last executing test programs: 4m39.608899158s ago: executing program 2 (id=317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0xc4080) (fail_nth: 7) 4m39.512527947s ago: executing program 2 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='qnx6\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x161e00, 0x56) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 4m39.30081916s ago: executing program 2 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300003f00028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4m39.006058985s ago: executing program 2 (id=323): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000052ff00"}}}}}}, 0x0) 4m39.00244188s ago: executing program 2 (id=325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r1, 0x0, 0xb, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r3, 0x0, 0x4a) syz_fuse_handle_req(r2, &(0x7f00000038c0)="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", 0x2000, &(0x7f0000006b40)={&(0x7f00000058c0)={0x50, 0x0, 0x8, {0x7, 0x2d, 0x1c, 0x1, 0x401, 0x0, 0x3d, 0x4, 0x0, 0x0, 0x10, 0x8}}, &(0x7f0000005940)={0x18, 0x0, 0x81, {0x5}}, &(0x7f0000005980)={0x18, 0xffffffffffffffda, 0x6795, {0x2e10}}, &(0x7f00000059c0)={0x18, 0x0, 0x3, {0x8}}, &(0x7f0000005a00)={0x18, 0x0, 0xb5e, {0xd6e}}, &(0x7f0000005ac0)={0x28, 0xfffffffffffffffe, 0x6, {{0x5, 0x2}}}, &(0x7f0000005b00)={0x60, 0x0, 0x3000, {{0x8, 0xffffffff, 0x8000000000000001, 0x4, 0x0, 0x7fffffff, 0x7f, 0x2}}}, &(0x7f0000005b80)={0x18, 0x0, 0x9, {0x4}}, &(0x7f0000005bc0)=ANY=[@ANYBLOB="1700000000000000030000fc8020bc000000002d262d00"], &(0x7f0000005c00)={0x20, 0xffffffffffffffda, 0xfff, {0x0, 0x7}}, &(0x7f0000005d40)={0x78, 0x0, 0x9, {0xf5fa, 0xf, 0x0, {0x6, 0x5, 0x1ff, 0x8, 0x849, 0x100, 0x1, 0xfffffff2, 0x401, 0x4000, 0x1, 0x0, 0x0, 0x8, 0x85b7}}}, &(0x7f0000005f80)={0x90, 0x0, 0xffff, {0x5, 0x2, 0x40, 0x7, 0x6, 0x4, {0x4, 0x9, 0xfffffffffffffff9, 0x50f8, 0x81, 0x2, 0x8, 0xe04, 0xd7, 0x4000, 0x7, 0x0, 0x0, 0x7, 0x7}}}, &(0x7f0000006040)=ANY=[@ANYBLOB="d8000000daffffff0300000000000000000000000000000009000000000000000200000046570000c67d00000000000001000000000000000900000000000000050000000900000070726f6300000000050000000000000003000000000000000600000001040000776c616e310000000300000000000000060000000000000002000000010000802b0400000000000000000000000000000200000000000000050000000500000070726f6300000000050000000000000000000000000008000e000000040000006374722d6165732d6165736e69000000"], &(0x7f0000006440)={0x2a8, 0x0, 0x4, [{{0x2, 0x3, 0x7, 0x7, 0x5, 0x247, {0x5, 0x0, 0xc, 0x1, 0x8, 0x6, 0x1c, 0x0, 0x2, 0xa000, 0x8, 0x0, 0x0, 0xdb24, 0x3}}, {0x1, 0x1, 0x9, 0x2, 'nl802154\x00'}}, {{0x1, 0x3, 0x9, 0xffffffff, 0x80000001, 0x8, {0x3, 0x8, 0x8000000000000001, 0x1, 0x3ff, 0x8, 0xc, 0x0, 0x1ff, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x3}}, {0x4, 0x100, 0x2, 0xd61, '^:'}}, {{0x4, 0x0, 0x2, 0xfffffffffffffaf6, 0x8, 0x0, {0x5, 0x5a47, 0x4, 0xf, 0x6, 0xfffffffffffffff7, 0x8, 0x80000000, 0x76b7a0a2, 0xc000, 0x69, 0x0, 0xee00, 0x8, 0x8}}, {0x0, 0xf3, 0x9, 0xd, 'skcipher\x00'}}, {{0x6, 0x0, 0x84ad, 0x10000, 0x80000000, 0x9, {0x4, 0x3, 0x1, 0x0, 0x3ff, 0x8, 0x1, 0x8, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffc00}}, {0x6, 0x7, 0x9, 0x400, 'nl802154\x00'}}]}, &(0x7f0000006900)={0xa0, 0x0, 0x80000000, {{0x6, 0x3, 0xc75b, 0x5, 0x100, 0x6, {0x0, 0x0, 0x1, 0x0, 0x1, 0x4, 0x2, 0x3ff, 0x8, 0xa000, 0x1c, 0x0, 0x0, 0x400, 0x2}}, {0x0, 0x6}}}, &(0x7f00000069c0)={0x20, 0xffffffffffffffda, 0xb078a7a, {0x1, 0x4, 0x3, 0x2}}, &(0x7f0000006a00)={0x130, 0x0, 0x0, {0x5, 0x1, 0x0, '\x00', {0x200, 0x5, 0x7, 0x8c1e, 0xee00, 0x0, 0xa000, '\x00', 0xfffffffffffffffb, 0x8, 0x0, 0x7, {0x4, 0xa36}, {}, {0x5c, 0x7fffffff}, {0x4, 0x3}, 0x0, 0x7fff, 0x6, 0x100}}}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001060000000203040506070800000c0002000600200086dd00000c0003"], 0x58}}, 0x20000095) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000001580), &(0x7f00000015c0)=0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x2, 0x0, 0x0) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/240, 0xf0}], 0x2) sendmmsg$alg(r6, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94ff93031f0603", 0x14}, {&(0x7f0000000040)="0ac0d4f6e32e92fb", 0x8}], 0x2, 0x0, 0x0, 0x400c000}], 0x1, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYBLOB="000426bd7000fcdbdf25210000001c002d8005000400010000000800030001000000050001000100000034002d80050004000100000008000300050000000500010001000000080002000000000005000100af00000008000200030000000c00060003000000030000000c002d800800030003000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8095}, 0x4000004) r11 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x5f0eb60a7656000}, 0x20000000) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0xbc, &(0x7f0000000580)=""/188}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) 4m38.695312107s ago: executing program 2 (id=328): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177024000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000080)=""/72, 0x48, &(0x7f0000000340)={&(0x7f0000000300)={'hmac(sha256)\x00'}}) 4m23.598208825s ago: executing program 32 (id=328): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177024000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000080)=""/72, 0x48, &(0x7f0000000340)={&(0x7f0000000300)={'hmac(sha256)\x00'}}) 3m32.01608136s ago: executing program 0 (id=766): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3m30.977375612s ago: executing program 0 (id=774): request_key(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000100)) (async) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="a3305dc43ed50497fff60959bac0000000000000000020002f77c6bcfdff61726964676500001000"], 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="a3305dc43ed50497fff60959bac0000000000000000020002f77c6bcfdff61726964676500001000"], 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="05008800000000000a00060008021100000100000600480000000000050089000000000004002a000800cb0000000000"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="28005eef00000000cfba5ec14560678c74ee00", @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2f4, r5, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_TESTDATA={0x17, 0x45, "8592a1441ff982bdecc739d3f2adaf6a8ed358"}, @NL80211_ATTR_TESTDATA={0xeb, 0x45, "eb30ff23c967387e972071c8e4fd1c7cbd00b21ebf408e60be1fdbb6dcbd483df49e6912c57e4bb10b969a16e3b3006192f94df1e95372e48b881d00ee9fc0425c672a5eec725aebf676802f0a22dad2621ba1c8c5cad07f203a1ba583e4f148be704d160d30604805532cc7095d47760a7051f7269eeec31a283a43c258c64c7a4e65f70943c42b8fd17414404ef49b5473ae1730e2f900c33b34ebdb00bddcf4f6ab69bfc8bcd42096e7f0515a1bb62a1a4e96e95d417400dcbc5176343cbbb6d665138c097086a592dd2761845d18a4bbc593945e4c606af7e3ab27cf2e458f41fb09c81c96"}, @NL80211_ATTR_TESTDATA={0xf8, 0x45, "66085c314c8bed1978e79f6da8296485ecbe540fdf2040d08e980f1d3ad525252e151f1ee9c31a87ad86abab5286b4312f9715b677876bdc4cc2a11066be22648cd18e01d55fc19698c3cdc60b095ce81dea92a782e968f24c5d09a01d6d3dff4e3cba34e85c1fecdaea0a0ceca2edc5c017d337dc46e1583ae4d66d32f7258fb3bc041f6b57089a313d50cbaa40914cad21e52b5a3323bb1bdc256f2dd19bd602ccea35e82a77beaf7862aeec1ac26b2c3f177864d9b73ec6b85db18f1d86a35ecb657dec39fc20a838594d1625c60e0da27d3e1ec2770f8a422b04ffd72f54f92e584c529d161745f6439ea99dccbaa499e4f6"}, @NL80211_ATTR_TESTDATA={0xd7, 0x45, "38ac3447b856ecdcc8b10a762c22074e02eb10f16137f56b203ef01bb95ff7f5c8728fe6f070da8fed85c88561f07f80b7e6412d782c7933b6396fffaedb9fb30ca7c36019cd449a54c1bdc86421013ae1857fa2a3c4e214dd2de042f92ba91e566e0b2b03dfa60ab2cc7a7497185cda3061aa24fb98053527eb340b25862558822b7db587eae13dd4d4eafa0521e79aa3f548e8d3e2d7f0b1a3897e1d86e6e249e765c123444d0eb4df794b1d772e0067ae8c2ebf3a974529515f4717ea199a6ed82f1b25e445fea2321a2d9f810e46d998cc"}]}, 0x2f4}}, 0x40) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000280)=0xff, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000280)=0xff, 0x4) r6 = socket$inet6(0xa, 0xa, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = syz_open_dev$hidraw(&(0x7f0000000140), 0x0, 0x100) ioctl$HIDIOCGFEATURE(r8, 0x4004480d, 0x0) (async) ioctl$HIDIOCGFEATURE(r8, 0x4004480d, 0x0) userfaultfd(0x1) socket$rds(0x15, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x1, 0x4, 0xffffffffffffff05, 0xffffffffffffffff}, 0x0, &(0x7f00000004c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffe}, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3m30.188039939s ago: executing program 0 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=r0, @ANYBLOB="110a0500001003002400128009000100626f6e640000000014000280050001000400000005001d00010000003a9c1bfeaca33f5401a8d8eef72b253f311be95c9f178f0550960e04735daab46b7f2cba9c2f34bfb067bfc2c9f2f4cb028e733a4c70eb5b64dd9b1d7f297e1a42d8a50bde1b5b0397f079ecbc9ff150718cf35cdc01a0afa571b206edf42362e6ffaff62769bf0efa32769cfbddbdced90467228f6491f2e6cfd6d3919ec164208503474e905417fa9812ae0ac6f5aeaf0c32b560411effc024c0bf85fdaef37bb3c9fd0bc96ea4f8b7026485", @ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24008804) 3m30.0869688s ago: executing program 0 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) (async) socket$phonet(0x23, 0x2, 0x1) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10) (async) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x9) (async) 3m29.887369177s ago: executing program 0 (id=784): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2, 0x0}, 0x8) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) setreuid(r2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="050375e7e7602314bed052c12661982ae6d891b125b2cb2a3d8cf158d8c5a17c10d61d21f76ad5a623e96e4f7c9d89454bb9c3e0c3dd9eb762da70e13e35594957834cff5019de545fba8f3cf8eb901b51120e5414a016278e3b900a7ef612886d6bd92c5dce0432ff858c2399782b445d4fb8d5f34b82eeeb1d2c3d59e5936e42a77fb02657b791ddef1e854e00e77cbd5c27bd7450988657e5b15419d045516b60c32f0cbbc82a3c55496f952a2cbf31f168bc3925acc7de6b8d4a1a4d9e88af474b14b023993f8f3d", @ANYRESOCT=r3], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x26, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x10000, 0x10000000, {0x40, 0x10000000000d08, 0x4, 0xfffffffffff7fffe, 0x1007, 0x0, 0x3, 0x80000000, 0x124, 0x8000, 0x10000, r7, r8, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r11, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r9, &(0x7f0000000640)="7089ca40e2ce27f51a88efca952c1a378583fbb13f8dcd4601efff8c6bca6fd1ed41346457221e31", 0x28, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r12, 0x1, 0x8, 0x6, @random}, 0x14) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r13, 0x4004092b, 0x4) setpriority(0x2, 0xff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 3m28.353375497s ago: executing program 0 (id=796): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x800, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) write$rfkill(r2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r9, &(0x7f0000000780)="d11951f8d10b46"}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000200)=0x100000001) r12 = dup(r10) write$UHID_INPUT(r12, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001cc0)={0x6, 0x0, [{0xa000, 0x78, &(0x7f0000000240)=""/120}, {0x200000, 0xffa, &(0x7f0000000ac0)=""/4090}, {0x0, 0x27, &(0x7f0000001ac0)=""/39}, {0x0, 0x34, &(0x7f0000001b00)=""/52}, {0x10000, 0xe2, &(0x7f0000001b40)=""/226}, {0xfec00000, 0x69, &(0x7f0000001c40)=""/105}]}) 3m27.910422911s ago: executing program 33 (id=796): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x800, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) write$rfkill(r2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r9, &(0x7f0000000780)="d11951f8d10b46"}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000200)=0x100000001) r12 = dup(r10) write$UHID_INPUT(r12, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001cc0)={0x6, 0x0, [{0xa000, 0x78, &(0x7f0000000240)=""/120}, {0x200000, 0xffa, &(0x7f0000000ac0)=""/4090}, {0x0, 0x27, &(0x7f0000001ac0)=""/39}, {0x0, 0x34, &(0x7f0000001b00)=""/52}, {0x10000, 0xe2, &(0x7f0000001b40)=""/226}, {0xfec00000, 0x69, &(0x7f0000001c40)=""/105}]}) 2.87082042s ago: executing program 3 (id=2469): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000200200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="5400000030000506000000000000000000000100400001003c0001000900010067617465000000002c000200200001001800010000000000000000000000000000000000000007000800020000000000"], 0x54}], 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) 2.773639646s ago: executing program 3 (id=2470): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) preadv2(r0, &(0x7f0000002ec0)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, 0x7, 0x7fff, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000814}], 0x1, 0x40800) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x19c}}, 0x4000) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000001c0)={0x1, 0x6, 0x5, &(0x7f0000000080)={0x14, "91ca63c14ac713b35a98d413a7f3f595f62005ce5e02c6c9ad4c737b0eb954b64a"}}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) ftruncate(r1, 0x8000000000000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000007c0)=""/67, 0x19c}], 0x1}, 0x2043) r8 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) fsconfig$FSCONFIG_SET_STRING(r8, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) write(r9, &(0x7f0000000380)="4bb156099717f34fdbe56aa038f3e24e285f0b8dfd0954b8f66753fa6d776d49cb92c89d1b80ebc830339846e086fbbc6d29b9b8e8861c369e7ab0643a8998986407a518ff9b2fed09a1e5e5d349c63b9b644f14a392e652d7c95b212f0a2be4b16148b716fd795a13dbe996e6744c5cf3c704905ef4f3c8a554429ae3c06844532d83d6a2e5403a0b8b5404df1ccb222f977aa1abef46ceca79cb1a85bb24fa88f36e759eeae25e5a5d874b6a2edbeb0803c2113e6186453fb05d707af36499c1b17ce8b42ad579b819fe36450d", 0xce) 2.773191902s ago: executing program 4 (id=2471): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x9}]]}}}]}, 0x38}, 0x1, 0x2000000000000000}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x2, 0x9295, 0xf86, 0x0, 0x5b9b8ab7, 0xbc95, 0x3, 0x1b9, 0x0, 0x1, 0x3, 0x1741, 0x4, 0x6, 0x7, 0xfffffff5, 0xfffffffe, 0x1000a236, 0x1, 0x1, 0xfb, 0x5}}) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f0000000080)={[{@uid={'uid', 0x3d, r3}}]}) (async) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r3, &(0x7f0000000100)) 2.593906162s ago: executing program 4 (id=2474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) (async, rerun: 32) setns(0xffffffffffffffff, 0x8000000) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r3, 0x7f}, &(0x7f0000000100)=0x8) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) (async) sched_rr_get_interval(0x0, &(0x7f00000000c0)) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000440)=""/143, 0x8f, 0x10040, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async, rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 32) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newqdisc={0x64, 0x28, 0x800, 0x4002, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xa79}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x401}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x22}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000885c}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) 2.444195121s ago: executing program 1 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a30001b0000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) 2.255223278s ago: executing program 4 (id=2478): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/167, 0xa7) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) rmdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r1, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="4df069d64970996b9472d4", 0xb}], 0x10000000000001bf) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@phonet={0x23, 0x2, 0x1, 0x1e}, {&(0x7f0000000280)=""/109, 0x6d}, &(0x7f0000000300), 0x40}, 0xa0) 2.254880847s ago: executing program 1 (id=2479): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xb, [@typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0x0, 0x2}, {0x1, 0x5}, {0xc}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @volatile={0xf, 0x0, 0x0, 0x9, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x61, 0x0, 0x30, 0x61, 0x0, 0x2e, 0x61, 0x0]}}, &(0x7f0000001700)=""/29, 0x8b, 0x1d, 0x0, 0x4}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000003, 0x0, 0x5}]}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='Q {{', @ANYRES16=r2, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004", @ANYRES8=r1, @ANYBLOB="6855fb98e338d7e07cbfbeb64b36047930d924e6"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xa}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004015) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="d31f9603e17d8125de13f09349a0b3617dce776b0cd0f220282c153180e06cb725d86e053f674bef9ef70769c1fbb0209fe86e7e556826099903be279af9c4e9", 0x40}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x80) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/4100, 0x1004}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 2.108616758s ago: executing program 3 (id=2480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r0], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4b86c79, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 2.038019118s ago: executing program 4 (id=2481): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}}}}}}, 0x0) 1.866337486s ago: executing program 4 (id=2482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2500000000000000000000000000000061199c00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf25030000000000000008000100020000003a7adde0b9a864f653dd77aef82ef8bef60ebab3f6937cc3269d4c6deb"], 0x20}}, 0x4080) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x1d}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) close(r4) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.809811936s ago: executing program 3 (id=2483): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7fff, 0x6}, &(0x7f0000000080)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001000)={r0, 0xfe, 0x3, [0x341, 0x51, 0x6]}, 0xe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'tunl0\x00', 0x0}) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendto(r3, 0x0, 0x60, 0x468ed, &(0x7f00000004c0)=@nl=@unspec, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r10, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RXATTRWALK(r10, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x8f}, 0xf) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r10, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0xa4) 1.658202272s ago: executing program 4 (id=2484): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, 0x470c0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24060080}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newrule={0x64, 0x20, 0xf04, 0x70bd25, 0x25dfdbfd, {0x2, 0x10, 0x14, 0xd1, 0xfe, 0x0, 0x0, 0x3, 0xc}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x1}, @FRA_FLOW={0x8, 0xb, 0x4}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004b40)='./binderfs/binder-control\x00', 0x802, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmmsg$inet(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4a080) 1.493911405s ago: executing program 3 (id=2485): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 1.360425699s ago: executing program 5 (id=2486): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x78) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 1.228004541s ago: executing program 5 (id=2487): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x18140, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @empty, @rand_addr=0xc0a80101}}}}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0xfffffe01, 0x4) r1 = socket$kcm(0xa, 0x3, 0x87) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x400000, 0x4, 0xaccc, 0xfc}}) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @dev, @local, {[@routing={0x5c, 0x0, 0x1}]}}}}}, 0x0) mq_open(&(0x7f00000079c0)='.:-\\!