 0x27, 0x0, &(0x7f0000000540)=""/207, 0xcf}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r9) (async) close(r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000080)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000080)=r9}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r11, 0x0, 0x0, 0x200000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r11, 0x0, 0x48f, 0x0, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0xaa}, 0xc) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0xaa}, 0xc) signalfd(r4, &(0x7f00000007c0)={[0x80000000]}, 0x8) (async) r14 = signalfd(r4, &(0x7f00000007c0)={[0x80000000]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x1b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x5, 0xa, 0x5, 0x4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0xb, 0xd, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x39200000, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbe, &(0x7f0000000380)=""/190, 0x41000, 0x70, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x6, &(0x7f0000000800)=[r10, r11, r12, r13, r14], &(0x7f0000000840)=[{0x5, 0x2, 0x6}, {0x5, 0x5, 0xd, 0xf}, {0x4, 0x3, 0x2, 0x2}, {0x5, 0x2, 0x9, 0x8}, {0xfffffffd, 0x5, 0x4, 0x3}, {0x4, 0x1, 0xa, 0xb}], 0x10, 0x1, @void, @value}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r16}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x11, &(0x7f0000000cc0)=ANY=[@ANYBLOB="4547b494e75bdaae3f9505c51f8d77d10b48000001000000000000000e00000000000000f7fbffffc7298000010000001801000020e4782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000950000000000000018650000000000000001000009000000120bf66a2d0cca67cd21346718612b226bd4211dc2c73cf78b6b4074"], &(0x7f0000000480)='GPL\x00', 0x2, 0x52, &(0x7f0000000240)=""/82, 0x41100, 0x20, '\x00', r3, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xc, 0x0, 0x8}, 0x10, r7, r16, 0x2, 0x0, &(0x7f0000000380)=[{0x1, 0x1, 0x8, 0xb}, {0x5, 0x4, 0xe, 0x3}], 0x10, 0x800, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x11, &(0x7f0000000cc0)=ANY=[@ANYBLOB="4547b494e75bdaae3f9505c51f8d77d10b48000001000000000000000e00000000000000f7fbffffc7298000010000001801000020e4782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000950000000000000018650000000000000001000009000000120bf66a2d0cca67cd21346718612b226bd4211dc2c73cf78b6b4074"], &(0x7f0000000480)='GPL\x00', 0x2, 0x52, &(0x7f0000000240)=""/82, 0x41100, 0x20, '\x00', r3, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xc, 0x0, 0x8}, 0x10, r7, r16, 0x2, 0x0, &(0x7f0000000380)=[{0x1, 0x1, 0x8, 0xb}, {0x5, 0x4, 0xe, 0x3}], 0x10, 0x800, @void, @value}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.188371878s ago: executing program 2 (id=954): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 3.155352181s ago: executing program 1 (id=955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 3.153596054s ago: executing program 3 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x4c466994d56c53cd}, 0x14}}, 0x0) 3.010264911s ago: executing program 1 (id=957): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mount$pvfs2(&(0x7f00000001c0), 0x0, &(0x7f0000000300), 0x20, &(0x7f0000000280)=ANY=[@ANYBLOB="23242c726e67002c002c232c2f6465762f76696d326d002c66756e02000000000000004b45524e454c5f434845434b2c736d61636b667372ecb555182b2b2c00"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000000206010006000006021c000000000000070003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c000280080001406401010200000840000000280c000300686173683a69700005000100060000003a52ba4ff82e7fb63c024615cd7c63de876a40d3556d"], 0x68}}, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x3, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x8, 0x5, 0x3, 0x1ff, 0x141a, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0xffff, 0x5, 0x0, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0x1, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$qrtr(0x2a, 0x2, 0x0) 3.009362041s ago: executing program 2 (id=958): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x7ffffffff, 0x125200) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1}) 2.924704878s ago: executing program 5 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x97, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaf8a4ffaaffffffffffff080045aa67c2b48fbc800000530000000000ffff00000000000000130000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f000000090780000011312cef9d91eee4f4bec163023a7d98d297e1e00000000670f07a1077973bb7ca3169c687ea93da4867f0895151c255b38bb28b6cf8eed7e8b72e135edcb357b40a360d3f7751fcc31069129e983bba2"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="9b03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb206292c4d96927f019fba2ad2987739c5e0d59351755863603e11b"]}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10840) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000040108117980800000000000109022400010000000009040000170300000009210000010122290a0905", @ANYRES64], 0x0) 2.924284352s ago: executing program 4 (id=960): io_uring_setup(0xdac, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYRES64=r0]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2.551372787s ago: executing program 2 (id=961): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e23, @remote}, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085b0ff000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) 1.779613906s ago: executing program 3 (id=962): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) (async, rerun: 32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 64) r2 = syz_pidfd_open(0x0, 0x0) (async, rerun: 64) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) (async) sendto$inet6(r6, &(0x7f0000000240)="c84b757b25f7c8df747e51d0c73fc84bec628dcaa3cb7ba6756d5e4b30ae36df7200ad21a2363d960dd0c6577cf3c5359ebc14613e0007c3b85a58a489190900000083e7e21d4d9d44a99551df4aa1", 0xffffffffffffff13, 0x8000000, 0x0, 0xfffffffffffffd87) close_range(r2, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000300)={0x6, 'wlan0\x00', {}, 0x100}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_batadv\x00', {0x20003}, 0x5}) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) 1.113496534s ago: executing program 4 (id=963): chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000019080)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$inet(r1, 0x0, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x7, 0xb}, {0x8, 0x2, 0x0, 0x200}, {0x1, 0x1, 0x5, 0x2db2}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) chdir(0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000019080)={0xe, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockname$inet(r1, 0x0, &(0x7f00000002c0)) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x7, 0xb}, {0x8, 0x2, 0x0, 0x200}, {0x1, 0x1, 0x5, 0x2db2}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') (async) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) (async) 990.308738ms ago: executing program 2 (id=964): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x100, 0x1, 0x2, {0xc, @raw_data="7c830690ee0cfae36890b20a1baaaa6659f503ba291a15e258aa3a2113fb53af2875f19f3093cf877be646f75461716d29d385d15e52a14355ddee29ec30372fd217f88e8b544491d109406b1b8348d70435f9306d7082a91ebb780d6c0a80f84e88fb391948b11c73e8b8021a3d6fce15c296ed0f30c8232c9880b183769a6c6e27ff6848637e74d583b3f66c243d518f3a47e75d9c987d9f70919d8838834fe58dad611793a39b770a82c5034b4e669c1ef38e26360c95b9a5b82d707c9ace33ffb549f0e4bd1f"}, 0xe36}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800b00010069700180000000000000028014000300ff020000000000000000fc0000000001"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800b00010069700180000000000000028014000300ff020000000000000000fc0000000001"], 0x48}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x800, 0x0, 0x40, {0x0, 0x0, 0x0, r1, 0x100, 0x54a6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c8d4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x800, 0x0, 0x40, {0x0, 0x0, 0x0, r1, 0x100, 0x54a6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c8d4) 989.211225ms ago: executing program 3 (id=965): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c82052004e0001000e0703000600070305080000022400020000000109020002000d0e08000700000005000010030708000000080006008d54106004002400090005021100010004002035040904050907000180"], 0x57) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x100000, @empty}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3a, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r4, 0x471e4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r8 = syz_open_procfs(0x0, 0x0) getdents(r8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 739.188035ms ago: executing program 2 (id=966): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_AF_SPEC={0x4}]}, 0x40}}, 0x0) 703.997356ms ago: executing program 4 (id=967): r0 = memfd_create(&(0x7f0000000200)='-@-!))\x00\x88\"\xd0\xc0\xdb\v\x1c\x1e\xf2\xb6A\x01\x04\x00\x00\xbfw\xc3\x134\xce3J\xb6\x1c}\xf7\x06\x00\x00\x00\x05\x00\x00\x00\x80\xf1\x9f\xde\x953\xc7e\xa9s\xdbYp\'\xf13\x7f\x13\x8du\x81\xab\xba\x1eh\xc6\xf1\xbf\xa9\xd6k\xb8\x02\x00\x00\x00\x00\x00\x00\x00\x1c\x14\x8b\xf9\xb0\x14N\xc9\xd4\x0e\x87U\xe4\xb7\x05\x86\x0e\x11k\a\x00\x00\x00\x00\x00\x00\x00\x8bF\n&\xe4q\t\\\xca\x03\xc0\xb2o\xb6r?N\x9e\x95\x06\x00\x00\x13\xd2\xbf\xfd\xdab\x00\xf6\x1a\'\xcf\xae\x98,\xb4\x00\x00\x15w@\x9a|\xcdF\xdd\xec\xc8\x80ix\xb0<\xf7\xf4\xa9\xfen\x15r\xcc\xb4\xdcg\xe4}\xc0\x03\x8c\xf6\x13\x8c\x12\xcb\xb4`\x97\xe6\xa0\xe1\xba\xc0\xc0\xb2)OQ\xc2\n\xf2Z,J)\x9d\x1d=\x12B\xbfC2\x83\xf3\xa5\xd9;]e\xc5\x1f\x15d\xeaz\xdf\x18Z)\xe2\xa2Q*-\f\x88\xfb\x15\x9a\xb9\xc4\xe8mX\x06\x00\x00\x00\x00\x00\x00\x00\xc9\x9e\xdd\xfao\xa6\xbcD\x16\x1c\x88\x8e\xde>\xbb0\x8b\xe2@\x9f\xf3 L\xbf39Tr:1\xc7>\x17\x9be\xd5UO\xb9\x0e:\x06\xc2\x83\x1b\xe6\x9bI\xa9X\x96I97\xc0z\xfa\x8b\xe3)m\xb1\x1d9\xb3\xb5\xe7@=A,H\x1f.A\x85\x13\xab\xf4\x10!\x13\xe3\x83\xc5\xd4\xa8f\xd4\xff\xea\xd2gDT\xd6\xde.\xaf\xf8\xe7\x93\n\x91h\x83ND\x80\x91\xff\xff\x00\x00}\xc5\xae\xc9\x17\xaf\x997=\xabZ\v\x99;\xba58i\xdb\x8cB\xe4\x8a\x81\x03l\x97a\x97\x86g\x99K\xb4d0\xda\xce\f\xfe[(\x88\x93\x00\x00\x00\x00\x00\x00X\xaff\xa2\xfc\xc92\xaf\xb9\x16\bKM;\x92\xff\x9aB0\x92\xc5\xc26\xaa\xc1\n\x02\xc4\xcaA\x1f\xa6\xd5K\x81\xc2\xb0\x9a\x8f\t\xbd\xe5\xba\xdb\xe48\x8a\xac\xf9&Zm\xee\x14\xd9|pQ\x10\x00\x00\x00\x00\x00~\xd8\x12\x8b%r\x9e\xe1\xe1S\xcc1K\x95\x93\x95O\x1c\xe6):rKk\xc9\xdf\x14\xd3n}\x9a\x03\xeeF*\xc7\xa5}\x921\xb4a\xe1\f\xc5Z\xa3\x01\x13j\xfb\xcd\x87\xd8', 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="dc000031fb30e4aab393", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500000000000800088004000080"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000040)) accept4(r3, &(0x7f0000000440)=@in={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x80, 0x80800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r2}, &(0x7f00000004c0), &(0x7f0000001000)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)='%pI4 \x00'}, 0x20) fcntl$addseals(r0, 0x409, 0x15) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000100)=0x0) ptrace(0x4207, r7) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x4}) 656.708058ms ago: executing program 2 (id=968): unshare(0x68040200) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket$alg(0x26, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080), &(0x7f0000000140)=0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000066000000000000000000000000000200"/72], 0x48) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) process_vm_readv(r2, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) 601.048713ms ago: executing program 3 (id=969): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 485.892536ms ago: executing program 3 (id=970): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) (fail_nth: 1) 349.134068ms ago: executing program 4 (id=971): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 30.154657ms ago: executing program 4 (id=972): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x5, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008a616a08980c401121f00102030109021200010000000009044e0000109a3e0cde3ba5f7925c378bfc83257559c84ee8d4cb4a367bfa470b0c2175aeb7a9be251e507180753f5f529f0c317849d3aa38477dbe7c1d72d6c47ba501565b988fa0e9eb3f27d976e897c21907003a21c8302c8fcf0bcdf3decb27033a2a47cf726b62"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x3]}, 0x8) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x50}}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x100000000000000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) alarm(0xfffffffffffffffe) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbdac08e80430ffd1a6010203010902120001000000000904000000295b2e4441eba34629d1f1d513ff9d76fddd00209385"], 0x0) 0s ago: executing program 3 (id=973): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x1c3, 0x12) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(r0, 0x0) (async) setpgid(0x0, r0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) (async) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (async) write$cgroup_int(r3, &(0x7f00000000c0)=0x1c3, 0x12) (async) kernel console output (not intermixed with test programs): 1500][ T7461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.390819][ T29] audit: type=1400 audit(2000000080.990:701): avc: denied { mount } for pid=7447 comm="syz.0.402" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 143.414548][ T7463] netlink: zone id is out of range [ 143.431951][ T51] libceph: connect (1)[c::]:6789 error -101 [ 143.457599][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 143.471834][ T7463] netlink: zone id is out of range [ 143.477667][ T7463] netlink: zone id is out of range [ 143.483099][ T7463] netlink: zone id is out of range [ 143.488274][ T7463] netlink: zone id is out of range [ 143.493977][ T7463] netlink: zone id is out of range [ 143.499552][ T7463] netlink: zone id is out of range [ 143.512127][ T7463] netlink: zone id is out of range [ 143.653183][ T7444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.659532][ T7444] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.741457][ T7444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.794764][ T7444] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.838033][ T7444] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.876030][ T7444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.949891][ T7444] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.990802][ T7444] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.032430][ T7444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.039449][ T7444] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.052880][ T7444] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.081655][ T7444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.091034][ T7444] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 144.336044][ T7444] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 144.749640][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.412'. [ 144.803212][ T7490] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 144.909892][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.983409][ T5948] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 145.008232][ T5948] usb 3-1: USB disconnect, device number 15 [ 145.048582][ T5948] usblp0: removed [ 145.175874][ T51] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 145.203453][ T7507] Bluetooth: MGMT ver 1.23 [ 145.339983][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 145.350003][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.364713][ T51] usb 2-1: config 0 has no interfaces? [ 145.371644][ T51] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 145.383797][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.415745][ T51] usb 2-1: config 0 descriptor?? [ 145.674012][ T51] usb 2-1: string descriptor 0 read