last executing test programs: 16m55.980913708s ago: executing program 3 (id=4456): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 16m55.805633166s ago: executing program 3 (id=4460): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e00000", @ANYBLOB="000000000000000000000000000000000000000032000000ff01"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 16m55.404803549s ago: executing program 3 (id=4464): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x131) r3 = dup2(r2, r1) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0x40806685, &(0x7f0000000200)={0x10, 0x1, {}, {}, 0x9}) 16m54.481647606s ago: executing program 3 (id=4472): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 16m54.44581643s ago: executing program 3 (id=4473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) 16m54.133442019s ago: executing program 3 (id=4475): io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x2a]}, 0x8}) 16m53.980797867s ago: executing program 32 (id=4475): io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x2a]}, 0x8}) 9m15.1807833s ago: executing program 0 (id=7183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed101020301090224"], 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m10.530671642s ago: executing program 0 (id=7201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aac000000060a010400000000000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c00030000000000000000b9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 9m10.351008951s ago: executing program 0 (id=7203): landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002", 0x46) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x34702, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}}, 0x20040850) iopl(0xe) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r7 = socket(0x10, 0x803, 0x0) sendto(r7, 0x0, 0x0, 0x1c804, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) 9m9.561965565s ago: executing program 0 (id=7204): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2e, 0x101000) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x3, 0xff, "ece0e4f9206e4238452fc170b5e046614237607683b75c24", {0x80000001, 0x5}, 0x1bf}) 9m4.850010887s ago: executing program 0 (id=7221): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3d86dd6001070000481100fcfe0000000000000000000000000000ff02000000000000000000000000000100030e2200489078"], 0x0) 9m3.41473661s ago: executing program 0 (id=7227): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x4, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 8m47.823208345s ago: executing program 33 (id=7227): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x4, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 8m44.935121957s ago: executing program 2 (id=7285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed101020301090224"], 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m41.56527005s ago: executing program 2 (id=7294): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 8m40.872475974s ago: executing program 2 (id=7296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 8m40.402724154s ago: executing program 2 (id=7302): mount$overlay(0x0, &(0x7f0000000180)='./proc_mnt\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket(0x1, 0x3, 0xffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x82, 0x0, 0x0) 8m39.304744045s ago: executing program 2 (id=7306): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'}) 8m38.98993032s ago: executing program 2 (id=7308): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2e, 0x101000) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, 0x0) 8m23.881064318s ago: executing program 34 (id=7308): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2e, 0x101000) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, 0x0) 12.73707631s ago: executing program 4 (id=9027): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r3}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) r8 = dup(0xffffffffffffffff) inotify_rm_watch(r8, r7) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) 10.505437121s ago: executing program 7 (id=9031): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6179}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x2, 0x2, 0x2, 0x0, 0x7, 0x2, 0x10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xfe9, &(0x7f0000001840)=""/4073, 0x41000, 0xa}, 0x94) 10.199409002s ago: executing program 7 (id=9034): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xfff, 0x3}, 0x50) 9.210534276s ago: executing program 5 (id=9037): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x485c, 0x7721, 0x16, 0x0, 0xffffffffffffff85) 9.157714971s ago: executing program 7 (id=9038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000680)='dummy_', 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.155980056s ago: executing program 1 (id=9039): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000ac0)="11170c5bd1252e7d7cf5abbf2fe4d22b59fce1da46018e6d9c300477edaa5a4179a660cd336bb010b43fce8151c3c9000700fb6bdd64974b15d4a92da334112a9458053fc56fa3704a8bd0d90353b1b2f412ab3ec6f7c1c247a799a9328e6279e9b88b8632cb683b1cad238ee4541c95d20211724ebbe5bbb20c066a4a2f0068cf190076b3340b746ea6905f747c3f530e9829d3abb5589b6b1b1bd9193e35c4911306d54db778b864e3c82263863874062a2d7b314d2ec6cb89d6d92f49f243bae5072f3ad343198d7d6cc23b776ced920daa35afdf8c3c2c644dbd3712bd78ff8d8465781cc36e770ba37971a80f30475eadabac59eba5bc5cb20678c6bcf3d315d5d797a9059ae7e7e0", 0x10b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0) write(r3, &(0x7f0000000540), 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='2\x00', 0x1) 7.889571867s ago: executing program 5 (id=9041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000844) 7.856267273s ago: executing program 1 (id=9042): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.71503578s ago: executing program 4 (id=9043): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) 6.885784142s ago: executing program 5 (id=9044): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc6, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb8, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfa4, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) 6.712836183s ago: executing program 7 (id=9046): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0xa4', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) close(r2) 5.737677908s ago: executing program 4 (id=9047): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) file_getattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfff9, 0x5, @empty, 0xa098}, {0xa, 0x4ea6, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8005}}, 0x48) syz_io_uring_setup(0x3bd4, &(0x7f00000003c0)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), 0x0, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0xf7fffff9) 5.737315672s ago: executing program 5 (id=9048): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x20000000) 5.715233292s ago: executing program 1 (id=9049): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x58, 0x0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8f7ad8d9922768f49eb8c52349"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x58}}, 0x0) 5.663657781s ago: executing program 6 (id=9050): openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1002) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0xf4240) close(r1) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0), 0x0) 4.165444869s ago: executing program 5 (id=9051): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x8000000000002, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0x10], 0xeeee0000, 0x212d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.910230515s ago: executing program 7 (id=9052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_', 0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.906888863s ago: executing program 1 (id=9053): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r3}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) r8 = dup(0xffffffffffffffff) inotify_rm_watch(r8, r7) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) 2.777085452s ago: executing program 6 (id=9054): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff6, 0x0, 0x1, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x3ff, 0xff7a}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffefef9, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x6, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8002012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x10000006, 0x400, 0x401, 0x6, 0x7fffffff, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000f, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f0, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x14, 0x42, 0x3], [0x5, 0x408, 0xd, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x100004, 0x5, 0x3, 0x7, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x1, 0xac5, 0xbf, 0x4002, 0x3, 0x80000001, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x80000b9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x5, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xcb, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9601, 0xb, 0xaf, 0x8, 0x6, 0x8db, 0x2000005, 0x5, 0x48, 0x30b1d693, 0xa1f, 0xf44, 0xdced, 0x1, 0x81, 0x0, 0x4, 0x5, 0xb1d, 0xd7, 0x200, 0xfffb343e, 0xfff]}, 0x45c) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r2, 0x2004, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x42, 0x0, 0x100000008, 0x7, 0x7, 0x401, 0x4}, 0x0, &(0x7f0000004680)={0x9, 0xf3, 0xd3, 0x101, 0x7, 0x400, 0x9, 0xa1}, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000180), 0x2df8, 0x109840) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000240)={0x2, @raw_data="70f79608c7974fbe83953052794011dcc8eea2b90b1addc0dfde8ce55b16f4bbf7ee57cbdd59eb16f4c48ded46858d6b8a7fcca27100994f0e8ded536b3ba1428051c372c574c9c41efe45702fb563a3d984186becf24c76589da3f0ff45746975608e0eaf3584cbd820d74eafab14373a6f98353793c7ed8337f4a2965266e68a976f2d3b465145fbb2bbd266a51bf95cc160538b9a63acb049c6b9fbad58bf3d6f9226575f1d521d89451c8dfaa8044b82fc163ef16a11e3392cc905ba9d037b71906e9d7a7242"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xf7a) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000100)={r5, 0x1}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440063001000030500"/20, @ANYRES32=0x0, @ANYBLOB="8720040000000000240012800b00010062726964676500001400028005001700000000000500180001000000"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x87}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94) 2.740207543s ago: executing program 4 (id=9055): socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x40, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b60300000000000085007b27fca9cbb2e89b00000085000000a00000209500000000000000000000000000010000000884bda25591b228268961d682a3f79e505f590d3beb18d423917ef3dc8140"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.551493864s ago: executing program 5 (id=9056): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=virtio,', {[{@uname={'uname', 0x3d, '$$'}}, {@access_user}]}}) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff000000070501024000000705020240000007050402400000070506024000"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="31000e001c"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000380)=@in={0x2, 0x4e22, @multicast1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001740)}], 0x1}, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.009276612s ago: executing program 1 (id=9057): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 1.264503748s ago: executing program 1 (id=9058): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) 1.121900444s ago: executing program 6 (id=9059): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='auto', 0x4) 1.10716107s ago: executing program 6 (id=9060): openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) 1.054411112s ago: executing program 6 (id=9061): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x8912, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 629.874111ms ago: executing program 6 (id=9062): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_snmp6\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 592.495678ms ago: executing program 4 (id=9063): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0x6, 0x2880) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)}, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/244, 0xf4}], 0x1, 0x185, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000140)={0x3, 0x0, 0x2, 0x11}) preadv(r2, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000180)=""/119, 0x77}], 0x2, 0x2, 0xd) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd28, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x2, 0x6a9f0eede9332711}, {0x2, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xfffffff8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x40d1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x84) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r7, 0x29, 0x4c, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 319.355µs ago: executing program 7 (id=9064): openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1002) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0xf4240) close(r1) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='fil', 0x3) 0s ago: executing program 4 (id=9065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d000000008614500000100021100000050505050505000400f01004101007200010000030000080026007109000008002201cc0300000000598a2ae92f4fa4509cf7dd1dce6cca1c7c6857043fc9a2755ea903e36b77a20d35fdb1"], 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) kernel console output (not intermixed with test programs): 71.949571][T27986] RBP: 00007f53bca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1071.949577][T27986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.949589][T27986] R13: 00007f53bca26038 R14: 00007ffe2adfb1c0 R15: 00007ffe2adfb2a8 [ 1071.949603][T27986] [ 1072.423950][T27994] libceph: resolve 'c8' (ret=-3): failed [ 1079.102831][T26841] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 1079.303248][T26841] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1079.356262][T26841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1079.406067][T26841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.448650][T26841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.494808][T26841] usb 6-1: config 0 descriptor?? [ 1079.583352][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1080.156128][T26841] usbhid 6-1:0.0: can't add hid device: -71 [ 1080.191665][T26841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1080.259298][T26841] usb 6-1: USB disconnect, device number 81 [ 1083.522707][T26841] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1083.713598][T26841] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1083.790985][T26841] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1083.846205][T26841] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.915270][T26841] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1083.996390][T26841] usb 2-1: config 220 has no interface number 1 [ 1084.036863][T26841] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1084.086725][T26841] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1084.150720][T26841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.218016][T26841] usb 2-1: Product: syz [ 1084.256861][T26841] usb 2-1: Manufacturer: syz [ 1084.281744][T26841] usb 2-1: SerialNumber: syz [ 1085.116188][ T10] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 1085.259112][T26841] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1085.332229][T26841] uvcvideo 2-1:220.0: No valid video chain found. [ 1085.373800][ T10] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1085.418081][T26841] usb 2-1: USB disconnect, device number 51 [ 1085.444978][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1085.548377][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.613410][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.691136][ T10] usb 6-1: config 0 descriptor?? [ 1085.948449][T28111] futex_wake_op: syz.1.7792 tries to shift op by 144; fix this program [ 1087.159048][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1087.211297][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1087.311484][ T10] usb 6-1: USB disconnect, device number 82 [ 1087.582398][T28127] netlink: 'syz.4.7799': attribute type 4 has an invalid length. [ 1089.269337][ T30] audit: type=1400 audit(1787353596.204:1052): avc: denied { mount } for pid=28135 comm="syz.5.7803" name="/" dev="ramfs" ino=143692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1089.894732][T28142] CIFS mount error: No usable UNC path provided in device string! [ 1089.894732][T28142] [ 1089.904828][T28142] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1091.509011][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1091.569460][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1091.625013][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1091.671123][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1092.296176][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1093.404186][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1093.491771][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1093.557573][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1093.632590][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1093.715247][T26604] hid-generic 