\x00', 0x40, 0x12, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)="badbd31e9270492773fe7fa9d08efe4537da4f33fbfd2f3ef2041a373e1663cc999fbb158c631d06b0c744aae2ec1e59e8c557bf5a6cf811538a8060346eb79bab4b2357ae211961e6d1cc66ca54ebf598d7cb3bb7e77e84d2f4181bff60e6166cf2d9d32e45cf61cd4d09c5c56851b53f085db2c7fdb471393dfb5b435912be7aa01544f9977cb6362c101fbaeed7156870a385eea8551be37b7a47a1f490b346e2172632f4ce3fcf86b30547013ca225", 0xb1, r0}, 0x68) 1.227726305s ago: executing program 1 (id=2488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a30001c0000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) 1.033666595s ago: executing program 5 (id=2489): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000002140012800b0001006d616373656300003f00028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 878.414629ms ago: executing program 1 (id=2490): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}, 0x0) 878.131361ms ago: executing program 1 (id=2491): r0 = fsopen(&(0x7f0000000200)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f0000000740)='0+,\xaa\xd4\x00#\xb3\x9cu~V\xb1\x8eC\x92\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\xf7\x99;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\x04\x00\x00\x00\x00\x00\x00\x00s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x1, 0x70bd2d, 0x25dfdc02, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = semget$private(0x0, 0x2, 0x540) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x800]) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x300, 0x70bd29, 0x25dfdbff, {{@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {@in6=@loopback, 0x0, 0x3c}, @in=@loopback, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40}, {}, {0xa5}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x60}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x104}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) 745.837866ms ago: executing program 1 (id=2492): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {0x4e1f, 0x4e20, 0x8}}}}}}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x100, 0xfffff801, 0x1, {0x2, @pix={0x0, 0x103, 0x3432564e, 0x0, 0x6, 0xffffdf81, 0x4, 0x20000006, 0x1, 0x2, 0x1, 0x1}}, 0x5}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffff, &(0x7f00000002c0)=[{0x3, 0x0, 0x7fff}], 0x1, 0x2, 0x2e, 0x0, 0xc, 0x21}) 744.424311ms ago: executing program 5 (id=2493): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@fwd={0xa}, @union={0x8, 0x3, 0x0, 0x5, 0x1, 0x400, [{0x8, 0x0, 0xc72f}, {0x8, 0x2, 0x9}, {0x9, 0x3, 0x87}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x61, 0x0, 0x30, 0x61, 0x5f]}}, &(0x7f00000003c0)=""/47, 0x69, 0x2f, 0x1, 0x48c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611040000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, 0xd, r1}, 0x94) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x78, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e21, 0x1, @private1, 0x4}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x54, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5bc8}]}, &(0x7f0000000140)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='kv', 0x2) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000780)={r6, 0x2, 0x3, 0x404, 0x2, [0x0], [0x0, 0x7, 0x400, 0x8009], [0xfffffffc, 0x0, 0x1004], [0x5, 0x0, 0x7, 0x800000405]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r6, 0x9, 0xec, 0x3, 0x0, [], [0x4, 0x9, 0x40, 0x8c6a], [0x5, 0x0, 0x1, 0xb], [0x8, 0xf, 0x7fffffff, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r7, 0x80000}) close_range(r0, 0xffffffffffffffff, 0x0) 511.264898ms ago: executing program 3 (id=2494): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) (async) exit(0xffff) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf350a8003000800000317000000080018004e224e2414000200fc0000000000000000000000000000001400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) (async) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x3, 0x2, 0x3}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 404.348494ms ago: executing program 5 (id=2495): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000200200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="5400000030000506000000000000000000000100400001003c0001000900010067617465000000002c000200200001001800010000000000000000000000000000000000000007000800020000000000"], 0x54}], 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) 0s ago: executing program 5 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=@ipv6_delrule={0x28, 0x21, 0x1, 0x30bd06, 0x0, {0xa, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r2, 0x2, {0x1, 0xff, 0x3}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x1, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x9}}], [{@flag='dirsync'}]}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r6, &(0x7f0000000240)={&(0x7f0000000280)={0x1d, r7, 0x3, {0x1, 0xf1, 0xa}}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="809b31dec0d6768be7e02fd757d4766afce77a9085abe0a8a0f0af9c2c04edb8fdcc5c1d791da1671dd3", 0x2a}, 0x1, 0x0, 0x0, 0x880}, 0x8084) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980903, 0x8081, @value=0x7}) write(r4, &(0x7f0000000f00)='fi', 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=@ipv6_delrule={0x28, 0x21, 0x1, 0x30bd06, 0x0, {0xa, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r2, 0x2, {0x1, 0xff, 0x3}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) (async) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x1, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x9}}], [{@flag='dirsync'}]}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) sendmsg$can_j1939(r6, &(0x7f0000000240)={&(0x7f0000000280)={0x1d, r7, 0x3, {0x1, 0xf1, 0xa}}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="809b31dec0d6768be7e02fd757d4766afce77a9085abe0a8a0f0af9c2c04edb8fdcc5c1d791da1671dd3", 0x2a}, 0x1, 0x0, 0x0, 0x880}, 0x8084) (async) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980903, 0x8081, @value=0x7}) (async) write(r4, &(0x7f0000000f00)='fi', 0x2) (async) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.1.1945'. [ 334.464997][ T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 334.565388][ T5739] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 334.637190][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 334.676282][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 334.742322][ T9] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 334.776700][ T9] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 334.808162][ T9] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.832858][ T9] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 334.871652][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.875449][ T9] usb 8-1: Product: syz [ 334.877336][ T9] usb 8-1: Manufacturer: syz [ 334.895173][ T9] usb 8-1: SerialNumber: syz [ 334.973388][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 334.980472][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input123 [ 335.150619][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.179992][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.342430][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.363581][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.394277][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.450044][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.455541][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.015184][ T9] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 336.053103][ T9] (id 0x00) [ 336.391415][ T9] rc_core: IR keymap rc-imon-pad not found [ 336.393885][ T9] Registered IR keymap rc-empty [ 336.409100][ T9] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 336.439793][ T9] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 336.445427][ T9] imon:send_packet: packet tx failed (-71) [ 336.471993][ T9] imon 8-1:155.0: remote input dev register failed [ 336.495110][ T9] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 336.574903][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 336.581323][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1959'. [ 336.616217][ T9] imon 8-1:155.0: unable to initialize intf0, err 0 [ 336.634640][ T9] imon:imon_probe: failed to initialize context! [ 336.637912][ T9] imon 8-1:155.0: unable to register, err -19 [ 336.694031][ T9] usb 8-1: USB disconnect, device number 32 [ 337.418096][ T5833] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 337.429827][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.441046][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.447350][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 337.454579][T12276] bridge_slave_0: entered allmulticast mode [ 337.455832][T12276] bridge_slave_0: entered promiscuous mode [ 337.457817][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.457959][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.458089][T12276] bridge_slave_1: entered allmulticast mode [ 337.459478][T12276] bridge_slave_1: entered promiscuous mode [ 337.504280][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 337.515472][T12276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.528611][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 337.565005][ T5833] usb 10-1: Using ep0 maxpacket: 32 [ 337.568173][ T5737] Bluetooth: hci2: command tx timeout [ 337.599052][ T5833] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 337.626393][ T5833] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 337.629128][T12276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.631658][ T5833] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 337.631690][ T5833] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.631711][ T5833] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 337.634121][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.679436][T12276] team0: Port device team_slave_0 added [ 337.682107][ T5833] usb 10-1: Product: syz [ 337.689417][ T5833] usb 10-1: Manufacturer: syz [ 337.692178][ T5833] usb 10-1: SerialNumber: syz [ 337.701910][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 337.706450][T12276] team0: Port device team_slave_1 added [ 337.709148][ T5833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input125 [ 337.752972][T12276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.759243][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.784998][T12276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.799281][T12276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.805199][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.829772][T12276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.856568][T12350] nfsd: Unknown parameter 'discard' [ 338.063884][ T5833] imon:send_packet: packet tx failed (-71) [ 338.087986][ T5833] imon 10-1:155.0: panel buttons/knobs setup failed [ 338.092477][ T5833] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 338.104846][ T5833] (id 0x00) [ 338.394196][ T5833] rc_core: IR keymap rc-imon-pad not found [ 338.396862][ T5833] Registered IR keymap rc-empty [ 338.399123][ T5833] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 338.417415][T12276] hsr_slave_0: entered promiscuous mode [ 338.421702][T12276] hsr_slave_1: entered promiscuous mode [ 338.422191][ T5833] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 338.477642][T12276] debugfs: 'hsr0' already exists in 'hsr' [ 338.480136][T12276] Cannot create hsr debugfs directory [ 338.599024][ T5833] imon:send_packet: packet tx failed (-71) [ 338.633551][ T5833] imon 10-1:155.0: remote input dev register failed [ 338.637570][ T5833] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 338.815749][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1981'. [ 338.822294][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1981'. [ 338.870636][ T5833] imon 10-1:155.0: unable to initialize intf0, err 0 [ 338.882645][ T5833] imon:imon_probe: failed to initialize context! [ 338.886731][ T5833] imon 10-1:155.0: unable to register, err -19 [ 338.898886][ T5833] usb 10-1: USB disconnect, device number 18 [ 338.979288][ T42] audit: type=1400 audit(1786448528.178:7430): avc: denied { append } for pid=12370 comm="syz.4.1983" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 339.120619][T12276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.245501][ T24] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 339.375022][ T42] audit: type=1400 audit(1786448528.548:7431): avc: denied { map } for pid=12370 comm="syz.4.1983" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 339.415286][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 339.418295][ T24] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 339.423604][ T24] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 339.434290][ T42] audit: type=1400 audit(1786448528.548:7432): avc: denied { execute } for pid=12370 comm="syz.4.1983" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 339.434833][ T24] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 339.473630][ T24] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.483511][ T24] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 339.521241][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.533654][ T24] usb 8-1: Product: syz [ 339.536776][ T24] usb 8-1: Manufacturer: syz [ 339.538684][ T24] usb 8-1: SerialNumber: syz [ 339.554401][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 339.562717][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input127 [ 339.653585][ T5737] Bluetooth: hci2: command tx timeout [ 339.659753][T12385] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1986'. [ 339.787819][T12276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.293227][T12276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.529208][ T24] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 340.533228][ T24] (id 0x00) [ 340.613543][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1991'. [ 340.633968][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1991'. [ 340.637836][ T24] rc_core: IR keymap rc-imon-pad not found [ 340.641042][ T24] Registered IR keymap rc-empty [ 340.668125][ T24] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 340.675751][ T24] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 340.682673][ T24] imon:send_packet: packet tx failed (-71) [ 340.705721][ T24] imon 8-1:155.0: remote input dev register failed [ 340.710796][ T24] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 340.837678][T12276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.857682][ T24] imon 8-1:155.0: unable to initialize intf0, err 0 [ 340.862669][ T24] imon:imon_probe: failed to initialize context! [ 340.869733][ T24] imon 8-1:155.0: unable to register, err -19 [ 340.919988][ T24] usb 8-1: USB disconnect, device number 33 [ 340.956964][T12408] veth0_macvtap: Caught tx_queue_len zero misconfig [ 340.970616][T12410] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1995'. [ 340.974040][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1995'. [ 340.977945][T12410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'. [ 341.127831][T12415] tmpfs: User quota inode hardlimit too large. [ 341.322187][ T42] audit: type=1400 audit(1786448530.508:7433): avc: denied { bind } for pid=12421 comm="syz.5.