last executing test programs: 16.313757346s ago: executing program 4 (id=449): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, 0x0) setresuid(0xffffffffffffffff, r1, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r8, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="0ec16d9e000bb3c253f435c03293eb05569b00f10e5552db8dac22646ba6cc665a48a707a50092a874d5a8f7dd2eb4a418c7f2fe46729f9a74deadd84c5fceac609a8c3247b34273d631a4477ba367926f"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 13.068167476s ago: executing program 4 (id=454): syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r0 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x2, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20002000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c90000"], 0x22) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 11.568772052s ago: executing program 1 (id=458): r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000680)="01", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xb2, 0xdb, 0x20, 0x5ac, 0x20f, 0xf526, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0xf, 0x2, 0x3, 0x27, 0x2, 0x0, [], [{{0x9, 0x5, 0x7, 0x18, 0x40, 0x10, 0x6, 0x5}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x4, 0x81, 0x5}}]}}]}}]}}, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 10.370901589s ago: executing program 3 (id=460): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f00000001c0)='./bus\x00', 0x141b42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x18500, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x1, 0x2, 0x1, 0xb}, 0x20) r6 = fsopen(0x0, 0x0) close(r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x800, 0x1, 0x3, 0x8, 0xf11e, 0x300}, 0x20) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f00005fc000/0x4000)=nil, 0x4000, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0xb, 0x0, 0x9}, 0x10) sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) pipe2$9p(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000300)='\xd8k\xf8\xcfd\xcd\xcc,\xc0\x0f\t\x88\x85wI\x14\xae\x93\x04,p\'Rq\xce\x8f\xc2f l\xdfd\x06)=\x1e\xa0\xcd\xd0\x1b\xa7)\v\xbdj\xd1gq0\xd6\xb1\x82f\xbf\xff+\x89D\x9b\xdcL\x14\x12\x1a9r\xe6Tx\x97\x1a\xd1\xb9 \x9c\x92') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') 10.240186415s ago: executing program 4 (id=461): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) msgsnd(0x0, 0x0, 0x0, 0x0) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000080000000800392ccafffb43e40e7be3dfaea1ffab4a73e979189f8211f8dc99570a0552463ff6b024724ec13ae2e7068cba3b6e6030593819c679faddf7efe79eda33b3fce2066e93119dae2d0b2d217c717e486b06f893b9292a8b4dbec1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.600199025s ago: executing program 2 (id=464): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 9.391963617s ago: executing program 3 (id=465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendfile(r0, r0, &(0x7f0000000180)=0x3, 0x9) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r2, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r5 = getpgrp(0xffffffffffffffff) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='afs_make_fs_call\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r5, r6, 0x0, 0xe, &(0x7f0000000100)=']}{&-@-\xef.-&:%\x00'}, 0x30) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x20001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x69, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x4000}, 0x0) 8.523564173s ago: executing program 2 (id=467): close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000700)={0x2d3, 0x7d, 0x0, {{0x500, 0x192, 0x0, 0x0, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0xf6, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\x81\xad\xfd[\xad|i\x7f\xbc8\x1by\xa62\x84\x19\x8f\xb6\tX\xab\\\"\x96Mh\xf2\t\xa4\n\x12\x12\x8b\xe7\xd8LG\xd2B\xb4\x12\x91\x85\x86\xbda\xbc*\xeas\xc7nE\nE\xc8s\xba\xbb!9[\xee\xbf\x00v\\\xa6z\xef\xf9i\x9d\x84\xff\x8d\xcd\xf1\x85\xcbL\xcf\xe4`\xf5\xee\xd7#\x14\x18\xd2&`\xdc\x04\x0e\x872\x05\x02SCQ\xe6\xd1\x8d\xd1\a\x01r\xcem\xc1\xbaDW\x19$q\xf2\xd3ke\x02m\xe8'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2d3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r4, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a000000000000c2040000000000dfaac7f65dde66007550d861b7b537fd49b44ed35b0b7c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bbdd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6ef98f78c3ba4e983f48eff5d35ea1412115293871b6f65060c96fd75c4a82e937f62c948445a04c99c7646db75133bf141405b7db695b0de9a482a9dc8dc3a25f15db0153211c3604213a2baf4222bf165fdfa2ca3fddc94be49ac220c6fec65b5f419d364efc16072c068df6df4ff736f92d14e2d5c87eb699c31f1755ba93bf935b06fb93bdb863bb796b4fa365b5b80e7eacb78b04010007180000000004000000000000000000000000000000000000000774000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000008000000000000000000000000000c8c9d9a666582cc4aed5f51a8878027136ff94"], 0x2e8}}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000040)=0x1) write$tun(r5, &(0x7f0000000540)=ANY=[], 0x17a) 7.521783902s ago: executing program 2 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00', 0x26}) ioctl$UI_DEV_CREATE(r6, 0x5501) 6.648056579s ago: executing program 1 (id=469): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x6ec6, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x20000004, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x623b, 0x0, 0x0, 0x1ff, 0x8000, 0x1, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x6, 0x200, 0x2, 0x8, 0xe, 0x4, 