0000:0000:0004.0038: unknown main item tag 0x0 [ 1093.780815][T26604] hid-generic 0000:0000:0004.0038: hidraw0: HID v0.03 Device [syz0] on syz0 [ 1094.000012][T28178] sch_tbf: burst 1521 is lower than device lo mtu (11337746) ! [ 1094.104920][T28176] fido_id[28176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1095.214163][T28192] netlink: 'syz.6.7824': attribute type 1 has an invalid length. [ 1095.420815][T28192] bond1: entered promiscuous mode [ 1095.514479][T28192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1096.642619][T26841] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1096.844325][T26841] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1096.918783][T26841] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.080773][T26841] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1097.295890][T26841] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1097.330257][T26841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.390657][T26841] usb 8-1: config 0 descriptor?? [ 1097.963080][T28222] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22950] was attempted by " [ 1098.122413][T26841] usbhid 8-1:0.0: can't add hid device: -71 [ 1102.079476][T26841] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1102.459388][T26841] usb 8-1: USB disconnect, device number 10 [ 1103.190206][T28270] netlink: 'syz.5.7843': attribute type 8 has an invalid length. [ 1104.759682][T28276] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1104.767118][T28276] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1104.876646][T28277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7848'. [ 1106.825910][T28294] CIFS mount error: No usable UNC path provided in device string! [ 1106.825910][T28294] [ 1106.889429][T28290] FAULT_INJECTION: forcing a failure. [ 1106.889429][T28290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.955653][T28294] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1107.024637][T28290] CPU: 0 UID: 0 PID: 28290 Comm: syz.7.7855 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.024659][T28290] Tainted: [L]=SOFTLOCKUP [ 1107.024663][T28290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.024671][T28290] Call Trace: [ 1107.024676][T28290] [ 1107.024682][T28290] dump_stack_lvl+0x100/0x190 [ 1107.024701][T28290] should_fail_ex.cold+0x5/0xa [ 1107.024716][T28290] _copy_from_iter+0x1f4/0x1690 [ 1107.024730][T28290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1107.024750][T28290] ? __pfx__copy_from_iter+0x10/0x10 [ 1107.024762][T28290] ? alloc_pages_mpol+0x260/0x550 [ 1107.024774][T28290] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1107.024786][T28290] copy_page_from_iter+0x238/0x300 [ 1107.024800][T28290] anon_pipe_write+0xaf1/0x1b50 [ 1107.024822][T28290] ? __pfx_anon_pipe_write+0x10/0x10 [ 1107.024838][T28290] ? selinux_file_permission+0x8f/0x6d0 [ 1107.024856][T28290] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1107.024873][T28290] ? bpf_lsm_file_permission+0x9/0x10 [ 1107.024884][T28290] ? security_file_permission+0x76/0x210 [ 1107.024902][T28290] ? rw_verify_area+0xce/0x6d0 [ 1107.024916][T28290] vfs_write+0x6af/0x1050 [ 1107.024931][T28290] ? __pfx_anon_pipe_write+0x10/0x10 [ 1107.024948][T28290] ? __pfx_vfs_write+0x10/0x10 [ 1107.024961][T28290] ? find_held_lock+0x2b/0x80 [ 1107.024982][T28290] ksys_write+0x1f8/0x250 [ 1107.024996][T28290] ? __pfx_ksys_write+0x10/0x10 [ 1107.025013][T28290] do_syscall_64+0x123/0x790 [ 1107.025032][T28290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.025043][T28290] RIP: 0033:0x7f2e4559e0d9 [ 1107.025053][T28290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.025063][T28290] RSP: 002b:00007f2e463ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1107.025075][T28290] RAX: ffffffffffffffda RBX: 00007f2e45825fa0 RCX: 00007f2e4559e0d9 [ 1107.025082][T28290] RDX: 00000000200002e6 RSI: 0000200000000380 RDI: 0000000000000006 [ 1107.025088][T28290] RBP: 00007f2e45635024 R08: 0000000000000000 R09: 0000000000000000 [ 1107.025094][T28290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.025101][T28290] R13: 00007f2e45826038 R14: 00007f2e45825fa0 R15: 00007fff315811f8 [ 1107.025116][T28290] [ 1107.764328][T28300] netlink: 'syz.5.7858': attribute type 4 has an invalid length. [ 1108.705854][T28309] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1108.713312][T28309] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1110.206232][T28331] CIFS mount error: No usable UNC path provided in device string! [ 1110.206232][T28331] [ 1110.239062][T22002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1110.265778][T22002] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1110.276312][T22002] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1110.283994][T22002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1110.300731][T22002] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1110.309962][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.318912][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.414628][T28331] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1110.636513][T28337] fuse: Invalid rootmode [ 1110.708415][ T30] audit: type=1400 audit(1787353617.784:1053): avc: denied { cmd } for pid=28339 comm="iou-wrk-28340" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1111.086812][T20689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.172854][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1111.502547][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1111.521252][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1112.245883][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.326726][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1112.413155][T23265] Bluetooth: hci3: command tx timeout [ 1112.480612][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.556252][ T9] usb 8-1: config 0 descriptor?? [ 1112.618759][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1112.721042][T20689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.822968][T26604] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1112.910290][T28343] input input57: cannot allocate more than FF_MAX_EFFECTS effects [ 1112.950870][T28371] fuse: Invalid rootmode [ 1113.006059][T26604] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1113.048111][T26604] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.074985][T20689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.090935][T26604] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1113.119074][T26604] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1113.196183][T26604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1113.210794][T20689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.231248][T26604] usb 6-1: Product: syz [ 1113.250671][T26604] usb 6-1: Manufacturer: syz [ 1113.294192][T28359] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1113.329361][T26604] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1113.354105][ T30] audit: type=1400 audit(1787353620.434:1054): avc: denied { setattr } for pid=28342 comm="syz.7.7873" name="NETLINK" dev="sockfs" ino=145109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1113.385117][T28329] wlan1 speed is unknown, defaulting to 1000 [ 1113.409736][T26604] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1114.006024][T20689] bridge_slave_1: left allmulticast mode [ 1114.025103][T20689] bridge_slave_1: left promiscuous mode [ 1114.047122][T20689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.084648][T20689] bridge_slave_0: left allmulticast mode [ 1114.101333][T20689] bridge_slave_0: left promiscuous mode [ 1114.122488][T20689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.366293][ T30] audit: type=1400 audit(1787353621.444:1055): avc: denied { write } for pid=28383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.466395][T23265] Bluetooth: hci3: command tx timeout [ 1114.576328][ T30] audit: type=1400 audit(1787353621.664:1056): avc: denied { write } for pid=28396 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.724017][T20689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.749387][T20689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.779525][ T121] usb 8-1: USB disconnect, device number 11 [ 1114.826587][T20689] bond0 (unregistering): Released all slaves [ 1114.859743][T28400] futex_wake_op: syz.7.7885 tries to shift op by 144; fix this program [ 1114.923894][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1114.965582][T20689] tipc: Left network mode [ 1115.080392][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7886'. [ 1115.149399][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7886'. [ 1115.359975][T28409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7887'. [ 1115.455723][ T30] audit: type=1326 audit(1787353622.534:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.7.7888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e4559e0d9 code=0x0 [ 1115.612538][ T121] usb 6-1: USB disconnect, device number 83 [ 1116.264835][ T121] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1116.403106][ T121] garmin_gps 6-1:1.0: device disconnected [ 1116.542817][T23265] Bluetooth: hci3: command tx timeout [ 1117.379393][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7897'. [ 1117.407188][T20689] hsr_slave_0: left promiscuous mode [ 1117.434461][T20689] hsr_slave_1: left promiscuous mode [ 1117.447851][ T30] audit: type=1400 audit(1787353624.534:1058): avc: denied { write } for pid=28406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.478857][T20689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.512291][T20689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.538185][T20689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.561701][T20689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.597297][T20689] veth1_macvtap: left promiscuous mode [ 1117.609601][ T30] audit: type=1400 audit(1787353624.694:1059): avc: denied { write } for pid=28451 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.638180][T20689] veth0_macvtap: left promiscuous mode [ 1117.654958][T20689] veth1_vlan: left promiscuous mode [ 1117.672190][T20689] veth0_vlan: left promiscuous mode [ 1118.206024][T20689] team0 (unregistering): Port device team_slave_1 removed [ 1118.259436][T20689] team0 (unregistering): Port device team_slave_0 removed [ 1118.618002][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7897'. [ 1118.628217][T23265] Bluetooth: hci3: command tx timeout [ 1118.634549][ T5258] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1118.793309][T28329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.933996][T28329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.990478][T28329] bridge_slave_0: entered allmulticast mode [ 1119.024638][T28329] bridge_slave_0: entered promiscuous mode [ 1119.075910][T28466] FAULT_INJECTION: forcing a failure. [ 1119.075910][T28466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1119.109504][T28473] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1119.126162][T28329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.213787][T28329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.244836][T28466] CPU: 0 UID: 0 PID: 28466 Comm: syz.6.7902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1119.244857][T28466] Tainted: [L]=SOFTLOCKUP [ 1119.244862][T28466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1119.244869][T28466] Call Trace: [ 1119.244873][T28466] [ 1119.244878][T28466] dump_stack_lvl+0x100/0x190 [ 1119.244898][T28466] should_fail_ex.cold+0x5/0xa [ 1119.244912][T28466] ? prepare_alloc_pages+0x16d/0x5b0 [ 1119.244932][T28466] should_fail_alloc_page+0xeb/0x140 [ 1119.244952][T28466] prepare_alloc_pages+0x1f0/0x5b0 [ 1119.244972][T28466] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1119.244988][T28466] ? __up_read+0x333/0x980 [ 1119.245000][T28466] ? __pfx___up_read+0x10/0x10 [ 1119.245010][T28466] ? do_user_addr_fault+0x7d7/0x12f0 [ 1119.245023][T28466] ? do_user_addr_fault+0x7d7/0x12f0 [ 1119.245038][T28466] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1119.245053][T28466] ? irqentry_exit+0x24d/0xa10 [ 1119.245070][T28466] ? lockdep_hardirqs_on+0x7d/0x110 [ 1119.245086][T28466] ? irqentry_exit+0x24d/0xa10 [ 1119.245114][T28466] ? rep_movs_alternative+0x4a/0xa0 [ 1119.245129][T28466] ? _copy_from_iter+0x270/0x1690 [ 1119.245142][T28466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1119.245159][T28466] ? policy_nodemask+0xed/0x4f0 [ 1119.245172][T28466] alloc_pages_mpol+0x201/0x550 [ 1119.245184][T28466] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1119.245198][T28466] alloc_pages_noprof+0x1a/0x160 [ 1119.245211][T28466] anon_pipe_write+0xe74/0x1b50 [ 1119.245233][T28466] ? __pfx_anon_pipe_write+0x10/0x10 [ 1119.245250][T28466] ? selinux_file_permission+0x8f/0x6d0 [ 1119.245267][T28466] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1119.245283][T28466] ? bpf_lsm_file_permission+0x9/0x10 [ 1119.245294][T28466] ? security_file_permission+0x76/0x210 [ 1119.245314][T28466] ? rw_verify_area+0xce/0x6d0 [ 1119.245328][T28466] vfs_write+0x6af/0x1050 [ 1119.245343][T28466] ? __pfx_anon_pipe_write+0x10/0x10 [ 1119.245360][T28466] ? __pfx_vfs_write+0x10/0x10 [ 1119.245373][T28466] ? find_held_lock+0x2b/0x80 [ 1119.245394][T28466] ksys_write+0x1f8/0x250 [ 1119.245408][T28466] ? __pfx_ksys_write+0x10/0x10 [ 1119.245426][T28466] do_syscall_64+0x123/0x790 [ 1119.245444][T28466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.245455][T28466] RIP: 0033:0x7fc93639e0d9 [ 1119.245465][T28466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.245476][T28466] RSP: 002b:00007fc93732b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1119.245487][T28466] RAX: ffffffffffffffda RBX: 00007fc936625fa0 RCX: 00007fc93639e0d9 [ 1119.245494][T28466] RDX: 00000000200002e6 RSI: 0000200000000380 RDI: 0000000000000007 [ 1119.245500][T28466] RBP: 00007fc936435024 R08: 0000000000000000 R09: 0000000000000000 [ 1119.245507][T28466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.245513][T28466] R13: 00007fc936626038 R14: 00007fc936625fa0 R15: 00007ffd80ec1798 [ 1119.245527][T28466] [ 1119.864607][T28329] bridge_slave_1: entered allmulticast mode [ 1119.891327][T28329] bridge_slave_1: entered promiscuous mode [ 1119.961559][T28329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.046042][T28329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.470440][ T30] audit: type=1400 audit(1787353629.544:1060): avc: denied { write } for pid=28493 comm="syz.6.7905" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1122.568043][T28329] team0: Port device team_slave_0 added [ 1122.599167][T28497] netlink: 'syz.7.7904': attribute type 1 has an invalid length. [ 1122.676362][T28329] team0: Port device team_slave_1 added [ 1122.714590][ T30] audit: type=1400 audit(1787353629.544:1061): avc: denied { write } for pid=28493 comm="syz.6.7905" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1124.474314][T28329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.707155][ T30] audit: type=1400 audit(1787353631.754:1062): avc: denied { write } for pid=28482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.765123][T28329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.074960][T28329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.854267][ T30] audit: type=1400 audit(1787353632.944:1063): avc: denied { write } for pid=28517 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1125.943293][T28329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.019280][T28329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.165111][T28329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.331613][ T5258] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1126.526987][T28329] hsr_slave_0: entered promiscuous mode [ 1127.140931][T28534] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1127.148370][T28534] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1127.248413][T28329] hsr_slave_1: entered promiscuous mode [ 1127.905600][T28329] debugfs: 'hsr0' already exists in 'hsr' [ 1128.054271][T28329] Cannot create hsr debugfs directory [ 1128.288345][ T30] audit: type=1400 audit(1787353635.374:1064): avc: denied { write } for pid=28546 comm="syz.6.7921" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1128.462402][ T30] audit: type=1400 audit(1787353635.434:1065): avc: denied { write } for pid=28546 comm="syz.6.7921" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1129.347870][ T30] audit: type=1400 audit(1787353636.434:1066): avc: denied { write } for pid=28548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.479989][ T30] audit: type=1400 audit(1787353637.564:1067): avc: denied { write } for pid=28569 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1131.961730][T28595] futex_wake_op: syz.6.7933 tries to shift op by 144; fix this program [ 1132.669814][T28594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7932'. [ 1132.710117][ T121] hsr0: entered promiscuous mode [ 