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 341.371622][T12276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.405847][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.409842][T12276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.431043][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.439537][T12276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.477147][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.483043][T12276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.518532][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.724954][ T5737] Bluetooth: hci2: command tx timeout [ 341.815576][ T24] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 341.919748][T12276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.952743][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.985192][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 341.992047][ T24] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 342.054956][ T24] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 342.072477][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.086090][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.093779][ T42] audit: type=1400 audit(1786448531.298:7434): avc: denied { setopt } for pid=12437 comm="syz.5.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.110417][ T24] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 342.123598][ T42] audit: type=1400 audit(1786448531.298:7435): avc: denied { write } for pid=12437 comm="syz.5.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.141636][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.141726][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.147984][ T24] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.167257][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2005'. [ 342.181878][ T24] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 342.199039][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2005'. [ 342.215708][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.219471][ T24] usb 9-1: Product: syz [ 342.221328][ T24] usb 9-1: Manufacturer: syz [ 342.249377][ T24] usb 9-1: SerialNumber: syz [ 342.262258][ C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 342.272592][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input129 [ 342.624462][ T24] imon:send_packet: packet tx failed (-71) [ 342.655494][ T24] imon 9-1:155.0: panel buttons/knobs setup failed [ 342.658281][ T24] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 342.738903][ T24] (id 0x00) [ 342.908401][ T24] rc_core: IR keymap rc-imon-pad not found [ 342.912328][ T24] Registered IR keymap rc-empty [ 342.915679][ T24] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 342.921851][ T24] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 342.931487][ T24] imon:send_packet: packet tx failed (-71) [ 342.965430][ T24] imon 9-1:155.0: remote input dev register failed [ 342.971163][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 342.971365][ T24] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 343.235917][ T24] imon 9-1:155.0: unable to initialize intf0, err 0 [ 343.238635][T12466] CIFS: Attempting to mount //127.0.0.1/share,ser=roœº‰jÖàvK~—ot [ 343.255428][ T24] imon:imon_probe: failed to initialize context! [ 343.348286][T12470] binder: 12469:12470 ioctl 40086200 200000000080 returned -22 [ 343.350728][ T24] imon 9-1:155.0: unable to register, err -19 [ 343.360569][T12470] binder: 12469:12470 ioctl 8933 2000000001c0 returned -22 [ 343.370407][T12473] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 343.390751][ T24] usb 9-1: USB disconnect, device number 22 [ 343.425425][T12466] CIFS: VFS: cifs_mount failed w/return code = -112 [ 343.456813][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2015'. [ 343.571284][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.724575][T12276] veth0_vlan: entered promiscuous mode [ 343.795119][T12276] veth1_vlan: entered promiscuous mode [ 343.822528][ T5737] Bluetooth: hci2: command tx timeout [ 343.896381][T12276] veth0_macvtap: entered promiscuous mode [ 343.933339][T12276] veth1_macvtap: entered promiscuous mode [ 343.969347][ T42] audit: type=1400 audit(1786448533.168:7436): avc: denied { map } for pid=12488 comm="syz.5.2020" path="/dev/video3" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 344.017000][T12276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.021118][ T5812] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 344.042236][T12491] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 344.064260][T12491] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 344.120628][T12276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.254928][ T5812] usb 8-1: Using ep0 maxpacket: 32 [ 344.255188][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.262975][ T5812] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 344.264570][ T5812] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 344.264614][ T5812] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 344.264642][ T5812] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.264664][ T5812] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 344.329477][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.332951][ T5812] usb 8-1: Product: syz [ 344.398836][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.399827][ T5812] usb 8-1: Manufacturer: syz [ 344.402430][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.403473][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.425701][ T34] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 344.425856][ T5812] usb 8-1: SerialNumber: syz [ 344.465666][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 344.472230][ T5812] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input131 [ 344.591440][ T34] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 344.600303][ T8709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.604643][ T8709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.612046][ T34] usb 10-1: config 1 interface 0 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 8 [ 344.618987][ T34] usb 10-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 1023 [ 344.626342][ T34] usb 10-1: config 1 interface 0 has no altsetting 0 [ 344.639111][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.648039][ T34] usb 10-1: Product: 빟೒䙲榴羘ë±íš‘繙ৗ﹭ᖩ⩽ã«ìª½ä£¬ìŽ¡èŽ¿á—ºæ„–⟼â®ë³°î¢»æ–µìŽ›íŒƒéµ£æ—•ê­”㻨â²î–’웵葲ⴞᰠࡣ玻í•ìƒŸçœå³¤á½†ï¦Œê†‡ê”„৽彬佧䶶æ—䉒贺럱욤ꉺ౪ﾞå‰ã™ä…穸䵘ã¥ê¬ƒï½ï«·à§´á’´á±ªèŒŒåœŒê¬¸ê±‰ì»°ä‚¡ãµ˜ç³¶é“±ë»‚汶á­Ëºë¨£èšŠê­ªå‚™ä¬ä¾¿ï…ƒâ«˜ç†‰äŸ·ì“®áŽ¨á±¶ã¦¢ë¬¤ä™ äˆ­éŽžï¦®ç¬¯è—愈춛춟톟ä³æ½° [ 344.667875][ T8709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.697227][ T8709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.698215][ T34] usb 10-1: Manufacturer: ဉ [ 344.725715][ T34] usb 10-1: SerialNumber: syz [ 344.732981][ T42] audit: type=1400 audit(1786448533.928:7437): avc: denied { mounton } for pid=12276 comm="syz-executor" path="/syzkaller.UU0oOQ/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 344.735863][T12489] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 344.777196][T12489] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 344.824861][T12498] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 344.828885][T12498] netlink: 'syz.4.2024': attribute type 2 has an invalid length. [ 344.860705][T12498] netlink: 'syz.4.2024': attribute type 2 has an invalid length. [ 344.958121][ T5812] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 344.961625][ T5812] (id 0x00) [ 345.095001][ T5812] rc_core: IR keymap rc-imon-pad not found [ 345.098426][ T5812] Registered IR keymap rc-empty [ 345.101294][ T5812] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 345.117860][ T5812] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 345.147624][ T5812] imon:send_packet: packet tx failed (-71) [ 345.215293][ T5812] imon 8-1:155.0: remote input dev register failed [ 345.243731][ T5812] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 345.295236][ T34] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 64 proto 2 vid 0x0525 pid 0xA4A8 [ 345.324533][ T34] usb 10-1: USB disconnect, device number 19 [ 345.363908][ T34] usblp0: removed [ 345.433314][ T5812] imon 8-1:155.0: unable to initialize intf0, err 0 [ 345.448486][ T5812] imon:imon_probe: failed to initialize context! [ 345.451403][ T5812] imon 8-1:155.0: unable to register, err -19 [ 345.484294][ T5812] usb 8-1: USB disconnect, device number 34 [ 345.795519][T12515] __nla_validate_parse: 1 callbacks suppressed [ 345.795539][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2028'. [ 345.801936][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2028'. [ 346.265363][T12522] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 346.649966][ T42] audit: type=1400 audit(1786448535.848:7438): avc: denied { mounton } for pid=12531 comm="syz.5.2034" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 346.680412][T12532] exFAT-fs (nbd5): unable to read boot sector [ 346.702774][T12532] exFAT-fs (nbd5): failed to read boot sector [ 346.718285][T12532] exFAT-fs (nbd5): failed to recognize exfat type [ 346.907799][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 346.911846][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 346.960133][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 347.128053][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 347.132691][ T24] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 347.153767][ T24] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 347.160235][ T24] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 347.167074][ T24] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.234285][ T24] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 347.275947][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.302855][ T24] usb 9-1: Product: syz [ 347.306555][ T24] usb 9-1: Manufacturer: syz [ 347.322856][ T24] usb 9-1: SerialNumber: syz [ 347.388148][ C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 347.396692][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input133 [ 347.461518][T12560] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2044'. [ 347.549291][T12565] pim6reg1: entered promiscuous mode [ 347.576298][T12565] pim6reg1: entered allmulticast mode [ 347.620303][T12536] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 347.817929][T12569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.833060][T12536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.948139][ T24] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 347.954567][ T24] (id 0x00) [ 348.030959][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2049'. [ 348.035048][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2049'. [ 348.057690][ T24] rc_core: IR keymap rc-imon-pad not found [ 348.060568][ T24] Registered IR keymap rc-empty [ 348.062783][ T24] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 348.089792][ T24] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 348.152606][ T24] imon:send_packet: packet tx failed (-71) [ 348.195602][ T24] imon 9-1:155.0: remote input dev register failed [ 348.200001][ T24] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 348.264487][ T24] imon 9-1:155.0: unable to initialize intf0, err 0 [ 348.304639][ T24] imon:imon_probe: failed to initialize context! [ 348.307894][ T24] imon 9-1:155.0: unable to register, err -19 [ 348.337778][ T24] usb 9-1: USB disconnect, device number 23 [ 348.506567][T12583] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 348.518318][ T42] audit: type=1400 audit(1786448537.698:7439): avc: denied { write } for pid=12582 comm="syz.5.2051" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=39485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 348.540467][ T42] audit: type=1400 audit(1786448537.728:7440): avc: denied { add_name } for pid=12582 comm="syz.5.2051" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 348.560875][ T42] audit: type=1400 audit(1786448537.728:7441): avc: denied { create } for pid=12582 comm="syz.5.2051" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 348.735075][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2053'. [ 348.743063][T12588] IPv6: sit1: Disabled Multicast RS [ 349.228995][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2058'. [ 349.574942][ T5833] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 349.607912][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 349.725342][ T5833] usb 10-1: Using ep0 maxpacket: 32 [ 349.738308][ T5833] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 349.790620][ T5833] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 349.805929][T12618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12618 comm=syz.4.2063 [ 349.815793][ T5833] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 349.895353][ T5833] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.905422][ T5833] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 349.915943][ T5833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.921421][ T5833] usb 10-1: Product: syz [ 349.924278][ T5833] usb 10-1: Manufacturer: syz [ 349.927105][ T5833] usb 10-1: SerialNumber: syz [ 349.936576][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 349.962713][ T5833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input135 [ 350.170677][ T42] audit: type=1400 audit(1786448539.368:7442): avc: denied { append } for pid=12629 comm="syz.1.2068" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.181160][ T42] audit: type=1400 audit(1786448539.368:7443): avc: denied { listen } for pid=12603 comm="syz.5.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 350.226593][ T42] audit: type=1400 audit(1786448539.408:7444): avc: denied { accept } for pid=12603 comm="syz.5.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 350.266369][ T42] audit: type=1400 audit(1786448539.458:7445): avc: denied { execute } for pid=12629 comm="syz.1.2068" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.389069][ T5833] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 350.392716][ T5833] (id 0x00) [ 350.508836][ T5833] rc_core: IR keymap rc-imon-pad not found [ 350.512239][ T5833] Registered IR keymap rc-empty [ 350.520072][ T5833] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 350.533095][ T5833] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 350.729519][ T5833] imon:send_packet: packet tx failed (-71) [ 350.755146][ T5833] imon 10-1:155.0: remote input dev register failed [ 350.757821][ T5833] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 350.784958][ T56] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 350.848186][ T5833] imon 10-1:155.0: unable to initialize intf0, err 0 [ 350.851483][ T5833] imon:imon_probe: failed to initialize context! [ 350.891070][ T5833] imon 10-1:155.0: unable to register, err -19 [ 350.901224][ T5833] usb 10-1: USB disconnect, device number 20 [ 350.972730][ T56] usb 8-1: not running at top speed; connect to a high speed hub [ 350.979915][ T56] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 350.994351][ T56] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.011577][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.050848][ T56] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 351.064081][ T56] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 351.064352][T12657] __nla_validate_parse: 3 callbacks suppressed [ 351.064367][T12657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2077'. [ 351.067630][ T56] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 351.095366][ T56] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 351.101200][ T56] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 351.146823][ T56] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 351.152993][ T56] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 351.194500][ T56] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 351.224358][ T56] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 351.311158][ T56] usb 8-1: USB disconnect, device number 35 [ 351.368641][ T56] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 351.434766][ T56] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 351.441509][ T56] keyspan 8-1:1.0: device disconnected [ 351.535804][T12668] syzkaller1: entered promiscuous mode [ 351.537936][T12668] syzkaller1: entered allmulticast mode [ 351.549163][T12670] FAULT_INJECTION: forcing a failure. [ 351.549163][T12670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.562511][T12670] CPU: 0 UID: 0 PID: 12670 Comm: syz.1.2081 Not tainted syzkaller #0 PREEMPT(full) [ 351.562539][T12670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.562555][T12670] Call Trace: [ 351.562562][T12670] [ 351.562568][T12670] dump_stack_lvl+0x100/0x190 [ 351.562614][T12670] should_fail_ex.cold+0x5/0xa [ 351.562634][T12670] _copy_from_user+0x2e/0xd0 [ 351.562665][T12670] move_addr_to_kernel+0x65/0x170 [ 351.562724][T12670] __sys_connect+0xb5/0x170 [ 351.562742][T12670] ? __pfx___sys_connect+0x10/0x10 [ 351.562758][T12670] ? __fget_files+0x21f/0x3d0 [ 351.562783][T12670] ? __pfx_ksys_write+0x10/0x10 [ 351.562804][T12670] __x64_sys_connect+0x72/0xb0 [ 351.562820][T12670] ? lockdep_hardirqs_on+0x78/0x100 [ 351.562888][T12670] do_syscall_64+0x115/0x870 [ 351.562919][T12670] ? clear_bhb_loop+0x70/0xc0 [ 351.562942][T12670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.562961][T12670] RIP: 0033:0x7fbeb899e0d9 [ 351.562979][T12670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.562997][T12670] RSP: 002b:00007fbeb980d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 351.563017][T12670] RAX: ffffffffffffffda RBX: 00007fbeb8c25fa0 RCX: 00007fbeb899e0d9 [ 351.563028][T12670] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 351.563038][T12670] RBP: 00007fbeb980d090 R08: 0000000000000000 R09: 0000000000000000 [ 351.563047][T12670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.563057][T12670] R13: 00007fbeb8c26038 R14: 00007fbeb8c25fa0 R15: 00007ffeead37758 [ 351.563080][T12670] [ 351.569242][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2080'. [ 351.770030][T12678] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2083'. [ 351.801448][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2083'. [ 351.816636][T12678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2083'. [ 351.827064][ T42] audit: type=1400 audit(1786448541.028:7446): avc: denied { setopt } for pid=12675 comm="syz.1.