0xfffffffe, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x7], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x3, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4000004, 0x100, 0x3ff, 0x0, 0xbc26, 0x0, 0x1, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x800003, 0x379, 0x9, 0xe, 0x5, 0x7, 0x5, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd2, 0x7, 0x20, 0x7, 0x7, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe57, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x2, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x401, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x9, 0x6, 0x1010000, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x4, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x401, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x2, 0xa80a, 0x65f413fc, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x403, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x14e2, 0x2, 0xe, 0x7f, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x400, @empty, 0x1}, 0x1c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48}) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8, @ANYRES32], 0x18) syz_open_dev$hidraw(&(0x7f0000000280), 0x2, 0x561200) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000380)}, {&(0x7f0000000440)="bb70da5d267fdea676a869dcb3d4e7f1544cd2df45ee6eaa34bfcfbc82f45208000000000000003ec3e5d97e90ecae4f068c32a8bfdd4f73f3db6fed03428409f1196145a10b5b923b7c4742acdd6ad04667acb2c3bd2d349f175400000000002000000000000000", 0x68}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="9f3371fed8c0c7fcbe68488a940dc5736ca78043c8d5e0f24c252251d1b51e2be08c4185f6ed04867f3e8318b0ff41a71621ca61ed89cfb85b82bbbef9be5a87b50ba8050f8be14b347e1d170eb9490e10cce2fc4dc57884cd62174f3c5eb4ba38bd", 0x62}], 0x1}}], 0x2, 0xc0c0) 6.551591349s ago: executing program 2 (id=470): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000171c000180090001006d617371000000000c000280080002400000000814000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 6.340632782s ago: executing program 3 (id=472): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000040)=""/190, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg2\x00', 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03fdffffffe0ffffff00000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="00000000feffffff010000000008000000000000000000000000000084fa84558823c1f18f86d515245be0dd01945a6f0d9b313296ee271de6f495e60ffd2a6e080eb82817665e49f442c4f76ff6033d"], 0x50) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xedc15000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', 0xfffffffffffffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x6) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x3, 0x0, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x7, @remote}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) syz_emit_ethernet(0x1a, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.340010201s ago: executing program 2 (id=473): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000700000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 5.636375709s ago: executing program 1 (id=474): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xf, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="08000000010000", 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES64=r0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c"], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r10, 0x4030ae7b, &(0x7f0000000000)={0x5, 0x2, 0x3, 0x5, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.924573749s ago: executing program 0 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r4 = socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28ebefc4", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf25000000000c000300040000000000000005000d0023000000"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x40) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000004240)={@my=0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_opts(r8, 0x11a, 0x2, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 3.566969435s ago: executing program 3 (id=477): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) setuid(0x0) r2 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0xb0, 0x200008c0}, 0x0) shmget(0x1, 0xc00000, 0x204, &(0x7f0000400000/0xc00000)=nil) semctl$GETALL(0x0, 0x0, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x800, &(0x7f0000000080)=0x2, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000007400)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/240, 0xfffffefe}, {&(0x7f0000000480)=""/110, 0x6e}], 0x5, &(0x7f0000000880)=""/208, 0xd0}, 0x5}, {{&(0x7f0000000980)=@qipcrtr, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f0000000b00)=""/18, 0x12}, {&(0x7f0000000b40)=""/248, 0xf8}], 0x6, &(0x7f0000000cc0)=""/243, 0xf3}, 0xb1de}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000dc0)=""/183, 0xb7}, {&(0x7f0000000e80)=""/212, 0xd4}, {&(0x7f0000000f80)=""/70, 0x46}, {&(0x7f0000001000)=""/159, 0x9f}, {&(0x7f00000010c0)=""/10, 0xa}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/68, 0x44}], 0x7, &(0x7f0000002200)=""/18, 0x12}, 0x8}, {{&(0x7f0000002240)=@caif=@dbg, 0x80, &(0x7f00000023c0)=[{&(0x7f00000022c0)=""/125, 0x7d}, {&(0x7f00000075c0)=""/131, 0x74}], 0x2, &(0x7f0000002400)=""/218, 0xda}}, {{&(0x7f0000002500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002580)=""/71, 0x47}, {&(0x7f0000002600)=""/179, 0xb3}, {&(0x7f00000026c0)=""/117, 0x75}], 0x3}, 