1133.253570][ T121] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1133.563855][ T121] usb 8-1: device descriptor read/64, error -71 [ 1133.842618][ T121] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1134.012922][ T121] usb 8-1: device descriptor read/64, error -71 [ 1134.933140][ T121] usb usb8-port1: attempt power cycle [ 1135.083372][ T30] audit: type=1400 audit(1787353642.174:1068): avc: denied { write } for pid=28607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.345056][ T121] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1135.384863][ T30] audit: type=1400 audit(1787353642.464:1069): avc: denied { write } for pid=28631 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1137.120634][ T121] usb 8-1: device descriptor read/8, error -71 [ 1139.085207][T28329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1139.133929][ T121] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1139.170101][T28329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.228158][ T30] audit: type=1400 audit(1787353646.314:1070): avc: denied { write } for pid=28649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.270107][T28329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1139.315160][T28329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1139.358016][ T121] usb 8-1: Using ep0 maxpacket: 16 [ 1139.375436][T28329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1139.393928][ T121] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1139.467469][T28329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1139.496334][ T121] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.536722][T28329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1139.555140][ T121] usb 8-1: Product: syz [ 1139.570430][ T30] audit: type=1400 audit(1787353646.654:1071): avc: denied { write } for pid=28683 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.609018][ T121] usb 8-1: Manufacturer: syz [ 1139.656689][T28329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1139.667663][ T121] usb 8-1: SerialNumber: syz [ 1139.706100][ T121] usb 8-1: config 0 descriptor?? [ 1140.148602][T28699] fuse: Bad value for 'fd' [ 1140.824925][T28704] futex_wake_op: syz.5.7945 tries to shift op by 144; fix this program [ 1140.935455][T28329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.060402][T28329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.143423][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.150551][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.201188][T28720] devpts: Invalid gid '0x00000000ffffffff' [ 1141.255150][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.262283][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.579689][T26841] usb 8-1: USB disconnect, device number 16 [ 1142.755493][ T30] audit: type=1400 audit(1787353649.844:1072): avc: denied { write } for pid=28708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.000804][T28762] futex_wake_op: syz.6.7975 tries to shift op by 144; fix this program [ 1143.070336][ T30] audit: type=1400 audit(1787353650.154:1073): avc: denied { write } for pid=28760 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.188356][T28769] fuse: Invalid rootmode [ 1144.885166][T28329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.558499][T28813] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1146.565937][T28813] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1146.924844][T28817] CIFS mount error: No usable UNC path provided in device string! [ 1146.924844][T28817] [ 1146.934907][T28817] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1146.998561][ T30] audit: type=1400 audit(1787353654.084:1074): avc: denied { write } for pid=28773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.243402][ T30] audit: type=1400 audit(1787353654.334:1075): avc: denied { write } for pid=28824 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.045888][T28850] futex_wake_op: syz.4.7988 tries to shift op by 144; fix this program [ 1148.158737][ T30] audit: type=1400 audit(1787353655.244:1076): avc: denied { write } for pid=28830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.627536][T22002] Bluetooth: hci2: command 0x0406 tx timeout [ 1149.332677][ T30] audit: type=1400 audit(1787353656.404:1077): avc: denied { write } for pid=28855 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.398392][T28859] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7998'. [ 1150.376830][T28874] futex_wake_op: syz.5.8002 tries to shift op by 144; fix this program [ 1150.499256][T28876] fuse: Invalid rootmode [ 1150.832121][T28884] netlink: 'syz.5.8006': attribute type 8 has an invalid length. [ 1151.807445][ T30] audit: type=1400 audit(1787353658.894:1078): avc: denied { write } for pid=28888 comm="syz.5.8008" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1151.887498][ T30] audit: type=1400 audit(1787353658.934:1079): avc: denied { write } for pid=28888 comm="syz.5.8008" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1152.876339][ T1110] IPVS: starting estimator thread 0... [ 1153.052993][T28895] IPVS: using max 78 ests per chain, 187200 per kthread [ 1155.007225][T28329] veth0_vlan: entered promiscuous mode [ 1155.045852][T28329] veth1_vlan: entered promiscuous mode [ 1155.388859][T28329] veth0_macvtap: entered promiscuous mode [ 1155.571449][T28329] veth1_macvtap: entered promiscuous mode [ 1155.610933][T28910] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1155.622965][T28329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.658477][T28329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.722635][T28742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.764067][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.877482][T23265] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1156.892048][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.899395][T28925] input: syz0 as /devices/virtual/input/input58 [ 1158.089809][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.105483][T28930] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8021'. [ 1158.145021][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.182736][T20689] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.286980][T20688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.973022][T20688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.133677][ T30] audit: type=1400 audit(1787353666.214:1080): avc: denied { mounton } for pid=28329 comm="syz-executor" path="/root/syzkaller.uM4xDv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1165.612811][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1165.653269][T26604] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1165.711595][T28986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8035'. [ 1165.826346][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1165.851748][T26604] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1165.875545][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1165.891622][T26604] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1165.940295][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.962391][T26604] usb 5-1: config index 0 descriptor too short (expected 2066, got 18) [ 1165.996225][ T9] usb 2-1: config 220 has no interface number 2 [ 1166.007425][T26604] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.037582][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1166.073263][T26604] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1166.109930][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1166.130888][T26604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.150415][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1166.171322][T26604] usb 5-1: Product: syz [ 1166.188059][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1166.201276][T26604] usb 5-1: Manufacturer: syz [ 1166.223497][T26604] usb 5-1: SerialNumber: syz [ 1166.237634][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.276455][ T9] usb 2-1: Product: syz [ 1166.297164][ T9] usb 2-1: Manufacturer: syz [ 1166.326729][ T9] usb 2-1: SerialNumber: syz [ 1167.396996][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1167.442031][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 1167.477085][ T9] usb 2-1: selecting invalid altsetting 0 [ 1167.550164][ T9] usb 2-1: selecting invalid altsetting 0 [ 1167.578566][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1167.627977][ T9] usb 2-1: USB disconnect, device number 52 [ 1168.290555][T29009] futex_wake_op: syz.1.8046 tries to shift op by 144; fix this program [ 1168.399766][T26604] usb 5-1: USB disconnect, device number 119 [ 1168.752274][T29021] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8051'. [ 1168.851299][T29023] syzkaller0: entered promiscuous mode [ 1168.875620][T29023] syzkaller0: entered allmulticast mode [ 1170.686954][T29032] netlink: 'syz.4.8056': attribute type 4 has an invalid length. [ 1170.765991][ T30] audit: type=1400 audit(1787353677.854:1081): avc: denied { write } for pid=29033 comm="syz.5.8043" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1171.746782][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.760058][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.007665][T29045] futex_wake_op: syz.5.8059 tries to shift op by 144; fix this program [ 1172.142718][T24258] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1172.162962][T26841] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1172.323973][T24258] usb 8-1: not running at top speed; connect to a high speed hub [ 1172.331847][T24258] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1172.342409][T24258] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.167813][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.175878][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.195649][T29056] bond1: left promiscuous mode [ 1173.204943][T26841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1173.251815][T26841] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1173.263524][T26604] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1173.280851][T24258] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1173.366791][T26841] usb 5-1: config index 0 descriptor too short (expected 2066, got 18) [ 1173.387720][T26841] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.400936][T24258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.433697][T24258] usb 8-1: Product: syz [ 1173.449680][T26841] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1173.465556][T24258] usb 8-1: Manufacturer: syz [ 1173.492250][T24258] usb 8-1: SerialNumber: syz [ 1173.508013][T26604] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1173.518608][T26841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.534766][T24258] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 1173.651532][T26604] usb 6-1: config 0 has no interfaces? [ 1173.660354][T26841] usb 5-1: Product: syz [ 1173.673207][T26841] usb 5-1: Manufacturer: syz [ 1173.678079][T24258] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 1173.685809][T26604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.470677][T26841] usb 5-1: SerialNumber: syz [ 1174.519973][T26604] usb 6-1: config 0 descriptor?? [ 1174.551267][T24258] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 1174.675283][T24258] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 1174.713095][T24258] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1174.733179][T24258] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 1174.754218][T24258] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1174.777684][T24258] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 1174.792761][T29077] syzkaller0: entered promiscuous mode [ 1174.799389][T24258] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1174.809170][T29077] syzkaller0: entered allmulticast mode [ 1174.815842][T24258] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 1174.845559][T24258] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1174.958861][T29053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.134101][T24258] usb 8-1: USB disconnect, device number 17 [ 1175.158001][T29053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.194502][T24258] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1175.495812][T24258] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1175.560284][T26604] usb 6-1: USB disconnect, device number 84 [ 1176.300011][T26841] usb 5-1: USB disconnect, device number 120 [ 1176.648167][T24258] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1176.710653][ T30] audit: type=1400 audit(1787353683.784:1082): avc: denied { map } for pid=29086 comm="syz.7.8071" path="/dev/sda1" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1176.789750][T24258] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1176.857695][T24258] keyspan 8-1:1.0: device disconnected [ 1178.826607][T26604] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1179.013817][T26604] usb 5-1: not running at top speed; connect to a high speed hub [ 1179.040823][T26604] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1179.071638][T29123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8085'. [ 1179.084027][T26604] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.101960][T26604] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1179.177037][T26604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.197194][T26604] usb 5-1: Product: syz [ 1179.216210][T26604] usb 5-1: Manufacturer: syz [ 1179.256648][T26604] usb 5-1: SerialNumber: syz [ 1179.291246][T26604] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 1179.326452][T26604] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1179.359825][T26604] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1179.407221][T26604] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1179.417603][T29133] 9pnet_virtio: no channels available for device syz [ 1179.455018][T26604] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1179.500427][T26604] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1179.536118][T26604] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1179.564962][T26604] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 1179.599145][T26604] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1179.635553][T26604] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1179.664010][T26604] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1179.705348][T26604] usb 5-1: USB disconnect, device number 121 [ 1179.776685][T26604] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1180.694363][T26604] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1180.866817][T26604] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1181.014873][T26604] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1181.061383][T26604] keyspan 5-1:1.0: device disconnected [ 1183.365579][T29183] CIFS mount error: No usable UNC path provided in device string! [ 1183.365579][T29183] [ 1183.377016][T29183] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1186.675192][ T30] audit: type=1800 audit(1787353693.754:1083): pid=29205 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8115" name="cdrom" dev="configfs" ino=151006 res=0 errno=0 [ 1187.656382][T29221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8119'. [ 1187.720627][ T30] audit: type=1800 audit(1787353693.754:1084): pid=29205 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8115" name="file" dev="configfs" ino=151010 res=0 errno=0 [ 1188.502228][T29225] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1188.509833][T29225] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1188.522560][T26841] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1188.760444][T26841] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1189.487453][T26841] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.555811][T26841] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1189.617609][T26841] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.712165][T26841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1189.754011][T26841] usb 8-1: Product: syz [ 1189.779485][T26841] usb 8-1: Manufacturer: syz [ 1189.809462][T29223] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1189.845771][T26841] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 1189.902917][T26841] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1191.305428][T26841] usb 8-1: USB disconnect, device number 18 [ 1191.393718][T26841] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1191.677903][T29254] CIFS mount error: No usable UNC path provided in device string! [ 1191.677903][T29254] [ 1191.687972][T29254] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1191.739291][T26841] garmin_gps 8-1:1.0: device disconnected [ 1192.014597][T29267] fuse: Bad value for 'fd' [ 1194.058306][T29283] fuse: Bad value for 'fd' [ 1194.634145][T29278] program syz.4.8138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1194.643588][T29278] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1196.696527][T29300] netlink: 164 bytes leftover after parsing attributes in process `syz.7.8145'. [ 1196.862870][T29306] fuse: Bad value for 'fd' [ 1198.588247][T29323] fuse: Bad value for 'fd' [ 1201.034019][T29344] program