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.074504][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'. [ 352.111284][ T42] audit: type=1400 audit(1786448541.298:7447): avc: denied { write } for pid=12679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.186102][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2084'. [ 352.324461][ T42] audit: type=1400 audit(1786448541.518:7448): avc: denied { write } for pid=12687 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.426666][ T34] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 352.521980][T12692] veth0: Caught tx_queue_len zero misconfig [ 352.524595][ T42] audit: type=1400 audit(1786448541.718:7449): avc: denied { write } for pid=12690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.604895][ T34] usb 10-1: device descriptor read/64, error -71 [ 352.638374][ T42] audit: type=1400 audit(1786448541.778:7450): avc: denied { write } for pid=12694 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.787399][ T42] audit: type=1400 audit(1786448541.978:7451): avc: denied { write } for pid=12700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.872651][ T34] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 353.065968][ T34] usb 10-1: device descriptor read/64, error -71 [ 353.176095][ T34] usb usb10-port1: attempt power cycle [ 353.512231][T12730] FAULT_INJECTION: forcing a failure. [ 353.512231][T12730] name failslab, interval 1, probability 0, space 0, times 0 [ 353.518835][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.1.2094 Not tainted syzkaller #0 PREEMPT(full) [ 353.518864][T12730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.518876][T12730] Call Trace: [ 353.518884][T12730] [ 353.518892][T12730] dump_stack_lvl+0x100/0x190 [ 353.518923][T12730] should_fail_ex.cold+0x5/0xa [ 353.518949][T12730] should_failslab+0xc2/0x120 [ 353.518977][T12730] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 353.519000][T12730] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 353.519028][T12730] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 353.519051][T12730] ? sock_alloc_inode+0x26/0x2c0 [ 353.519083][T12730] ? __pfx_sock_alloc_inode+0x10/0x10 [ 353.519111][T12730] sock_alloc_inode+0x26/0x2c0 [ 353.519138][T12730] ? __pfx_sock_alloc_inode+0x10/0x10 [ 353.519165][T12730] alloc_inode+0x68/0x250 [ 353.519194][T12730] sock_alloc+0x44/0x280 [ 353.519218][T12730] ? security_socket_create+0x7f/0x250 [ 353.519244][T12730] __sock_create+0xc2/0x860 [ 353.519264][T12730] ? find_held_lock+0x2b/0x80 [ 353.519285][T12730] mptcp_subflow_create_socket+0xec/0xa30 [ 353.519335][T12730] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 353.519355][T12730] ? avc_has_perm_noaudit+0x145/0x3b0 [ 353.519380][T12730] ? look_up_lock_class+0x55/0x120 [ 353.519410][T12730] __mptcp_nmpc_sk+0x17f/0x880 [ 353.519434][T12730] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 353.519457][T12730] ? __lock_acquire+0x49f/0x1a40 [ 353.519487][T12730] mptcp_connect+0x7e/0xaf0 [ 353.519513][T12730] __inet_stream_connect+0x208/0xfa0 [ 353.519568][T12730] ? __pfx___inet_stream_connect+0x10/0x10 [ 353.519595][T12730] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 353.519626][T12730] ? __pfx_inet_stream_connect+0x10/0x10 [ 353.519649][T12730] ? __local_bh_enable_ip+0x9e/0x120 [ 353.519673][T12730] ? __pfx_inet_stream_connect+0x10/0x10 [ 353.519697][T12730] inet_stream_connect+0x57/0xa0 [ 353.519725][T12730] __sys_connect_file+0x141/0x1a0 [ 353.519751][T12730] __sys_connect+0x141/0x170 [ 353.519773][T12730] ? __pfx___sys_connect+0x10/0x10 [ 353.519794][T12730] ? __fget_files+0x21f/0x3d0 [ 353.519826][T12730] ? __pfx_ksys_write+0x10/0x10 [ 353.519852][T12730] __x64_sys_connect+0x72/0xb0 [ 353.519873][T12730] ? lockdep_hardirqs_on+0x78/0x100 [ 353.519899][T12730] do_syscall_64+0x115/0x870 [ 353.519925][T12730] ? clear_bhb_loop+0x70/0xc0 [ 353.519950][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.519971][T12730] RIP: 0033:0x7fbeb899e0d9 [ 353.519990][T12730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.520009][T12730] RSP: 002b:00007fbeb980d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 353.520035][T12730] RAX: ffffffffffffffda RBX: 00007fbeb8c25fa0 RCX: 00007fbeb899e0d9 [ 353.520048][T12730] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 353.520060][T12730] RBP: 00007fbeb980d090 R08: 0000000000000000 R09: 0000000000000000 [ 353.520073][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.520085][T12730] R13: 00007fbeb8c26038 R14: 00007fbeb8c25fa0 R15: 00007ffeead37758 [ 353.520113][T12730] [ 353.520126][T12730] socket: no more sockets [ 353.553951][ T34] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 353.757903][T12734] tmpfs: Bad value for 'mpol' [ 353.795651][ T34] usb 10-1: device descriptor read/8, error -71 [ 354.244610][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2096'. [ 354.269700][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 354.275617][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'. [ 354.334889][ T34] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 354.440510][ T34] usb 10-1: device descriptor read/8, error -71 [ 354.589954][ T34] usb usb10-port1: unable to enumerate USB device [ 354.798070][T12746] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 354.827770][T12749] cramfs: checking physical address 0x000000002ae20000 for linear cramfs image [ 354.832965][T12749] cramfs: wrong magic [ 354.862110][T12749] cramfs: wrong magic [ 354.905913][T12753] loop2: detected capacity change from 0 to 7 [ 354.940698][T12753] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 354.968051][T12753] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 354.971149][T12753] Dev loop2: unable to read RDB block 7 [ 354.976414][T12753] loop2: unable to read partition table [ 354.984183][T12753] loop2: partition table beyond EOD, truncated [ 355.015913][T12753] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.111237][ T5132] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 355.117207][ T5132] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 355.121848][ T5132] Dev loop2: unable to read RDB block 7 [ 355.131584][ T5132] loop2: unable to read partition table [ 355.137046][ T5132] loop2: partition table beyond EOD, truncated [ 355.212249][T12762] FAULT_INJECTION: forcing a failure. [ 355.212249][T12762] name failslab, interval 1, probability 0, space 0, times 0 [ 355.253823][T12762] CPU: 3 UID: 0 PID: 12762 Comm: syz.1.2105 Not tainted syzkaller #0 PREEMPT(full) [ 355.254586][T12762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.254601][T12762] Call Trace: [ 355.254611][T12762] [ 355.254620][T12762] dump_stack_lvl+0x100/0x190 [ 355.254773][T12762] should_fail_ex.cold+0x5/0xa [ 355.254805][T12762] should_failslab+0xc2/0x120 [ 355.254886][T12762] kmem_cache_alloc_noprof+0x91/0x6a0 [ 355.254913][T12762] ? __pfx_map_id_range_down+0x10/0x10 [ 355.254988][T12762] ? security_inode_alloc+0x3b/0x2c0 [ 355.255074][T12762] security_inode_alloc+0x3b/0x2c0 [ 355.255157][T12762] inode_init_always_gfp+0xc77/0xfb0 [ 355.255189][T12762] alloc_inode+0x8e/0x250 [ 355.255266][T12762] sock_alloc+0x44/0x280 [ 355.255480][T12762] ? security_socket_create+0x7f/0x250 [ 355.255514][T12762] __sock_create+0xc2/0x860 [ 355.255582][T12762] ? find_held_lock+0x2b/0x80 [ 355.255670][T12762] mptcp_subflow_create_socket+0xec/0xa30 [ 355.255702][T12762] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 355.255723][T12762] ? avc_has_perm_noaudit+0x145/0x3b0 [ 355.255750][T12762] ? look_up_lock_class+0x55/0x120 [ 355.255782][T12762] __mptcp_nmpc_sk+0x17f/0x880 [ 355.255809][T12762] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 355.255835][T12762] ? __lock_acquire+0x49f/0x1a40 [ 355.255867][T12762] mptcp_connect+0x7e/0xaf0 [ 355.255895][T12762] __inet_stream_connect+0x208/0xfa0 [ 355.255932][T12762] ? __pfx___inet_stream_connect+0x10/0x10 [ 355.255959][T12762] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.255990][T12762] ? __pfx_inet_stream_connect+0x10/0x10 [ 355.256020][T12762] ? __local_bh_enable_ip+0x9e/0x120 [ 355.256051][T12762] ? __pfx_inet_stream_connect+0x10/0x10 [ 355.256078][T12762] inet_stream_connect+0x57/0xa0 [ 355.256109][T12762] __sys_connect_file+0x141/0x1a0 [ 355.256136][T12762] __sys_connect+0x141/0x170 [ 355.256159][T12762] ? __pfx___sys_connect+0x10/0x10 [ 355.256181][T12762] ? __fget_files+0x21f/0x3d0 [ 355.256214][T12762] ? __pfx_ksys_write+0x10/0x10 [ 355.256240][T12762] __x64_sys_connect+0x72/0xb0 [ 355.256262][T12762] ? lockdep_hardirqs_on+0x78/0x100 [ 355.256290][T12762] do_syscall_64+0x115/0x870 [ 355.256316][T12762] ? clear_bhb_loop+0x70/0xc0 [ 355.256348][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.256369][T12762] RIP: 0033:0x7fbeb899e0d9 [ 355.256389][T12762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.256414][T12762] RSP: 002b:00007fbeb980d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 355.256436][T12762] RAX: ffffffffffffffda RBX: 00007fbeb8c25fa0 RCX: 00007fbeb899e0d9 [ 355.256449][T12762] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 355.256461][T12762] RBP: 00007fbeb980d090 R08: 0000000000000000 R09: 0000000000000000 [ 355.256474][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.256486][T12762] R13: 00007fbeb8c26038 R14: 00007fbeb8c25fa0 R15: 00007ffeead37758 [ 355.256516][T12762] [ 355.515042][ T5528] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 355.526826][T12762] socket: no more sockets [ 355.696736][ T5528] usb 8-1: Using ep0 maxpacket: 8 [ 355.702039][ T5528] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.709039][ T5528] usb 8-1: config 16 has an invalid descriptor of length 197, skipping remainder of the config [ 355.732239][ T5528] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.750869][ T5528] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.873734][ T5528] usbtmc 8-1:16.0: bulk endpoints not found [ 355.959275][T12776] gadgetfs: bound to dummy_udc driver [ 356.201706][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 356.201725][ T42] audit: type=1326 audit(1786448545.398:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12780 comm="syz.5.2111" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe40b9e0d9 code=0x0 [ 356.414986][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 356.418507][ C2] gadgetfs: connected [ 356.474358][T12775] gadgetfs: suspended from state 3 [ 356.478515][T12775] gadgetfs: disconnected [ 357.131627][T12800] __nla_validate_parse: 3 callbacks suppressed [ 357.131648][T12800] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2116'. [ 357.326679][ T5812] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 357.451006][T12805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2117'. [ 357.514820][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 357.517943][ T5812] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 357.518424][T12807] FAULT_INJECTION: forcing a failure. [ 357.518424][T12807] name failslab, interval 1, probability 0, space 0, times 0 [ 357.529598][ T5812] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 357.530282][T12807] CPU: 0 UID: 0 PID: 12807 Comm: syz.5.2118 Not tainted syzkaller #0 PREEMPT(full) [ 357.530309][T12807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.530322][T12807] Call Trace: [ 357.530330][T12807] [ 357.530338][T12807] dump_stack_lvl+0x100/0x190 [ 357.530377][T12807] should_fail_ex.cold+0x5/0xa [ 357.530403][T12807] should_failslab+0xc2/0x120 [ 357.530431][T12807] kmem_cache_alloc_noprof+0x91/0x6a0 [ 357.530457][T12807] ? sk_prot_alloc+0x60/0x2a0 [ 357.530495][T12807] sk_prot_alloc+0x60/0x2a0 [ 357.530527][T12807] sk_alloc+0x36/0xe80 [ 357.530570][T12807] inet_create+0x3a0/0x1060 [ 357.530597][T12807] ? inet_create+0x94/0x1060 [ 357.530624][T12807] __sock_create+0x339/0x860 [ 357.530652][T12807] mptcp_subflow_create_socket+0xec/0xa30 [ 357.530682][T12807] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 357.530700][T12807] ? avc_has_perm_noaudit+0x145/0x3b0 [ 357.530725][T12807] ? look_up_lock_class+0x55/0x120 [ 357.530756][T12807] __mptcp_nmpc_sk+0x17f/0x880 [ 357.530785][T12807] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 357.530809][T12807] ? __lock_acquire+0x49f/0x1a40 [ 357.530842][T12807] mptcp_connect+0x7e/0xaf0 [ 357.530868][T12807] __inet_stream_connect+0x208/0xfa0 [ 357.530923][T12807] ? __pfx___inet_stream_connect+0x10/0x10 [ 357.530952][T12807] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 357.530985][T12807] ? __pfx_inet_stream_connect+0x10/0x10 [ 357.531014][T12807] ? __local_bh_enable_ip+0x9e/0x120 [ 357.531045][T12807] ? __pfx_inet_stream_connect+0x10/0x10 [ 357.531072][T12807] inet_stream_connect+0x57/0xa0 [ 357.531102][T12807] __sys_connect_file+0x141/0x1a0 [ 357.531128][T12807] __sys_connect+0x141/0x170 [ 357.531151][T12807] ? __pfx___sys_connect+0x10/0x10 [ 357.531172][T12807] ? __fget_files+0x21f/0x3d0 [ 357.531204][T12807] ? __pfx_ksys_write+0x10/0x10 [ 357.531229][T12807] __x64_sys_connect+0x72/0xb0 [ 357.531251][T12807] ? lockdep_hardirqs_on+0x78/0x100 [ 357.531277][T12807] do_syscall_64+0x115/0x870 [ 357.531303][T12807] ? clear_bhb_loop+0x70/0xc0 [ 357.531329][T12807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.531351][T12807] RIP: 0033:0x7efe40b9e0d9 [ 357.531376][T12807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.531395][T12807] RSP: 002b:00007efe41b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 357.531417][T12807] RAX: ffffffffffffffda RBX: 00007efe40e25fa0 RCX: 00007efe40b9e0d9 [ 357.531430][T12807] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 357.531443][T12807] RBP: 00007efe41b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 357.531455][T12807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.531466][T12807] R13: 00007efe40e26038 R14: 00007efe40e25fa0 R15: 00007ffe2e24abb8 [ 357.531495][T12807] [ 357.749093][ T5812] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 357.758036][T12809] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 357.765124][ T5812] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.769148][ T5812] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 357.783075][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.787683][ T5812] usb 6-1: Product: syz [ 357.790298][ T5812] usb 6-1: Manufacturer: syz [ 357.793399][ T5812] usb 6-1: SerialNumber: syz [ 357.818264][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 357.825126][ T5812] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input137 [ 357.934687][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2121'. [ 357.941857][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 357.980161][T12817] 9p: Bad value for 'rfdno' [ 357.998917][T12817] Attempt to restore checkpoint with obsolete wellknown handles [ 358.109241][ T42] audit: type=1400 audit(1786448547.308:7456): avc: denied { write } for pid=12816 comm="syz.4.2122" name="/" dev="9p" ino=78395267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.179195][ T5812] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 358.205882][ T5812] (id 0x00) [ 358.221481][ T42] audit: type=1400 audit(1786448547.308:7457): avc: denied { link } for pid=12816 comm="syz.4.2122" name="file1" dev="9p" ino=78395283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.259522][ T42] audit: type=1400 audit(1786448547.378:7458): avc: denied { write } for pid=12816 comm="syz.4.2122" name="/" dev="9p" ino=78395267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.271635][ T42] audit: type=1400 audit(1786448547.378:7459): avc: denied { create } for pid=12816 comm="syz.4.2122" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 358.321884][ T5812] rc_core: IR keymap rc-imon-pad not found [ 358.332492][ T5528] usb 8-1: USB disconnect, device number 36 [ 358.334058][ T5812] Registered IR keymap rc-empty [ 358.351559][ T5812] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 358.365532][ T5812] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 358.519054][ T5812] imon:send_packet: packet tx failed (-71) [ 358.584466][ T5812] imon 6-1:155.0: remote input dev register failed [ 358.588449][ T5812] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 358.633088][ T5812] imon 6-1:155.0: unable to initialize intf0, err 0 [ 358.654901][T12828] 9pnet_virtio: no channels available for device syz [ 358.672719][ T5812] imon:imon_probe: failed to initialize context! [ 358.678287][ T5812] imon 6-1:155.0: unable to register, err -19 [ 358.684159][ T42] audit: type=1400 audit(1786448547.858:7460): avc: denied { shutdown } for pid=12827 comm="syz.5.