0x6}, {{&(0x7f0000002780)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002800)}, {&(0x7f0000002840)=""/221, 0xdd}, {&(0x7f0000002940)=""/31, 0x1f}, {&(0x7f0000002980)=""/72, 0x48}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/161, 0xa1}, {&(0x7f0000003ac0)=""/3, 0x3}, {&(0x7f0000003b00)=""/178, 0xb2}, {&(0x7f0000003bc0)=""/87, 0x57}, {&(0x7f0000003c40)=""/168, 0xa8}], 0xa, &(0x7f0000003dc0)=""/142, 0x8e}, 0x40}, {{&(0x7f0000003e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000006340)=[{&(0x7f0000003f00)=""/183, 0xb7}, {&(0x7f0000003fc0)=""/194, 0xc2}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/25, 0x19}, {&(0x7f0000005100)=""/14, 0xe}, {&(0x7f0000005140)=""/111, 0xffffffb7}, {&(0x7f00000051c0)=""/253, 0xfd}, {&(0x7f0000002340)=""/84, 0x54}, {&(0x7f0000005340)=""/4096, 0x1000}], 0x9, &(0x7f0000007680)=""/4096, 0x1000}, 0x1}], 0x7, 0x0, &(0x7f0000000500)={0x2007fffa, 0xa}) madvise(&(0x7f0000000000/0x4000)=nil, 0x100000000000000, 0x0) shmget(0x1, 0x3000, 0x9, &(0x7f0000ffa000/0x3000)=nil) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x101a80, 0x0) sendfile(r4, r4, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e24, 0x0, @private1, 0x401}], 0x2c) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000200)={0x2, @sliced={0x5, [0x40, 0xfffb, 0x9, 0xff, 0x7, 0x7, 0x8, 0xf631, 0x6, 0x1000, 0x6, 0x3ff, 0x375, 0x0, 0x6, 0x8fe, 0x2, 0x3, 0x4, 0x3, 0xffff, 0xfffc, 0x7, 0x5c8b, 0x2, 0xb, 0x5b, 0x2, 0x2, 0xe, 0x10, 0xff, 0x18ca, 0xb, 0x1, 0x4800, 0x3, 0xe50, 0x0, 0x1, 0x1, 0x32c, 0x7f, 0xe, 0x9, 0x1ff, 0x893, 0x10], 0xfffffffc}}) socket$inet_udp(0x2, 0x2, 0x0) 3.459268085s ago: executing program 1 (id=478): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) msgsnd(0x0, 0x0, 0x0, 0x0) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000080000000800392ccafffb43e40e7be3dfaea1ffab4a73e979189f8211f8dc99570a0552463ff6b024724ec13ae2e7068cba3b6e6030593819c679faddf7efe79eda33b3fce2066e93119dae2d0b2d217c717e486b06f893b9292a8b4dbec1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.451595734s ago: executing program 2 (id=479): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000039a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b003e08c00b0000ff070000090000000100000061c4b9d028b63b602aa8edd9ecb1d2dd591e0e8cf7099256fcbebcf69379e9011f65229c4acc8475a1c45942fae0ab7690b6cb800cdc36cf788bb8"], 0x153) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) setrlimit(0x40000000000008, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.300161819s ago: executing program 0 (id=480): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x400, @empty, 0x1}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000380)}, {&(0x7f0000000440)="bb70da5d267fdea676a869dcb3d4e7f1544cd2df45ee6eaa34bfcfbc82f45208fc0000000000003ec3e5d97e90ecae4f068c32a8bfdd4f73f3db6fed03428409f1196145a10b5b923b7c4742acdd6ad04667acb2c3bd2d349f175400000000002000000000000000", 0x68}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="9f3371fed8c0c7fcbe68488a940dc5736ca78043c8d5e0f24c252251d1b51e2be08c4185f6ed04867f3e8318b0ff41a71621ca61ed89cfb85b82bbbef9be5a87b50ba8050f8be14b347e1d170eb9490e10cce2fc4dc57884cd62174f3c5eb4ba38bd", 0x62}], 0x1}}], 0x2, 0xc0c0) 2.965048101s ago: executing program 0 (id=481): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000900)=[{0x0, 0xfffb}], 0x1) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xd}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="8c", 0x1, 0x1000, 0x0, 0x0) shutdown(r2, 0x1) socket$igmp(0x2, 0x3, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r4, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x3d, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000001300)="259374c96ee32f8d294c9fc6746590253ee96645fcef4c89cf58a03ee946310398ca18e157b9eebaaddb9a75b83ddce4aaae9f1ea011fdb0fc3a4d8aea", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.875946336s ago: executing program 4 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x2300801, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYBLOB="0000d22f0000000000e8c01fe6b24821e8947e9400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/21], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.568194044s ago: executing program 3 (id=483): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x2c, 0x3, 0x5, "3ad38eff230c00000000202900000004100000410000000004000300", 0x32314752}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, r2, r1], 0x1) gettid() r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001680)}], 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x4000, 0x0, 0xfffffffc}) ioctl$KVM_NMI(r8, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xffffffffffffffcc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@ifindex=r10, 0x33, 0x0, 0x2, 0x0, 0xfffffffffffffcde, 0x0, 0x0, 0x0, 0x0}, 0x40) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) 1.876426266s ago: executing program 4 (id=484): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000720033030000000000000000070000", @ANYRES32=0x0, @ANYBLOB="07000100"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x3, 0x7fff}, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) close_range(r4, r4, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) 1.709434253s ago: executing program 0 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.337869963s ago: executing program 0 (id=486): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'poly1305\x00'}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1.289627293s ago: executing program 1 (id=487): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x3, 0x3, 