error: -71 [ 145.684671][ T51] usb 2-1: USB disconnect, device number 24 [ 145.792058][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 145.792074][ T29] audit: type=1400 audit(2000000083.440:714): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 145.801833][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.909785][ T5948] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 146.000210][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.119844][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.119918][ T5137] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.161431][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.179029][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.185632][ T29] audit: type=1400 audit(2000000083.830:715): avc: denied { map } for pid=7518 comm="syz.4.420" path="/proc/246/net/icmp6" dev="proc" ino=4026532901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 146.189053][ T5948] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 146.233967][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.260170][ T5948] usb 3-1: config 0 descriptor?? [ 146.299061][ T29] audit: type=1400 audit(2000000083.830:716): avc: denied { execute } for pid=7518 comm="syz.4.420" path="/proc/246/net/icmp6" dev="proc" ino=4026532901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 146.351662][ T7523] IPv6: sit1: Disabled Multicast RS [ 146.366219][ T7523] sit1: entered allmulticast mode [ 146.659749][ T51] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 146.829838][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 146.836694][ T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.847751][ T51] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.857360][ T51] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 146.869039][ T51] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.891253][ T51] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.900772][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.908827][ T51] usb 2-1: Product: syz [ 146.913962][ T51] usb 2-1: Manufacturer: syz [ 146.918631][ T51] usb 2-1: SerialNumber: syz [ 146.969896][ T5866] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 146.989891][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.101213][ T5948] hid-led 0003:27B8:01ED.000A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 147.119087][ T5948] hid-led 0003:27B8:01ED.000A: ThingM blink(1) initialized [ 147.129943][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 147.137846][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.149979][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.160673][ T5866] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 147.172231][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.191324][ T5866] usb 5-1: config 0 descriptor?? [ 147.199853][ T51] usb 2-1: 0:2 : does not exist [ 147.221356][ T51] usb 2-1: USB disconnect, device number 25 [ 147.313308][ T5862] usb 3-1: USB disconnect, device number 16 [ 147.728316][ T5866] gt683r_led 0003:1770:FF00.000B: unknown main item tag 0x0 [ 147.739360][ T5866] gt683r_led 0003:1770:FF00.000B: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 147.825126][ T29] audit: type=1400 audit(2000000085.470:717): avc: denied { create } for pid=7539 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 147.858634][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 147.871486][ T5137] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.909908][ T51] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 148.048249][ T5137] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.048376][ T5948] usb 5-1: USB disconnect, device number 14 [ 148.064344][ T5867] gt683r_led 0003:1770:FF00.000B: failed to send set report request: -19 [ 148.076017][ T5867] gt683r_led 0003:1770:FF00.000B: failed to send set report request: -19 [ 148.089875][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 148.098492][ T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.110631][ T51] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.119536][ T51] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 148.132583][ T5866] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 148.140357][ T51] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 148.157294][ T51] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.166443][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.174683][ T51] usb 2-1: Product: syz [ 148.178874][ T51] usb 2-1: Manufacturer: syz [ 148.183544][ T51] usb 2-1: SerialNumber: syz [ 148.189882][ T5137] Bluetooth: hci4: command 0x0c1a tx timeout [ 148.199814][ T5137] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.311770][ T5866] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 148.320183][ T5866] usb 1-1: config 4 has no interface number 0 [ 148.326440][ T5866] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x7 has invalid maxpacket 104, setting to 64 [ 148.339171][ T5866] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=80.20 [ 148.348344][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.356430][ T5866] usb 1-1: Product: syz [ 148.360975][ T5866] usb 1-1: Manufacturer: syz [ 148.365616][ T5866] usb 1-1: SerialNumber: syz [ 148.407503][ T51] usb 2-1: 0:2 : does not exist [ 148.419329][ T51] usb 2-1: USB disconnect, device number 26 [ 148.609203][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.799467][ T5866] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 148.812155][ T5866] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 148.827949][ T5866] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 148.837846][ T5866] usb 1-1: media controller created [ 148.857688][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.889820][ T970] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.927676][ T5866] DVB: Unable to find symbol dib7000p_attach() [ 148.949775][ T5866] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 148.994524][ T7560] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.435'. [ 149.039762][ T5866] rc_core: IR keymap rc-dib0700-rc5 not found [ 149.045868][ T5866] Registered IR keymap rc-empty [ 149.067050][ T7563] overlayfs: missing 'lowerdir' [ 149.072171][ T5866] dvb-usb: could not initialize remote control. [ 149.072557][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 149.078419][ T5866] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 149.090104][ T5866] dib0700: There's no endpoint for remote controller [ 149.105336][ T970] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.114758][ T970] usb 5-1: config 0 has no interface number 0 [ 149.125754][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.143397][ T970] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 149.154389][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.189240][ T970] usb 5-1: Product: syz [ 149.201307][ T970] usb 5-1: Manufacturer: syz [ 149.206033][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.213927][ T970] usb 5-1: SerialNumber: syz [ 149.232355][ T970] usb 5-1: config 0 descriptor?? [ 149.245089][ T970] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 149.347545][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 149.412287][ T7573] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 149.437914][ T5867] usb 1-1: USB disconnect, device number 17 [ 149.495622][ T5867] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 149.949808][ T5137] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.149761][ T5137] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.309802][ T5137] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.315943][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.300130][ T970] gspca_spca1528: reg_w err -110 [ 151.305126][ T970] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 151.370031][ T5867] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 151.540276][ T7598] xt_socket: unknown flags 0x50 [ 151.643033][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.675573][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.699848][ T29] audit: type=1400 audit(2000000089.310:718): avc: denied { write } for pid=7608 comm="syz.0.448" path="socket:[15147]" dev="sockfs" ino=15147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.719915][ T5862] usb 5-1: USB disconnect, device number 15 [ 151.750083][ T5867] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 151.751071][ T7611] lo speed is unknown, defaulting to 1000 [ 151.788301][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.817341][ T5867] usb 3-1: config 0 descriptor?? [ 151.938882][ T7611] lo speed is unknown, defaulting to 1000 [ 152.439932][ T5867] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 152.474760][ T5867] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 152.515067][ T5867] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 152.579468][ C0] hid-thrustmaster 0003:044F:B65D.000C: Unknown packet type 0x0, unable to proceed further with wheel init [ 153.341403][ T5895] usb 3-1: USB disconnect, device number 17 [ 153.413594][ T29] audit: type=1400 audit(2000000091.060:719): avc: denied { getopt } for pid=7648 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.289852][ T29] audit: type=1400 audit(2000000091.390:720): avc: denied { shutdown } for pid=7647 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.369841][ T5862] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 154.704885][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 154.894045][ T5862] usb 1-1: Dual-Role OTG device on HNP port [ 154.929155][ T5862] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 155.031494][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.039532][ T5862] usb 1-1: Product: syz [ 155.067962][ T5862] usb 1-1: Manufacturer: syz [ 155.088884][ T5862] usb 1-1: SerialNumber: syz [ 155.113894][ T5862] usb 1-1: config 0 descriptor?? [ 155.156167][ T5862] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 155.305550][ T29] audit: type=1400 audit(2000000092.940:721): avc: denied { create } for pid=7686 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 155.366077][ T29] audit: type=1400 audit(2000000092.980:722): avc: denied { setopt } for pid=7685 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.391634][ T7654] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 155.501911][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 155.510918][ T29] audit: type=1400 audit(2000000093.050:723): avc: denied { getopt } for pid=7686 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 155.613597][ T29] audit: type=1400 audit(2000000093.080:724): avc: denied { watch_reads } for pid=7691 comm="syz.1.464" path="/91" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 155.637313][ T7696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.686449][ T5862] usb 1-1: USB disconnect, device number 18 [ 155.713858][ T7706] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.737661][ T29] audit: type=1400 audit(2000000093.310:725): avc: denied { append } for pid=7700 comm="syz.4.465" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.849772][ T29] audit: type=1400 audit(2000000093.350:726): avc: denied { read } for pid=7700 comm="syz.4.465" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 155.901645][ T29] audit: type=1400 audit(2000000093.350:727): avc: denied { open } for pid=7700 comm="syz.4.465" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 157.003689][ T7732] netlink: zone id is out of range [ 157.044298][ T29] audit: type=1400 audit(2000000094.670:728): avc: denied { read write } for pid=7733 comm="syz.4.473" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 157.081945][ T7732] netlink: zone id is out of range [ 157.101364][ T7732] netlink: zone id is out of range [ 157.170774][ T7732] netlink: zone id is out of range [ 157.176176][ T7732] netlink: zone id is out of range [ 157.183691][ T7732] netlink: zone id is out of range [ 157.192150][ T7732] netlink: zone id is out of range [ 157.197385][ T7732] netlink: zone id is out of range [ 157.507867][ T29] audit: type=1400 audit(2000000094.670:729): avc: denied { open } for pid=7733 comm="syz.4.473" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 158.920423][ T29] audit: type=1400 audit(2000000096.570:730): avc: denied { ioctl } for pid=7765 comm="syz.2.479" path="socket:[16545]" dev="sockfs" ino=16545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.069909][ T29] audit: type=1400 audit(2000000096.610:731): avc: denied { accept } for pid=7770 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.665975][ T5866] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 159.893651][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 159.919172][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.969907][ T5866] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 159.978839][ T5866] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 160.026963][ T5866] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 160.062997][ T5866] usb 2-1: config 4 has no interface number 0 [ 160.076950][ T5866] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 160.098712][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.118996][ T5866] usb 2-1: Product: syz [ 160.123533][ T5866] usb 2-1: Manufacturer: syz [ 160.143954][ T5866] usb 2-1: SerialNumber: syz [ 160.302630][ T7798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.861256][ T5866] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 160.873016][ T5866] usb 2-1: No streaming interface found for terminal 6. [ 161.064364][ T5866] usb 2-1: USB disconnect, device number 27 [ 161.579801][ T29] audit: type=1400 audit(2000000099.220:732): avc: denied { bind } for pid=7790 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.104606][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 162.303359][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 162.589681][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 162.804684][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.880786][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.900843][ T5866] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.910147][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.918594][ T5866] usb 3-1: SerialNumber: syz [ 163.347909][ T5866] usb 3-1: 0:2 : does not exist [ 163.439797][ T5866] usb 3-1: USB disconnect, device number 18 [ 163.478238][ T29] audit: type=1400 audit(2000000101.120:733): avc: denied { map } for pid=7831 comm="syz.4.497" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.729079][ T29] audit: type=1400 audit(2000000101.370:734): avc: denied { read append } for pid=7821 comm="syz.1.495" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.750539][ T970] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 163.758329][ T29] audit: type=1800 audit(2000000101.370:735): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.495" name="/" dev="9p" ino=2 res=0 errno=0 [ 163.975988][ T7846] lo speed is unknown, defaulting to 1000 [ 163.982070][ T7846] lo speed is unknown, defaulting to 1000 [ 163.990016][ T7846] lo speed is unknown, defaulting to 1000 [ 164.024579][ T7846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 164.100024][ T7846] lo speed is unknown, defaulting to 1000 [ 164.110257][ T7846] lo speed is unknown, defaulting to 1000 [ 164.120797][ T7846] lo speed is unknown, defaulting to 1000 [ 164.130216][ T7846] lo speed is unknown, defaulting to 1000 [ 164.140080][ T7846] lo speed is unknown, defaulting to 1000 [ 164.397910][ T970] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.409076][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.420075][ T970] usb 1-1: Product: syz [ 164.424309][ T970] usb 1-1: Manufacturer: syz [ 164.428906][ T970] usb 1-1: SerialNumber: syz [ 164.453340][ T970] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.467556][ T5948] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.942699][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.952435][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.980630][ T29] audit: type=1400 audit(2000000102.620:736): avc: denied { bind } for pid=7851 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.021256][ T5862] usb 1-1: USB disconnect, device number 19 [ 165.157272][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.506'. [ 166.024954][ T29] audit: type=1400 audit(2000000103.510:737): avc: denied { write } for pid=7865 comm="syz.2.509" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.379260][ T5948] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 166.413484][ T5948] ath9k_htc: Failed to initialize the device [ 166.560244][ T5866] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.780493][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 166.786252][ T5862] usb 1-1: ath9k_htc: USB layer deinitialized [ 166.851983][ T7874] netlink: 'syz.3.510': attribute type 5 has an invalid length. [ 166.891756][ T5866] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 166.968582][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.146695][ T29] audit: type=1400 audit(2000000104.780:738): avc: denied { name_connect } for pid=7878 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 167.195772][ T5866] usb 5-1: config 0 descriptor?? [ 167.280462][ T5866] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 167.320232][ T970] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 167.469953][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 167.481365][ T970] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 167.587440][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.604488][ T970] usb 2-1: config 0 descriptor?? [ 167.813407][ T5866] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 168.232670][ T970] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 168.279811][ T5948] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 168.407130][ T7900] FAULT_INJECTION: forcing a failure. [ 168.407130][ T7900] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 168.421135][ T7900] CPU: 1 UID: 0 PID: 7900 Comm: syz.3.518 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 168.421160][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.421170][ T7900] Call Trace: [ 168.421174][ T7900] [ 168.421180][ T7900] dump_stack_lvl+0x16c/0x1f0 [ 168.421203][ T7900] should_fail_ex+0x50a/0x650 [ 168.421226][ T7900] ? __pfx___might_resched+0x10/0x10 [ 168.421254][ T7900] should_fail_alloc_page+0xe7/0x130 [ 168.421275][ T7900] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 168.421300][ T7900] ? find_held_lock+0x2d/0x110 [ 168.421319][ T7900] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 168.421339][ T7900] ? hlock_class+0x4e/0x130 [ 168.421356][ T7900] ? mark_lock+0xb5/0xc60 [ 168.421377][ T7900] ? hlock_class+0x4e/0x130 [ 168.421394][ T7900] ? mark_lock+0xb5/0xc60 [ 168.421414][ T7900] ? __pfx_mark_lock+0x10/0x10 [ 168.421437][ T7900] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.421457][ T7900] ? hlock_class+0x4e/0x130 [ 168.421480][ T7900] ? hlock_class+0x4e/0x130 [ 168.421496][ T7900] ? __lock_acquire+0xcc5/0x3c40 [ 168.421518][ T7900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.421546][ T7900] ? policy_nodemask+0xea/0x4e0 [ 168.421566][ T7900] alloc_pages_mpol+0x1fc/0x540 [ 168.421585][ T7900] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 168.421600][ T7900] ? hlock_class+0x4e/0x130 [ 168.421616][ T7900] ? __lock_acquire+0xcc5/0x3c40 [ 168.421644][ T7900] folio_alloc_mpol_noprof+0x36/0x2f0 [ 168.421667][ T7900] vma_alloc_folio_noprof+0xee/0x1b0 [ 168.421687][ T7900] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 168.421708][ T7900] ? find_held_lock+0x2d/0x110 [ 168.421729][ T7900] do_pte_missing+0x202f/0x3e10 [ 168.421754][ T7900] __handle_mm_fault+0x1166/0x2c60 [ 168.421773][ T7900] ? lock_vma_under_rcu+0x6b9/0x980 [ 168.421804][ T7900] ? __pfx___handle_mm_fault+0x10/0x10 [ 168.421842][ T7900] handle_mm_fault+0x3fa/0xaa0 [ 168.421862][ T7900] do_user_addr_fault+0x60d/0x13f0 [ 168.421891][ T7900] exc_page_fault+0x5c/0xc0 [ 168.421918][ T7900] asm_exc_page_fault+0x26/0x30 [ 168.421940][ T7900] RIP: 0033:0x7f6d40e58b7b [ 168.421954][ T7900] Code: 00 00 00 48 8d 3d 9d 33 19 00 48 89 c1 31 c0 e8 0b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d d1 33 19 00 48 89 34 24 48 8b 14 24 48 8b [ 168.421970][ T7900] RSP: 002b:00007f6d41e2ffb0 EFLAGS: 00010202 [ 168.421984][ T7900] RAX: 0000000000000000 RBX: 00007f6d411a5fa0 RCX: 0000000000000000 [ 168.421994][ T7900] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000400 [ 168.422003][ T7900] RBP: 00007f6d41e31090 R08: 0000000000000000 R09: 0000000000000000 [ 168.422012][ T7900] R10: 0000000020000400 R11: 0000000000000000 R12: 0000000000000001 [ 168.422021][ T7900] R13: 0000000000000000 R14: 00007f6d411a5fa0 R15: 00007ffd50927f88 [ 168.422043][ T7900] [ 168.422307][ T7900] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 168.431599][ T5948] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.434363][ T5866] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 168.453797][ T5948] usb 3-1: config 1 has no interface number 1 [ 168.513843][ T29] audit: type=1400 audit(2000000106.100:739): avc: denied { write } for pid=7899 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.617870][ T5948] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 169.007616][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.017427][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.041517][ T5948] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 169.058093][ T5948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=8101, bcdDevice= 0.40 [ 169.068867][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.077041][ T5948] usb 3-1: Product: syz [ 169.081371][ T5948] usb 3-1: Manufacturer: syz [ 169.086211][ T5948] usb 3-1: SerialNumber: syz [ 169.086950][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.108948][ T7891] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.117722][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.138585][ T5866] usb 5-1: USB disconnect, device number 16 [ 169.405011][ T5948] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 169.425226][ T5948] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 169.616811][ T29] audit: type=1400 audit(2000000107.260:740): avc: denied { mounton } for pid=7920 comm="syz.3.524" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 170.029633][ T7921] 9pnet_virtio: no channels available for device 127.0.0.1 [ 170.052749][ T5948] usb 3-1: USB disconnect, device number 19 [ 170.320351][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.293046][ T7876] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 171.305634][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.315066][ T7876] bond0: (slave team0): Enslaving as an active interface with an up link [ 171.457701][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 171.478342][ T7952] macsec1: entered promiscuous mode [ 172.512905][ T970] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 172.525076][ T970] asix 2-1:0.0: probe with driver asix failed with error -71 [ 172.549795][ T5862] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 172.570075][ T970] usb 2-1: USB disconnect, device number 28 [ 172.595543][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 172.615948][ T29] audit: type=1326 audit(2000000110.260:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d40f8cda9 code=0x7ffc0000 [ 172.653810][ T29] audit: type=1326 audit(2000000110.290:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6d40f8cda9 code=0x7ffc0000 [ 172.685647][ T29] audit: type=1326 audit(2000000110.290:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d40f8cda9 code=0x7ffc0000 [ 172.859215][ T29] audit: type=1326 audit(2000000110.290:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d40f8cda9 code=0x7ffc0000 [ 172.885242][ T29] audit: type=1326 audit(2000000110.290:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d40f8cda9 code=0x7ffc0000 [ 172.937673][ T5862] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 172.948892][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.959777][ T29] audit: type=1326 audit(2000000110.290:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d40f8cda9 code=0x7ffc0000 [ 172.989799][ T5862] usb 5-1: Product: syz [ 173.021099][ T5862] usb 5-1: Manufacturer: syz [ 173.032537][ T5862] usb 5-1: SerialNumber: syz [ 173.055965][ T5862] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.070250][ T5866] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.089772][ T29] audit: type=1326 audit(2000000110.290:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d40f8cda9 code=0x7ffc0000 [ 173.207634][ T29] audit: type=1326 audit(2000000110.290:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d40f8cda9 code=0x7ffc0000 [ 173.423919][ T7985] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 173.432063][ T7985] UDF-fs: Scanning with blocksize 512 failed [ 173.441307][ T7985] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 173.476962][ T7985] UDF-fs: Scanning with blocksize 1024 failed [ 173.485774][ T7985] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 173.493559][ T7985] UDF-fs: Scanning with blocksize 2048 failed [ 173.501901][ T7985] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 173.509498][ T7985] UDF-fs: Scanning with blocksize 4096 failed [ 174.193532][ T5866] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 174.224486][ T5866] ath9k_htc: Failed to initialize the device [ 174.265138][ T5866] usb 5-1: ath9k_htc: USB layer deinitialized [ 174.416243][ T7988] kvm: kvm [7987]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 174.528102][ T7988] kvm: kvm [7987]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 174.595963][ T7988] kvm: kvm [7987]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 174.915011][ T5867] usb 5-1: USB disconnect, device number 17 [ 175.339878][ T5867] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 175.523965][ T8006] syz.3.544: attempt to access beyond end of device [ 175.523965][ T8006] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 175.537138][ T8006] gfs2: error -5 reading superblock [ 175.879902][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 175.937278][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 175.959912][ T5867] usb 5-1: device descriptor read/64, error -71 [ 176.431118][ T5867] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 176.599772][ T5867] usb 5-1: device descriptor read/64, error -71 [ 176.633554][ T8025] syz.3.552 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 176.964868][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 176.964884][ T29] audit: type=1400 audit(2000000114.610:753): avc: denied { bind } for pid=8030 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.996585][ T29] audit: type=1400 audit(2000000114.610:754): avc: denied { getopt } for pid=8030 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.997105][ T8033] netlink: 96 bytes leftover after parsing attributes in process `syz.0.554'. [ 177.026430][ T5867] usb usb5-port1: attempt power cycle [ 177.893915][ T5867] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 178.079335][ T8047] syz.1.558: attempt to access beyond end of device [ 178.079335][ T8047] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 178.092546][ T8047] gfs2: error -5 reading superblock [ 179.059880][ T5867] usb 5-1: device not accepting address 20, error -71 [ 179.292695][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.359519][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.809859][ T29] audit: type=1400 audit(2000000117.380:755): avc: denied { shutdown } for pid=8054 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.049990][ T8] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 180.411045][ T8] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 180.447047][ T8] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 180.469872][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.511963][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.647041][ T8081] siw: device registration error -23 [ 181.138935][ T29] audit: type=1400 audit(2000000118.760:756): avc: denied { execute_no_trans } for pid=8061 comm="syz.1.565" path="/107/file1" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.317037][ T5948] usb 2-1: USB disconnect, device number 29 [ 181.847124][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.466069][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.513844][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.540002][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.645759][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=369 sclass=netlink_route_socket pid=8104 comm=syz.2.575 [ 182.676089][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=369 sclass=netlink_route_socket pid=8104 comm=syz.2.575 [ 182.999708][ T8117] syz.1.577: attempt to access beyond end of device [ 182.999708][ T8117] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 183.012842][ T8117] gfs2: error -5 reading superblock [ 183.230253][ T29] audit: type=1400 audit(2000000120.840:757): avc: denied { write } for pid=8115 comm="syz.2.578" name="ns" dev="proc" ino=17525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 183.401490][ T29] audit: type=1400 audit(2000000120.860:758): avc: denied { add_name } for pid=8115 comm="syz.2.578" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 183.429749][ T29] audit: type=1400 audit(2000000120.870:759): avc: denied { create } for pid=8115 comm="syz.2.578" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 183.462688][ T29] audit: type=1400 audit(2000000120.900:760): avc: denied { associate } for pid=8115 comm="syz.2.578" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 183.820116][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 183.862787][ T970] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 183.893443][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.961796][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.140401][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 184.198252][ T8] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 184.300166][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.340754][ T8] usb 1-1: config 0 descriptor?? [ 185.200010][ T29] audit: type=1400 audit(2000000122.840:761): avc: denied { mount } for pid=8122 comm="syz.0.580" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 186.904365][ T29] audit: type=1400 audit(2000000124.550:762): avc: denied { bind } for pid=8137 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.743177][ T29] audit: type=1400 audit(2000000124.550:763): avc: denied { node_bind } for pid=8137 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 188.835428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 188.909753][ T29] audit: type=1400 audit(2000000124.580:764): avc: denied { name_bind } for pid=8137 comm="syz.3.586" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 189.796747][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 189.818086][ T8] asix 1-1:0.0: probe with driver asix failed with error -110 [ 191.778540][ T970] usb 5-1: device descriptor read/64, error -110 [ 191.802681][ T8143] misc userio: No port type given on /dev/userio [ 192.913468][ T970] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 193.304097][ T8147] overlay: ./bus is not a directory [ 193.902155][ T29] audit: type=1400 audit(2000000131.550:765): avc: denied { execmod } for pid=8142 comm="syz.2.588" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 194.260133][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266492][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.871179][ T970] usb 5-1: device descriptor read/64, error -32 [ 195.898899][ T29] audit: type=1400 audit(2000000131.900:766): avc: denied { execute } for pid=8142 comm="syz.2.588" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 196.890016][ T970] usb usb5-port1: attempt power cycle [ 197.247537][ T29] audit: type=1400 audit(2000000132.530:767): avc: denied { listen } for pid=8145 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.260512][ T5948] usb 1-1: USB disconnect, device number 20 [ 197.282868][ T29] audit: type=1400 audit(2000000132.540:768): avc: denied { accept } for pid=8145 comm="syz.1.589" lport=41720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.472911][ T29] audit: type=1400 audit(2000000134.930:769): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 197.628259][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.694160][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.807860][ T8165] syz.4.593: attempt to access beyond end of device [ 197.807860][ T8165] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 197.821123][ T8165] gfs2: error -5 reading superblock [ 197.959879][ T5948] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 198.220030][ T8168] netlink: 52 bytes leftover after parsing attributes in process `syz.1.595'. [ 198.279874][ T5948] usb 1-1: Using ep0 maxpacket: 8 [ 198.301752][ T5948] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=1f.cb [ 198.525168][ T8172] siw: device registration error -23 [ 199.083388][ T29] audit: type=1400 audit(2000000136.050:770): avc: denied { ioctl } for pid=8166 comm="syz.1.595" path="socket:[17626]" dev="sockfs" ino=17626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 199.109158][ T29] audit: type=1326 audit(2000000136.050:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c8d8cda9 code=0x7ffc0000 [ 199.136111][ T29] audit: type=1326 audit(2000000136.050:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f95c8d8cda9 code=0x7ffc0000 [ 199.163495][ T29] audit: type=1326 audit(2000000136.050:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c8d8cda9 code=0x7ffc0000 [ 199.179902][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.297778][ T5948] usb 1-1: Product: syz [ 199.310562][ T5948] usb 1-1: Manufacturer: syz [ 199.315185][ T5948] usb 1-1: SerialNumber: syz [ 199.327471][ T8176] loop6: detected capacity change from 0 to 8 [ 199.339749][ T29] audit: type=1326 audit(2000000136.050:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95c8d8b710 code=0x7ffc0000 [ 199.439363][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.448814][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.483279][ T5948] usb 1-1: config 0 descriptor?? [ 199.508500][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.517728][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.529753][ T5815] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 199.534874][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.546480][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.557638][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.564098][ T5948] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 199.566844][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 199.587052][ T8176] Dev loop6: unable to read RDB block 8 [ 199.593548][ T8176] loop6: unable to read partition table [ 199.601154][ T8176] loop6: partition table beyond EOD, truncated [ 199.608673][ T8176] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 199.609728][ T29] audit: type=1326 audit(2000000136.050:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95c8d8c9ab code=0x7ffc0000 [ 199.630003][ T6051] loop: Write error at byte offset 1, length 4096. [ 199.659488][ T5948] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 199.800883][ T5948] usb-storage 1-1:0.0: USB Mass Storage device detected [ 199.819872][ T5815] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 199.844118][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 199.853614][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 199.862121][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.883677][ T5815] usb 2-1: Product: syz [ 199.887879][ T5815] usb 2-1: Manufacturer: syz [ 199.903268][ T5948] usb-storage 1-1:0.0: device ignored [ 199.921268][ T6051] loop: Write error at byte offset 1, length 4096. [ 199.949026][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 199.958542][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 199.968542][ T5815] usb 2-1: SerialNumber: syz [ 199.978280][ T5815] usb 2-1: config 0 descriptor?? [ 200.028892][ T5948] usb 1-1: USB disconnect, device number 21 [ 200.317721][ T8189] siw: device registration error -23 [ 201.115027][ T5815] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 201.136700][ T5815] airspy 2-1:0.0: Could not detect board [ 201.156262][ T5815] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 201.169440][ T8192] xt_ecn: cannot match TCP bits for non-tcp packets [ 201.188920][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 201.188935][ T29] audit: type=1400 audit(2000000138.830:807): avc: denied { read } for pid=8195 comm="syz.3.603" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.193125][ T5815] usb 2-1: USB disconnect, device number 30 [ 201.202355][ T29] audit: type=1400 audit(2000000138.830:808): avc: denied { open } for pid=8195 comm="syz.3.603" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.259873][ T8196] openvswitch: netlink: Flow key attr not present in new flow. [ 201.271168][ T8194] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 201.303093][ T29] audit: type=1400 audit(2000000138.840:809): avc: denied { ioctl } for pid=8195 comm="syz.3.603" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.834266][ T29] audit: type=1400 audit(2000000139.480:810): avc: denied { read write } for pid=8206 comm="syz.2.608" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 201.851275][ T8205] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 201.861679][ T29] audit: type=1400 audit(2000000139.480:811): avc: denied { open } for pid=8206 comm="syz.2.608" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 201.937776][ T8204] nbd3: detected capacity change from 0 to 12 [ 201.991205][ T8204] block nbd3: shutting down sockets [ 202.021428][ T6027] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.056468][ T6027] Buffer I/O error on dev nbd3, logical block 0, async page read [ 202.091093][ T41] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.100698][ T41] Buffer I/O error on dev nbd3, logical block 0, async page read [ 202.117055][ T6027] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.141772][ T29] audit: type=1400 audit(2000000139.780:812): avc: denied { create } for pid=8206 comm="syz.2.608" name="#1b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.162523][ T29] audit: type=1400 audit(2000000139.780:813): avc: denied { link } for pid=8206 comm="syz.2.608" name="#1b" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.185310][ T29] audit: type=1400 audit(2000000139.780:814): avc: denied { rename } for pid=8206 comm="syz.2.608" name="#1c" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.308939][ T8221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.312770][ T29] audit: type=1400 audit(2000000139.930:815): avc: denied { write } for pid=8219 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.325647][ T6027] Buffer I/O error on dev nbd3, logical block 0, async page read [ 202.450493][ T8221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.452772][ T6027] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.549944][ T2146] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 202.572599][ T8221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.581937][ T6027] Buffer I/O error on dev nbd3, logical block 0, async page read [ 202.625035][ T6027] ldm_validate_partition_table(): Disk read failed. [ 202.690386][ T6027] Dev nbd3: unable to read RDB block 0 [ 202.696398][ T6027] nbd3: unable to read partition table [ 202.702782][ T6027] nbd3: partition table beyond EOD, truncated [ 202.713603][ T6027] ldm_validate_partition_table(): Disk read failed. [ 202.722675][ T6027] Dev nbd3: unable to read RDB block 0 [ 202.728620][ T6027] nbd3: unable to read partition table [ 202.734912][ T6027] nbd3: partition table beyond EOD, truncated [ 202.771155][ T2146] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.786165][ T2146] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 202.797499][ T2146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.909696][ T2146] usb 2-1: config 0 descriptor?? [ 203.584084][ T2146] usb 2-1: USB disconnect, device number 31 [ 204.066558][ T29] audit: type=1400 audit(2000000141.710:816): avc: denied { remount } for pid=8236 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 204.261082][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.273379][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.994995][ T8267] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 205.001693][ T8267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.094868][ T8267] vhci_hcd vhci_hcd.0: Device attached [ 205.341483][ T8268] vhci_hcd: connection closed [ 205.361385][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 205.375213][ T8270] vhci_hcd vhci_hcd.0: port 0 already used [ 205.417347][ T6251] vhci_hcd: stop threads [ 205.430920][ T6251] vhci_hcd: release socket [ 205.464218][ T6251] vhci_hcd: disconnect device [ 205.479841][ T2146] usb 34-1: SetAddress Request (2) to port 0 [ 205.504831][ T2146] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 205.560797][ T2146] usb 34-1: enqueue for inactive port 0 [ 205.980651][ T2146] usb usb34-port1: attempt power cycle [ 206.247531][ T4349] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.429783][ T8301] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.662868][ T2146] usb usb34-port1: unable to enumerate USB device [ 207.626619][ T8312] : entered promiscuous mode [ 207.716246][ T8319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.909174][ T8325] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 207.926646][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.952702][ T8333] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=250 sclass=netlink_xfrm_socket pid=8333 comm=syz.2.641 [ 208.108985][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 208.109001][ T29] audit: type=1400 audit(2000000145.750:822): avc: denied { mounton } for pid=8337 comm="syz.4.642" path="/proc/384/task" dev="proc" ino=19164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 208.269857][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 208.276527][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 208.738727][ T29] audit: type=1400 audit(2000000146.350:823): avc: denied { map } for pid=8347 comm="syz.1.646" path="socket:[18240]" dev="sockfs" ino=18240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 208.934609][ T8359] dccp_close: ABORT with 1 bytes unread [ 209.103918][ T8359] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.648'. [ 209.113320][ T8359] netlink: zone id is out of range [ 209.118450][ T8359] netlink: zone id is out of range [ 209.123676][ T8359] netlink: get zone limit has 8 unknown bytes [ 209.205948][ T8364] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 209.239771][ T5867] kernel write not supported for file /input/mice (pid: 5867 comm: kworker/0:4) [ 209.419223][ T29] audit: type=1400 audit(2000000147.060:824): avc: denied { setopt } for pid=8372 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.511323][ T29] audit: type=1400 audit(2000000147.150:825): avc: denied { read } for pid=8372 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.560705][ T2146] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 209.699764][ T5867] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 209.729784][ T2146] usb 5-1: device descriptor read/64, error -71 [ 209.799074][ T29] audit: type=1400 audit(2000000147.440:826): avc: denied { read } for pid=8377 comm="syz.2.654" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.869796][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 209.878595][ T5867] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 209.888626][ T5867] usb 2-1: config 0 has no interface number 0 [ 209.932181][ T5867] usb 2-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 209.941566][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.952529][ T5867] usb 2-1: Product: syz [ 209.956798][ T5867] usb 2-1: Manufacturer: syz [ 209.961669][ T5867] usb 2-1: SerialNumber: syz [ 209.975762][ T5867] usb 2-1: config 0 descriptor?? [ 209.986100][ T5867] spcp8x5 2-1:0.191: SPCP8x5 converter detected [ 210.003929][ T5867] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 210.100687][ T2146] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 210.395182][ T2146] usb 5-1: device descriptor read/64, error -71 [ 210.437282][ T29] audit: type=1400 audit(2000000148.000:827): avc: denied { mount } for pid=8382 comm="syz.2.655" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 210.580325][ T2146] usb usb5-port1: attempt power cycle [ 210.698480][ T29] audit: type=1400 audit(2000000148.010:828): avc: denied { mounton } for pid=8382 comm="syz.2.655" path="/130/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.808347][ T29] audit: type=1400 audit(2000000148.020:829): avc: denied { read } for pid=8382 comm="syz.2.655" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.873899][ T8393] netlink: 'syz.3.657': attribute type 9 has an invalid length. [ 210.882184][ T29] audit: type=1400 audit(2000000148.020:830): avc: denied { open } for pid=8382 comm="syz.2.655" path="/130/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.906195][ T29] audit: type=1326 audit(2000000148.490:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c8d8cda9 code=0x7ffc0000 [ 210.959765][ T2146] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 211.054270][ T2146] usb 5-1: device descriptor read/8, error -71 [ 211.203906][ T5948] usb 2-1: USB disconnect, device number 32 [ 211.219217][ T5948] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 211.229928][ T5948] spcp8x5 2-1:0.191: device disconnected [ 211.320812][ T2146] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 211.351561][ T2146] usb 5-1: device descriptor read/8, error -71 [ 211.508487][ T2146] usb usb5-port1: unable to enumerate USB device [ 211.584047][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.633711][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.000218][ T8423] tipc: Started in network mode [ 213.014057][ T8423] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 213.130829][ T8423] tipc: Enabled bearer , priority 0 [ 213.481569][ T8435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=8435 comm=syz.1.671 [ 213.599931][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 213.599948][ T29] audit: type=1400 audit(2000000151.250:850): avc: denied { bind } for pid=8438 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.509535][ T5948] tipc: Node number set to 10136234 [ 215.005903][ T29] audit: type=1400 audit(2000000152.640:851): avc: denied { bind } for pid=8410 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.397396][ T29] audit: type=1400 audit(2000000153.040:852): avc: denied { append } for pid=8457 comm="syz.2.676" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.554922][ T8464] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 217.328478][ T29] audit: type=1400 audit(2000000154.970:853): avc: denied { read write } for pid=8479 comm="syz.2.680" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 217.361438][ T29] audit: type=1400 audit(2000000154.970:854): avc: denied { open } for pid=8479 comm="syz.2.680" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 217.390042][ T29] audit: type=1400 audit(2000000155.010:855): avc: denied { ioctl } for pid=8479 comm="syz.2.680" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 217.599919][ T5867] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 217.814819][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.824572][ T5867] usb 3-1: not running at top speed; connect to a high speed hub [ 217.837904][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.848752][ T5867] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 218.213030][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 218.382346][ T5867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.391654][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.399796][ T5867] usb 3-1: Product: syz [ 218.403979][ T5867] usb 3-1: Manufacturer: syz [ 218.408599][ T5867] usb 3-1: SerialNumber: syz [ 218.902837][ T5867] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 218.911735][ T5867] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 218.959863][ T5867] usb 3-1: USB disconnect, device number 20 [ 219.026678][ T29] audit: type=1400 audit(2000000156.670:856): avc: denied { read } for pid=8506 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 219.055264][ T29] audit: type=1400 audit(2000000156.670:857): avc: denied { write } for pid=8506 comm="syz.3.689" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.174550][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.364189][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.467028][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.939434][ T29] audit: type=1400 audit(2000000157.580:858): avc: denied { getopt } for pid=8526 comm="syz.4.