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 358.690396][ T5812] usb 6-1: USB disconnect, device number 14 [ 358.810061][ T42] audit: type=1400 audit(1786448547.998:7461): avc: denied { checkpoint_restore } for pid=12827 comm="syz.5.2125" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 359.270558][T12838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2127'. [ 359.362475][T12841] FAULT_INJECTION: forcing a failure. [ 359.362475][T12841] name failslab, interval 1, probability 0, space 0, times 0 [ 359.381371][T12841] CPU: 3 UID: 0 PID: 12841 Comm: syz.1.2129 Not tainted syzkaller #0 PREEMPT(full) [ 359.381403][T12841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.381415][T12841] Call Trace: [ 359.381423][T12841] [ 359.381431][T12841] dump_stack_lvl+0x100/0x190 [ 359.381463][T12841] should_fail_ex.cold+0x5/0xa [ 359.381488][T12841] should_failslab+0xc2/0x120 [ 359.381515][T12841] __kmalloc_noprof+0xfc/0x820 [ 359.381538][T12841] ? trace_kmem_cache_alloc+0xdd/0x100 [ 359.381570][T12841] ? lsm_blob_alloc+0x68/0x90 [ 359.381597][T12841] lsm_blob_alloc+0x68/0x90 [ 359.381618][T12841] security_sk_alloc+0x2d/0x290 [ 359.381646][T12841] sk_prot_alloc+0x1d1/0x2a0 [ 359.381706][T12841] sk_alloc+0x36/0xe80 [ 359.381730][T12841] inet_create+0x3a0/0x1060 [ 359.381759][T12841] ? inet_create+0x94/0x1060 [ 359.381788][T12841] __sock_create+0x339/0x860 [ 359.381812][T12841] mptcp_subflow_create_socket+0xec/0xa30 [ 359.381838][T12841] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 359.381858][T12841] ? avc_has_perm_noaudit+0x145/0x3b0 [ 359.381883][T12841] ? look_up_lock_class+0x55/0x120 [ 359.381912][T12841] __mptcp_nmpc_sk+0x17f/0x880 [ 359.381935][T12841] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 359.381958][T12841] ? __lock_acquire+0x49f/0x1a40 [ 359.381987][T12841] mptcp_connect+0x7e/0xaf0 [ 359.382013][T12841] __inet_stream_connect+0x208/0xfa0 [ 359.382061][T12841] ? __pfx___inet_stream_connect+0x10/0x10 [ 359.382089][T12841] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 359.382120][T12841] ? __pfx_inet_stream_connect+0x10/0x10 [ 359.382147][T12841] ? __local_bh_enable_ip+0x9e/0x120 [ 359.382176][T12841] ? __pfx_inet_stream_connect+0x10/0x10 [ 359.382200][T12841] inet_stream_connect+0x57/0xa0 [ 359.382228][T12841] __sys_connect_file+0x141/0x1a0 [ 359.382253][T12841] __sys_connect+0x141/0x170 [ 359.382274][T12841] ? __pfx___sys_connect+0x10/0x10 [ 359.382293][T12841] ? __fget_files+0x21f/0x3d0 [ 359.382324][T12841] ? __pfx_ksys_write+0x10/0x10 [ 359.382347][T12841] __x64_sys_connect+0x72/0xb0 [ 359.382367][T12841] ? lockdep_hardirqs_on+0x78/0x100 [ 359.382391][T12841] do_syscall_64+0x115/0x870 [ 359.382416][T12841] ? clear_bhb_loop+0x70/0xc0 [ 359.382439][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.382458][T12841] RIP: 0033:0x7fbeb899e0d9 [ 359.382477][T12841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.382495][T12841] RSP: 002b:00007fbeb980d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 359.382516][T12841] RAX: ffffffffffffffda RBX: 00007fbeb8c25fa0 RCX: 00007fbeb899e0d9 [ 359.382528][T12841] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 359.382540][T12841] RBP: 00007fbeb980d090 R08: 0000000000000000 R09: 0000000000000000 [ 359.382555][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.382567][T12841] R13: 00007fbeb8c26038 R14: 00007fbeb8c25fa0 R15: 00007ffeead37758 [ 359.382594][T12841] [ 359.872128][T12859] cifs: Unknown parameter 'echinterval' [ 359.981027][T12864] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 360.307184][T12882] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2141'. [ 360.371014][T12879] FAULT_INJECTION: forcing a failure. [ 360.371014][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 360.412019][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.5.2142 Not tainted syzkaller #0 PREEMPT(full) [ 360.412047][T12879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.412058][T12879] Call Trace: [ 360.412065][T12879] [ 360.412072][T12879] dump_stack_lvl+0x100/0x190 [ 360.412100][T12879] should_fail_ex.cold+0x5/0xa [ 360.412123][T12879] should_failslab+0xc2/0x120 [ 360.412147][T12879] __kmalloc_cache_noprof+0x91/0x6c0 [ 360.412166][T12879] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 360.412198][T12879] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 360.412226][T12879] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 360.412256][T12879] selinux_socket_post_create+0x368/0x7e0 [ 360.412282][T12879] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 360.412307][T12879] ? tcp_v4_init_sock+0x15/0xb0 [ 360.412350][T12879] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 360.412370][T12879] ? inet_create+0x962/0x1060 [ 360.412397][T12879] security_socket_post_create+0xaf/0x270 [ 360.412423][T12879] __sock_create+0x70b/0x860 [ 360.412447][T12879] mptcp_subflow_create_socket+0xec/0xa30 [ 360.412471][T12879] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 360.412489][T12879] ? avc_has_perm_noaudit+0x145/0x3b0 [ 360.412511][T12879] ? look_up_lock_class+0x55/0x120 [ 360.412538][T12879] __mptcp_nmpc_sk+0x17f/0x880 [ 360.412560][T12879] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 360.412580][T12879] ? __lock_acquire+0x49f/0x1a40 [ 360.412606][T12879] mptcp_connect+0x7e/0xaf0 [ 360.412629][T12879] __inet_stream_connect+0x208/0xfa0 [ 360.412658][T12879] ? __pfx___inet_stream_connect+0x10/0x10 [ 360.412681][T12879] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.412709][T12879] ? __pfx_inet_stream_connect+0x10/0x10 [ 360.412733][T12879] ? __local_bh_enable_ip+0x9e/0x120 [ 360.412758][T12879] ? __pfx_inet_stream_connect+0x10/0x10 [ 360.412780][T12879] inet_stream_connect+0x57/0xa0 [ 360.412804][T12879] __sys_connect_file+0x141/0x1a0 [ 360.412837][T12879] __sys_connect+0x141/0x170 [ 360.412856][T12879] ? __pfx___sys_connect+0x10/0x10 [ 360.412873][T12879] ? __fget_files+0x21f/0x3d0 [ 360.412898][T12879] ? __pfx_ksys_write+0x10/0x10 [ 360.412918][T12879] __x64_sys_connect+0x72/0xb0 [ 360.412936][T12879] ? lockdep_hardirqs_on+0x78/0x100 [ 360.412957][T12879] do_syscall_64+0x115/0x870 [ 360.412979][T12879] ? clear_bhb_loop+0x70/0xc0 [ 360.413000][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.413017][T12879] RIP: 0033:0x7efe40b9e0d9 [ 360.413036][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.413051][T12879] RSP: 002b:00007efe41b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 360.413073][T12879] RAX: ffffffffffffffda RBX: 00007efe40e25fa0 RCX: 00007efe40b9e0d9 [ 360.413084][T12879] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 360.413095][T12879] RBP: 00007efe41b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 360.413104][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.413114][T12879] R13: 00007efe40e26038 R14: 00007efe40e25fa0 R15: 00007ffe2e24abb8 [ 360.423271][T12879] [ 360.612255][T12887] binder: 12873:12887 ioctl c0306201 200000000200 returned -14 [ 360.783001][T12894] sit1: entered promiscuous mode [ 360.962672][T12886] binder: 12873:12886 ioctl c0306201 2000000004c0 returned -14 [ 360.967281][T12886] binder: 12873:12886 ioctl c0306201 2000000001c0 returned -14 [ 361.169169][T12897] input: syz0 as /devices/virtual/input/input139 [ 361.565541][T12919] veth0_to_bond: entered allmulticast mode [ 361.706994][T12920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12920 comm=syz.1.2153 [ 361.722575][T12921] netlink: 'syz.3.2154': attribute type 10 has an invalid length. [ 361.807313][T12923] FAULT_INJECTION: forcing a failure. [ 361.807313][T12923] name failslab, interval 1, probability 0, space 0, times 0 [ 361.816058][T12921] bond0: (slave wlan2): Enslaving as an active interface with an up link [ 361.846712][T12923] CPU: 2 UID: 0 PID: 12923 Comm: syz.5.2155 Not tainted syzkaller #0 PREEMPT(full) [ 361.846742][T12923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.846754][T12923] Call Trace: [ 361.846762][T12923] [ 361.846770][T12923] dump_stack_lvl+0x100/0x190 [ 361.846801][T12923] should_fail_ex.cold+0x5/0xa [ 361.846826][T12923] should_failslab+0xc2/0x120 [ 361.846852][T12923] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 361.846885][T12923] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 361.846915][T12923] kstrdup+0x51/0xe0 [ 361.846938][T12923] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 361.846963][T12923] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 361.846994][T12923] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 361.847025][T12923] selinux_socket_post_create+0x368/0x7e0 [ 361.847053][T12923] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 361.847081][T12923] ? tcp_v4_init_sock+0x15/0xb0 [ 361.847104][T12923] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 361.847124][T12923] ? inet_create+0x962/0x1060 [ 361.847153][T12923] security_socket_post_create+0xaf/0x270 [ 361.847180][T12923] __sock_create+0x70b/0x860 [ 361.847206][T12923] mptcp_subflow_create_socket+0xec/0xa30 [ 361.847232][T12923] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 361.847252][T12923] ? avc_has_perm_noaudit+0x145/0x3b0 [ 361.847275][T12923] ? look_up_lock_class+0x55/0x120 [ 361.847305][T12923] __mptcp_nmpc_sk+0x17f/0x880 [ 361.847347][T12923] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 361.847371][T12923] ? __lock_acquire+0x49f/0x1a40 [ 361.847400][T12923] mptcp_connect+0x7e/0xaf0 [ 361.847424][T12923] __inet_stream_connect+0x208/0xfa0 [ 361.847457][T12923] ? __pfx___inet_stream_connect+0x10/0x10 [ 361.847482][T12923] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.847511][T12923] ? __pfx_inet_stream_connect+0x10/0x10 [ 361.847537][T12923] ? __local_bh_enable_ip+0x9e/0x120 [ 361.847565][T12923] ? __pfx_inet_stream_connect+0x10/0x10 [ 361.847589][T12923] inet_stream_connect+0x57/0xa0 [ 361.847616][T12923] __sys_connect_file+0x141/0x1a0 [ 361.847640][T12923] __sys_connect+0x141/0x170 [ 361.847661][T12923] ? __pfx___sys_connect+0x10/0x10 [ 361.847680][T12923] ? __fget_files+0x21f/0x3d0 [ 361.847711][T12923] ? __pfx_ksys_write+0x10/0x10 [ 361.847735][T12923] __x64_sys_connect+0x72/0xb0 [ 361.847754][T12923] ? lockdep_hardirqs_on+0x78/0x100 [ 361.847777][T12923] do_syscall_64+0x115/0x870 [ 361.847802][T12923] ? clear_bhb_loop+0x70/0xc0 [ 361.847825][T12923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.847845][T12923] RIP: 0033:0x7efe40b9e0d9 [ 361.847863][T12923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.847885][T12923] RSP: 002b:00007efe41b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 361.847906][T12923] RAX: ffffffffffffffda RBX: 00007efe40e25fa0 RCX: 00007efe40b9e0d9 [ 361.847918][T12923] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 361.847930][T12923] RBP: 00007efe41b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 361.847940][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.847951][T12923] R13: 00007efe40e26038 R14: 00007efe40e25fa0 R15: 00007ffe2e24abb8 [ 361.847977][T12923] [ 362.143327][T12927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2156'. [ 362.279926][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2157'. [ 362.374994][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2157'. [ 362.544192][T12934] team0: entered allmulticast mode [ 362.571979][T12934] team_slave_0: entered allmulticast mode [ 362.596166][T12934] team_slave_1: entered allmulticast mode [ 362.652455][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 363.158497][ T42] audit: type=1400 audit(1786448552.368:7462): avc: denied { write } for pid=12953 comm="syz.3.2163" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 363.283089][T12963] program syz.3.2163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.384557][T12971] Failed to get privilege flags for destination (handle=0x2:0x1) [ 363.391210][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2167'. [ 363.405550][T12971] bond0: entered promiscuous mode [ 363.407918][T12971] bond_slave_0: entered promiscuous mode [ 363.410954][T12971] bond_slave_1: entered promiscuous mode [ 363.461576][T12971] gretap0: entered promiscuous mode [ 363.522878][T12971] hsr1: entered promiscuous mode [ 363.558030][ T5528] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 363.827272][ T5528] usb 6-1: Using ep0 maxpacket: 16 [ 363.850490][ T5528] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 363.857541][ T5528] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 363.902455][ T5528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.914213][ T5528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.951725][T12976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.027084][ T5528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.053234][ T5528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.065418][ T5528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.071827][ T5528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.078089][ T5528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.081531][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 364.107784][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 364.116333][ T5528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.146551][ T5528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 364.159788][ T5528] usb 6-1: SerialNumber: syz [ 364.191555][ T5528] usb 6-1: config 0 descriptor?? [ 364.201867][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2171'. [ 364.232102][ T5528] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input140 [ 364.439413][T12967] input: syz0 as /devices/virtual/input/input141 [ 364.500427][ T42] audit: type=1400 audit(1786448553.708:7463): avc: denied { accept } for pid=12986 comm="syz.4.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 364.596736][ T42] audit: type=1400 audit(1786448553.798:7464): avc: denied { ioctl } for pid=12984 comm="syz.3.2173" path="socket:[43295]" dev="sockfs" ino=43295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 364.597594][T12967] input: syz0 as /devices/virtual/input/input142 [ 364.725529][ T5117] bcm5974 6-1:0.0: could not read from device [ 364.839842][ T5117] bcm5974 6-1:0.0: could not read from device [ 364.892041][ T5117] bcm5974 6-1:0.0: could not read from device [ 364.912326][ T5528] usb 6-1: USB disconnect, device number 15 [ 364.934322][ T5117] bcm5974 6-1:0.0: could not read from device [ 364.942968][ T42] audit: type=1400 audit(1786448554.136:7465): avc: denied { mounton } for pid=12997 comm="syz.4.2177" path="/syzcgroup/unified/syz4" dev="pstore" ino=2690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 365.431748][T13004] gfs2: error -5 reading superblock [ 365.505072][T13006] FAULT_INJECTION: forcing a failure. [ 365.505072][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 365.575514][T13006] CPU: 1 UID: 0 PID: 13006 Comm: syz.1.2181 Not tainted syzkaller #0 PREEMPT(full) [ 365.575545][T13006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 365.575586][T13006] Call Trace: [ 365.575594][T13006] [ 365.575603][T13006] dump_stack_lvl+0x100/0x190 [ 365.575654][T13006] should_fail_ex.cold+0x5/0xa [ 365.575681][T13006] should_failslab+0xc2/0x120 [ 365.575708][T13006] __kmalloc_cache_noprof+0x91/0x6c0 [ 365.575730][T13006] ? subflow_create_ctx+0x9b/0x2e0 [ 365.575825][T13006] subflow_create_ctx+0x9b/0x2e0 [ 365.575855][T13006] subflow_ulp_init+0xc3/0x4f0 [ 365.575884][T13006] tcp_set_ulp+0x32e/0x7f0 [ 365.575956][T13006] mptcp_subflow_create_socket+0x385/0xa30 [ 365.575982][T13006] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 365.576002][T13006] ? avc_has_perm_noaudit+0x145/0x3b0 [ 365.576032][T13006] ? look_up_lock_class+0x55/0x120 [ 365.576070][T13006] __mptcp_nmpc_sk+0x17f/0x880 [ 365.576094][T13006] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 365.576117][T13006] ? __lock_acquire+0x49f/0x1a40 [ 365.576146][T13006] mptcp_connect+0x7e/0xaf0 [ 365.576172][T13006] __inet_stream_connect+0x208/0xfa0 [ 365.576212][T13006] ? __pfx___inet_stream_connect+0x10/0x10 [ 365.576237][T13006] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 365.576267][T13006] ? __pfx_inet_stream_connect+0x10/0x10 [ 365.576295][T13006] ? __local_bh_enable_ip+0x9e/0x120 [ 365.576327][T13006] ? __pfx_inet_stream_connect+0x10/0x10 [ 365.576353][T13006] inet_stream_connect+0x57/0xa0 [ 365.576381][T13006] __sys_connect_file+0x141/0x1a0 [ 365.576427][T13006] __sys_connect+0x141/0x170 [ 365.576456][T13006] ? __pfx___sys_connect+0x10/0x10 [ 365.576478][T13006] ? __fget_files+0x21f/0x3d0 [ 365.576511][T13006] ? __pfx_ksys_write+0x10/0x10 [ 365.576536][T13006] __x64_sys_connect+0x72/0xb0 [ 365.576557][T13006] ? lockdep_hardirqs_on+0x78/0x100 [ 365.576583][T13006] do_syscall_64+0x115/0x870 [ 365.576619][T13006] ? clear_bhb_loop+0x70/0xc0 [ 365.576644][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.576663][T13006] RIP: 0033:0x7fbeb899e0d9 [ 365.576683][T13006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.576703][T13006] RSP: 002b:00007fbeb980d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 365.576725][T13006] RAX: ffffffffffffffda RBX: 00007fbeb8c25fa0 RCX: 00007fbeb899e0d9 [ 365.576738][T13006] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 365.576750][T13006] RBP: 00007fbeb980d090 R08: 0000000000000000 R09: 0000000000000000 [ 365.576789][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.576802][T13006] R13: 00007fbeb8c26038 R14: 00007fbeb8c25fa0 R15: 00007ffeead37758 [ 365.576831][T13006] [ 365.609446][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 365.898551][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 366.478434][ T42] audit: type=1400 audit(1786448555.577:7466): avc: denied { execute } for pid=13031 comm="syz.4.2190" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.529722][T13032] trusted_key: encrypted_key: insufficient parameters specified [ 366.549005][T13039] FAULT_INJECTION: forcing a failure. [ 366.549005][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 366.554335][T13039] CPU: 2 UID: 0 PID: 13039 Comm: syz.1.2193 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.554367][T13039] Tainted: [L]=SOFTLOCKUP [ 366.554374][T13039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.554384][T13039] Call Trace: [ 366.554393][T13039] [ 366.554402][T13039] dump_stack_lvl+0x100/0x190 [ 366.554440][T13039] should_fail_ex.cold+0x5/0xa [ 366.554465][T13039] should_failslab+0xc2/0x120 [ 366.554489][T13039] kmem_cache_alloc_noprof+0x91/0x6a0 [ 366.554513][T13039] ? dst_alloc+0x99/0x1a0 [ 366.554562][T13039] dst_alloc+0x99/0x1a0 [ 366.554585][T13039] rt_dst_alloc+0x35/0x3a0 [ 366.554613][T13039] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 366.554650][T13039] ip_route_output_key_hash+0x118/0x2b0 [ 366.554677][T13039] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 366.554708][T13039] ? __lock_acquire+0x49f/0x1a40 [ 366.554736][T13039] tcp_v4_connect+0x86b/0x1b40 [ 366.554772][T13039] ? __pfx_tcp_v4_connect+0x10/0x10 [ 366.554800][T13039] ? __local_bh_enable_ip+0x9e/0x120 [ 366.554827][T13039] mptcp_connect+0x4c6/0xaf0 [ 366.554854][T13039] __inet_stream_connect+0x208/0xfa0 [ 366.554886][T13039] ? __pfx___inet_stream_connect+0x10/0x10 [ 366.554911][T13039] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 