syz.6.8159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1201.043549][T29344] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1201.462485][T29352] CIFS mount error: No usable UNC path provided in device string! [ 1201.462485][T29352] [ 1201.472522][T29352] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1203.199090][T29374] futex_wake_op: syz.7.8166 tries to shift op by 144; fix this program [ 1204.002843][T29379] fuse: Bad value for 'fd' [ 1205.384472][ T10] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1205.756366][T29405] CIFS mount error: No usable UNC path provided in device string! [ 1205.756366][T29405] [ 1205.766435][T29405] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1205.795284][ T10] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice= 0.00 [ 1205.857286][ T10] usb 5-1: no configurations [ 1205.878284][ T10] usb 5-1: can't read configurations, error -22 [ 1206.042643][ T10] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1206.224011][ T10] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice= 0.00 [ 1206.275476][ T10] usb 5-1: no configurations [ 1206.295383][ T10] usb 5-1: can't read configurations, error -22 [ 1206.392509][ T10] usb usb5-port1: attempt power cycle [ 1207.369079][T29421] netlink: 200 bytes leftover after parsing attributes in process `syz.7.8182'. [ 1207.433339][ T10] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1207.696179][T29427] fuse: Bad value for 'fd' [ 1207.723961][ T30] audit: type=1400 audit(1787353714.814:1085): avc: denied { write } for pid=29428 comm="syz.4.8186" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1207.858919][ T10] usb 5-1: device not accepting address 124, error -71 [ 1208.617928][T26604] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1209.629881][T29441] futex_wake_op: syz.1.8189 tries to shift op by 144; fix this program [ 1209.673433][T26604] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1209.713340][T26604] usb 8-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1209.866476][T26604] usb 8-1: config index 0 descriptor too short (expected 2066, got 18) [ 1209.998576][T29447] CIFS mount error: No usable UNC path provided in device string! [ 1209.998576][T29447] [ 1210.008635][T29447] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1210.089223][T26604] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.169097][T26604] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1210.313037][T26604] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.362055][T26604] usb 8-1: Product: syz [ 1210.404875][T26604] usb 8-1: Manufacturer: syz [ 1210.443515][T26604] usb 8-1: SerialNumber: syz [ 1211.393718][T29459] netlink: 200 bytes leftover after parsing attributes in process `syz.6.8195'. [ 1211.565666][T26604] usb 8-1: USB disconnect, device number 19 [ 1211.953368][ T10] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1212.064080][T29473] fuse: Invalid rootmode [ 1212.529683][ T10] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1212.628522][ T10] usb 5-1: no configurations [ 1212.665337][ T10] usb 5-1: can't read configurations, error -22 [ 1213.103494][T29484] kAFS: bad VL server IP address [ 1213.146527][ T10] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1213.386133][ T10] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1213.467213][ T10] usb 5-1: no configurations [ 1213.612387][ T10] usb 5-1: can't read configurations, error -22 [ 1214.444112][ T10] usb usb5-port1: attempt power cycle [ 1215.291840][T29495] netlink: 200 bytes leftover after parsing attributes in process `syz.6.8208'. [ 1216.255694][T29507] fuse: Invalid rootmode [ 1217.287739][T29518] kAFS: bad VL server IP address [ 1219.083228][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1219.314775][ T10] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1220.225699][ T10] usb 2-1: no configurations [ 1220.271447][ T10] usb 2-1: can't read configurations, error -22 [ 1220.470777][ T10] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1220.498223][ T30] audit: type=1400 audit(1787353727.574:1086): avc: denied { write } for pid=29545 comm="syz.4.8227" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1220.722921][ T30] audit: type=1400 audit(1787353727.584:1087): avc: denied { write } for pid=29545 comm="syz.4.8227" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1220.752739][ T10] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1221.249609][T29556] kAFS: bad VL server IP address [ 1221.276660][ T10] usb 2-1: no configurations [ 1221.417744][ T10] usb 2-1: can't read configurations, error -22 [ 1222.215149][ T10] usb usb2-port1: attempt power cycle [ 1222.317385][ T30] audit: type=1800 audit(1787353727.814:1088): pid=29552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8228" name="cdrom" dev="configfs" ino=153399 res=0 errno=0 [ 1222.564856][ T30] audit: type=1800 audit(1787353727.814:1089): pid=29552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8228" name="file" dev="configfs" ino=153401 res=0 errno=0 [ 1223.846372][T29568] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1223.853825][T29568] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1224.238289][ T30] audit: type=1400 audit(1787353728.404:1090): avc: denied { write } for pid=29555 comm="syz.4.8229" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1227.055613][T29595] kAFS: bad VL server IP address [ 1229.437246][T29615] netlink: 'syz.6.8251': attribute type 4 has an invalid length. [ 1231.235475][T26841] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1231.397870][T29633] futex_wake_op: syz.1.8257 tries to shift op by 144; fix this program [ 1231.463276][T26841] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1231.521474][T26841] usb 5-1: no configurations [ 1231.546460][T26841] usb 5-1: can't read configurations, error -22 [ 1231.659362][T29637] binder: 29636:29637 ioctl c0306201 2000000001c0 returned -14 [ 1231.703128][T26841] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1231.904407][T26841] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1231.926866][T26841] usb 5-1: no configurations [ 1232.077164][T26841] usb 5-1: can't read configurations, error -22 [ 1232.098043][T26841] usb usb5-port1: attempt power cycle [ 1232.112607][T26604] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1232.306062][T26604] usb 2-1: not running at top speed; connect to a high speed hub [ 1232.333353][T26604] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1232.504741][T26604] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.516689][T26841] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1232.536459][T26604] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1232.561448][T26841] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1232.578262][T26841] usb 5-1: no configurations [ 1232.589598][T26604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.599707][T26841] usb 5-1: can't read configurations, error -22 [ 1232.736219][T26604] usb 2-1: Product: syz [ 1233.269113][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.278781][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.325841][T26604] usb 2-1: Manufacturer: syz [ 1233.380564][T29648] kAFS: bad VL server IP address [ 1233.397861][T26604] usb 2-1: SerialNumber: syz [ 1233.552753][T26604] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1234.321447][T26841] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1234.490550][T26604] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1234.561861][T26604] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1234.622087][T26604] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1234.631656][T26841] usb 5-1: device not accepting address 6, error -71 [ 1235.139665][T26841] usb usb5-port1: unable to enumerate USB device [ 1235.167623][T26604] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1235.219541][T26604] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1235.256472][T26604] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1235.274505][T22002] Bluetooth: hci3: command 0x0406 tx timeout [ 1235.341977][T26604] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 1235.395163][T26604] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1235.421885][T29666] futex_wake_op: syz.1.8268 tries to shift op by 144; fix this program [ 1235.471110][T26604] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1235.533331][T26604] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1235.622946][T26604] usb 2-1: USB disconnect, device number 56 [ 1235.962214][T26604] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1236.032729][T26604] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1236.171550][ T30] audit: type=1400 audit(1787353743.164:1091): avc: denied { write } for pid=29676 comm="syz.5.8272" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1236.997631][T26604] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1237.177053][T26604] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1237.256065][T26604] keyspan 2-1:1.0: device disconnected [ 1238.103125][T26841] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1238.119445][ T30] audit: type=1800 audit(1787353745.204:1092): pid=29691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.8266" name="cdrom" dev="configfs" ino=154345 res=0 errno=0 [ 1238.243697][ T30] audit: type=1800 audit(1787353745.204:1093): pid=29691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.8266" name="file" dev="configfs" ino=154346 res=0 errno=0 [ 1238.397668][T26841] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1239.417709][T26841] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1239.594078][T29696] kAFS: bad VL server IP address [ 1239.621563][T26841] usb 6-1: can't read configurations, error -61 [ 1239.803046][T26841] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1239.983040][T26841] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1240.025239][T26841] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1240.052109][T26841] usb 6-1: can't read configurations, error -61 [ 1240.080053][T26841] usb usb6-port1: attempt power cycle [ 1240.755237][T26841] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1241.277906][T26841] usb 6-1: device descriptor read/8, error -71 [ 1241.361987][ T30] audit: type=1400 audit(1787353748.444:1094): avc: denied { write } for pid=29712 comm="syz.5.8286" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1243.556953][T29725] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1243.601855][ T30] audit: type=1400 audit(1787353750.684:1095): avc: denied { map } for pid=29720 comm="syz.7.8288" path="socket:[154612]" dev="sockfs" ino=154612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1244.076251][T29733] futex_wake_op: syz.4.8281 tries to shift op by 144; fix this program [ 1244.877231][T29738] kAFS: bad VL server IP address [ 1245.713838][T29749] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1245.721256][T29749] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1246.532841][T29758] netlink: 'syz.4.8301': attribute type 4 has an invalid length. [ 1246.774376][T29764] futex_wake_op: syz.4.8305 tries to shift op by 144; fix this program [ 1249.425041][T29792] fuse: Bad value for 'fd' [ 1251.851202][T29831] fuse: Bad value for 'fd' [ 1252.201521][ T30] audit: type=1800 audit(1787353759.294:1096): pid=29841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8334" name="cdrom" dev="configfs" ino=155329 res=0 errno=0 [ 1252.419341][ T30] audit: type=1800 audit(1787353759.294:1097): pid=29841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8334" name="file" dev="configfs" ino=155330 res=0 errno=0 [ 1253.175205][T29853] 9pnet_virtio: no channels available for device syz [ 1253.472787][T26841] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1253.680453][T26841] usb 6-1: not running at top speed; connect to a high speed hub [ 1253.734528][T26841] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1253.816049][T26841] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.879032][T26841] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1253.991595][T26841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.046048][T26841] usb 6-1: Product: syz [ 1254.086601][T26841] usb 6-1: Manufacturer: syz [ 1254.126572][T26841] usb 6-1: SerialNumber: syz [ 1254.185982][T26841] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 1254.240107][T26841] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1255.007727][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8348'. [ 1255.094317][T26841] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1255.206907][T26841] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1255.751234][T26841] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1255.858998][T26841] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1256.637072][T26841] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1256.959621][T29897] CIFS mount error: No usable UNC path provided in device string! [ 1256.959621][T29897] [ 1256.969671][T29897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1256.990802][T26841] usb 6-1: USB disconnect, device number 89 [ 1257.082222][T26841] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1258.094058][T26841] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1258.210961][T26841] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1258.389267][T26841] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1258.604696][T26841] keyspan 6-1:1.0: device disconnected [ 1259.035482][T29921] input: syz0 as /devices/virtual/input/input60 [ 1260.357016][T29932] futex_wake_op: syz.7.8351 tries to shift op by 144; fix this program [ 1261.134978][T29947] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8353'. [ 1262.752573][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1262.886340][T29968] futex_wake_op: syz.1.8378 tries to shift op by 144; fix this program [ 1263.003622][T29971] netlink: 'syz.6.8379': attribute type 4 has an invalid length. [ 1263.047485][ T9] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1263.123769][ T9] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1263.261462][ T9] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.343999][ T9] usb 8-1: config 220 has no interface number 2 [ 1263.396062][ T9] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1264.153425][ T5796] kworker/0:8 (5796) used greatest stack depth: 16584 bytes left [ 1264.380455][ T9] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1264.452764][ T9] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1264.513062][ T9] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1264.586987][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.619658][T29985] input: syz0 as /devices/virtual/input/input61 [ 1264.640334][ T9] usb 8-1: Product: syz [ 1265.334781][ T9] usb 8-1: Manufacturer: syz [ 1265.406487][ T9] usb 8-1: SerialNumber: syz [ 1265.460616][ T9] usb 8-1: can't set config #220, error -71 [ 1265.521770][ T9] usb 8-1: USB disconnect, device number 20 [ 1267.650843][T30014] netlink: 'syz.4.8391': attribute type 4 has an invalid length. [ 1267.749663][T30016] 9pnet_virtio: no channels available for device syz [ 1268.935594][T26604] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1269.967883][T26841] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1269.998585][T26604] usb 2-1: not running at top speed; connect to a high speed hub [ 1270.019799][T26604] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1270.500763][ T30] audit: type=1400 audit(1787353777.574:1098): avc: denied { write } for pid=30032 comm="syz.7.8397" name="functions" dev="configfs" ino=55118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1270.566550][T26604] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.605779][T26841] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1271.262253][T26604] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1271.331454][ T30] audit: type=1400 audit(1787353777.574:1099): avc: denied { write } for pid=30032 comm="syz.7.8397" name="mjpeg" dev="configfs" ino=156440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1271.371554][T26841] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1271.416657][T26604] usb 2-1: string descriptor 0 read error: -71 [ 1271.423523][T26841] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.460351][T26604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.489212][T26841] usb 6-1: config 220 has no interface number 2 [ 1271.518340][T26604] usb 2-1: can't set config #1, error -71 [ 1271.546631][T26841] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1271.577223][T26604] usb 2-1: USB disconnect, device number 57 [ 1271.633416][T26841] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1271.740550][T26841] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1271.768646][T26841] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1271.796456][T26841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.846589][T26841] usb 6-1: Product: syz [ 1271.908128][T26841] usb 6-1: Manufacturer: syz [ 1271.957128][T26841] usb 6-1: SerialNumber: syz [ 1272.030143][T26841] usb 6-1: can't set config #220, error -71 [ 1272.138296][T26841] usb 6-1: USB disconnect, device number 90 [ 