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.994420][ T29] audit: type=1400 audit(2000000157.610:859): avc: denied { mount } for pid=8526 comm="syz.4.696" name="/" dev="autofs" ino=20782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 219.994644][ T8527] block device autoloading is deprecated and will be removed. [ 220.055654][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 220.058681][ T29] audit: type=1400 audit(2000000157.700:860): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 220.890334][ T8544] vxcan1: tx address claim with dest, not broadcast [ 221.228586][ T8554] syz.4.702: attempt to access beyond end of device [ 221.228586][ T8554] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 221.241845][ T8554] gfs2: error -5 reading superblock [ 221.915130][ T8561] Process accounting resumed [ 222.080249][ T2146] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 222.158641][ T5817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.168899][ T5817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.258866][ T5817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.286114][ T5817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.301811][ T5817] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 222.309141][ T5817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 222.330181][ T29] audit: type=1400 audit(2000000159.970:861): avc: denied { mounton } for pid=8570 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 222.338453][ T8570] lo speed is unknown, defaulting to 1000 [ 222.358817][ T2146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.359265][ T8570] lo speed is unknown, defaulting to 1000 [ 222.389753][ T2146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.403393][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.406617][ T2146] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 222.425643][ T2146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.456239][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.484852][ T2146] usb 5-1: config 0 descriptor?? [ 222.840436][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 222.985626][ T8570] lo speed is unknown, defaulting to 1000 [ 223.296092][ T2146] uclogic 0003:5543:0042.000D: No inputs registered, leaving [ 223.455973][ T2146] uclogic 0003:5543:0042.000D: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 223.528481][ T2146] usb 5-1: USB disconnect, device number 29 [ 223.868916][ T8599] syz.3.715: attempt to access beyond end of device [ 223.868916][ T8599] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 223.882323][ T8599] gfs2: error -5 reading superblock [ 224.348436][ T8570] chnl_net:caif_netlink_parms(): no params data found [ 224.355381][ T5830] Bluetooth: hci6: command tx timeout [ 224.449300][ T8570] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.504964][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.554633][ T8570] bridge_slave_0: entered allmulticast mode [ 224.587778][ T8570] bridge_slave_0: entered promiscuous mode [ 224.626080][ T8570] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.672068][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.690220][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 224.709849][ T8570] bridge_slave_1: entered allmulticast mode [ 224.731832][ T8570] bridge_slave_1: entered promiscuous mode [ 224.938860][ T5815] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 225.119944][ T8570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.182589][ T8570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.210413][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 225.216971][ T5815] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.232389][ T5815] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.254234][ T5815] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.311593][ T8570] team0: Port device team_slave_0 added [ 225.329150][ T5815] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.353663][ T8570] team0: Port device team_slave_1 added [ 225.471000][ T8617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.471046][ T5815] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.547892][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.558451][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.584781][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.931120][ T5815] usb 2-1: GET_CAPABILITIES returned 0 [ 225.941812][ T5815] usbtmc 2-1:16.0: can't read capabilities [ 225.946346][ T8570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.088135][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.119366][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.451066][ T5830] Bluetooth: hci6: command tx timeout [ 226.466698][ T8570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.611555][ T8570] hsr_slave_0: entered promiscuous mode [ 226.617605][ T8570] hsr_slave_1: entered promiscuous mode [ 226.625195][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.628881][ T8570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.643169][ T8570] Cannot create hsr debugfs directory [ 226.652077][ T8633] lo speed is unknown, defaulting to 1000 [ 226.658040][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.671996][ T8633] lo speed is unknown, defaulting to 1000 [ 226.734771][ T29] audit: type=1400 audit(2000000164.380:862): avc: denied { setopt } for pid=8609 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.747521][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.834286][ T5815] usb 2-1: USB disconnect, device number 33 [ 226.965658][ T8633] lo speed is unknown, defaulting to 1000 [ 227.070477][ T8570] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.086597][ T8570] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.141601][ T8570] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.157692][ T8570] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.315557][ T8570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.345437][ T8656] mkiss: ax0: crc mode is auto. [ 227.435665][ T8570] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.465931][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.473091][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.509504][ T8666] lo speed is unknown, defaulting to 1000 [ 227.525987][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.533142][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.542202][ T8667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.601933][ T8666] lo speed is unknown, defaulting to 1000 [ 227.936446][ T8666] lo speed is unknown, defaulting to 1000 [ 228.166366][ T8691] syz.2.732: attempt to access beyond end of device [ 228.166366][ T8691] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 228.179797][ T8691] gfs2: error -5 reading superblock [ 228.510065][ T5830] Bluetooth: hci6: command tx timeout [ 228.592706][ T8570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.778126][ T29] audit: type=1400 audit(2000000166.420:863): avc: denied { create } for pid=8673 comm="syz.4.730" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.806371][ T29] audit: type=1400 audit(2000000166.430:864): avc: denied { read append } for pid=8673 comm="syz.4.730" name="file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.854540][ T29] audit: type=1400 audit(2000000166.430:865): avc: denied { open } for pid=8673 comm="syz.4.730" path="/131/file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.871330][ T8700] tipc: Failed to remove unknown binding: 66,1,1/10136234:3015390594/3015390596 [ 228.886749][ T29] audit: type=1400 audit(2000000166.430:866): avc: denied { ioctl } for pid=8673 comm="syz.4.730" path="/131/file0" dev="tmpfs" ino=716 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.915240][ T8700] kAFS: No cell specified [ 228.936687][ T29] audit: type=1400 audit(2000000166.510:867): avc: denied { bind } for pid=8699 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.980948][ T29] audit: type=1400 audit(2000000166.630:868): avc: denied { unlink } for pid=5816 comm="syz-executor" name="file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 229.020038][ T970] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 229.036305][ T29] audit: type=1400 audit(2000000166.660:869): avc: denied { write } for pid=8704 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 229.056995][ T8570] veth0_vlan: entered promiscuous mode [ 229.079447][ T8570] veth1_vlan: entered promiscuous mode [ 229.151407][ T970] usb 2-1: device descriptor read/64, error -71 [ 229.174237][ T8570] veth0_macvtap: entered promiscuous mode [ 229.210394][ T8570] veth1_macvtap: entered promiscuous mode [ 229.255573][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.279429][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.314149][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.336157][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.351121][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.362472][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.372744][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.392720][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.404760][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.426826][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.443607][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.454597][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.465498][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.475989][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.486728][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.508500][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.519165][ T970] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 229.527754][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.547074][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.547719][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.737'. [ 229.559279][ T8570] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.579271][ T8570] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.591724][ T8570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.603800][ T8570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.649963][ T970] usb 2-1: device descriptor read/64, error -71 [ 229.769930][ T970] usb usb2-port1: attempt power cycle [ 229.813817][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.825918][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.843268][ T8722] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 229.855557][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.868163][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.882719][ T29] audit: type=1400 audit(2000000167.530:870): avc: denied { mounton } for pid=8570 comm="syz-executor" path="/root/syzkaller.RNOX8q/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 229.922089][ T29] audit: type=1400 audit(2000000167.530:871): avc: denied { mounton } for pid=8570 comm="syz-executor" path="/root/syzkaller.RNOX8q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 230.150463][ T970] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 230.171938][ T970] usb 2-1: device descriptor read/8, error -71 [ 230.490010][ T970] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 230.568212][ T8732] lo speed is unknown, defaulting to 1000 [ 230.584883][ T8732] lo speed is unknown, defaulting to 1000 [ 230.610520][ T5830] Bluetooth: hci6: command tx timeout [ 230.816702][ T8732] lo speed is unknown, defaulting to 1000 [ 230.824788][ T970] usb 2-1: device descriptor read/8, error -71 [ 230.960277][ T970] usb usb2-port1: unable to enumerate USB device [ 231.005857][ T8738] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.742'. [ 231.259220][ T8748] Attempt to restore checkpoint with obsolete wellknown handles [ 231.512559][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 232.684037][ T8759] syz.3.748: attempt to access beyond end of device [ 232.684037][ T8759] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 232.697173][ T8759] gfs2: error -5 reading superblock [ 233.611323][ T8765] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 233.946243][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.958672][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.089676][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.101286][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.394767][ T8779] lo speed is unknown, defaulting to 1000 [ 234.427228][ T8779] lo speed is unknown, defaulting to 1000 [ 235.608608][ T8779] lo speed is unknown, defaulting to 1000 [ 236.010120][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 236.010133][ T29] audit: type=1326 audit(2000000173.650:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8792 comm="syz.4.759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10f1d8cda9 code=0x0 [ 236.085002][ T8797] netlink: 173 bytes leftover after parsing attributes in process `syz.3.758'. [ 236.251736][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.761'. [ 236.427188][ T5866] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 237.291196][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 237.929722][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.010291][ T29] audit: type=1400 audit(2000000175.650:877): avc: denied { ioctl } for pid=8818 comm="syz.3.766" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 238.038949][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.050629][ T5866] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 238.187391][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.204088][ T29] audit: type=1400 audit(2000000175.690:878): avc: denied { getopt } for pid=8818 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.308347][ T5866] usb 2-1: config 0 descriptor?? [ 238.332848][ T8821] block device autoloading is deprecated and will be removed. [ 238.350993][ T8821] syz.5.765: attempt to access beyond end of device [ 238.350993][ T8821] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 238.579796][ T29] audit: type=1400 audit(2000000176.220:879): avc: denied { read } for pid=8823 