366.554940][T13039] ? __pfx_inet_stream_connect+0x10/0x10 [ 366.554965][T13039] ? __local_bh_enable_ip+0x9e/0x120 [ 366.554992][T13039] ? __pfx_inet_stream_connect+0x10/0x10 [ 366.555014][T13039] inet_stream_connect+0x57/0xa0 [ 366.555040][T13039] __sys_connect_file+0x141/0x1a0 [ 366.555064][T13039] __sys_connect+0x141/0x170 [ 366.555084][T13039] ? __pfx___sys_connect+0x10/0x10 [ 366.555102][T13039] ? __fget_files+0x21f/0x3d0 [ 366.555132][T13039] ? __pfx_ksys_write+0x10/0x10 [ 366.555156][T13039] __x64_sys_connect+0x72/0xb0 [ 366.555174][T13039] ? lockdep_hardirqs_on+0x78/0x100 [ 366.555198][T13039] do_syscall_64+0x115/0x870 [ 366.555221][T13039] ? clear_bhb_loop+0x70/0xc0 [ 366.555243][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.555262][T13039] RIP: 0033:0x7fbeb899e0d9 [ 366.555280][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.555297][T13039] RSP: 002b:00007fbeb980d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 366.555316][T13039] RAX: ffffffffffffffda RBX: 00007fbeb8c25fa0 RCX: 00007fbeb899e0d9 [ 366.555327][T13039] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 366.555338][T13039] RBP: 00007fbeb980d090 R08: 0000000000000000 R09: 0000000000000000 [ 366.555349][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.555360][T13039] R13: 00007fbeb8c26038 R14: 00007fbeb8c25fa0 R15: 00007ffeead37758 [ 366.555386][T13039] [ 366.593606][ T42] audit: type=1400 audit(1786448555.652:7467): avc: denied { write } for pid=13034 comm="syz.5.2191" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 366.629594][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 366.899532][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 366.946382][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.004164][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.013579][ T56] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 367.036247][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.066811][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.094339][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.131267][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.159447][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.188726][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.203013][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 367.206757][ T56] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.212830][ T56] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 367.218394][ T56] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 367.222941][ T56] usb 6-1: config 1 interface 0 has no altsetting 0 [ 367.230416][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.243438][ T56] usb 6-1: Product: syz [ 367.247257][T13044] netlink: 'syz.3.2192': attribute type 23 has an invalid length. [ 367.251192][ T56] usb 6-1: Manufacturer: syz [ 367.258487][ T56] usb 6-1: SerialNumber: syz [ 367.297810][T13047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 367.311128][T13047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 367.556164][T13047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.565713][T13047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.606594][T13047] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.751610][ T56] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 367.752703][T13059] CUSE: info not properly terminated [ 367.763511][ T56] usb 6-1: USB disconnect, device number 16 [ 368.316696][ T42] audit: type=1400 audit(1786448557.261:7468): avc: denied { execute } for pid=13077 comm="syz.4.2203" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=41786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 368.343717][T13080] __nla_validate_parse: 2 callbacks suppressed [ 368.343737][T13080] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2204'. [ 368.377361][ T42] audit: type=1800 audit(1786448557.346:7469): pid=13078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2203" name="[kvm-gmem]" dev="guest_memfd" ino=41786 res=0 errno=0 [ 368.523572][ T42] audit: type=1400 audit(1786448557.477:7470): avc: denied { map } for pid=13079 comm="syz.1.2204" path="pipe:[36554]" dev="pipefs" ino=36554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 368.636514][T13075] kvm: pic: non byte write [ 369.088394][T13101] Bluetooth: ISO socket layer initialized [ 369.415815][T13109] TCP: TCP_TX_DELAY enabled [ 369.420579][T13115] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2213'. [ 369.446523][T13115] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2213'. [ 369.446529][T13116] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2213'. [ 369.474880][ T42] audit: type=1400 audit(1786448558.375:7471): avc: denied { append } for pid=13112 comm="syz.4.2213" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 369.632213][T13123] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 369.803693][ T42] audit: type=1400 audit(1786448558.684:7472): avc: denied { create } for pid=13124 comm="syz.1.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 370.161581][ T42] audit: type=1400 audit(1786448559.011:7473): avc: denied { name_bind } for pid=13134 comm="syz.4.2220" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 370.256743][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2223'. [ 370.354037][ T5512] IPVS: starting estimator thread 0... [ 370.505309][T13148] IPVS: using max 31 ests per chain, 74400 per kthread [ 370.505390][T13152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2225'. [ 370.547496][T13152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2225'. [ 370.633870][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 370.636890][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 370.922858][T13167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.954103][T13167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.195109][ T847] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 371.291192][T13176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2235'. [ 371.512069][ T847] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 371.542691][ T847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 371.547840][ T847] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 371.614753][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.618729][ T847] usb 8-1: Product: syz [ 371.621661][ T847] usb 8-1: Manufacturer: syz [ 371.625395][ T847] usb 8-1: SerialNumber: syz [ 371.634889][ T847] usb 8-1: config 0 descriptor?? [ 371.671695][ T847] hub 8-1:0.0: bad descriptor, ignoring hub [ 371.738900][ T847] hub 8-1:0.0: probe with driver hub failed with error -5 [ 371.745810][ T847] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input144 [ 372.167612][T13193] binder: 13189:13193 ioctl c0306201 200000000480 returned -14 [ 372.183535][ T42] audit: type=1400 audit(1786448560.911:7474): avc: denied { append } for pid=13189 comm="syz.1.2240" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 372.739334][T13211] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 372.792797][T13211] netlink: Setting conntrack mark requires 'commit' flag. [ 372.796308][T13211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.996838][ T5833] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 373.077259][T13223] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 373.167795][ T5833] usb 10-1: device descriptor read/64, error -71 [ 373.423895][ T5833] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 373.465965][ T42] audit: type=1400 audit(1786448562.109:7475): avc: denied { map } for pid=13235 comm="syz.3.2254" path="socket:[45231]" dev="sockfs" ino=45231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 373.478601][ T42] audit: type=1400 audit(1786448562.109:7476): avc: denied { read accept } for pid=13235 comm="syz.3.2254" path="socket:[45231]" dev="sockfs" ino=45231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 373.495656][T13238] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 373.530427][ T42] audit: type=1400 audit(1786448562.174:7477): avc: denied { map } for pid=13235 comm="syz.3.2254" path="socket:[43673]" dev="sockfs" ino=43673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.541391][ T42] audit: type=1400 audit(1786448562.174:7478): avc: denied { accept } for pid=13235 comm="syz.3.2254" path="socket:[43673]" dev="sockfs" ino=43673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.594324][ T5833] usb 10-1: device descriptor read/64, error -71 [ 373.605193][T13243] openvswitch: netlink: IP tunnel dst address not specified [ 373.648412][T13243] comedi comedi3: s526: I/O base address not correctly aligned [ 373.710834][ T5833] usb usb10-port1: attempt power cycle [ 373.745197][T13251] __nla_validate_parse: 1 callbacks suppressed [ 373.745215][T13251] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2259'. [ 374.072158][ T42] audit: type=1400 audit(1786448562.670:7479): avc: denied { bind } for pid=13256 comm="syz.1.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 374.108798][ T5833] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 374.132225][ T5833] usb 10-1: device descriptor read/8, error -71 [ 374.411470][ T5833] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 374.437325][ T5528] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 374.449274][ T5833] usb 10-1: device descriptor read/8, error -71 [ 374.574867][ T5833] usb usb10-port1: unable to enumerate USB device [ 374.614418][ T5528] usb 6-1: device descriptor read/64, error -71 [ 374.714255][ T42] audit: type=1400 audit(1786448563.269:7480): avc: denied { write } for pid=13274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.898771][ T5528] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 374.933662][ T42] audit: type=1400 audit(1786448563.475:7481): avc: denied { write } for pid=13279 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.042784][T13283] binder: 13282:13283 ioctl 4018620d 0 returned -22 [ 375.047687][ T5528] usb 6-1: device descriptor read/64, error -71 [ 375.138810][ T42] audit: type=1400 audit(1786448563.672:7482): avc: denied { write } for pid=13284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.220232][ T5528] usb usb6-port1: attempt power cycle [ 375.259948][ T42] audit: type=1400 audit(1786448563.784:7483): avc: denied { write } for pid=13288 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.613331][ T5528] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 375.662087][ T5528] usb 6-1: device descriptor read/8, error -71 [ 375.814075][ T5890] usb 8-1: USB disconnect, device number 37 [ 375.909282][ T42] audit: type=1326 audit(1786448564.392:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.3.2268" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b8a99e0d9 code=0x0 [ 375.967634][ T5528] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 375.988908][ T5528] usb 6-1: device descriptor read/8, error -71 [ 376.030977][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'. [ 376.034985][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2269'. [ 376.081819][T13300] tipc: Resetting bearer [ 376.133846][ T5528] usb usb6-port1: unable to enumerate USB device [ 376.214832][T13300] syz_tun: entered promiscuous mode [ 376.220938][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'. [ 376.227398][T13300] syz_tun: left promiscuous mode [ 377.151337][T13323] IPv6: Can't replace route, no match found [ 377.287951][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 377.292793][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2279'. [ 377.601810][T13343] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2282'. [ 377.639212][T13345] syz_tun: entered allmulticast mode [ 377.640150][T13343] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 377.671262][T13344] syz_tun: left allmulticast mode [ 377.712515][T13343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13343 comm=syz.5.2282 [ 377.756779][T13349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2284'. [ 377.786056][T13343] gretap2: entered promiscuous mode [ 377.848426][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'. [ 378.148496][T13365] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2290'. [ 379.278871][T13381] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 379.278990][T13389] tmpfs: Bad value for 'mpol' [ 379.405492][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.432904][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.627475][T13396] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 379.639011][T13398] __nla_validate_parse: 2 callbacks suppressed [ 379.639032][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2300'. [ 379.652746][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2300'. [ 379.905030][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2302'. [ 379.906758][ T42] audit: type=1400 audit(1786448568.117:7485): avc: denied { mount } for pid=13401 comm="syz.1.2302" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 380.213881][T13409] MTDSB: Device #1 doesn't appear to exist [ 380.213881][T13409] [ 380.278190][ T42] audit: type=1400 audit(1786448568.472:7486): avc: denied { create } for pid=13411 comm="syz.5.2308" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 380.282385][ T5512] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 380.466136][ T42] audit: type=1400 audit(1786448568.641:7487): avc: denied { unlink } for pid=8623 comm="syz-executor" name="file0" dev="tmpfs" ino=1796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 380.484045][ T5512] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.484073][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 380.484097][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 380.484110][T13420] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 380.484130][T13420] iwpm_mapping_info_cb: Unable to parse nlmsg [ 380.540512][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2310'. [ 380.540547][T13422] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2310'. [ 380.561812][ T5512] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.570705][ T5512] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.575984][ T5512] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.582852][ T5512] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.592817][ T5512] usb 9-1: config 0 descriptor?? [ 380.752722][ T29] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 380.922785][ T42] audit: type=1400 audit(1786448569.081:7488): avc: denied { getopt } for pid=13432 comm="syz.5.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.963245][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 380.968942][ T29] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 381.002039][ T29] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 381.006704][ T29] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 381.057053][ T29] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.079358][ T29] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 381.103466][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.109703][ T29] usb 8-1: Product: syz [ 381.112592][ T42] audit: type=1400 audit(1786448569.268:7489): avc: denied { create } for pid=13434 comm="syz.5.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.116860][ T29] usb 8-1: Manufacturer: syz [ 381.123934][ T29] usb 8-1: SerialNumber: syz [ 381.124107][ T42] audit: type=1400 audit(1786448569.268:7490): avc: denied { bind } for pid=13434 comm="syz.5.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.155875][ T42] audit: type=1400 audit(1786448569.268:7491): avc: denied { write } for pid=13434 comm="syz.5.2314" path="socket:[46271]" dev="sockfs" ino=46271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.171569][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 381.191218][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input146 [ 381.296568][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.298084][ T42] audit: type=1400 audit(1786448569.436:7492): avc: denied { setopt } for pid=13403 comm="syz.4.