1275.624621][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1275.833024][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1276.560796][T30092] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 1276.569248][T30092] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 1276.596904][T30092] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 1276.624950][T30092] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 1276.683572][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1276.759347][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.835489][ T10] usb 5-1: config 220 has no interface number 2 [ 1276.885504][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1277.048914][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1277.210624][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1277.248068][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1277.265974][T30110] bridge1: entered promiscuous mode [ 1277.300118][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.314303][T30110] bridge1: entered allmulticast mode [ 1277.356095][ T10] usb 5-1: Product: syz [ 1277.386518][ T10] usb 5-1: Manufacturer: syz [ 1277.414419][ T10] usb 5-1: SerialNumber: syz [ 1277.619066][T30114] netlink: 244 bytes leftover after parsing attributes in process `syz.6.8422'. [ 1277.655169][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1277.839597][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 1277.874622][ T10] usb 5-1: selecting invalid altsetting 0 [ 1277.880530][T30118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8423'. [ 1277.938676][ T10] usb 5-1: selecting invalid altsetting 0 [ 1278.793971][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1278.965685][ T10] usb 5-1: USB disconnect, device number 7 [ 1280.043300][T30135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8427'. [ 1281.918266][ T30] audit: type=1400 audit(1787353789.004:1100): avc: denied { accept } for pid=30151 comm="syz.4.8433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1284.632556][T26604] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1285.555007][T30186] bridge1: left promiscuous mode [ 1285.564328][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8441'. [ 1285.594534][T26604] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1285.758523][T30185] sch_tbf: burst 1521 is lower than device lo mtu (11337746) ! [ 1285.827783][T26604] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1285.982425][T26604] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.374174][T30208] fuse: Bad value for 'fd' [ 1287.028341][T26604] usb 5-1: config 220 has no interface number 2 [ 1287.085379][T26604] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1287.874042][T26604] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1288.044619][T26604] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1288.821796][T26604] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1289.054093][T26604] usb 5-1: string descriptor 0 read error: -71 [ 1289.599952][T26604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.737376][T26604] usb 5-1: can't set config #220, error -71 [ 1289.830823][T26604] usb 5-1: USB disconnect, device number 8 [ 1294.564345][ T30] audit: type=1800 audit(1787353801.645:1101): pid=30279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8460" name="landingPage" dev="configfs" ino=157867 res=0 errno=0 [ 1294.633765][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.640135][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.732946][T30281] fuse: Unknown parameter 'fd0x0000000000000005' [ 1297.154890][T30303] jffs2: notice: (30303) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1299.428134][T30323] kAFS: bad VL server IP address [ 1299.855987][T30326] ip_tables: iptables: counters copy to user failed while replacing table [ 1300.349028][T30330] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1301.328714][ T30] audit: type=1400 audit(1787353808.365:1102): avc: denied { map } for pid=30341 comm="syz.4.8483" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1301.390379][T26841] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 1301.488101][ T30] audit: type=1400 audit(1787353808.365:1103): avc: denied { execute } for pid=30341 comm="syz.4.8483" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1301.669166][T26841] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1301.850315][T26841] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1301.880038][T26841] usb 6-1: config 0 has no interface number 0 [ 1301.913117][T26841] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1301.973762][T26841] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1302.035285][T26841] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1302.106139][T26841] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1302.169176][T26841] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1302.208380][T30358] fuse: Invalid rootmode [ 1302.218775][T26841] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1302.299476][T26841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.345983][T26841] usb 6-1: config 0 descriptor?? [ 1302.447090][T30342] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1302.495099][T30342] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1302.574355][T26841] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1302.844815][T24258] usb 6-1: USB disconnect, device number 91 [ 1302.910651][T24258] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1303.902769][T30389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8504'. [ 1304.135099][T30391] fuse: Invalid rootmode [ 1304.687216][T26841] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1304.900094][T30401] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1305.111388][T26841] usb 2-1: Using ep0 maxpacket: 32 [ 1305.140486][T26841] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1305.214714][T26841] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1305.870435][T26841] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1305.967160][ T30] audit: type=1400 audit(1787353813.055:1104): avc: denied { write } for pid=30408 comm="syz.6.8512" name="functions" dev="configfs" ino=55118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1306.193149][T26841] usb 2-1: Product: syz [ 1306.220741][T26841] usb 2-1: Manufacturer: syz [ 1306.363427][T26841] usb 2-1: SerialNumber: syz [ 1306.561373][T26841] usb 2-1: config 0 descriptor?? [ 1306.572356][ T30] audit: type=1400 audit(1787353813.255:1105): avc: denied { write } for pid=30408 comm="syz.6.8512" name="functions" dev="configfs" ino=55118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1306.637732][T30393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1306.699916][T26841] hub 2-1:0.0: bad descriptor, ignoring hub [ 1306.735367][T26841] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1307.109302][T30432] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8519'. [ 1307.221361][T30436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.322265][T30436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.466557][T30438] netlink: 'syz.6.8521': attribute type 4 has an invalid length. [ 1307.732963][T30442] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8522'. [ 1308.238020][T30448] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1308.291511][T26841] usb 2-1: USB disconnect, device number 58 [ 1310.605408][ T30] audit: type=1400 audit(1787353817.696:1106): avc: denied { write } for pid=30458 comm="syz.1.8527" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1310.802040][T26604] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1310.982754][T26604] usb 5-1: Using ep0 maxpacket: 32 [ 1311.031718][T26604] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1311.142370][ T30] audit: type=1400 audit(1787353818.146:1107): avc: denied { write } for pid=30468 comm="syz.5.8531" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1311.220323][T26604] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.298089][T26604] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1311.371047][T26604] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1311.444500][T26604] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1311.536337][T26604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.578909][T26604] usb 5-1: Product: syz [ 1311.606613][ T30] audit: type=1400 audit(1787353818.696:1108): avc: denied { write } for pid=30473 comm="syz.1.8532" name="ports" dev="configfs" ino=2715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1311.635039][T26604] usb 5-1: Manufacturer: syz [ 1311.674365][T26604] usb 5-1: SerialNumber: syz [ 1311.738556][T23265] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 1311.764154][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1312.050410][T26604] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input62 [ 1313.969015][T26604] imon:send_packet: packet tx failed (-71) [ 1314.032444][T26604] imon 5-1:155.0: panel buttons/knobs setup failed [ 1314.052411][T30502] comedi comedi1: rti800: I/O base address or length out of range [ 1314.100600][T26604] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1314.192279][T26604] (id 0x00) [ 1314.417534][ T30] audit: type=1400 audit(1787353821.506:1109): avc: denied { write } for pid=30509 comm="syz.6.8544" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1314.561325][T30513] CIFS mount error: No usable UNC path provided in device string! [ 1314.561325][T30513] [ 1314.571377][T30513] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1314.750734][T26604] rc_core: IR keymap rc-imon-pad not found [ 1314.802098][T26604] Registered IR keymap rc-empty [ 1315.737592][T26604] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1316.705839][T26604] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1316.804871][T26604] imon:send_packet: packet tx failed (-71) [ 1316.850888][T26604] imon 5-1:155.0: remote input dev register failed [ 1317.483584][T26604] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 1317.658673][T30542] netlink: 'syz.6.8554': attribute type 27 has an invalid length. [ 1317.730008][T30542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8554'. [ 1317.814730][T30542] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1317.875391][T26604] imon 5-1:155.0: unable to initialize intf0, err 0 [ 1317.932632][T26604] imon:imon_probe: failed to initialize context! [ 1317.989083][T26604] imon 5-1:155.0: unable to register, err -19 [ 1318.056448][T26604] usb 5-1: USB disconnect, device number 9 [ 1318.164708][T30550] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1318.171679][T30550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1318.181336][T30550] vhci_hcd vhci_hcd.0: Device attached [ 1318.420448][T26841] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1319.141263][T30554] vhci_hcd: connection closed [ 1319.219796][ T207] vhci_hcd vhci_hcd.1: stop threads [ 1319.389916][ T207] vhci_hcd vhci_hcd.1: release socket [ 1319.524194][T30567] CIFS mount error: No usable UNC path provided in device string! [ 1319.524194][T30567] [ 1319.534265][T30567] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1319.598077][ T207] vhci_hcd vhci_hcd.1: disconnect device [ 1321.923268][T30588] futex_wake_op: syz.7.8552 tries to shift op by 144; fix this program [ 1322.240697][T30596] FAULT_INJECTION: forcing a failure. [ 1322.240697][T30596] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1322.308282][T30596] CPU: 0 UID: 0 PID: 30596 Comm: syz.1.8567 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.308304][T30596] Tainted: [L]=SOFTLOCKUP [ 1322.308308][T30596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1322.308315][T30596] Call Trace: [ 1322.308320][T30596] [ 1322.308325][T30596] dump_stack_lvl+0x100/0x190 [ 1322.308346][T30596] should_fail_ex.cold+0x5/0xa [ 1322.308361][T30596] get_futex_key+0x1d0/0x14f0 [ 1322.308375][T30596] ? __pfx_get_futex_key+0x10/0x10 [ 1322.308388][T30596] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1322.308405][T30596] futex_wait_setup+0x91/0x540 [ 1322.308424][T30596] __futex_wait+0x19f/0x300 [ 1322.308440][T30596] ? __pfx___futex_wait+0x10/0x10 [ 1322.308454][T30596] ? __pfx_try_to_wake_up+0x10/0x10 [ 1322.308464][T30596] ? futex_hash+0x311/0x400 [ 1322.308475][T30596] ? __pfx_futex_wake_mark+0x10/0x10 [ 1322.308491][T30596] ? find_held_lock+0x2b/0x80 [ 1322.308505][T30596] ? futex_wake+0x4ea/0x5e0 [ 1322.308523][T30596] futex_wait+0xe6/0x370 [ 1322.308538][T30596] ? __pfx_futex_wait+0x10/0x10 [ 1322.308557][T30596] ? rcu_read_lock_any_held+0x6a/0x90 [ 1322.308571][T30596] ? find_held_lock+0x2b/0x80 [ 1322.308583][T30596] ? ksys_write+0x190/0x250 [ 1322.308597][T30596] ? ksys_write+0x190/0x250 [ 1322.308611][T30596] do_futex+0x265/0x440 [ 1322.308624][T30596] ? __pfx_do_futex+0x10/0x10 [ 1322.308636][T30596] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1322.308657][T30596] __x64_sys_futex+0x34f/0x4d0 [ 1322.308671][T30596] ? fput+0x7c/0x100 [ 1322.308680][T30596] ? __pfx___x64_sys_futex+0x10/0x10 [ 1322.308691][T30596] ? ksys_write+0x1ac/0x250 [ 1322.308705][T30596] ? __pfx_ksys_write+0x10/0x10 [ 1322.308722][T30596] do_syscall_64+0x123/0x790 [ 1322.308740][T30596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.308752][T30596] RIP: 0033:0x7fd84f99e0d9 [ 1322.308763][T30596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.308774][T30596] RSP: 002b:00007fd8507f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1322.308785][T30596] RAX: ffffffffffffffda RBX: 00007fd84fc25fa8 RCX: 00007fd84f99e0d9 [ 1322.308792][T30596] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd84fc25fa8 [ 1322.308798][T30596] RBP: 00007fd84fc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.308805][T30596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.308811][T30596] R13: 00007fd84fc26038 R14: 00007fffea383ee0 R15: 00007fffea383fc8 [ 1322.308825][T30596] [ 1324.067147][T30619] netlink: 'syz.7.8573': attribute type 4 has an invalid length. [ 1324.291174][T26841] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1324.603947][T30629] CIFS mount error: No usable UNC path provided in device string! [ 1324.603947][T30629] [ 1324.614010][T30629] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1326.869842][T30646] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1326.930774][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056af7000: rx timeout, send abort [ 1326.951932][T30645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8581'. [ 1327.220271][T26841] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1327.380984][T26841] usb 2-1: Using ep0 maxpacket: 8 [ 1327.430815][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056af4c00: rx timeout, send abort [ 1327.439496][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056af7000: abort rx timeout. Force session deactivation [ 1327.523395][T26841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1327.567291][T26841] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 1327.596055][T30660] netlink: 'syz.6.8585': attribute type 4 has an invalid length. [ 1327.629266][T26841] usb 2-1: config 6 interface 0 has no altsetting 0 [ 1327.668317][T26841] usb 2-1: string descriptor 0 read error: -22 [ 1327.688512][T26841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.757948][T26841] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 1327.799299][T30664] wlan1 speed is unknown, defaulting to 1000 [ 1327.938994][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056af4c00: abort rx timeout. Force session deactivation [ 1328.057050][T26841] pwc: Failed to set LED on/off time (-71) [ 1328.225331][T30667] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1328.317576][T26841] pwc: send_video_command error -71 [ 1328.345572][T26841] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1328.402641][T26841] Philips webcam 2-1:6.0: probe with driver Philips webcam failed with error -71 [ 1328.455843][T26841] usb 2-1: USB disconnect, device number 59 [ 1329.525753][T30679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8593'. [ 1332.647111][T30720] netlink: 'syz.5.8598': attribute type 4 has an invalid length. [ 1332.665678][T30721] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8607'. [ 1332.848633][T30725] CIFS: Attempting to mount //127.0.0.1/s:e[12harefDr=root [ 1332.896894][T30725] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1332.935765][ T30] audit: type=1400 audit(1787353840.027:1110): avc: denied { watch } for pid=30722 comm="syz.5.8608" path="/178/file1" dev="tmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1332.960636][T30725] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1333.071559][T30730] <- [ 1334.054844][T30735] Bluetooth: MGMT ver 1.23 [ 1334.841842][T30747] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1334.849261][T30747] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1334.970515][T30751] netlink: 'syz.5.8618': attribute type 4 has an invalid length. [ 1335.025090][ T30] audit: type=1400 audit(1787353842.117:1111): avc: denied { write } for pid=30752 comm="syz.6.8619" name="functions" dev="configfs" ino=55118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1335.296589][ T30] audit: type=1400 audit(1787353842.157:1112): avc: denied { write } for pid=30752 comm="syz.6.8619" name="functions" dev="configfs" ino=55118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1335.348972][T30760] overlayfs: missing 'workdir' [ 1335.364107][T30760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1335.777811][T30769] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1335.906191][T30767] netlink: Failed to add 5 helper -22 [ 1335.943688][T30767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.478437][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880431f4400: rx timeout, send abort [ 1336.971333][T30779] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1336.978726][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880431f7800: rx timeout, send abort [ 1336.986957][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880431f4400: abort rx timeout. Force session deactivation [ 1336.997120][T30779] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1337.478760][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880431f7800: abort rx timeout. Force session deactivation [ 1337.958261][T30801] CIFS mount error: No usable UNC path provided in device string! [ 1337.958261][T30801] [ 1337.968517][T30801] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1338.899279][T30805] wlan1 speed is unknown, defaulting to 1000 [ 1339.055518][T30811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8641'. [ 1340.227316][ T30] audit: type=1400 audit(1787353847.317:1113): avc: denied { write } for pid=30821 comm="syz.6.8644" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1340.321358][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d1c800: rx timeout, send abort [ 1340.821397][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d1e000: rx timeout, send abort [ 1340.829763][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d1c800: abort rx timeout. Force session deactivation [ 1341.329588][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d1e000: abort rx timeout. Force session deactivation [ 1342.559202][T30844] CIFS mount error: No usable UNC path provided in device string! [ 1342.559202][T30844] [ 1342.569271][T30844] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1344.839524][T30857] comedi comedi3: pcl818: I/O base address not correctly aligned [ 1345.404116][ T30] audit: type=1400 audit(1787353852.488:1114): avc: denied { connect } for pid=30888 comm="syz.4.8666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1345.587447][T30892] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1347.199223][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043b59400: rx timeout, send abort [ 1347.699257][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043b59800: rx timeout, send abort [ 1347.707504][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043b59400: abort rx timeout. Force session deactivation [ 1348.207470][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043b59800: abort rx timeout. Force session deactivation [ 1348.586213][ T30] audit: type=1400 audit(1787353855.678:1115): avc: denied { write } for pid=30932 comm="syz.6.8683" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1349.778289][ T30] audit: type=1400 audit(1787353856.868:1116): avc: denied { append } for pid=30950 comm="syz.4.8688" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1351.702737][T30966] fuse: Invalid rootmode [ 1352.583948][T30984] kAFS: bad VL server IP address [ 1352.679961][T24258] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1352.889141][T24258] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1352.947248][T24258] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1353.002867][T24258] usb 5-1: Product: syz [ 1353.030360][T30998] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8706'. [ 1353.048046][T24258] usb 5-1: Manufacturer: syz [ 1353.072412][T24258] usb 5-1: SerialNumber: syz [ 1353.107652][T24258] usb 5-1: config 0 descriptor?? [ 1353.374796][T24258] usb 5-1: USB disconnect, device number 10 [ 1353.883388][T31018] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1353.944911][T31022] md: md0 stopped. [ 1354.207958][T31029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8719'. [ 1354.323176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079da7c00: rx timeout, send abort [ 1354.823215][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035ee7c00: rx timeout, send abort [ 1354.831568][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079da7c00: abort rx timeout. Force session deactivation [ 1355.331448][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035ee7c00: abort rx timeout. Force session deactivation [ 1356.061420][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.178672][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1357.775285][T31069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8732'. [ 1359.756774][T31079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8735'. [ 1359.842700][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057370000: rx timeout, send abort [ 1360.342746][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057371800: rx timeout, send abort [ 1360.358036][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057370000: abort rx timeout. Force session deactivation [ 1360.613498][T24258] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1360.850932][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057371800: abort rx timeout. Force session deactivation [ 1361.521311][T26841] kernel write not supported for file /failslab/ignore-gfp-wait (pid: 26841 comm: kworker/0:9) [ 1363.576178][ T30] audit: type=1400 audit(1787353870.659:1117): avc: denied { lock } for pid=31095 comm="syz.5.8741" path="socket:[162495]" dev="sockfs" ino=162495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1364.362686][ T30] audit: type=1400 audit(1787353871.379:1118): avc: denied { nlmsg_write } for pid=31112 comm="syz.7.8745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1364.564564][ T30] audit: type=1400 audit(1787353871.579:1119): avc: denied { ioctl } for pid=31115 comm="syz.6.8746" path="socket:[162536]" dev="sockfs" ino=162536 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1366.297940][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1368.663596][ T30] audit: type=1400 audit(1787353875.759:1120): avc: denied { write } for pid=31157 comm="syz.1.8762" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1368.835974][T23265] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 1370.394144][ T30] audit: type=1800 audit(1787353875.919:1121): pid=31161 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8747" name="addr_trtype" dev="configfs" ino=162876 res=0 errno=0 [ 1371.465345][T24258] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 1372.326940][T31183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.334943][T31183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.356538][T31183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=876 sclass=netlink_route_socket pid=31183 comm=syz.1.8770 [ 1372.448050][T24258] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1372.516373][T24258] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1372.574497][T24258] usb 8-1: config 0 has no interface number 0 [ 1372.701404][T31188] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1372.753732][T24258] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1372.817077][T24258] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1373.000910][T24258] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1373.071647][ T30] audit: type=1800 audit(1787353880.169:1122): pid=31195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.8776" name="addr_trtype" dev="configfs" ino=163067 res=0 errno=0 [ 1373.106132][T24258] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1373.144122][T31165] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 1373.179208][T24258] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1373.250328][T24258] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1373.322228][T24258] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.392165][T24258] usb 8-1: config 0 descriptor?? [ 1373.454318][T31172] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1373.517715][T31172] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1373.633086][T24258] usb 8-1: can't set config #0, error -71 [ 1373.715370][T24258] usb 8-1: USB disconnect, device number 21 [ 1374.742594][T31223] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8783'. [ 1376.803797][ T30] audit: type=1800 audit(1787353883.899:1123): pid=31236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8790" name="cdrom" dev="configfs" ino=163292 res=0 errno=0 [ 1377.007040][ T30] audit: type=1800 audit(1787353883.929:1124): pid=31236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.8790" name="file" dev="configfs" ino=163294 res=0 errno=0 [ 1377.214055][T31254] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1377.242516][ T10] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 1377.273647][T31255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8792'. [ 1377.330539][T31255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.337750][T31255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.415765][T31261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8797'. [ 1377.447944][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1377.476251][T31258] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8796'. [ 1377.518492][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1377.555898][ T10] usb 2-1: config 0 has no interface number 0 [ 1377.587288][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1377.624918][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880543e8400: rx timeout, send abort [ 1377.653542][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1377.710367][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1377.761191][ T1110] IPVS: starting estimator thread 0... [ 1377.802135][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1377.889135][T31264] IPVS: using max 78 ests per chain, 187200 per kthread [ 1377.911018][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1377.998412][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1378.107718][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.124956][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bec1800: rx timeout, send abort [ 1378.133909][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880543e8400: abort rx timeout. Force session deactivation [ 1378.236733][ T10] usb 2-1: config 0 descriptor?? [ 1378.304338][T31247] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1378.365415][T31247] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1378.612552][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1378.633182][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bec1800: abort rx timeout. Force session deactivation [ 1380.003047][ T121] usb 2-1: USB disconnect, device number 60 [ 1380.073102][ T121] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1381.396064][T31307] netlink: 200 bytes leftover after parsing attributes in process `syz.6.8811'. [ 1381.781314][ T121] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1382.814679][ T121] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1382.875999][T31319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1382.927751][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.049003][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dc0bc00: rx timeout, send abort [ 1383.549038][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dc0b000: rx timeout, send abort [ 1383.558074][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dc0bc00: abort rx timeout. Force session deactivation [ 1383.659733][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.776608][ T121] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1383.981198][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.057247][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dc0b000: abort rx timeout. Force session deactivation [ 1384.871792][T31327] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 1385.022861][ T121] usb 2-1: config 0 descriptor?? [ 1385.168166][ T121] usb 2-1: can't set config #0, error -71 [ 1385.232642][ T121] usb 2-1: USB disconnect, device number 61 [ 1385.408945][T31346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.466451][T31348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.182192][T31357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8827'. [ 1386.338628][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033a8cc00: rx timeout, send abort [ 1386.376897][T24258] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1386.408183][T31364] bridge_slave_0: left allmulticast mode [ 1386.439992][T31364] bridge_slave_0: left promiscuous mode [ 1386.459181][T31364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.482032][T31364] bridge_slave_1: left allmulticast mode [ 1386.504192][T31364] bridge_slave_1: left promiscuous mode [ 1386.528179][T31364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.559700][T31364] bond0: (slave bond_slave_0): Releasing backup interface [ 1386.571006][T24258] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1386.601173][T24258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.634381][T31364] bond0: (slave bond_slave_1): Releasing backup interface [ 1386.680056][T24258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.696513][T31364] team0: Port device team_slave_0 removed [ 1386.735186][T24258] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1386.753860][T31364] team0: Port device team_slave_1 removed [ 1386.779844][T31364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.798993][T24258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.818922][T31364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.838667][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033a8e000: rx timeout, send abort [ 1386.847021][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033a8cc00: abort rx timeout. Force session deactivation [ 1387.346894][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033a8e000: abort rx timeout. Force session deactivation [ 1387.474378][T24258] usb 2-1: config 0 descriptor?? [ 1387.749258][T31364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.868116][T31364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.920314][T31364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1387.959801][T31378] fuse: Invalid rootmode [ 1388.139568][T31385] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1388.617432][T24258] usbhid 2-1:0.0: can't add hid device: -71 [ 1388.649288][T24258] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1388.703111][T24258] usb 2-1: USB disconnect, device number 62 [ 1389.955909][T31408] netlink: 'syz.6.8842': attribute type 4 has an invalid length. [ 1390.423390][ T30] audit: type=1400 audit(1787353897.520:1125): avc: denied { create } for pid=31416 comm="syz.5.8847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1391.675056][T31427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1392.067130][ T121] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 1392.114653][T31438] gadgetfs: bound to dummy_udc driver [ 1392.279429][ T121] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1392.309141][ T121] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1392.325269][T31445] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1392.332520][T31445] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1392.340989][T31445] vhci_hcd vhci_hcd.0: Device attached [ 1392.366402][T24258] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1392.376089][ T121] usb 2-1: config 0 has no interface number 0 [ 1392.392728][ T121] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1392.406773][T26604] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1392.423345][ C0] gadgetfs: connected [ 1392.433830][T26604] gadgetfs: disconnected [ 1392.441989][ T121] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1392.532710][ T121] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1392.636519][T24258] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1392.646565][ T10] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 1392.676514][ C0] gadgetfs: connected [ 1392.681069][T26604] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1393.486871][T24258] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1393.499378][ T121] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1393.527709][T26604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.646402][T24258] usb 5-1: can't read configurations, error -61 [ 1393.667211][ C0] gadgetfs: configuration #1 [ 1393.677300][T26604] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input65 [ 1393.695793][ T121] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1393.749805][T31447] vhci_hcd: connection reset by peer [ 1393.814789][ T121] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1393.834257][ T30] audit: type=1400 audit(1787353900.910:1126): avc: denied { write } for pid=31454 comm="syz.5.8860" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1394.757782][T24258] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1394.777037][T19890] vhci_hcd