0xac, "ac9cbb6edd7cf9b6c793b8910faebf06fc858fa2bcd78d1fd85225434ec09e677d3cc271fa7e8390f26242b9e2bc8535743be38f8ce838f214fa9305322735", 0x2d}, 0x60) 1.044851618s ago: executing program 0 (id=488): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) userfaultfd(0x80001) 146.043131ms ago: executing program 1 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0403"], 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x40044) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') ftruncate(r2, 0x2ac1dff8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000440)={0x0, 0x0, 0x2019, 0x0, 0xc, 0x7b, 0x5}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x2, @loopback, 0x4}}, 0x1ff, 0x2}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={r3, 0x8, 0x5, [0x0, 0x3, 0x0, 0x0, 0x2]}, &(0x7f0000000240)=0x12) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000040)={0x50, 0xffff, 0x0, {0x2002, 0x80}, {0x104, 0x1}, @cond=[{0xbb, 0xfffd, 0x5, 0xc, 0xffff, 0xff}, {0x3, 0x4c, 0x9, 0x2, 0x7, 0x9}]}) syz_open_procfs(0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xad) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) lsm_set_self_attr(0x69, &(0x7f00000000c0)={0x6d, 0x1, 0x20}, 0x20, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 145.465363ms ago: executing program 4 (id=490): socket$inet6(0xa, 0x0, 0xfffffff9) socket$inet6(0xa, 0x6, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x40000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0x4c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 3 (id=491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newspdinfo={0x14, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40) (fail_nth: 2) kernel console output (not intermixed with test programs): c4:ea90] on usb-dummy_hcd.2-1/input0 [ 103.568011][ T29] audit: type=1400 audit(2000000024.860:217): avc: denied { create } for pid=6353 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.568049][ T29] audit: type=1400 audit(2000000024.890:218): avc: denied { append } for pid=6353 comm="syz.3.109" name="media0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.645481][ T29] audit: type=1400 audit(2000000025.010:219): avc: denied { read } for pid=6353 comm="syz.3.109" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.684519][ T29] audit: type=1400 audit(2000000025.050:220): avc: denied { open } for pid=6353 comm="syz.3.109" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.739765][ T5866] cp2112 0003:10C4:EA90.0008: error requesting version [ 103.748136][ T5866] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 103.792081][ T5866] usb 3-1: USB disconnect, device number 9 [ 103.830452][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.016977][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 104.028241][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.037184][ T9] usb 5-1: config 0 has no interface number 0 [ 104.277648][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 104.287326][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.377236][ T9] usb 5-1: Product: syz [ 104.381702][ T9] usb 5-1: Manufacturer: syz [ 104.386397][ T9] usb 5-1: SerialNumber: syz [ 104.401486][ T5867] tipc: Node number set to 1 [ 104.411987][ T9] usb 5-1: config 0 descriptor?? [ 104.421359][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 104.437935][ T29] audit: type=1400 audit(2000000025.760:221): avc: denied { create } for pid=6353 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 104.524172][ T9] usb 5-1: selecting invalid altsetting 1 [ 104.530434][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 104.550548][ T29] audit: type=1400 audit(2000000025.870:222): avc: denied { read } for pid=6356 comm="syz.1.110" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.619569][ T6348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.671188][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.700691][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 104.709719][ T9] usb 5-1: media controller created [ 104.725597][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.770895][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 104.781614][ T9] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 104.823006][ T9] DVB: Unable to find symbol mxl5005s_attach() [ 104.980862][ T6348] netlink: 'syz.4.108': attribute type 7 has an invalid length. [ 105.182038][ T6348] netlink: 244 bytes leftover after parsing attributes in process `syz.4.108'. [ 105.232269][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.323748][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.372704][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 105.380427][ T5867] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 105.572303][ T5867] usb 3-1: Invalid ep0 maxpacket: 16 [ 105.821917][ T9] usb 5-1: USB disconnect, device number 5 [ 105.920439][ T5867] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 106.737280][ T6369] capability: warning: `syz.0.111' uses 32-bit capabilities (legacy support in use) [ 107.125038][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 107.980470][ T6395] fuse: Unknown parameter 'group_id00000000000000000000' [ 108.530737][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 108.530753][ T29] audit: type=1400 audit(2000000029.890:233): avc: denied { create } for pid=6399 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.563844][ T6403] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.575342][ T6403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.626294][ T29] audit: type=1400 