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.473917][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.485692][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.851780][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 239.859409][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 239.886949][ T5866] usb 2-1: USB disconnect, device number 38 [ 239.903052][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 240.062877][ T5815] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 240.178839][ T8841] lo speed is unknown, defaulting to 1000 [ 240.196124][ T8841] lo speed is unknown, defaulting to 1000 [ 240.356049][ T8841] lo speed is unknown, defaulting to 1000 [ 240.389748][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 240.409027][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.421450][ T5815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.433487][ T5815] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.454689][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.542026][ T5815] usb 5-1: Product: syz [ 240.546592][ T5815] usb 5-1: Manufacturer: ч [ 240.551293][ T5815] usb 5-1: SerialNumber: syz [ 240.769654][ C0] hrtimer: interrupt took 32799 ns [ 240.952343][ T8851] siw: device registration error -23 [ 240.961354][ T8851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.775'. [ 241.252113][ T5815] usb 5-1: 0:2 : does not exist [ 242.248296][ T5815] usb 5-1: USB disconnect, device number 30 [ 242.586912][ T29] audit: type=1400 audit(2000000180.220:880): avc: denied { execute } for pid=8857 comm="syz.3.778" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.700622][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'. [ 242.709851][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.777'. [ 243.201146][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.486094][ T29] audit: type=1400 audit(2000000181.130:881): avc: denied { shutdown } for pid=8875 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.486154][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 243.770096][ T8888] overlayfs: failed to resolve './file0': -2 [ 244.054361][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 244.262080][ T8890] nbd: socks must be embedded in a SOCK_ITEM attr [ 244.715213][ T5868] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 244.879827][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 244.899486][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.940847][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.015901][ T5868] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 245.030204][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.049861][ T5868] usb 2-1: config 0 descriptor?? [ 247.622347][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 247.628448][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 247.648716][ T5868] usb 2-1: USB disconnect, device number 39 [ 248.479240][ T29] audit: type=1400 audit(2000000186.110:882): avc: denied { getopt } for pid=8934 comm="syz.4.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.500020][ T2146] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 248.819894][ T5895] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 249.056368][ T29] audit: type=1400 audit(2000000186.110:883): avc: denied { bind } for pid=8934 comm="syz.4.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 249.079330][ T2146] usb 6-1: Using ep0 maxpacket: 8 [ 249.103456][ T2146] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 249.127257][ T2146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.139273][ T2146] usb 6-1: Product: syz [ 249.148214][ T2146] usb 6-1: Manufacturer: syz [ 249.167319][ T2146] usb 6-1: SerialNumber: syz [ 249.184015][ T2146] usb 6-1: config 0 descriptor?? [ 249.194261][ T2146] gspca_main: se401-2.14.0 probing 047d:5003 [ 249.446136][ T5895] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 249.464176][ T5895] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 178, changing to 11 [ 249.488009][ T8952] pim6reg: entered allmulticast mode [ 249.510436][ T5895] usb 2-1: config 1 interface 0 has no altsetting 0 [ 249.526145][ T5895] usb 2-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.40 [ 249.535646][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.560087][ T5895] usb 2-1: Product: ᐇ [ 249.564297][ T5895] usb 2-1: Manufacturer: М [ 249.568814][ T5895] usb 2-1: SerialNumber: syz [ 249.689406][ T8961] lo speed is unknown, defaulting to 1000 [ 249.704880][ T8961] lo speed is unknown, defaulting to 1000 [ 249.972580][ T5895] usbhid 2-1:1.0: can't add hid device: -71 [ 249.978959][ T5895] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 250.067037][ T8961] lo speed is unknown, defaulting to 1000 [ 250.089762][ T5895] usb 2-1: USB disconnect, device number 40 [ 250.257696][ T2146] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 250.325372][ T2146] usb 6-1: device reset changed ep0 maxpacket size! [ 250.435098][ T2146] gspca_se401: read req failed req 0x06 error -19 [ 250.452338][ T2146] usb 6-1: USB disconnect, device number 3 [ 250.491156][ T8972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.537106][ T8972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.563714][ T29] audit: type=1400 audit(2000000188.210:884): avc: denied { create } for pid=8971 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.606631][ T29] audit: type=1400 audit(2000000188.210:885): avc: denied { bind } for pid=8971 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.707194][ T2146] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 250.735810][ T29] audit: type=1400 audit(2000000188.250:886): avc: denied { write } for pid=8971 comm="syz.3.808" path="socket:[22918]" dev="sockfs" ino=22918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 251.454443][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 251.465771][ T2146] usb 6-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 251.501738][ T2146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.558321][ T2146] pwc: Logitech ViewPort AV 100 webcam detected. [ 251.975213][ T29] audit: type=1400 audit(2000000189.570:887): avc: denied { append } for pid=8994 comm="syz.2.814" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 253.305484][ T29] audit: type=1400 audit(2000000190.950:888): avc: denied { getopt } for pid=9008 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 253.444914][ T29] audit: type=1400 audit(2000000190.980:889): avc: denied { ioctl } for pid=9008 comm="syz.3.817" path="socket:[22290]" dev="sockfs" ino=22290 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 254.528425][ T29] audit: type=1400 audit(2000000191.690:890): avc: denied { ioctl } for pid=8958 comm="syz.5.806" path="socket:[22892]" dev="sockfs" ino=22892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 254.542552][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.570221][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.039121][ T2146] pwc: send_video_command error -71 [ 255.071072][ T2146] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 255.078691][ T2146] Philips webcam 6-1:127.0: probe with driver Philips webcam failed with error -71 [ 255.093634][ T2146] usb 6-1: USB disconnect, device number 4 [ 255.390804][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.397253][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.695989][ T9034] ]-V!zuY: renamed from lo (while UP) [ 256.052741][ T9040] syz.5.823: attempt to access beyond end of device [ 256.052741][ T9040] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 256.065953][ T9040] gfs2: error -5 reading superblock [ 256.657297][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 256.711197][ T9041] netlink: 'syz.1.824': attribute type 8 has an invalid length. [ 256.774065][ T29] audit: type=1400 audit(2000000194.421:891): avc: denied { getattr } for pid=9044 comm="syz.5.826" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 256.860964][ T5948] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 257.174119][ T9054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.827'. [ 257.183092][ T9054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.827'. [ 257.711059][ T5895] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 258.292003][ T5895] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 258.329271][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.369725][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 258.382071][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 258.404753][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 258.426618][ T5895] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 258.447575][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.459750][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 258.499826][ T5815] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 258.509012][ T5948] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 258.511655][ T5895] usb 2-1: config 0 descriptor?? [ 258.532977][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.545939][ T5948] usb 3-1: Product: syz [ 258.552069][ T5948] usb 3-1: Manufacturer: syz [ 258.557108][ T5948] usb 3-1: SerialNumber: syz [ 258.563690][ T5948] usb 3-1: config 0 descriptor?? [ 258.572011][ T5948] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 258.581434][ T5948] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 258.584381][ T29] audit: type=1400 audit(2000000196.231:892): avc: denied { mount } for pid=9058 comm="syz.3.829" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 258.649012][ T29] audit: type=1400 audit(2000000196.291:893): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 258.673340][ T5815] usb 5-1: device descriptor read/64, error -71 [ 258.919717][ T5815] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 259.022616][ T5895] wacom 0003:056A:0317.000E: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 259.065982][ T5895] wacom 0003:056A:0317.000E: hidraw0: USB HID vff.ff Device [HID 056a:0317] on usb-dummy_hcd.1-1/input0 [ 259.099381][ T5895] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0317.000E/input/input18 [ 259.149820][ T5815] usb 5-1: device descriptor read/64, error -71 [ 259.228631][ T5948] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 259.235434][ T5948] em28xx 3-1:0.0: Config register raw data: 0xfa [ 259.242215][ T5948] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 259.260299][ T5815] usb usb5-port1: attempt power cycle [ 259.279725][ T5948] em28xx 3-1:0.0: No AC97 audio processor [ 259.678686][ T5815] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 259.698250][ T5948] usb 3-1: USB disconnect, device number 21 [ 259.713783][ T5815] usb 5-1: device descriptor read/8, error -71 [ 259.782406][ T5868] usb 2-1: USB disconnect, device number 41 [ 259.901824][ T29] audit: type=1400 audit(2000000197.541:894): avc: denied { mount } for pid=9072 comm="syz.3.832" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 259.944327][ T29] audit: type=1400 audit(2000000197.551:895): avc: denied { remount } for pid=9072 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 260.286824][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 260.321123][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 260.724814][ T9091] syz.5.837: attempt to access beyond end of device [ 260.724814][ T9091] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 260.738291][ T9091] gfs2: error -5 reading superblock [ 261.151582][ T5868] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 261.203440][ T29] audit: type=1400 audit(2000000198.851:896): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 261.264135][ T9093] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 261.290116][ T5895] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 261.335981][ T9099] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 261.404204][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.417594][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.427933][ T5868] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 261.437092][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.460461][ T5868] usb 3-1: config 0 descriptor?? [ 261.489736][ T29] audit: type=1326 audit(2000000199.131:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9101 comm="syz.5.842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effcbf8cda9 code=0x0 [ 261.581578][ T29] audit: type=1400 audit(2000000199.221:898): avc: denied { ioctl } for pid=9101 comm="syz.5.842" path="socket:[23208]" dev="sockfs" ino=23208 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 261.597560][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 261.613522][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.624797][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.632813][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.634919][ T5895] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 261.654548][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.673559][ T5895] usb 2-1: config 0 descriptor?? [ 261.719842][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.747249][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.766470][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.784754][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.797186][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.808855][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.819741][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.829592][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.841706][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.994945][ T5868] logitech 0003:046D:CA04.000F: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 262.009111][ T5868] logitech 0003:046D:CA04.000F: no inputs found [ 262.137965][ T5895] gt683r_led 0003:1770:FF00.0010: unknown main item tag 0x0 [ 262.156844][ T5895] gt683r_led 0003:1770:FF00.0010: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 262.257840][ T5862] usb 3-1: USB disconnect, device number 22 [ 262.733150][ T5862] usb 2-1: USB disconnect, device number 42 [ 262.790823][ T5895] gt683r_led 0003:1770:FF00.0010: failed to send set report request: -19 [ 264.317981][ T9133] netlink: 48 bytes leftover after parsing attributes in process `syz.4.850'. [ 265.403978][ T9154] ubi0: attaching mtd0 [ 265.415203][ T9154] ubi0: scanning is finished [ 265.422302][ T9154] ubi0: empty MTD device detected [ 265.459253][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 265.476032][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 265.580287][ T9154] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 265.595886][ T9154] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 265.603612][ T9154] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 265.611059][ T9154] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 265.618598][ T9154] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 265.635880][ T5895] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 265.637588][ T9154] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 265.652453][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 265.672788][ T9154] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 5800035 [ 265.692835][ T9154] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 265.724044][ T9164] ubi0: background thread "ubi_bgt0d" started, PID 9164 [ 265.800064][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 265.814728][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 265.821804][ T5895] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 265.828652][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.842892][ T5895] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 265.862158][ T5895] usb 2-1: string descriptor 0 read error: -22 [ 265.867478][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.868528][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.888691][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 