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.312302][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.404529][ T29] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 381.409972][ T29] (id 0x00) [ 381.432391][ T42] audit: type=1400 audit(1786448569.567:7493): avc: denied { mount } for pid=13443 comm="syz.1.2316" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 381.466636][ T5512] usbhid 9-1:0.0: can't add hid device: -71 [ 381.486425][ T5512] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 381.554548][ T29] rc_core: IR keymap rc-imon-pad not found [ 381.593433][ T29] Registered IR keymap rc-empty [ 381.604418][ T29] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 381.622405][ T5512] usb 9-1: USB disconnect, device number 24 [ 381.630360][ T29] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 381.662021][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 381.680805][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input147 [ 381.709078][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2317'. [ 381.748073][T13449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.752483][ T29] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:38> initialized [ 381.914582][ T42] audit: type=1400 audit(1786448570.016:7494): avc: denied { unmount } for pid=12276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 381.968180][T13410] imon:send_packet: task interrupted [ 381.970749][T13410] imon:send_packet: packet tx failed (-512) [ 381.990414][T13410] imon:vfd_write: send packet #0 failed [ 382.376875][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 382.434720][ T5841] usb 8-1: USB disconnect, device number 38 [ 382.557474][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 382.565254][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 382.606159][ T9] usb 9-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.631765][ T9] usb 9-1: config 1 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.636652][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 382.662512][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.665952][ T9] usb 9-1: Product: syz [ 382.667527][ T9] usb 9-1: Manufacturer: syz [ 382.669465][ T9] usb 9-1: SerialNumber: syz [ 383.032752][ T5737] Bluetooth: hci2: link tx timeout [ 383.040919][ T5737] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 383.113351][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input149 [ 383.138285][ T5117] bcm5974 9-1:1.0: could not read from device [ 383.189366][ T9] usb 9-1: USB disconnect, device number 25 [ 384.841026][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 385.039936][ T9] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 385.054483][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 385.071300][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 385.125295][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.129807][ T9] usb 6-1: Product: syz [ 385.166429][ T9] usb 6-1: Manufacturer: syz [ 385.179982][ T9] usb 6-1: SerialNumber: syz [ 385.196161][T13498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.262714][T13498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.279881][ T9] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 385.297617][ T9] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 385.302825][T13471] Bluetooth: hci2: command 0x0406 tx timeout [ 385.315118][ T9] usbserial_generic 6-1:1.0: generic converter detected [ 385.319010][ T9] usb 6-1: generic converter now attached to ttyUSB0 [ 385.363389][T13512] »»»»»»: renamed from vlan0 (while UP) [ 385.413106][T13512] validate_nla: 7 callbacks suppressed [ 385.413125][T13512] netlink: 'syz.5.2337': attribute type 1 has an invalid length. [ 385.526830][T13514] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 385.606919][ T5812] usb 6-1: USB disconnect, device number 21 [ 385.647569][ T5812] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 385.726481][ T5812] usbserial_generic 6-1:1.0: device disconnected [ 386.599866][T13548] netlink: 'syz.1.2348': attribute type 1 has an invalid length. [ 386.603616][T13548] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2348'. [ 386.618237][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 386.622166][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 386.672689][ T5841] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 386.755130][ T5739] Bluetooth: hci2: unexpected cc 0x2029 length: 100 > 1 [ 386.765689][ T5739] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 386.864710][T13555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 386.924559][T13555] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 386.929774][T13566] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 386.933023][ T5841] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 386.945489][T13567] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 387.037416][ T5841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.068089][ T5841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.072698][ T5841] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.081230][ T5841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.095112][ T5841] usb 10-1: config 0 descriptor?? [ 387.237829][T13555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.264560][T13555] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 387.370942][T13574] binder: 13573:13574 ioctl c0306201 200000000080 returned -14 [ 387.386474][T13555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.398450][T13574] binder: 13573:13574 ioctl c0306201 2000000003c0 returned -14 [ 387.423581][T13555] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 387.848172][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.860871][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.872750][T13584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=13584 comm=syz.1.2358 [ 387.986378][ T5841] usbhid 10-1:0.0: can't add hid device: -71 [ 387.990868][ T5841] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 388.003792][ T5841] usb 10-1: USB disconnect, device number 29 [ 388.521365][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 388.526481][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 388.696933][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2363'. [ 388.791544][T13600] netlink: 'syz.5.2363': attribute type 1 has an invalid length. [ 388.831322][T13600] nbd: error processing sock list [ 388.854054][T13619] xt_hashlimit: size too large, truncated to 1048576 [ 388.889496][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 388.893808][T13622] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.933972][T13623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2370'. [ 388.972954][T13600] netlink: 'syz.5.2363': attribute type 34 has an invalid length. [ 388.997274][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2363'. [ 389.052546][T13609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=13609 comm=syz.5.2363 [ 389.072597][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 389.172930][T13619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13619 comm=syz.1.2370 [ 389.245373][T13600] bond5: option lacp_strict: invalid value (16) [ 389.297761][T13600] bond5 (unregistering): Released all slaves [ 389.518726][ T56] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 389.649291][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 389.649310][ T42] audit: type=1400 audit(1786448577.231:7502): avc: denied { view } for pid=13639 comm="syz.1.2375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 389.691712][T13640] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 389.737446][ T56] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.738401][ T56] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.738424][ T56] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.738440][ T56] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 389.738467][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.757638][ T56] usb 9-1: config 0 descriptor?? [ 389.959226][T13660] overlayfs: statfs failed on './file0' [ 389.968499][ T42] audit: type=1400 audit(1786448577.540:7503): avc: denied { getattr } for pid=13659 comm="syz.1.2379" name="/" dev="9p" ino=78395267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 390.547057][ T56] usbhid 9-1:0.0: can't add hid device: -71 [ 390.551143][ T56] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 390.589768][ T56] usb 9-1: USB disconnect, device number 26 [ 390.853935][T13673] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 390.860265][T13673] UDF-fs: Scanning with blocksize 2048 failed [ 390.896804][T13673] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 390.900164][T13673] UDF-fs: Scanning with blocksize 4096 failed [ 391.250316][ T42] audit: type=1400 audit(1786448578.757:7504): avc: denied { mounton } for pid=13688 comm="syz.4.2390" path="/syzcgroup/unified/syz4" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 391.453141][T13693] IPVS: Scheduler module ip_vs_sip not found [ 391.757002][T13690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.325942][ T42] audit: type=1400 audit(1786448579.730:7505): avc: denied { map } for pid=13711 comm="syz.1.2397" path="socket:[46769]" dev="sockfs" ino=46769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.336584][ T42] audit: type=1400 audit(1786448579.758:7506): avc: denied { read } for pid=13711 comm="syz.1.2397" path="socket:[46769]" dev="sockfs" ino=46769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.483274][T13690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.845713][T13690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.930050][T13721] __nla_validate_parse: 4 callbacks suppressed [ 392.930070][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2401'. [ 392.949034][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'. [ 393.236084][ T42] audit: type=1400 audit(1786448580.582:7507): avc: denied { mounton } for pid=13722 comm="syz.3.2402" path="/555/debug/dri/vgem/name" dev="debugfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 393.345723][T13690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.174298][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.207157][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.216692][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.229402][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.917811][ T42] audit: type=1400 audit(1786448582.182:7508): avc: denied { accept } for pid=13750 comm="syz.1.2409" path=0069214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 395.045663][T13751] kAFS: unable to lookup cell 'syz1' [ 395.111467][T13772] overlay: Bad value for 'workdir' [ 395.264849][ T5132] pmem0: [POWERTEC] [ 395.290517][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2416'. [ 395.337188][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2416'. [ 395.375703][T13776] netlink: 'syz.5.2416': attribute type 15 has an invalid length. [ 395.379096][T13776] netlink: 'syz.5.2416': attribute type 18 has an invalid length. [ 395.831971][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'. [ 395.851079][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 395.980247][ T5890] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 396.162720][ T5890] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 396.169434][ T5890] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 396.179299][ T5890] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 396.194361][ T42] audit: type=1400 audit(1786448583.361:7509): avc: denied { transition } for pid=13792 comm="syz.5.2424" path="/370/file1" dev="tmpfs" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 396.215990][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.216018][ T5890] usb 9-1: Product: syz [ 396.216031][ T5890] usb 9-1: Manufacturer: syz [ 396.216043][ T5890] usb 9-1: SerialNumber: syz [ 396.255675][T13787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 396.269261][ T42] audit: type=1400 audit(1786448583.361:7510): avc: denied { entrypoint } for pid=13792 comm="syz.5.2424" path="/370/file1" dev="tmpfs" ino=1972 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 396.307521][T13787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 396.309331][ T42] audit: type=1400 audit(1786448583.361:7511): avc: denied { noatsecure } for pid=13792 comm="syz.5.2424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 396.325938][ T5890] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 396.348578][ T5890] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 396.355295][ T5890] usbserial_generic 9-1:1.0: generic converter detected [ 396.363597][T13799] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 396.377962][ T42] audit: type=1400 audit(1786448583.548:7512): avc: denied { relabelto } for pid=13794 comm="syz.3.2421" name="557" dev="tmpfs" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 396.405034][ T42] audit: type=1400 audit(1786448583.548:7513): avc: denied { associate } for pid=13794 comm="syz.3.2421" name="557" dev="tmpfs" ino=3044 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 396.440406][ T5890] usb 9-1: generic converter now attached to ttyUSB0 [ 396.632845][ T34] usb 9-1: USB disconnect, device number 27 [ 396.653875][ T34] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 396.675374][ T34] usbserial_generic 9-1:1.0: device disconnected [ 396.781999][ T42] audit: type=1400 audit(1786448583.904:7514): avc: denied { write } for pid=5732 comm="syz-executor" name="557" dev="tmpfs" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 396.813467][ T42] audit: type=1400 audit(1786448583.904:7515): avc: denied { remove_name } for pid=5732 comm="syz-executor" name="file1" dev="tmpfs" ino=3049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 396.833033][ T42] audit: type=1400 audit(1786448583.932:7516): avc: denied { write } for pid=5732 comm="syz-executor" name="557" dev="tmpfs" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 396.852554][ T42] audit: type=1400 audit(1786448583.932:7517): avc: denied { write } for pid=5732 comm="syz-executor" name="557" dev="tmpfs" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 396.867699][ T42] audit: type=1400 audit(1786448583.932:7518): avc: denied { write } for pid=5732 comm="syz-executor" name="557" dev="tmpfs" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 397.275279][T13817] ip_tables: iptables: counters copy to user failed while replacing table [ 398.126063][ T5528] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 398.198089][T13841] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 398.203374][T13841] bond1: entered allmulticast mode [ 398.219055][T13842] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 398.387375][ T5528] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 398.414553][T13841] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 398.421568][ T5528] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 398.446686][ T5528] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 398.456496][ T5528] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.456525][ T5528] usb 8-1: Product: syz [ 398.456539][ T5528] usb 8-1: Manufacturer: syz [ 398.456552][ T5528] usb 8-1: SerialNumber: syz [ 398.467489][ T5528] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 398.508197][ T5528] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 398.520677][ T5528] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 398.783868][T13858] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2445'. [ 399.404745][T13859] No source specified [ 399.602910][ T5833] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 399.815437][ T5833] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 399.836997][ T5833] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 399.864048][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.883552][ T5833] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.936900][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.953941][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 399.962195][ T5833] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 399.968147][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.974937][ T5833] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.984968][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.992619][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 400.008315][ T5833] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 400.013890][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 400.022654][ T5833] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.031555][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 400.039683][ T5833] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 400.054306][ T5833] usb 6-1: string descriptor 0 read error: -22 [ 400.060690][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.123097][ T5833] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 400.149972][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 401.015697][T13837] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 401.038655][T13837] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 401.066207][T13837] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 401.073814][T13837] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 401.087112][ T5528] usb 8-1: USB disconnect, device number 39 [ 401.114089][ T5528] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 401.149184][ T5528] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 401.155838][ T5528] ti_usb_3410_5052 8-1:2.0: device disconnected [ 401.163086][T13899] bond4 (unregistering): Released all slaves [ 402.160610][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 402.160628][ T42] audit: type=1400 audit(1786448588.966:7526): avc: denied { create } for pid=13927 comm="syz.5.