audit(2000000029.940:234): avc: denied { create } for pid=6399 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.630561][ T5867] usb 3-1: device not accepting address 11, error -71 [ 108.646656][ T29] audit: type=1400 audit(2000000029.950:235): avc: denied { write } for pid=6399 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.673724][ T29] audit: type=1400 audit(2000000029.950:236): avc: denied { read } for pid=6399 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.679867][ T5867] usb usb3-port1: attempt power cycle [ 108.693369][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.693478][ T29] audit: type=1400 audit(2000000029.950:237): avc: denied { setopt } for pid=6399 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.693507][ T29] audit: type=1400 audit(2000000029.960:238): avc: denied { bind } for pid=6399 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.693537][ T29] audit: type=1400 audit(2000000029.960:239): avc: denied { write } for pid=6393 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.693562][ T29] audit: type=1400 audit(2000000029.960:240): avc: denied { connect } for pid=6393 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.693588][ T29] audit: type=1400 audit(2000000029.960:241): avc: denied { name_connect } for pid=6393 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 108.693616][ T29] audit: type=1400 audit(2000000030.020:242): avc: denied { write } for pid=6399 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.743345][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.865115][ T5818] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.873350][ T6403] overlayfs: failed to resolve './file1': -2 [ 109.040927][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 109.792977][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.803141][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.821798][ T5818] usb 5-1: New USB device found, idVendor=056a, idProduct=0011, bcdDevice= 0.00 [ 109.830941][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.840211][ T5818] usb 5-1: config 0 descriptor?? [ 110.591884][ T5818] wacom 0003:056A:0011.0009: Unknown device_type for 'HID 056a:0011'. Assuming pen. [ 110.604634][ T6427] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 110.623220][ T5818] wacom 0003:056A:0011.0009: hidraw0: USB HID v0.00 Device [HID 056a:0011] on usb-dummy_hcd.4-1/input0 [ 110.632311][ T6427] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.127'. [ 110.639909][ T5818] input: Wacom Graphire2 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0011.0009/input/input5 [ 110.666554][ T6427] openvswitch: netlink: Message has 7 unknown bytes. [ 110.690559][ T5867] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.821383][ T5868] usb 5-1: USB disconnect, device number 6 [ 110.924481][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 110.951878][ T5867] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.020653][ T6439] fuse: Unknown parameter 'group_id00000000000000000000' [ 111.469171][ T5867] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.519088][ T5867] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.531356][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.541178][ T5867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.553534][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.567592][ T5867] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.590266][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.657494][ T5867] usb 2-1: config 0 descriptor?? [ 112.177641][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.180448][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 112.362946][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.367672][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.385272][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.400928][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.442096][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.462755][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 112.483135][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.519670][ T9] usb 3-1: config 0 descriptor?? [ 112.559842][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.133'. [ 112.879108][ T6464] capability: warning: `syz.0.134' uses deprecated v2 capabilities in a way that may be insecure [ 113.001764][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.028916][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 113.035494][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 113.044478][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.063595][ T5867] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.096159][ T5867] usb 2-1: USB disconnect, device number 6 [ 113.114225][ T9] usb 3-1: USB disconnect, device number 13 [ 113.131437][ T5867] usblp0: removed [ 114.064574][ T6485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.074302][ T6485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 114.157435][ T6488] overlayfs: failed to resolve './file1': -2 [ 114.472694][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 114.483001][ T6492] netlink: 264 bytes leftover after parsing attributes in process `syz.4.139'. [ 114.492146][ T6492] netlink: 64 bytes leftover after parsing attributes in process `syz.4.139'. [ 114.968679][ T6492] syz.4.139 (6492): drop_caches: 2 [ 115.220440][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.318175][ T6498] fuse: Unknown parameter 'group_id00000000000000000000' [ 115.450463][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 