vhci_hcd.7: stop threads [ 1394.890591][T19890] vhci_hcd vhci_hcd.7: release socket [ 1395.018702][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.039441][T19890] vhci_hcd vhci_hcd.7: disconnect device [ 1395.163809][T24258] usb 5-1: device descriptor read/all, error -71 [ 1395.175340][T31438] gadgetfs: suspended from state 3 [ 1395.194760][ T121] usb 2-1: config 0 descriptor?? [ 1395.241004][T31464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8862'. [ 1395.262186][T31465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8863'. [ 1395.277083][T24258] usb usb5-port1: attempt power cycle [ 1395.296021][T31438] gadgetfs: disconnected [ 1395.305906][ T121] usb 2-1: can't set config #0, error -71 [ 1395.335884][T26604] usb 1-1: USB disconnect, device number 97 [ 1395.371843][ T121] usb 2-1: USB disconnect, device number 63 [ 1395.607699][ T30] audit: type=1326 audit(1787353902.710:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1395.737203][T31481] fuse: Invalid rootmode [ 1395.828481][ T30] audit: type=1326 audit(1787353902.740:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1396.829775][ T30] audit: type=1326 audit(1787353902.750:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1397.679711][T31165] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 1397.709805][ T30] audit: type=1326 audit(1787353902.750:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1397.859660][T31501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8878'. [ 1397.967371][ T30] audit: type=1326 audit(1787353902.750:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1398.137219][T24258] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1398.175317][ T30] audit: type=1326 audit(1787353902.750:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1398.320083][T24258] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1398.353607][ T30] audit: type=1326 audit(1787353902.750:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1398.422700][T24258] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1398.504321][T24258] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1398.565121][T24258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.583745][ T30] audit: type=1326 audit(1787353902.750:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1398.615633][ T10] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1398.659195][T24258] usb 6-1: Product: syz [ 1398.684233][T24258] usb 6-1: Manufacturer: syz [ 1398.716117][T24258] usb 6-1: SerialNumber: syz [ 1398.758826][T24258] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 1398.789688][T31513] fuse: Invalid rootmode [ 1398.817548][ T30] audit: type=1326 audit(1787353902.750:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31473 comm="syz.6.8867" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc93639e0d9 code=0x7ffc0000 [ 1398.877608][T24258] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1398.951407][T24258] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1399.054840][ T30] audit: type=1400 audit(1787353902.860:1136): avc: denied { write } for pid=31480 comm="syz.1.8870" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1399.566032][T24258] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1399.738667][T24258] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1399.771555][T24258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.799113][T24258] usb 5-1: config 0 has no interfaces? [ 1399.827305][T24258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.866681][T24258] usb 5-1: config 0 descriptor?? [ 1401.775322][ T30] audit: type=1400 audit(1787353908.821:1137): avc: denied { ioctl } for pid=31537 comm="syz.7.8890" path="socket:[165276]" dev="sockfs" ino=165276 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1401.913714][T31542] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1401.920880][T31542] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1401.929444][T31542] vhci_hcd vhci_hcd.0: Device attached [ 1402.175865][T26604] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1402.454957][T31544] vhci_hcd: connection reset by peer [ 1402.473674][ T6290] vhci_hcd vhci_hcd.6: stop threads [ 1402.488051][ T6290] vhci_hcd vhci_hcd.6: release socket [ 1403.291125][T31503] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 1403.410117][ T6290] vhci_hcd vhci_hcd.6: disconnect device [ 1403.427787][T24258] usb 5-1: USB disconnect, device number 14 [ 1403.501301][ T10] usb 6-1: USB disconnect, device number 93 [ 1403.539907][ T30] audit: type=1400 audit(1787353910.641:1138): avc: denied { write } for pid=31557 comm="syz.1.8896" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1403.592135][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1403.648749][T31563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8897'. [ 1404.180440][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1404.574793][ T10] ti_usb_3410_5052 6-1:2.0: device disconnected [ 1404.601521][T31563] bond1: entered promiscuous mode [ 1404.690222][T31563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1404.799806][ T30] audit: type=1400 audit(1787353911.901:1139): avc: denied { write } for pid=31574 comm="syz.7.8892" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1405.004841][ T30] audit: type=1400 audit(1787353911.971:1140): avc: denied { write } for pid=31574 comm="syz.7.8892" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1405.305608][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1406.246863][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1406.281125][ T10] usb 8-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice=1b.ca [ 1406.346878][ T10] usb 8-1: config 0 has an invalid interface number: 80 but max is 0 [ 1406.686146][ T10] usb 8-1: config 0 has no interface number 0 [ 1407.332540][ T10] usb 8-1: config 0 interface 80 has no altsetting 0 [ 1407.346219][T26604] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1407.354018][T31600] mass_storage.0/lun.0: file too small: file0 [ 1407.367462][ T30] audit: type=1800 audit(1787353914.451:1141): pid=31600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.8909" name="file" dev="configfs" ino=165699 res=0 errno=0 [ 1407.436802][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.488289][ T10] usb 8-1: Product: syz [ 1407.518191][ T10] usb 8-1: Manufacturer: syz [ 1407.632978][ T10] usb 8-1: SerialNumber: syz [ 1407.728196][ T10] usb 8-1: config 0 descriptor?? [ 1407.867079][T31165] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1408.004870][ T10] keyspan 8-1:0.80: Keyspan - (without firmware) converter detected [ 1408.157289][ T10] usb 8-1: USB disconnect, device number 22 [ 1408.212912][ T10] keyspan 8-1:0.80: device disconnected [ 1411.091955][T31643] kAFS: bad VL server IP address [ 1412.119493][ T30] audit: type=1400 audit(1787353919.221:1142): avc: denied { write } for pid=31658 comm="syz.7.8929" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1412.467383][T31665] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1415.620976][T31697] kAFS: bad VL server IP address [ 1417.247507][T31719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8950'. [ 1417.503587][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.707484][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1418.279439][T31719] bond2: entered promiscuous mode [ 1418.331472][T31719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1421.714666][ T10] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1421.933557][ T30] audit: type=1400 audit(1787353929.032:1143): avc: denied { write } for pid=31763 comm="syz.4.8962" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1422.032777][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1422.074093][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1422.086738][ T30] audit: type=1400 audit(1787353929.072:1144): avc: denied { write } for pid=31763 comm="syz.4.8962" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1422.242879][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1423.240870][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1423.281440][ T30] audit: type=1400 audit(1787353930.312:1145): avc: denied { bind } for pid=31765 comm="syz.7.8963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1423.350135][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.410136][ T10] usb 6-1: Product: syz [ 1423.434350][ T10] usb 6-1: Manufacturer: syz [ 1423.478869][ T10] usb 6-1: SerialNumber: syz [ 1423.588953][T31780] netlink: 'syz.4.8966': attribute type 4 has an invalid length. [ 1423.720787][T31779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31779 comm=syz.7.8967 [ 1423.774418][T31779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31779 comm=syz.7.8967 [ 1423.975469][ T10] usb 6-1: USB disconnect, device number 94 [ 1424.321288][T31755] udevd[31755]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.872791][T31812] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8980'. [ 1424.974433][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1426.045261][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1426.059582][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1426.074989][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1426.098664][ T10] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1426.116699][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1426.125785][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1426.159382][ T10] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1426.201981][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1426.222813][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063557c00: rx timeout, send abort [ 1426.263191][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1426.280949][ T10] usb 2-1: media controller created [ 1426.306559][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1426.374845][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1426.430985][T31825] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1426.649468][ T10] usb 2-1: USB disconnect, device number 64 [ 1426.721996][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063554c00: rx timeout, send abort [ 1426.731858][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063557c00: abort rx timeout. Force session deactivation [ 1426.935017][T24258] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1427.144471][T24258] usb 5-1: Using ep0 maxpacket: 32 [ 1427.182290][T24258] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1427.226934][T24258] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1427.237056][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063554c00: abort rx timeout. Force session deactivation [ 1427.323559][T24258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.359314][T24258] usb 5-1: Product: syz [ 1427.379873][T24258] usb 5-1: Manufacturer: syz [ 1427.405595][T24258] usb 5-1: SerialNumber: syz [ 1427.646534][T24258] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1428.351558][ T10] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1428.433339][ T30] audit: type=1400 audit(1787353935.522:1146): avc: denied { write } for pid=31861 comm="syz.4.9001" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1428.508265][T24258] usb 5-1: USB disconnect, device number 15 [ 1428.624651][T31868] udevd[31868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.655879][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1428.706707][ T10] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1428.721798][ T30] audit: type=1400 audit(1787353935.622:1147): avc: denied { write } for pid=31861 comm="syz.4.9001" name="rd_mcp_0" dev="configfs" ino=126121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1428.835796][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.916053][ T10] usb 6-1: Product: syz [ 1428.958054][ T10] usb 6-1: Manufacturer: syz [ 1428.998818][ T10] usb 6-1: SerialNumber: syz [ 1430.259566][ T10] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1430.406992][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1430.519501][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1430.832116][ T10] usb 6-1: media controller created [ 1432.024732][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1432.280961][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1433.326322][ T10] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1434.275236][ T10] usb 6-1: USB disconnect, device number 95 [ 1434.531747][ T30] audit: type=1400 audit(1787353941.633:1148): avc: denied { write } for pid=31945 comm="syz.7.9028" name="c.1" dev="configfs" ino=55123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1437.834257][ T30] audit: type=1800 audit(1787353944.923:1149): pid=31969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.9035" name="cdrom" dev="configfs" ino=167769 res=0 errno=0 [ 1438.169599][ T30] audit: type=1800 audit(1787353944.963:1150): pid=31969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.9035" name="file" dev="configfs" ino=167772 res=0 errno=0 [ 1439.301766][T31991] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9042'. [ 1443.102216][ T30] audit: type=1800 audit(1787353950.203:1151): pid=32018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.9050" name="cdrom" dev="configfs" ino=168127 res=0 errno=0 [ 1443.507586][ T30] audit: type=1800 audit(1787353950.243:1152): pid=32018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.9050" name="file" dev="configfs" ino=168128 res=0 errno=0 [ 1443.618741][T32038] 9pnet_virtio: no channels available for device syz [ 1444.853690][T24258] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 1445.035014][T24258] usb 6-1: not running at top speed; connect to a high speed hub [ 1445.058277][T24258] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1445.204841][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1445.223206][T24258] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.299478][T24258] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1445.352997][T24258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.372667][T24258] usb 6-1: Product: syz [ 1445.379365][T24258] usb 6-1: Manufacturer: syz [ 1445.412568][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1445.447768][T24258] usb 6-1: SerialNumber: syz [ 1445.473451][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.511223][T24258] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 1445.567821][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1445.591129][T24258] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1445.629163][ T30] audit: type=1400 audit(1787353952.723:1153): avc: denied { write } for pid=32058 comm="syz.4.9063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1445.680437][T24258] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1445.699220][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1445.741096][T32060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9063'. [ 1445.770065][T24258] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1445.786802][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.802089][T32060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9063'. [ 1445.839535][T24258] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1445.889642][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1445.917664][T24258] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1445.952219][ T10] usb 2-1: invalid MIDI out EP 0 [ 1445.981611][T24258] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1446.123302][T24258] usb 6-1: USB disconnect, device number 96 [ 1446.246198][T32070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9065'. [ 1446.270246][T24258] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1446.389786][ T30] audit: type=1800 audit(1787353953.493:1154): pid=32071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.9064" name="cdrom" dev="configfs" ino=168383 res=0 errno=0 [ 1446.414939][T32071] [ 1446.417491][T32071] ====================================================== [ 1446.425175][T32071] WARNING: possible circular locking dependency detected [ 1446.432866][T32071] syzkaller #0 Tainted: G L [ 1446.439413][T32071] ------------------------------------------------------ [ 1446.447092][T32071] syz.7.9064/32071 is trying to acquire lock: [ 1446.453721][T32071] ffff88807f7fc460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 1446.463265][T32071] [ 1446.463265][T32071] but task is already holding lock: [ 1446.471330][T32071] ffff8880542b6120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1446.481428][T32071] [ 1446.481428][T32071] which lock already depends on the new lock. [ 1446.481428][T32071] [ 1446.492843][T32071] [ 1446.492843][T32071] the existing dependency chain (in reverse order) is: [ 1446.502719][T32071] [ 1446.502719][T32071] -> #4 (&common->filesem){++++}-{4:4}: [ 1446.511187][T32071] lock_acquire+0x1b9/0x370 [ 1446.516698][T32071] down_read+0x99/0x4c0 [ 1446.521807][T32071] fsg_show_file+0x20/0x180 [ 1446.527309][T32071] configfs_read_iter+0x426/0x6f0 [ 1446.533398][T32071] __kernel_read+0x397/0xad0 [ 1446.539009][T32071] integrity_kernel_read+0x7e/0xb0 [ 1446.545186][T32071] ima_calc_file_hash_tfm+0x25e/0x350 [ 1446.551637][T32071] ima_calc_file_hash+0x1e3/0x380 [ 1446.557716][T32071] ima_collect_measurement+0x94f/0xb30 [ 1446.564270][T32071] process_measurement+0xdfe/0x2350 [ 1446.570525][T32071] ima_file_check+0xc3/0x110 [ 1446.576109][T32071] security_file_post_open+0xc4/0x210 [ 1446.582565][T32071] path_openat+0x5cd/0x2440 [ 1446.588066][T32071] do_file_open+0x20e/0x430 [ 1446.593570][T32071] do_sys_openat2+0x10f/0x1e0 [ 1446.599249][T32071] __x64_sys_openat+0x12d/0x210 [ 1446.605123][T32071] do_syscall_64+0x123/0x790 [ 1446.610725][T32071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.617745][T32071] [ 1446.617745][T32071] -> #3 (&p->frag_sem){++++}-{4:4}: [ 1446.625826][T32071] lock_acquire+0x1b9/0x370 [ 1446.631329][T32071] down_read+0x99/0x4c0 [ 1446.636440][T32071] configfs_write_iter+0x218/0x4e0 [ 1446.642610][T32071] vfs_write+0x6af/0x1050 [ 1446.647918][T32071] ksys_write+0x12a/0x250 [ 1446.653227][T32071] do_syscall_64+0x123/0x790 [ 1446.658830][T32071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.665856][T32071] [ 1446.665856][T32071] -> #2 (&buffer->mutex#2){+.