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 402.571343][ T9] usb 6-1: USB disconnect, device number 22 [ 402.584899][ T42] audit: type=1400 audit(1786448589.350:7527): avc: denied { ioctl } for pid=13942 comm="syz.3.2470" path="socket:[49388]" dev="sockfs" ino=49388 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 402.636062][ T42] audit: type=1400 audit(1786448589.406:7528): avc: denied { write } for pid=13942 comm="syz.3.2470" path="socket:[49388]" dev="sockfs" ino=49388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 402.915620][T13974] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 402.923750][T13974] overlayfs: overlapping lowerdir path [ 403.061576][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 403.089933][T13979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2479'. [ 403.131041][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 403.150134][ T5885] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.155070][ T5885] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.165202][T13979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2479'. [ 403.191870][T13901] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.221881][T13901] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.577173][T13994] netlink: 'syz.4.2484': attribute type 1 has an invalid length. [ 404.147583][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'. [ 404.151862][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2489'. [ 404.604836][T14014] syz.1.2492: vmalloc error: size 4294959104, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 404.639242][T14014] CPU: 0 UID: 0 PID: 14014 Comm: syz.1.2492 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.639277][T14014] Tainted: [L]=SOFTLOCKUP [ 404.639286][T14014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 404.639310][T14014] Call Trace: [ 404.639318][T14014] [ 404.639327][T14014] dump_stack_lvl+0x100/0x190 [ 404.639381][T14014] warn_alloc.cold+0x94/0xa8 [ 404.639406][T14014] ? __pfx_warn_alloc+0x10/0x10 [ 404.639430][T14014] ? irqentry_exit+0x24d/0xa00 [ 404.639544][T14014] ? vb2_vmalloc_alloc+0x135/0x410 [ 404.639610][T14014] ? __vmalloc_node_range_noprof+0x117/0x1630 [ 404.639645][T14014] ? vb2_vmalloc_alloc+0x135/0x410 [ 404.639667][T14014] __vmalloc_node_range_noprof+0x136c/0x1630 [ 404.639706][T14014] ? vb2_vmalloc_alloc+0x135/0x410 [ 404.639733][T14014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 404.639766][T14014] ? kasan_save_track+0x14/0x30 [ 404.639790][T14014] ? __kasan_kmalloc+0xaa/0xb0 [ 404.639814][T14014] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 404.639835][T14014] ? vb2_vmalloc_alloc+0x135/0x410 [ 404.639854][T14014] vmalloc_user_noprof+0x9e/0xe0 [ 404.639882][T14014] ? vb2_vmalloc_alloc+0x135/0x410 [ 404.639902][T14014] vb2_vmalloc_alloc+0x135/0x410 [ 404.639920][T14014] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 404.639942][T14014] __vb2_queue_alloc+0x8d5/0x1160 [ 404.639987][T14014] vb2_core_create_bufs+0x5fa/0xa30 [ 404.640021][T14014] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 404.640056][T14014] ? trace_contention_end+0x126/0x160 [ 404.640084][T14014] ? __mutex_lock+0x26d/0x1bd0 [ 404.640114][T14014] vb2_create_bufs+0x40c/0x830 [ 404.640146][T14014] ? __pfx_vb2_create_bufs+0x10/0x10 [ 404.640174][T14014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 404.640204][T14014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 404.640232][T14014] v4l_create_bufs+0x17d/0x270 [ 404.640259][T14014] __video_do_ioctl+0xb2a/0xdf0 [ 404.640291][T14014] ? __might_fault+0xc5/0x140 [ 404.640315][T14014] ? __pfx___video_do_ioctl+0x10/0x10 [ 404.640349][T14014] video_usercopy+0x47a/0x1730 [ 404.640376][T14014] ? __pfx___video_do_ioctl+0x10/0x10 [ 404.640402][T14014] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 404.640443][T14014] ? __pfx_video_usercopy+0x10/0x10 [ 404.640485][T14014] v4l2_ioctl+0x1bd/0x250 [ 404.640521][T14014] ? __pfx_v4l2_ioctl+0x10/0x10 [ 404.640549][T14014] __x64_sys_ioctl+0x18e/0x210 [ 404.640586][T14014] do_syscall_64+0x115/0x870 [ 404.640619][T14014] ? clear_bhb_loop+0x70/0xc0 [ 404.640644][T14014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.640664][T14014] RIP: 0033:0x7fbeb899e0d9 [ 404.640686][T14014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.640708][T14014] RSP: 002b:00007fbeb980d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.640732][T14014] RAX: ffffffffffffffda RBX: 00007fbeb8c25fa0 RCX: 00007fbeb899e0d9 [ 404.640746][T14014] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000004 [ 404.640761][T14014] RBP: 00007fbeb8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 404.640775][T14014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.640788][T14014] R13: 00007fbeb8c26038 R14: 00007fbeb8c25fa0 R15: 00007ffeead37758 [ 404.640818][T14014] [ 404.640887][T14014] Mem-Info: [ 404.922542][T14014] active_anon:42572 inactive_anon:6 isolated_anon:0 [ 404.922542][T14014] active_file:86 inactive_file:61073 isolated_file:0 [ 404.922542][T14014] unevictable:1000 dirty:49 writeback:0 [ 404.922542][T14014] slab_reclaimable:8564 slab_unreclaimable:78587 [ 404.922542][T14014] mapped:26129 shmem:28314 pagetables:4031 [ 404.922542][T14014] sec_pagetables:299 bounce:0 [ 404.922542][T14014] kernel_misc_reclaimable:0 [ 404.922542][T14014] free:362763 free_pcp:17068 free_cma:0 [ 404.948327][T14014] Node 0 active_anon:162364kB inactive_anon:24kB active_file:344kB inactive_file:243960kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100308kB dirty:196kB writeback:0kB shmem:104412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15232kB pagetables:6708kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 404.982788][T14014] Node 1 active_anon:7924kB inactive_anon:0kB active_file:0kB inactive_file:332kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:4208kB dirty:0kB writeback:0kB shmem:8844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:384kB pagetables:9416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 405.015101][T14014] Node 0 DMA free:5240kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6236kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:388kB local_pcp:8kB free_cma:0kB [ 405.043523][T14014] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 405.046140][T14014] Node 0 DMA32 free:34204kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:156108kB inactive_anon:24kB active_file:344kB inactive_file:243960kB unevictable:2000kB writepending:196kB zspages:828kB present:2080628kB managed:1255328kB mlocked:0kB bounce:0kB free_pcp:22728kB local_pcp:6784kB free_cma:0kB [ 405.077169][T14014] lowmem_reserve[]: 0 0 0 0 0 [ 405.080034][T14014] Node 1 Normal free:1388448kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7924kB inactive_anon:0kB active_file:0kB inactive_file:332kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:48316kB local_pcp:12116kB free_cma:0kB [ 405.112360][T14014] lowmem_reserve[]: 0 0 0 0 0 [ 405.115189][T14014] Node 0 DMA: 46*4kB (UM) 32*8kB (UM) 35*16kB (UM) 25*32kB (UM) 13*64kB (M) 5*128kB (M) 2*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 5320kB [ 405.132038][T14014] Node 0 DMA32: 15*4kB (UME) 148*8kB (UME) 64*16kB (UME) 139*32kB (UME) 19*64kB (UME) 16*128kB (UME) 7*256kB (UME) 6*512kB (M) 11*1024kB (UM) 4*2048kB (UM) 0*4096kB = 34300kB [ 405.141975][T14014] Node 1 Normal: 3*4kB (UME) 2*8kB (ME) 2*16kB (UM) 2*32kB (M) 2*64kB (UM) 3*128kB (UME) 3*256kB (UM) 93*512kB (U) 186*1024kB (UME) 7*2048kB (UME) 275*4096kB (UM) = 1380220kB [ 405.153063][T14014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.159059][T14014] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 405.165601][T14014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.174927][T14014] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 405.181288][T14014] 89477 total pagecache pages [ 405.186315][T14014] 8 pages in swap cache [ 405.188954][T14014] Free swap = 124632kB [ 405.192185][T14014] Total swap = 124996kB [ 405.195285][T14014] 1048443 pages RAM [ 405.197879][T14014] 0 pages HighMem/MovableOnly [ 405.201053][T14014] 285300 pages reserved [ 405.206649][T14014] 0 pages cma reserved [ 405.225910][T14024] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 405.257324][T14024] [ 405.273704][T14024] ====================================================== [ 405.278072][T14024] WARNING: possible circular locking dependency detected [ 405.285040][T14024] syzkaller #0 Tainted: G L [ 405.295870][T14024] ------------------------------------------------------ [ 405.300609][T14024] syz.5.2496/14024 is trying to acquire lock: [ 405.304646][T14024] ffff888061f52450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 405.310112][T14024] [ 405.310112][T14024] but task is already holding lock: [ 405.314845][T14024] ffff8880349ab920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 405.323101][T14024] [ 405.323101][T14024] which lock already depends on the new lock. [ 405.323101][T14024] [ 405.330349][T14024] [ 405.330349][T14024] the existing dependency chain (in reverse order) is: [ 405.336394][T14024] [ 405.336394][T14024] -> #6 (&common->filesem){++++}-{4:4}: [ 405.341275][T14024] lock_acquire+0x1b9/0x370 [ 405.343035][T14029] ip6erspan0: entered promiscuous mode [ 405.344384][T14024] down_read+0x99/0x4c0 [ 405.344424][T14024] fsg_show_file+0x20/0x180 [ 405.353748][T14024] configfs_read_iter+0x426/0x6f0 [ 405.357259][T14024] __kernel_read+0x397/0xad0 [ 405.360449][T14024] integrity_kernel_read+0x7e/0xb0 [ 405.364037][T14024] ima_calc_file_hash_tfm+0x25e/0x350 [ 405.367963][T14024] ima_calc_file_hash+0x1e3/0x380 [ 405.371440][T14024] ima_collect_measurement+0x94f/0xb30 [ 405.375149][T14024] process_measurement+0xdfe/0x2350 [ 405.378750][T14024] ima_file_check+0xc3/0x110 [ 405.381985][T14024] security_file_post_open+0xc4/0x210 [ 405.385819][T14024] path_openat+0x985/0x4280 [ 405.389215][T14024] do_file_open+0x20e/0x430 [ 405.392510][T14024] do_sys_openat2+0x10f/0x1e0 [ 405.395939][T14024] __x64_sys_openat+0x12d/0x210 [ 405.399347][T14024] do_syscall_64+0x115/0x870 [ 405.402686][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.407124][T14024] [ 405.407124][T14024] -> #5 (&p->frag_sem){++++}-{4:4}: [ 405.411811][T14024] lock_acquire+0x1b9/0x370 [ 405.415076][T14024] down_read+0x99/0x4c0 [ 405.418110][T14024] configfs_read_iter+0x346/0x6f0 [ 405.421710][T14024] __kernel_read+0x397/0xad0 [ 405.427065][T14024] integrity_kernel_read+0x7e/0xb0 [ 405.430587][T14024] ima_calc_file_hash_tfm+0x25e/0x350 [ 405.434380][T14024] ima_calc_file_hash+0x1e3/0x380 [ 405.437902][T14024] ima_collect_measurement+0x94f/0xb30 [ 405.442547][T14024] process_measurement+0xdfe/0x2350 [ 405.446267][T14024] ima_file_check+0xc3/0x110 [ 405.449649][T14024] security_file_post_open+0xc4/0x210 [ 405.453694][T14024] path_openat+0x985/0x4280 [ 405.456970][T14024] do_file_open+0x20e/0x430 [ 405.460249][T14024] do_sys_openat2+0x10f/0x1e0 [ 405.463601][T14024] __x64_sys_openat+0x12d/0x210 [ 405.467028][T14024] do_syscall_64+0x115/0x870 [ 405.470447][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.475047][T14024] [ 405.475047][T14024] -> #4 (&buffer->mutex){+.+.}-{4:4}: [ 405.480811][T14024] lock_acquire+0x1b9/0x370 [ 405.484980][T14024] __mutex_lock+0x1a4/0x1bd0 [ 405.488494][T14024] configfs_read_iter+0x79/0x6f0 [ 405.491988][T14024] __kernel_read+0x397/0xad0 [ 405.495439][T14024] integrity_kernel_read+0x7e/0xb0 [ 405.498979][T14024] ima_calc_file_hash_tfm+0x25e/0x350 [ 405.503617][T14024] ima_calc_file_hash+0x1e3/0x380 [ 405.507060][T14024] ima_collect_measurement+0x94f/0xb30 [ 405.511662][T14024] process_measurement+0xdfe/0x2350 [ 405.516225][T14024] ima_file_check+0xc3/0x110 [ 405.519436][T14024] security_file_post_open+0xc4/0x210 [ 405.523134][T14024] path_openat+0x985/0x4280 [ 405.526723][T14024] do_file_open+0x20e/0x430 [ 405.531748][T14024] do_sys_openat2+0x10f/0x1e0 [ 405.535199][T14024] __x64_sys_openat+0x12d/0x210 [ 405.538594][T14024] do_syscall_64+0x115/0x870 [ 405.543771][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.547656][T14024] [ 405.547656][T14024] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 405.552888][T14024] lock_acquire+0x1b9/0x370 [ 405.556125][T14024] __mutex_lock+0x1a4/0x1bd0 [ 405.559483][T14024] process_measurement+0x5ab/0x2350 [ 405.563546][T14024] ima_file_check+0xc3/0x110 [ 405.566933][T14024] security_file_post_open+0xc4/0x210 [ 405.570638][T14024] path_openat+0x985/0x4280 [ 405.573841][T14024] do_file_open_root+0x2f6/0x5a0 [ 405.577233][T14024] file_open_root+0x1c6/0x3f0 [ 405.580387][T14024] kernel_read_file_from_path_initns+0x189/0x260 [ 405.584744][T14024] _request_firmware+0x733/0x13c0 [ 405.588116][T14024] request_firmware+0x35/0x50 [ 405.591294][T14024] reg_reload_regdb+0x85/0x460 [ 405.594710][T14024] genl_family_rcv_msg_doit+0x214/0x300 [ 405.598870][T14024] genl_rcv_msg+0x560/0x800 [ 405.601959][T14024] netlink_rcv_skb+0x159/0x420 [ 405.605220][T14024] genl_rcv+0x28/0x40 [ 405.608041][T14024] netlink_unicast+0x585/0x850 [ 405.613237][T14024] netlink_sendmsg+0x8b0/0xda0 [ 405.618987][T14024] ____sys_sendmsg+0xa4d/0xbe0 [ 405.623338][T14024] ___sys_sendmsg+0x190/0x1e0 [ 405.627969][T14024] __sys_sendmsg+0x160/0x210 [ 405.631172][T14024] do_syscall_64+0x115/0x870 [ 405.635521][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.640379][T14024] [ 405.640379][T14024] -> #2 (cb_lock){++++}-{4:4}: [ 405.645049][T14024] lock_acquire+0x1b9/0x370 [ 405.648200][T14024] down_read+0x99/0x4c0 [ 405.651012][T14024] genl_rcv+0x19/0x40 [ 405.653916][T14024] netlink_unicast+0x585/0x850 [ 405.657322][T14024] netlink_sendmsg+0x8b0/0xda0 [ 405.661112][T14024] sock_sendmsg+0x394/0x410 [ 405.664442][T14024] splice_to_socket+0xb3c/0x11a0 [ 405.667636][T14024] do_splice+0x109c/0x1f90 [ 405.671117][T14024] __do_splice+0x33b/0x370 [ 405.674184][T14024] __x64_sys_splice+0x187/0x250 [ 405.677438][T14024] do_syscall_64+0x115/0x870 [ 405.680649][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.684962][T14024] [ 405.684962][T14024] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 405.689628][T14024] lock_acquire+0x1b9/0x370 [ 405.692726][T14024] __mutex_lock+0x1a4/0x1bd0 [ 405.696307][T14024] pipe_lock+0x69/0x80 [ 405.699138][T14024] iter_file_splice_write+0x1fd/0x10b0 [ 405.702902][T14024] do_splice+0x109c/0x1f90 [ 405.706125][T14024] __do_splice+0x33b/0x370 [ 405.709258][T14024] __x64_sys_splice+0x187/0x250 [ 405.712852][T14024] do_syscall_64+0x115/0x870 [ 405.716235][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.721049][T14024] [ 405.721049][T14024] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 405.726008][T14024] check_prev_add+0xeb/0xe60 [ 405.730939][T14024] __lock_acquire+0x136c/0x1a40 [ 405.736465][T14024] lock_acquire+0x1b9/0x370 [ 405.739759][T14024] mnt_want_write+0x6f/0x410 [ 405.743277][T14024] path_openat+0xad9/0x4280 [ 405.746520][T14024] do_file_open+0x20e/0x430 [ 405.750316][T14024] file_open_name+0x1c3/0x3e0 [ 405.753894][T14024] filp_open+0x2e/0x50 [ 405.757241][T14024] fsg_lun_open+0x6b/0x7b0 [ 405.760740][T14024] fsg_store_file+0x1e7/0x450 [ 405.764027][T14024] configfs_write_iter+0x302/0x4e0 [ 405.767868][T14024] vfs_write+0x6ac/0x1050 [ 405.771246][T14024] ksys_write+0x12a/0x250 [ 405.774764][T14024] do_syscall_64+0x115/0x870 [ 405.778225][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.783932][T14024] [ 405.783932][T14024] other info that might help us debug this: [ 405.783932][T14024] [ 405.790771][T14024] Chain exists of: [ 405.790771][T14024] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 405.790771][T14024] [ 405.798832][T14024] Possible unsafe locking scenario: [ 405.798832][T14024] [ 405.803841][T14024] CPU0 CPU1 [ 405.807258][T14024] ---- ---- [ 405.810639][T14024] lock(&common->filesem); [ 405.813659][T14024] lock(&p->frag_sem); [ 405.818247][T14024] lock(&common->filesem); [ 405.822401][T14024] rlock(sb_writers#6); [ 405.824947][T14024] [ 405.824947][T14024] *** DEADLOCK *** [ 405.824947][T14024] [ 405.829983][T14024] 5 locks held by syz.5.2496/14024: [ 405.833275][T14024] #0: ffff88803cee50b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 405.839002][T14024] #1: ffff888023d10450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 405.845267][T14024] #2: ffff88805a49a680 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 405.850129][T14024] #3: ffff88803c218070 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 405.854679][T14024] #4: ffff8880349ab920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 405.859196][T14024] [ 405.859196][T14024] stack backtrace: [ 405.862649][T14024] CPU: 1 UID: 0 PID: 14024 Comm: syz.5.2496 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.862686][T14024] Tainted: [L]=SOFTLOCKUP [ 405.862693][T14024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.862704][T14024] Call Trace: [ 405.862711][T14024] [ 405.862719][T14024] dump_stack_lvl+0x100/0x190 [ 405.862746][T14024] print_circular_bug.cold+0x178/0x1c7 [ 405.862774][T14024] check_noncircular+0x146/0x160 [ 405.862795][T14024] ? __lock_acquire+0xd5b/0x1a40 [ 405.862818][T14024] check_prev_add+0xeb/0xe60 [ 405.862839][T14024] __lock_acquire+0x136c/0x1a40 [ 405.862861][T14024] ? try_to_unlazy+0x296/0x910 [ 405.862888][T14024] lock_acquire+0x1b9/0x370 [ 405.862908][T14024] ? path_openat+0xad9/0x4280 [ 405.863033][T14024] ? __pfx___might_resched+0x10/0x10 [ 405.863061][T14024] mnt_want_write+0x6f/0x410 [ 405.863077][T14024] ? path_openat+0xad9/0x4280 [ 405.863095][T14024] path_openat+0xad9/0x4280 [ 405.863117][T14024] ? __pfx_path_openat+0x10/0x10 [ 405.863133][T14024] ? kasan_save_stack+0x30/0x50 [ 405.863153][T14024] ? kasan_save_track+0x14/0x30 [ 405.863173][T14024] ? __kasan_slab_alloc+0x89/0x90 [ 405.863192][T14024] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 405.863211][T14024] ? do_getname_kernel+0x5d/0x250 [ 405.863230][T14024] ? filp_open+0x1d/0x50 [ 405.863252][T14024] ? fsg_lun_open+0x6b/0x7b0 [ 405.863272][T14024] ? fsg_store_file+0x1e7/0x450 [ 405.863292][T14024] do_file_open+0x20e/0x430 [ 405.863312][T14024] ? __pfx_do_file_open+0x10/0x10 [ 405.863338][T14024] ? rcu_is_watching+0x12/0xc0 [ 405.863365][T14024] file_open_name+0x1c3/0x3e0 [ 405.863386][T14024] ? __pfx_file_open_name+0x10/0x10 [ 405.863407][T14024] ? do_getname_kernel+0x5d/0x250 [ 405.863428][T14024] ? __asan_memcpy+0x3c/0x60 [ 405.863445][T14024] ? do_getname_kernel+0x1be/0x250 [ 405.863466][T14024] filp_open+0x2e/0x50 [ 405.863487][T14024] fsg_lun_open+0x6b/0x7b0 [ 405.863506][T14024] ? __pfx_down_read+0x10/0x10 [ 405.863532][T14024] fsg_store_file+0x1e7/0x450 [ 405.863554][T14024] configfs_write_iter+0x302/0x4e0 [ 405.863577][T14024] vfs_write+0x6ac/0x1050 [ 405.863592][T14024] ? __pfx_configfs_write_iter+0x10/0x10 [ 405.863614][T14024] ? __pfx_vfs_write+0x10/0x10 [ 405.863636][T14024] ksys_write+0x12a/0x250 [ 405.863651][T14024] ? __pfx_ksys_write+0x10/0x10 [ 405.863666][T14024] ? v4l2_ioctl+0x1c5/0x250 [ 405.863701][T14024] do_syscall_64+0x115/0x870 [ 405.863724][T14024] ? clear_bhb_loop+0x70/0xc0 [ 405.863744][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.863760][T14024] RIP: 0033:0x7efe40b9e0d9 [ 405.863776][T14024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.863793][T14024] RSP: 002b:00007efe41b0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.863813][T14024] RAX: ffffffffffffffda RBX: 00007efe40e25fa0 RCX: 00007efe40b9e0d9 [ 405.863825][T14024] RDX: 0000000000000002 RSI: 0000200000000f00 RDI: 0000000000000006 [ 405.863835][T14024] RBP: 00007efe40c35024 R08: 0000000000000000 R09: 0000000000000000 [ 405.863847][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.863857][T14024] R13: 00007efe40e26038 R14: 00007efe40e25fa0 R15: 00007ffe2e24abb8 [ 405.863874][T14024] [ 406.189097][T14024] mass_storage.usb0/lun.0: unable to open backing file: fi