115.508098][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.806841][ T25] usb 1-1: config 0 has no interfaces? [ 115.812441][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.821573][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.965156][ T25] usb 1-1: config 0 descriptor?? [ 116.679871][ T6511] team0: Device vxcan1 is of different type [ 117.121093][ T932] usb 1-1: USB disconnect, device number 8 [ 117.312866][ T6517] netlink: 'syz.4.146': attribute type 3 has an invalid length. [ 117.320618][ T6517] netlink: 'syz.4.146': attribute type 1 has an invalid length. [ 117.328260][ T6517] netlink: 216 bytes leftover after parsing attributes in process `syz.4.146'. [ 117.337302][ T6517] NCSI netlink: No device for ifindex 33022 [ 117.530593][ T969] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 117.697975][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.747898][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.786813][ T969] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 117.816452][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.838796][ T969] usb 3-1: config 0 descriptor?? [ 118.449449][ T6533] Unknown options in mask 6000 [ 118.481527][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 118.481562][ T29] audit: type=1400 audit(2000000039.820:255): avc: denied { write } for pid=6532 comm="syz.1.151" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.312147][ T969] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 119.321393][ T969] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 119.515435][ T969] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 120.133023][ T969] cp2112 0003:10C4:EA90.000A: error setting SMBus config [ 120.150309][ T969] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 120.171081][ T969] usb 3-1: USB disconnect, device number 14 [ 120.243540][ T6547] fuse: Unknown parameter 'group_id00000000000000000000' [ 120.805426][ T29] audit: type=1400 audit(2000000042.170:256): avc: denied { write } for pid=6548 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 120.902052][ T29] audit: type=1400 audit(2000000042.250:257): avc: denied { bind } for pid=6552 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.928533][ T29] audit: type=1400 audit(2000000042.250:258): avc: denied { connect } for pid=6552 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.950433][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.963544][ T29] audit: type=1400 audit(2000000042.310:259): avc: denied { shutdown } for pid=6552 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.982928][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.133074][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.133145][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.133176][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.133198][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.138645][ T6546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.161446][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.287862][ T29] audit: type=1400 audit(2000000042.640:260): avc: denied { map } for pid=6563 comm="syz.3.160" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 121.454007][ T29] audit: type=1400 audit(2000000042.650:261): avc: denied { execute } for pid=6563 comm="syz.3.160" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 121.644236][ T6572] Bluetooth: MGMT ver 1.23 [ 121.656226][ T29] audit: type=1400 audit(2000000042.790:262): avc: denied { write } for pid=6560 comm="syz.4.159" name="kcm" dev="proc" ino=4026532926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 121.697202][ T29] audit: type=1400 audit(2000000042.950:263): avc: denied { bind } for pid=6571 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.717181][ T29] audit: type=1400 audit(2000000043.010:264): avc: denied { write } for pid=6571 comm="syz.3.161" path="socket:[9940]" dev="sockfs" ino=9940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.235542][ T932] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 122.445825][ T932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.467612][ T932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.492461][ T932] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 122.501778][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.531868][ T932] usb 3-1: config 0 descriptor?? [ 122.745441][ T932] usbhid 3-1:0.0: can't add hid device: -71 [ 122.752268][ T932] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 122.768869][ T932] usb 3-1: USB disconnect, device number 15 [ 122.836855][ T25] usb 2-1: USB disconnect, device number 7 [ 123.288886][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 123.298283][ T6598] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 123.308274][ T6598] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 123.372514][ T6599] fuse: Unknown parameter 'group_id00000000000000000000' [ 123.930192][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 123.930207][ T29] audit: type=1400 audit(2000000045.290:268): avc: denied { audit_write } for pid=6600 comm="syz.2.170" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 123.940503][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.967877][ T29] audit: type=1107 audit(2000000045.290:269): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='p?v&_q <,P~1wOBiԿ;̋$e5}rx]Xf? GiM]40pt֝h`~YxeGǦ<#u ?90\= G! y- [ 123.967877][ T29] h'dA) ׂs7y >|3We|ܥ#1z_R?