+.}-{4:4}: [ 1446.674319][T32071] lock_acquire+0x1b9/0x370 [ 1446.679827][T32071] __mutex_lock+0x1a4/0x1bc0 [ 1446.685419][T32071] configfs_read_iter+0x79/0x6f0 [ 1446.691403][T32071] __kernel_read+0x397/0xad0 [ 1446.697003][T32071] integrity_kernel_read+0x7e/0xb0 [ 1446.703169][T32071] ima_calc_file_hash_tfm+0x25e/0x350 [ 1446.709623][T32071] ima_calc_file_hash+0x1e3/0x380 [ 1446.715694][T32071] ima_collect_measurement+0x94f/0xb30 [ 1446.722244][T32071] process_measurement+0xdfe/0x2350 [ 1446.728504][T32071] ima_file_check+0xc3/0x110 [ 1446.734086][T32071] security_file_post_open+0xc4/0x210 [ 1446.740544][T32071] path_openat+0x5cd/0x2440 [ 1446.746037][T32071] do_file_open+0x20e/0x430 [ 1446.751528][T32071] do_sys_openat2+0x10f/0x1e0 [ 1446.757205][T32071] __x64_sys_openat+0x12d/0x210 [ 1446.763087][T32071] do_syscall_64+0x123/0x790 [ 1446.768675][T32071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.775691][T32071] [ 1446.775691][T32071] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1446.785104][T32071] lock_acquire+0x1b9/0x370 [ 1446.790596][T32071] __mutex_lock+0x1a4/0x1bc0 [ 1446.796188][T32071] ima_file_truncate+0xe6/0x190 [ 1446.802060][T32071] security_file_truncate+0xf9/0x1e0 [ 1446.808409][T32071] path_openat+0x1d7e/0x2440 [ 1446.814012][T32071] do_file_open+0x20e/0x430 [ 1446.819506][T32071] do_sys_openat2+0x10f/0x1e0 [ 1446.825185][T32071] __x64_sys_openat+0x12d/0x210 [ 1446.831063][T32071] do_syscall_64+0x123/0x790 [ 1446.836664][T32071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.843682][T32071] [ 1446.843682][T32071] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 1446.851761][T32071] check_prev_add+0xeb/0xe60 [ 1446.857353][T32071] __lock_acquire+0x1492/0x1ec0 [ 1446.863239][T32071] lock_acquire+0x1b9/0x370 [ 1446.868753][T32071] mnt_want_write+0x6f/0x420 [ 1446.874353][T32071] lookup_open+0x150/0x1990 [ 1446.879858][T32071] path_openat+0xa2c/0x2440 [ 1446.885363][T32071] do_file_open+0x20e/0x430 [ 1446.890861][T32071] file_open_name+0x1c3/0x3e0 [ 1446.896552][T32071] filp_open+0x2e/0x50 [ 1446.901562][T32071] fsg_lun_open+0x6b/0x7b0 [ 1446.906963][T32071] fsg_store_file+0x1e7/0x450 [ 1446.912645][T32071] configfs_write_iter+0x302/0x4e0 [ 1446.919764][T32071] vfs_write+0x6af/0x1050 [ 1446.925063][T32071] ksys_write+0x12a/0x250 [ 1446.930369][T32071] do_syscall_64+0x123/0x790 [ 1446.935959][T32071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.942974][T32071] [ 1446.942974][T32071] other info that might help us debug this: [ 1446.942974][T32071] [ 1446.954190][T32071] Chain exists of: [ 1446.954190][T32071] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 1446.954190][T32071] [ 1446.968007][T32071] Possible unsafe locking scenario: [ 1446.968007][T32071] [ 1446.976161][T32071] CPU0 CPU1 [ 1446.982032][T32071] ---- ---- [ 1446.987895][T32071] lock(&common->filesem); [ 1446.992810][T32071] lock(&p->frag_sem); [ 1447.000122][T32071] lock(&common->filesem); [ 1447.007815][T32071] rlock(sb_writers#6); [ 1447.012446][T32071] [ 1447.012446][T32071] *** DEADLOCK *** [ 1447.012446][T32071] [ 1447.021369][T32071] locks held by syz.7.9064/32071: 5, last CPU#0: [ 1447.028286][T32071] #0: ffff88807c3e8ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1447.038200][T32071] #1: ffff88801eba2460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1447.048112][T32071] #2: ffff888028743e80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1447.059069][T32071] #3: ffff88807dfb5270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1447.069744][T32071] #4: ffff8880542b6120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1447.080315][T32071] [ 1447.080315][T32071] stack backtrace: [ 1447.086763][T32071] CPU: 0 UID: 0 PID: 32071 Comm: syz.7.9064 Tainted: G L syzkaller #0 PREEMPT(full) [ 1447.086780][T32071] Tainted: [L]=SOFTLOCKUP [ 1447.086784][T32071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1447.086790][T32071] Call Trace: [ 1447.086796][T32071] [ 1447.086801][T32071] dump_stack_lvl+0x100/0x190 [ 1447.086817][T32071] print_circular_bug.cold+0x178/0x1be [ 1447.086835][T32071] check_noncircular+0x146/0x160 [ 1447.086850][T32071] ? file_open_name+0x1c3/0x3e0 [ 1447.086862][T32071] check_prev_add+0xeb/0xe60 [ 1447.086878][T32071] __lock_acquire+0x1492/0x1ec0 [ 1447.086896][T32071] lock_acquire+0x1b9/0x370 [ 1447.086912][T32071] ? lookup_open+0x150/0x1990 [ 1447.086925][T32071] ? __pfx___might_resched+0x10/0x10 [ 1447.086940][T32071] ? find_held_lock+0x2b/0x80 [ 1447.086953][T32071] mnt_want_write+0x6f/0x420 [ 1447.086968][T32071] ? lookup_open+0x150/0x1990 [ 1447.086981][T32071] lookup_open+0x150/0x1990 [ 1447.086995][T32071] path_openat+0xa2c/0x2440 [ 1447.087011][T32071] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1447.087023][T32071] ? __pfx_path_openat+0x10/0x10 [ 1447.087038][T32071] ? kasan_save_stack+0x3f/0x50 [ 1447.087053][T32071] ? kasan_save_stack+0x30/0x50 [ 1447.087068][T32071] ? kasan_save_track+0x14/0x30 [ 1447.087083][T32071] ? __kasan_slab_alloc+0x89/0x90 [ 1447.087099][T32071] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1447.087113][T32071] ? do_getname_kernel+0x5d/0x250 [ 1447.087124][T32071] ? filp_open+0x1d/0x50 [ 1447.087132][T32071] ? fsg_lun_open+0x6b/0x7b0 [ 1447.087143][T32071] do_file_open+0x20e/0x430 [ 1447.087160][T32071] ? __pfx_do_file_open+0x10/0x10 [ 1447.087181][T32071] ? rcu_is_watching+0x13/0xc0 [ 1447.087194][T32071] file_open_name+0x1c3/0x3e0 [ 1447.087205][T32071] ? __pfx_file_open_name+0x10/0x10 [ 1447.087215][T32071] ? do_getname_kernel+0x5d/0x250 [ 1447.087225][T32071] ? __asan_memcpy+0x3c/0x60 [ 1447.087239][T32071] ? do_getname_kernel+0x1be/0x250 [ 1447.087250][T32071] filp_open+0x2e/0x50 [ 1447.087259][T32071] fsg_lun_open+0x6b/0x7b0 [ 1447.087270][T32071] ? __pfx_down_read+0x10/0x10 [ 1447.087282][T32071] fsg_store_file+0x1e7/0x450 [ 1447.087293][T32071] configfs_write_iter+0x302/0x4e0 [ 1447.087305][T32071] vfs_write+0x6af/0x1050 [ 1447.087319][T32071] ? __pfx_configfs_write_iter+0x10/0x10 [ 1447.087332][T32071] ? __pfx_vfs_write+0x10/0x10 [ 1447.087344][T32071] ? find_held_lock+0x2b/0x80 [ 1447.087360][T32071] ksys_write+0x12a/0x250 [ 1447.087373][T32071] ? __pfx_ksys_write+0x10/0x10 [ 1447.087388][T32071] do_syscall_64+0x123/0x790 [ 1447.087406][T32071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.087417][T32071] RIP: 0033:0x7f2e4559e0d9 [ 1447.087428][T32071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.087438][T32071] RSP: 002b:00007f2e4638d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1447.087449][T32071] RAX: ffffffffffffffda RBX: 00007f2e45826090 RCX: 00007f2e4559e0d9 [ 1447.087456][T32071] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000007 [ 1447.087462][T32071] RBP: 00007f2e45635024 R08: 0000000000000000 R09: 0000000000000000 [ 1447.087469][T32071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1447.087480][T32071] R13: 00007f2e45826128 R14: 00007f2e45826090 R15: 00007fff315811f8 [ 1447.087490][T32071] [ 1447.629678][T24258] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1447.641625][T24258] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1447.655699][T24258] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1447.666400][T24258] keyspan 6-1:1.0: device disconnected [ 1447.680408][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1447.691035][ T10] usb 2-1: USB disconnect, device number 65 [ 1447.706841][T19887] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.737188][T19887] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.787704][T19887] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.801100][ T30] audit: type=1800 audit(1787353953.523:1155): pid=32071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.9064" name="file" dev="configfs" ino=168384 res=0 errno=0 [ 1447.835279][T19887] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.904588][T32071] mass_storage.0/lun.0: unable to open backing file: fil [ 1448.255501][T19887] bridge_slave_1: left allmulticast mode [ 1448.269698][T19887] bridge_slave_1: left promiscuous mode [ 1448.300482][T19887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.329029][T19887] bridge_slave_0: left allmulticast mode [ 1448.339354][T19887] bridge_slave_0: left promiscuous mode [ 1448.391094][T19887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.519527][T19887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.557561][T19887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.575800][ T30] audit: type=1400 audit(1787353955.673:1156): avc: denied { write } for pid=32077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.609400][T19887] bond0 (unregistering): Released all slaves [ 1448.627720][T19887] bond1 (unregistering): Released all slaves [ 1448.647595][ T30] audit: type=1400 audit(1787353955.753:1157): avc: denied { write } for pid=32088 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.711672][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1448.822339][T19887] hsr_slave_0: left promiscuous mode [ 1448.833704][T19887] hsr_slave_1: left promiscuous mode [ 1448.845440][T19887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1448.863755][T19887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.887772][T19887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1448.915048][T19887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1448.927802][T19887] veth1_macvtap: left promiscuous mode [ 1448.940916][T19887] veth0_macvtap: left promiscuous mode [ 1448.952327][T19887] veth1_vlan: left promiscuous mode [ 1448.969367][T19887] veth0_vlan: left promiscuous mode [ 1448.986431][ T30] audit: type=1400 audit(1787353956.093:1158): avc: denied { write } for pid=32092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.079741][ T30] audit: type=1400 audit(1787353956.183:1159): avc: denied { write } for pid=32103 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.142235][T19887] team0 (unregistering): Port device team_slave_1 removed [ 1449.158262][T19887] team0 (unregistering): Port device team_slave_0 removed [ 1449.206712][ T5258] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1449.352084][T19887] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.418177][T19887] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.467226][T19887] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.515446][ T30] audit: type=1400 audit(1787353956.613:1160): avc: denied { write } for pid=32106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.554049][T19887] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.586702][ T30] audit: type=1400 audit(1787353956.693:1161): avc: denied { write } for pid=32117 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.659175][T19887] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.679209][ T5258] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1449.706118][T19887] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.735377][T19887] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.776293][T19887] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.838927][T19887] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.886005][T19887] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.901335][ T30] audit: type=1400 audit(1787353957.003:1162): avc: denied { write } for pid=32120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.949443][T19887] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.976066][ T30] audit: type=1400 audit(1787353957.073:1163): avc: denied { write } for pid=32131 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.012489][T19887] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.042425][ T5258] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1450.082709][T19887] bridge_slave_1: left allmulticast mode [ 1450.092473][T19887] bridge_slave_1: left promiscuous mode [ 1450.101479][T19887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.110821][T19887] bridge_slave_0: left allmulticast mode [ 1450.117468][T19887] bridge_slave_0: left promiscuous mode [ 1450.123983][T19887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.134760][T19887] bridge_slave_1: left allmulticast mode [ 1450.140960][T19887] bridge_slave_1: left promiscuous mode [ 1450.147721][T19887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.157735][T19887] bridge_slave_0: left allmulticast mode [ 1450.164095][T19887] bridge_slave_0: left promiscuous mode [ 1450.170233][T19887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.238017][T19887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.251166][T19887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.262631][T19887] bond0 (unregistering): Released all slaves [ 1450.289908][T19887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.300942][T19887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.311952][T19887] bond0 (unregistering): Released all slaves [ 1450.320922][T19887] bond1 (unregistering): Released all slaves [ 1450.329998][T19887] bond2 (unregistering): Released all slaves [ 1450.359166][T19887] bond0 (unregistering): Released all slaves [ 1450.406517][T19887] tipc: Left network mode [ 1450.674230][ T30] audit: type=1400 audit(1787353957.783:1164): avc: denied { write } for pid=32134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.745711][T19887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.769877][ T30] audit: type=1400 audit(1787353957.873:1165): avc: denied { write } for pid=32145 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.794653][T19887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.809483][T19887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.826837][T19887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.845569][T19887] hsr_slave_0: left promiscuous mode [ 1450.851580][T19887] hsr_slave_1: left promiscuous mode [ 1450.861761][T19887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.871525][T19887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.880343][T19887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.888634][T19887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.897909][T19887] hsr_slave_0: left promiscuous mode [ 1450.904080][T19887] hsr_slave_1: left promiscuous mode [ 1450.916586][T19887] veth1_macvtap: left promiscuous mode [ 1450.922592][T19887] veth0_macvtap: left promiscuous mode [ 1450.929467][T19887] veth1_vlan: left promiscuous mode [ 1450.935429][T19887] veth0_vlan: left promiscuous mode [ 1450.941452][T19887] veth1_macvtap: left promiscuous mode [ 1450.948090][T19887] veth0_macvtap: left promiscuous mode [ 1450.954691][T19887] veth1_vlan: left promiscuous mode [ 1450.960436][T19887] veth0_vlan: left promiscuous mode [ 1450.966776][T19887] veth1_macvtap: left promiscuous mode [ 1450.972786][T19887] veth0_macvtap: left promiscuous mode [ 1450.980679][T19887] veth1_vlan: left promiscuous mode [ 1450.986586][T19887] veth0_vlan: left promiscuous mode [ 1451.077937][T19887] team0 (unregistering): Port device team_slave_1 removed [ 1451.095794][T19887] team0 (unregistering): Port device team_slave_0 removed [ 1451.170416][T19887] team0 (unregistering): Port device team_slave_1 removed [ 1451.192532][T19887] team0 (unregistering): Port device team_slave_0 removed [ 1451.302238][ T5258] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1451.598134][T19887] IPVS: stop unused estimator thread 0... [ 1451.630505][T19887] IPVS: stop unused estimator thread 0... [ 1451.724069][ T5258] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1452.026839][ T5258] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1452.206698][ T5258] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1452.361947][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1452.525628][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1452.683357][ T5258] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1452.858819][ T5258] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1453.012166][ T5258] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1453.188745][ T5258] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1453.359077][ T5258] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1453.530678][ T5258] 8021q: adding VLAN 0 to HW filter on device eth28