265.928620][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.932931][ T29] audit: type=1400 audit(2000000203.571:899): avc: denied { read } for pid=9170 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.974085][ T9173] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 266.032726][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.157760][ T8] usb 3-1: config 0 descriptor?? [ 267.550010][ T9143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.561047][ T9143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.591886][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 267.670955][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 267.695332][ T8] usb 3-1: USB disconnect, device number 23 [ 267.717581][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.864'. [ 267.741868][ T9189] bridge_slave_0: left allmulticast mode [ 267.747552][ T9189] bridge_slave_0: left promiscuous mode [ 267.843938][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.011020][ T5895] cdc_ncm 2-1:1.0: bind() failure [ 268.028321][ T5895] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 268.050311][ T5895] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 268.053574][ T9189] bridge_slave_1: left allmulticast mode [ 268.079418][ T5895] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 268.080609][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.089018][ T9189] bridge_slave_1: left promiscuous mode [ 268.120596][ T5895] usb 2-1: USB disconnect, device number 43 [ 268.312057][ T970] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 268.453737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.484817][ T9195] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 268.539168][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.555390][ T9189] bond0: (slave bond_slave_0): Releasing backup interface [ 268.592372][ T9189] bond0: (slave bond_slave_1): Releasing backup interface [ 268.636767][ T29] audit: type=1400 audit(2000000206.281:900): avc: denied { ioctl } for pid=9200 comm="syz.5.867" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 268.647544][ T9201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28775 sclass=netlink_route_socket pid=9201 comm=syz.5.867 [ 268.684048][ T9189] team0: Port device team_slave_0 removed [ 268.749422][ T9189] team0: Port device team_slave_1 removed [ 268.756510][ T9189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.764230][ T9189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.767455][ T9204] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 268.790636][ T9189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.807318][ T9189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.851164][ T5815] lo speed is unknown, defaulting to 1000 [ 268.857553][ T29] audit: type=1400 audit(2000000206.491:901): avc: denied { map } for pid=9205 comm="syz.1.869" path="socket:[23355]" dev="sockfs" ino=23355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.911574][ T29] audit: type=1400 audit(2000000206.501:902): avc: denied { read } for pid=9205 comm="syz.1.869" path="socket:[23355]" dev="sockfs" ino=23355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.937594][ T9196] lo speed is unknown, defaulting to 1000 [ 268.955827][ T9196] lo speed is unknown, defaulting to 1000 [ 269.119821][ T5866] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 269.368399][ T9218] FAT-fs (nullb0): bogus number of reserved sectors [ 269.375130][ T9218] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 269.383778][ T9218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.509846][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 269.539911][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 269.547071][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.552911][ T9196] lo speed is unknown, defaulting to 1000 [ 269.563684][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 269.655972][ T29] audit: type=1400 audit(2000000207.301:903): avc: denied { ioctl } for pid=9219 comm="syz.4.875" path="socket:[23915]" dev="sockfs" ino=23915 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 269.744025][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 269.769708][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 269.806908][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.884512][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.069295][ T5866] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 270.142585][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.259818][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.285349][ T5895] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 270.313514][ T5866] usb 2-1: Product: syz [ 270.324112][ T5866] usb 2-1: Manufacturer: syz [ 270.333086][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.341548][ T5866] usb 2-1: SerialNumber: syz [ 270.368798][ T5866] usb 2-1: config 0 descriptor?? [ 270.529080][ T5895] usb 6-1: config 0 descriptor?? [ 271.109795][ T5866] rc_core: IR keymap rc-imon-rsc not found [ 271.115860][ T5866] Registered IR keymap rc-empty [ 271.138630][ T5866] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 271.155588][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.161847][ T5866] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 271.372199][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.372535][ T5895] pantherlord 0003:0F30:0111.0011: unknown main item tag 0x0 [ 271.393436][ T5866] usb 2-1: USB disconnect, device number 44 [ 271.399581][ T5895] pantherlord 0003:0F30:0111.0011: unknown main item tag 0x0 [ 271.409455][ T5895] pantherlord 0003:0F30:0111.0011: unknown main item tag 0x0 [ 271.417935][ T5895] pantherlord 0003:0F30:0111.0011: unknown main item tag 0x0 [ 271.432651][ T5895] pantherlord 0003:0F30:0111.0011: unknown main item tag 0x0 [ 271.605514][ T5895] pantherlord 0003:0F30:0111.0011: hidraw0: USB HID v0.03 Device [HID 0f30:0111] on usb-dummy_hcd.5-1/input0 [ 271.891162][ T5895] pantherlord 0003:0F30:0111.0011: no output reports found [ 271.955555][ T5895] usb 6-1: USB disconnect, device number 5 [ 272.268549][ T29] audit: type=1400 audit(2000000209.911:904): avc: denied { map } for pid=9253 comm="syz.3.883" path="socket:[23961]" dev="sockfs" ino=23961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 272.295374][ T29] audit: type=1400 audit(2000000209.911:905): avc: denied { read } for pid=9253 comm="syz.3.883" path="socket:[23961]" dev="sockfs" ino=23961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 272.349731][ T970] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 272.499787][ T970] usb 2-1: device descriptor read/64, error -71 [ 272.512482][ T29] audit: type=1400 audit(2000000210.161:906): avc: denied { read } for pid=9252 comm="syz.2.882" laddr=::ffff:172.20.20.170 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.542372][ T29] audit: type=1400 audit(2000000210.161:907): avc: denied { map } for pid=9259 comm="syz.5.884" path="socket:[23422]" dev="sockfs" ino=23422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.774159][ T970] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 272.942348][ T970] usb 2-1: device descriptor read/64, error -71 [ 273.059989][ T970] usb usb2-port1: attempt power cycle [ 274.196930][ T970] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 274.257866][ T970] usb 2-1: device descriptor read/8, error -71 [ 274.467528][ T9284] input: syz0 as /devices/virtual/input/input22 [ 274.899593][ T9279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.911701][ T9279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.929360][ T9279] bond0 (unregistering): Released all slaves [ 274.962198][ T9291] Driver unsupported XDP return value 0 on prog (id 152) dev N/A, expect packet loss! [ 275.017902][ T2146] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 275.073153][ T970] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 275.138300][ T9293] overlayfs: overlapping lowerdir path [ 275.237735][ T2146] usb 5-1: Using ep0 maxpacket: 32 [ 275.244608][ T2146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.258101][ T2146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.268841][ T2146] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 275.278625][ T2146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.289232][ T2146] usb 5-1: config 0 descriptor?? [ 275.294228][ T970] usb 2-1: device not accepting address 48, error -71 [ 275.340339][ T970] usb usb2-port1: unable to enumerate USB device [ 275.537127][ T29] audit: type=1400 audit(2000000213.181:908): avc: denied { listen } for pid=9294 comm="syz.2.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 275.572912][ T29] audit: type=1326 audit(2000000213.211:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24fb98cda9 code=0x0 [ 275.800429][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.809169][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.125241][ T9287] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.891'. [ 276.140707][ T2146] usbhid 5-1:0.0: can't add hid device: -71 [ 276.146806][ T2146] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 276.160953][ T2146] usb 5-1: USB disconnect, device number 36 [ 276.169744][ T5895] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 276.292185][ T970] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 276.301040][ T9335] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 276.329826][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 276.337387][ T5895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.347508][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.364220][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.382744][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.397918][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.407899][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.451183][ T970] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 276.459469][ T970] usb 6-1: config 0 has no interface number 0 [ 276.508877][ T970] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 276.518413][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.530258][ T970] usb 6-1: Product: syz [ 276.534500][ T970] usb 6-1: Manufacturer: syz [ 276.541405][ T970] usb 6-1: SerialNumber: syz [ 276.549934][ T970] usb 6-1: config 0 descriptor?? [ 276.628693][ T5895] usb 2-1: GET_CAPABILITIES returned 0 [ 276.634425][ T5895] usbtmc 2-1:16.0: can't read capabilities [ 276.834157][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.846528][ T5948] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 276.859049][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.884239][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.896615][ T5895] usb 2-1: USB disconnect, device number 49 [ 276.999704][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 277.062762][ T9329] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.073122][ T5948] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 277.083743][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.092293][ T5948] usb 3-1: config 0 has no interface number 0 [ 277.098790][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.108959][ T5948] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 277.778980][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.796210][ T5948] usb 3-1: Product: syz [ 277.800567][ T5948] usb 3-1: Manufacturer: syz [ 277.805214][ T5948] usb 3-1: SerialNumber: syz [ 277.811804][ T5948] usb 3-1: config 0 descriptor?? [ 277.819569][ T5948] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 277.881239][ T970] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 277.887717][ T970] usb 6-1: No valid video chain found. [ 277.936626][ T970] usb 6-1: USB disconnect, device number 6 [ 278.034654][ T9368] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 278.050661][ T9368] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 278.062114][ T9368] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 278.159385][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.181200][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.385454][ T9383] ax25_connect(): syz.4.924 uses autobind, please contact jreuter@yaina.de [ 278.385487][ T29] audit: type=1400 audit(2000000216.031:910): avc: denied { connect } for pid=9382 comm="syz.4.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 278.515140][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 278.753710][ T9399] 9pnet_fd: Insufficient options for proto=fd [ 279.232174][ T9428] syz.5.931: attempt to access beyond end of device [ 279.232174][ T9428] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 279.245350][ T9428] gfs2: error -5 reading superblock [ 279.251368][ T5895] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 279.410004][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 279.419599][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.434768][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.444996][ T2146] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 279.455371][ T5895] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 279.469109][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.525013][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 279.559792][ T5948] gspca_topro: Sensor cx0342 [ 279.569923][ T5895] usb 5-1: config 0 descriptor?? [ 279.586654][ T5948] usb 3-1: USB disconnect, device number 24 [ 279.620455][ T2146] usb 2-1: Using ep0 maxpacket: 16 [ 279.635908][ T2146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.656138][ T2146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.677602][ T2146] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 279.709174][ T2146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.739598][ T2146] usb 2-1: config 0 descriptor?? [ 280.012633][ T5895] gt683r_led 0003:1770:FF00.0012: unknown main item tag 0x0 [ 280.048896][ T5895] gt683r_led 0003:1770:FF00.0012: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 280.071408][ T9444] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 280.082579][ T9444] netlink: 'syz.5.935': attribute type 29 has an invalid length. [ 280.331765][ T2146] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0 [ 280.439415][ T9444] netlink: 'syz.5.935': attribute type 29 has an invalid length. [ 280.721888][ T2146] gt683r_led 0003:1770:FF00.0013: hidraw1: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 280.881167][ T9451] gt683r_led 0003:1770:FF00.0012: pid 9451 passed too short report [ 281.042465][ T5862] usb 5-1: USB disconnect, device number 37 [ 281.062258][ T2146] gt683r_led 0003:1770:FF00.0012: failed to send set report request: -19 [ 281.107203][ T29] audit: type=1400 audit(2000000218.751:911): avc: denied { ioctl } for pid=9471 comm="syz.3.941" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 281.161654][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 281.253261][ T2146] usb 2-1: USB disconnect, device number 50 [ 281.287567][ T5862] gt683r_led 0003:1770:FF00.0013: failed to send set report request: -19 [ 281.388546][ T29] audit: type=1400 audit(2000000219.031:912): avc: denied { bind } for pid=9482 comm="syz.5.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 281.695283][ T29] audit: type=1400 audit(2000000219.341:913): avc: denied { map } for pid=9514 comm="syz.4.946" path="socket:[24377]" dev="sockfs" ino=24377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.737298][ T29] audit: type=1400 audit(2000000219.341:914): avc: denied { accept } for pid=9514 comm="syz.4.946" path="socket:[24377]" dev="sockfs" ino=24377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.771117][ T29] audit: type=1400 audit(2000000219.371:915): avc: denied { map } for pid=9514 comm="syz.4.946" path="pipe:[24379]" dev="pipefs" ino=24379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 282.159859][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.618726][ T9525] tipc: Started in network mode [ 282.631267][ T9525] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 282.723475][ T9525] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 282.806979][ T9525] tipc: Enabled bearer , priority 10 [ 282.914321][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.949'. [ 283.935633][ T5862] tipc: Node number set to 1 [ 283.970000][ T9550] lo speed is unknown, defaulting to 1000 [ 283.982889][ T9550] lo speed is unknown, defaulting to 1000 [ 284.874343][ T9550] lo speed is unknown, defaulting to 1000 [ 284.900367][ T9561] siw: device registration error -23 [ 285.579793][ T5862] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 285.707895][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 285.735735][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 285.772297][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 285.790962][ T5862] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 285.809556][ T5862] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 286.019417][ T5862] usb 6-1: config 0 has no interface number 0 [ 286.046856][ T5862] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.058992][ T5862] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.071183][ T5862] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 286.084651][ T5862] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 286.119871][ T5862] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 286.127991][ T5862] usb 6-1: Product: syz [ 286.139872][ T5862] usb 6-1: Manufacturer: syz [ 286.148876][ T9594] lo speed is unknown, defaulting to 1000 [ 286.158283][ T5862] usb 6-1: config 0 descriptor?? [ 286.170195][ T29] audit: type=1400 audit(2000000223.811:916): avc: denied { accept } for pid=9591 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.180136][ T9560] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 286.266195][ T9599] FAULT_INJECTION: forcing a failure. [ 286.266195][ T9599] name failslab, interval 1, probability 0, space 0, times 1 [ 286.312535][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 286.323414][ T9599] CPU: 0 UID: 0 PID: 9599 Comm: syz.3.970 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 286.323439][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 286.323447][ T9599] Call Trace: [ 286.323449][ T9594] lo speed is unknown, defaulting to 1000 [ 286.323452][ T9599] [ 286.323459][ T9599] dump_stack_lvl+0x16c/0x1f0 [ 286.323482][ T9599] should_fail_ex+0x50a/0x650 [ 286.323500][ T9599] ? fs_reclaim_acquire+0xae/0x150 [ 286.323522][ T9599] ? tomoyo_realpath_from_path+0xb9/0x720 [ 286.323541][ T9599] should_failslab+0xc2/0x120 [ 286.323557][ T9599] __kmalloc_noprof+0xcb/0x510 [ 286.323571][ T9599] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 286.323596][ T9599] tomoyo_realpath_from_path+0xb9/0x720 [ 286.323614][ T9599] ? tomoyo_path_number_perm+0x235/0x590 [ 286.323630][ T9599] ? tomoyo_path_number_perm+0x235/0x590 [ 286.323648][ T9599] tomoyo_path_number_perm+0x248/0x590 [ 286.323663][ T9599] ? tomoyo_path_number_perm+0x235/0x590 [ 286.323681][ T9599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.323716][ T9599] ? __pfx_lock_release+0x10/0x10 [ 286.323733][ T9599] ? trace_lock_acquire+0x14e/0x1f0 [ 286.323752][ T9599] ? lock_acquire+0x2f/0xb0 [ 286.323768][ T9599] ? __fget_files+0x40/0x3a0 [ 286.323784][ T9599] ? __fget_files+0x206/0x3a0 [ 286.323800][ T9599] security_file_ioctl+0x9b/0x240 [ 286.323826][ T9599] __x64_sys_ioctl+0xb7/0x200 [ 286.323847][ T9599] do_syscall_64+0xcd/0x250 [ 286.323864][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.323883][ T9599] RIP: 0033:0x7f6d40f8cda9 [ 286.323895][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.323908][ T9599] RSP: 002b:00007f6d41e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.323923][ T9599] RAX: ffffffffffffffda RBX: 00007f6d411a5fa0 RCX: 00007f6d40f8cda9 [ 286.323932][ T9599] RDX: 0000000000000000 RSI: 000000004008556c RDI: 0000000000000003 [ 286.323940][ T9599] RBP: 00007f6d41e31090 R08: 0000000000000000 R09: 0000000000000000 [ 286.323948][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.323956][ T9599] R13: 0000000000000000 R14: 00007f6d411a5fa0 R15: 00007ffd50927f88 [ 286.323975][ T9599] [ 286.323982][ T9599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.651341][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.676867][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.737223][ T5862] usb 6-1: USB disconnect, device number 7 [ 286.781869][ T9594] lo speed is unknown, defaulting to 1000 [ 286.833156][ T9608] [ 286.835503][ T9608] ====================================================== [ 286.842496][ T9608] WARNING: possible circular locking dependency detected [ 286.849483][ T9608] 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 Not tainted [ 286.856221][ T9608] ------------------------------------------------------ [ 286.863232][ T9608] syz.3.973/9608 is trying to acquire lock: [ 286.869112][ T9608] ffff888061861940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x499/0xd50 [ 286.878867][ T9608] [ 286.878867][ T9608] but task is already holding lock: [ 286.886221][ T9608] ffff88803370f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 286.895525][ T9608] [ 286.895525][ T9608] which lock already depends on the new lock. [ 286.895525][ T9608] [ 286.905903][ T9608] [ 286.905903][ T9608] the existing dependency chain (in reverse order) is: [ 286.914897][ T9608] [ 286.914897][ T9608] -> #3 (&of->mutex){+.+.}-{4:4}: [ 286.922081][ T9608] __mutex_lock+0x19b/0xb10 [ 286.927086][ T9608] kernfs_seq_start+0x4d/0x240 [ 286.932348][ T9608] seq_read_iter+0x2ab/0x12b0 [ 286.937529][ T9608] kernfs_fop_read_iter+0x414/0x580 [ 286.943228][ T9608] vfs_read+0x886/0xbf0 [ 286.947886][ T9608] ksys_read+0x12b/0x250 [ 286.952631][ T9608] do_syscall_64+0xcd/0x250 [ 286.957635][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.964032][ T9608] [ 286.964032][ T9608] -> #2 (&p->lock){+.+.}-{4:4}: [ 286.971044][ T9608] __mutex_lock+0x19b/0xb10 [ 286.976059][ T9608] seq_read_iter+0xd8/0x12b0 [ 286.981153][ T9608] proc_reg_read_iter+0x118/0x310 [ 286.986673][ T9608] copy_splice_read+0x61d/0xb80 [ 286.992028][ T9608] do_splice_read+0x282/0x370 [ 286.997207][ T9608] splice_file_to_pipe+0x109/0x120 [ 287.002831][ T9608] do_sendfile+0x3fd/0xe40 [ 287.007751][ T9608] __x64_sys_sendfile64+0x155/0x220 [ 287.013447][ T9608] do_syscall_64+0xcd/0x250 [ 287.018456][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.024855][ T9608] [ 287.024855][ T9608] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 287.032301][ T9608] __mutex_lock+0x19b/0xb10 [ 287.037300][ T9608] pipe_write+0x166/0x1b30 [ 287.042214][ T9608] __kernel_write_iter+0x71f/0xa90 [ 287.047827][ T9608] __kernel_write+0xf6/0x140 [ 287.052919][ T9608] autofs_notify_daemon+0x4ce/0xd50 [ 287.058617][ T9608] autofs_wait+0x10b5/0x1a30 [ 287.063704][ T9608] autofs_mount_wait+0x132/0x380 [ 287.069139][ T9608] autofs_d_automount+0x390/0x7f0 [ 287.074663][ T9608] __traverse_mounts+0x192/0x760 [ 287.080100][ T9608] step_into+0x593/0x2220 [ 287.084933][ T9608] walk_component+0xfc/0x5b0 [ 287.090026][ T9608] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 287.096856][ T9608] path_lookupat+0x93/0x770 [ 287.101862][ T9608] path_openat+0x1754/0x2d80 [ 287.106950][ T9608] do_filp_open+0x20c/0x470 [ 287.111949][ T9608] do_sys_openat2+0x17a/0x1e0 [ 287.117126][ T9608] __x64_sys_openat+0x175/0x210 [ 287.122477][ T9608] do_syscall_64+0xcd/0x250 [ 287.127478][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.133874][ T9608] [ 287.133874][ T9608] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 287.141579][ T9608] __lock_acquire+0x249e/0x3c40 [ 287.146944][ T9608] lock_acquire.part.0+0x11b/0x380 [ 287.152558][ T9608] __mutex_lock+0x19b/0xb10 [ 287.157559][ T9608] autofs_notify_daemon+0x499/0xd50 [ 287.163258][ T9608] autofs_wait+0x10b5/0x1a30 [ 287.168344][ T9608] autofs_mount_wait+0x132/0x380 [ 287.173779][ T9608] autofs_d_automount+0x390/0x7f0 [ 287.179303][ T9608] __traverse_mounts+0x192/0x760 [ 287.184740][ T9608] step_into+0x593/0x2220 [ 287.189571][ T9608] walk_component+0xfc/0x5b0 [ 287.194662][ T9608] path_lookupat+0x17f/0x770 [ 287.199753][ T9608] filename_lookup+0x221/0x5f0 [ 287.205019][ T9608] kern_path+0x35/0x50 [ 287.209592][ T9608] lookup_bdev+0xd9/0x280 [ 287.214431][ T9608] resume_store+0x1d8/0x460 [ 287.219429][ T9608] kobj_attr_store+0x55/0x80 [ 287.224517][ T9608] sysfs_kf_write+0x117/0x170 [ 287.229697][ T9608] kernfs_fop_write_iter+0x33d/0x500 [ 287.235480][ T9608] vfs_write+0x5ae/0x1150 [ 287.240312][ T9608] ksys_write+0x12b/0x250 [ 287.245144][ T9608] do_syscall_64+0xcd/0x250 [ 287.250145][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.256551][ T9608] [ 287.256551][ T9608] other info that might help us debug this: [ 287.256551][ T9608] [ 287.266754][ T9608] Chain exists of: [ 287.266754][ T9608] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 287.266754][ T9608] [ 287.278814][ T9608] Possible unsafe locking scenario: [ 287.278814][ T9608] [ 287.286239][ T9608] CPU0 CPU1 [ 287.291582][ T9608] ---- ---- [ 287.296920][ T9608] lock(&of->mutex); [ 287.300877][ T9608] lock(&p->lock); [ 287.307182][ T9608] lock(&of->mutex); [ 287.313663][ T9608] lock(&sbi->pipe_mutex); [ 287.318146][ T9608] [ 287.318146][ T9608] *** DEADLOCK *** [ 287.318146][ T9608] [ 287.326270][ T9608] 4 locks held by syz.3.973/9608: [ 287.331268][ T9608] #0: ffff88807d610638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 287.340293][ T9608] #1: ffff888030718420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 287.349236][ T9608] #2: ffff88803370f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 287.358953][ T9608] #3: ffff888140ebd788 (kn->active#76){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 287.368936][ T9608] [ 287.368936][ T9608] stack backtrace: [ 287.374805][ T9608] CPU: 1 UID: 0 PID: 9608 Comm: syz.3.973 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 287.374819][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 287.374826][ T9608] Call Trace: [ 287.374831][ T9608] [ 287.374837][ T9608] dump_stack_lvl+0x116/0x1f0 [ 287.374852][ T9608] print_circular_bug+0x490/0x760 [ 287.374869][ T9608] check_noncircular+0x31a/0x400 [ 287.374885][ T9608] ? __pfx_check_noncircular+0x10/0x10 [ 287.374902][ T9608] ? add_lock_to_list+0x17d/0x390 [ 287.374917][ T9608] __lock_acquire+0x249e/0x3c40 [ 287.374936][ T9608] ? __pfx___lock_acquire+0x10/0x10 [ 287.374954][ T9608] lock_acquire.part.0+0x11b/0x380 [ 287.374969][ T9608] ? autofs_notify_daemon+0x499/0xd50 [ 287.374984][ T9608] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 287.375000][ T9608] ? rcu_is_watching+0x12/0xc0 [ 287.375012][ T9608] ? trace_lock_acquire+0x14e/0x1f0 [ 287.375025][ T9608] ? autofs_notify_daemon+0x499/0xd50 [ 287.375037][ T9608] ? lock_acquire+0x2f/0xb0 [ 287.375053][ T9608] ? autofs_notify_daemon+0x499/0xd50 [ 287.375066][ T9608] __mutex_lock+0x19b/0xb10 [ 287.375078][ T9608] ? autofs_notify_daemon+0x499/0xd50 [ 287.375090][ T9608] ? __pfx_lock_release+0x10/0x10 [ 287.375105][ T9608] ? autofs_notify_daemon+0x499/0xd50 [ 287.375118][ T9608] ? __pfx___mutex_lock+0x10/0x10 [ 287.375130][ T9608] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 287.375147][ T9608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.375160][ T9608] ? from_kgid_munged+0xa7/0x130 [ 287.375173][ T9608] ? autofs_notify_daemon+0x499/0xd50 [ 287.375185][ T9608] autofs_notify_daemon+0x499/0xd50 [ 287.375198][ T9608] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 287.375211][ T9608] ? sysfs_kf_write+0x117/0x170 [ 287.375224][ T9608] ? kernfs_fop_write_iter+0x33d/0x500 [ 287.375237][ T9608] ? vfs_write+0x5ae/0x1150 [ 287.375260][ T9608] ? lockdep_init_map_type+0x16d/0x7d0 [ 287.375278][ T9608] autofs_wait+0x10b5/0x1a30 [ 287.375292][ T9608] ? __pfx_autofs_wait+0x10/0x10 [ 287.375303][ T9608] ? __pfx_lock_release+0x10/0x10 [ 287.375319][ T9608] ? find_held_lock+0x2d/0x110 [ 287.375332][ T9608] ? autofs_d_automount+0x386/0x7f0 [ 287.375344][ T9608] ? __pfx_lock_release+0x10/0x10 [ 287.375361][ T9608] autofs_mount_wait+0x132/0x380 [ 287.375374][ T9608] autofs_d_automount+0x390/0x7f0 [ 287.375387][ T9608] __traverse_mounts+0x192/0x760 [ 287.375402][ T9608] step_into+0x593/0x2220 [ 287.375420][ T9608] ? __pfx_step_into+0x10/0x10 [ 287.375436][ T9608] ? __pfx___up_read+0x10/0x10 [ 287.375454][ T9608] ? lookup_fast+0x153/0x5f0 [ 287.375471][ T9608] walk_component+0xfc/0x5b0 [ 287.375487][ T9608] path_lookupat+0x17f/0x770 [ 287.375505][ T9608] filename_lookup+0x221/0x5f0 [ 287.375524][ T9608] ? __pfx_filename_lookup+0x10/0x10 [ 287.375547][ T9608] ? getname_kernel+0x52/0x370 [ 287.375560][ T9608] ? __asan_memcpy+0x3c/0x60 [ 287.375578][ T9608] kern_path+0x35/0x50 [ 287.375594][ T9608] lookup_bdev+0xd9/0x280 [ 287.375613][ T9608] ? __pfx_lookup_bdev+0x10/0x10 [ 287.375630][ T9608] ? __asan_memcpy+0x3c/0x60 [ 287.375647][ T9608] resume_store+0x1d8/0x460 [ 287.375658][ T9608] ? __pfx_resume_store+0x10/0x10 [ 287.375670][ T9608] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 287.375686][ T9608] ? rcu_is_watching+0x12/0xc0 [ 287.375699][ T9608] ? __pfx_resume_store+0x10/0x10 [ 287.375709][ T9608] kobj_attr_store+0x55/0x80 [ 287.375721][ T9608] ? __pfx_kobj_attr_store+0x10/0x10 [ 287.375733][ T9608] sysfs_kf_write+0x117/0x170 [ 287.375747][ T9608] kernfs_fop_write_iter+0x33d/0x500 [ 287.375761][ T9608] ? __pfx_sysfs_kf_write+0x10/0x10 [ 287.375776][ T9608] vfs_write+0x5ae/0x1150 [ 287.375793][ T9608] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 287.375812][ T9608] ? __pfx___mutex_lock+0x10/0x10 [ 287.375823][ T9608] ? __pfx_vfs_write+0x10/0x10 [ 287.375844][ T9608] ksys_write+0x12b/0x250 [ 287.375861][ T9608] ? __pfx_ksys_write+0x10/0x10 [ 287.375880][ T9608] do_syscall_64+0xcd/0x250 [ 287.375892][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.375910][ T9608] RIP: 0033:0x7f6d40f8cda9 [ 287.375920][ T9608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.375932][ T9608] RSP: 002b:00007f6d41def038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.375943][ T9608] RAX: ffffffffffffffda RBX: 00007f6d411a6160 RCX: 00007f6d40f8cda9 [ 287.375951][ T9608] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000006 [ 287.375958][ T9608] RBP: 00007f6d4100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 287.375965][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.375972][ T9608] R13: 0000000000000000 R14: 00007f6d411a6160 R15: 00007ffd50927f88 [ 287.375983][ T9608] [ 287.840203][ T970] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 287.865355][ T9608] block device autoloading is deprecated and will be removed. [ 287.877022][ T9608] PM: Image not found (code -22) [ 288.019703][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 288.027210][ T970] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 288.037806][ T970] usb 5-1: config 0 has no interface number 0 [ 288.050569][ T970] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 288.059991][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.068027][ T970] usb 5-1: Product: syz [ 288.073489][ T970] usb 5-1: Manufacturer: syz [ 288.078304][ T970] usb 5-1: SerialNumber: syz [ 288.101738][ T970] usb 5-1: config 0 descriptor?? [ 288.336636][ T29] audit: type=1400 audit(2000000225.981:917): avc: denied { module_load } for pid=9602 comm="syz.4.972" path="/185/bus" dev="tmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 288.336745][ T9603] Invalid ELF header magic: != ELF [ 288.376994][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.385717][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.397575][ T970] pcwd_usb: The device isn't a Human Interface Device [ 288.407384][ T970] usb 5-1: USB disconnect, device number 38