=' [ 124.006468][ T29] audit: type=1400 audit(2000000045.370:270): avc: denied { setopt } for pid=6600 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.032784][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.099935][ T29] audit: type=1400 audit(2000000045.460:271): avc: denied { ioctl } for pid=6610 comm="syz.1.171" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.133947][ T29] audit: type=1400 audit(2000000045.460:272): avc: denied { set_context_mgr } for pid=6610 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 124.162805][ T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 124.173861][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.212089][ T9] usb 5-1: config 0 descriptor?? [ 124.243721][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 124.366362][ T6617] pimreg3: entered allmulticast mode [ 124.406222][ T29] audit: type=1400 audit(2000000045.770:273): avc: denied { create } for pid=6614 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.455397][ T9] gp8psk: usb in 128 operation failed. [ 124.467147][ T9] gp8psk: usb in 137 operation failed. [ 124.473324][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.484071][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 124.490444][ T932] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.493191][ T9] usb 5-1: media controller created [ 124.550513][ T5866] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.581820][ T6621] overlayfs: missing 'lowerdir' [ 124.838232][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 124.988134][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.013469][ T9] gp8psk_fe: Frontend attached [ 125.018438][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 125.027297][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 125.142944][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 125.152639][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 125.191258][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.216310][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.239211][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 125.241364][ T29] audit: type=1400 audit(2000000046.610:274): avc: denied { create } for pid=6624 comm="syz.2.174" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.247977][ T932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.272414][ T29] audit: type=1400 audit(2000000046.630:275): avc: denied { mounton } for pid=6624 comm="syz.2.174" path="/26/file0" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.278741][ T5866] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 125.340488][ T932] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.351940][ T9] usb 5-1: USB disconnect, device number 7 [ 125.354339][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.377915][ T932] usb 2-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice=83.c5 [ 125.388014][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.393160][ T29] audit: type=1400 audit(2000000046.760:276): avc: denied { unlink } for pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.404453][ T5866] usb 1-1: config 0 descriptor?? [ 125.424024][ T932] usb 2-1: Product: syz [ 125.428227][ T932] usb 2-1: Manufacturer: syz [ 125.434291][ T932] usb 2-1: SerialNumber: syz [ 125.450197][ T932] usb 2-1: config 0 descriptor?? [ 125.493820][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 125.539091][ T29] audit: type=1400 audit(2000000046.900:277): avc: denied { ioctl } for pid=6631 comm="syz.2.177" path="socket:[10108]" dev="sockfs" ino=10108 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.640542][ T51] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.757901][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.780874][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.801944][ T51] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.817487][ T51] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.833789][ T51] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.850393][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.867288][ T6630] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.875540][ T5866] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 125.887352][ T5866] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 125.899080][ T51] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.070866][ T6639] overlay: filesystem on ./bus not supported as upperdir [ 126.161271][ T5866] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 126.680030][ T5866] cp2112 0003:10C4:EA90.000B: error setting SMBus config [ 126.697085][ T5866] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71 [ 126.728229][ T5866] usb 1-1: USB disconnect, device number 9 [ 126.959168][ T6647] fuse: Unknown parameter 'group_id00000000000000000000' [ 127.479341][ T5867] usb 2-1: USB disconnect, device number 8 [ 127.779467][ T6658] overlay: filesystem on ./bus not supported as upperdir [ 128.095033][ T6661] FAULT_INJECTION: forcing a failure. [ 128.095033][ T6661] name failslab, interval 1, probability 0, space 0, times 1 [ 128.107724][ T6661] CPU: 0 UID: 0 PID: 6661 Comm: syz.0.185 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 128.118289][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 128.128321][ T6661] Call Trace: [ 128.131576][ T6661] [ 128.134484][ T6661] dump_stack_lvl+0x16c/0x1f0 [ 128.139141][ T6661] should_fail_ex+0x497/0x5b0 [ 128.143796][ T6661] ? fs_reclaim_acquire+0xae/0x150 [ 128.148909][ T6661] should_failslab+0xc2/0x120 [ 128.153591][ T6661] __kmalloc_noprof+0xcb/0x510 [ 128.158354][ T6661] ? d_absolute_path+0x137/0x1b0 [ 128.163373][ T6661] ? rcu_is_watching+0x12/0xc0 [ 128.168118][ T6661] tomoyo_encode2+0x100/0x3e0 [ 128.172785][ T6661] tomoyo_encode+0x29/0x50 [ 128.177189][ T6661] tomoyo_realpath_from_path+0x19d/0x720 [ 128.182803][ T6661] tomoyo_path_number_perm+0x248/0x590 [ 128.188240][ T6661] ? tomoyo_path_number_perm+0x235/0x590 [ 128.193859][ T6661] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.199835][ T6661] ? __pfx_lock_release+0x10/0x10 [ 128.204852][ T6661] ? trace_lock_acquire+0x14e/0x1f0 [ 128.210031][ T6661] ? lock_acquire+0x2f/0xb0 [ 128.214519][ T6661] ? __fget_files+0x40/0x3a0 [ 128.219188][ T6661] ? __fget_files+0x206/0x3a0 [ 128.223841][ T6661] security_file_ioctl+0x9b/0x240 [ 128.228858][ T6661] __x64_sys_ioctl+0xb7/0x200 [ 128.233513][ T6661] do_syscall_64+0xcd/0x250 [ 128.237996][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.243865][ T6661] RIP: 0033:0x7fb486785d29 [ 128.248255][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.267851][ T6661] RSP: 002b:00007fb487654038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.276246][ T6661] RAX: ffffffffffffffda RBX: 00007fb486975fa0 RCX: 00007fb486785d29 [ 128.284280][ T6661] RDX: 0000000020000580 RSI: 00000000c0306201 RDI: 0000000000000004 [ 128.292240][ T6661] RBP: 00007fb487654090 R08: 0000000000000000 R09: 0000000000000000 [ 128.300204][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.308149][ T6661] R13: 0000000000000000 R14: 00007fb486975fa0 R15: 00007ffe533237d8 [ 128.316116][ T6661] [ 128.319657][ T6661] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.326378][ T6661] binder: 6660:6661 ioctl c0306201 20000580 returned -22 [ 128.570456][ T5866] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.605772][ T6670] FAULT_INJECTION: forcing a failure. [ 128.605772][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 128.641309][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.4.186 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 128.651944][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 128.662091][ T6670] Call Trace: [ 128.665361][ T6670] [ 128.668270][ T6670] dump_stack_lvl+0x16c/0x1f0 [ 128.672929][ T6670] should_fail_ex+0x497/0x5b0 [ 128.677595][ T6670] ? fs_reclaim_acquire+0xae/0x150 [ 128.682687][ T6670] should_failslab+0xc2/0x120 [ 128.687354][ T6670] __kmalloc_noprof+0xcb/0x510 [ 128.692101][ T6670] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 128.697727][ T6670] tomoyo_realpath_from_path+0xb9/0x720 [ 128.703264][ T6670] ? tomoyo_path_perm+0x262/0x460 [ 128.708271][ T6670] ? tomoyo_path_perm+0x262/0x460 [ 128.713292][ T6670] tomoyo_path_perm+0x276/0x460 [ 128.718114][ T6670] ? tomoyo_path_perm+0x262/0x460 [ 128.723127][ T6670] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 128.728486][ T6670] ? __pfx_ima_file_check+0x10/0x10 [ 128.733677][ T6670] security_file_truncate+0x84/0x1e0 [ 128.738949][ T6670] path_openat+0x1ba9/0x2d60 [ 128.743519][ T6670] ? __pfx_path_openat+0x10/0x10 [ 128.748431][ T6670] ? __pfx___lock_acquire+0x10/0x10 [ 128.753603][ T6670] ? lock_acquire.part.0+0x11b/0x380 [ 128.758859][ T6670] ? find_held_lock+0x2d/0x110 [ 128.763607][ T6670] do_filp_open+0x20c/0x470 [ 128.768086][ T6670] ? __pfx_do_filp_open+0x10/0x10 [ 128.773091][ T6670] ? find_held_lock+0x2d/0x110 [ 128.777851][ T6670] ? _raw_spin_unlock+0x28/0x50 [ 128.782680][ T6670] ? alloc_fd+0x41f/0x760 [ 128.786999][ T6670] do_sys_openat2+0x17a/0x1e0 [ 128.791655][ T6670] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.796844][ T6670] ? __fget_files+0x206/0x3a0 [ 128.801586][ T6670] __x64_sys_creat+0xcd/0x120 [ 128.806242][ T6670] ? __pfx___x64_sys_creat+0x10/0x10 [ 128.811505][ T6670] ? __pfx_ksys_write+0x10/0x10 [ 128.816334][ T6670] ? do_syscall_64+0x91/0x250 [ 128.821002][ T6670] do_syscall_64+0xcd/0x250 [ 128.825485][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.831357][ T6670] RIP: 0033:0x7f3eae185d29 [ 128.835747][ T6670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.840451][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 128.855337][ T6670] RSP: 002b:00007f3eaefd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 128.855376][ T6670] RAX: ffffffffffffffda RBX: 00007f3eae375fa0 RCX: 00007f3eae185d29 [ 128.855387][ T6670] RDX: 0000000000000000 RSI: 0000000000000033 RDI: 0000000020000600 [ 128.855397][ T6670] RBP: 00007f3eaefd5090 R08: 0000000000000000 R09: 0000000000000000 [ 128.855407][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.855419][ T6670] R13: 0000000000000000 R14: 00007f3eae375fa0 R15: 00007ffe9b1ea048 [ 128.908630][ T6670] [ 128.942881][ T5867] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.945992][ T5866] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 128.965201][ T6670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.016572][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 129.056636][ T5866] usb 1-1: can't read configurations, error -61 [ 129.188116][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.199309][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.209861][ T6672] FAULT_INJECTION: forcing a failure. [ 129.209861][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 129.236697][ T5867] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 129.248135][ T6672] CPU: 0 UID: 0 PID: 6672 Comm: syz.4.187 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 129.258718][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 129.268748][ T6672] Call Trace: [ 129.272002][ T6672] [ 129.274926][ T6672] dump_stack_lvl+0x16c/0x1f0 [ 129.279582][ T6672] should_fail_ex+0x497/0x5b0 [ 129.284237][ T6672] ? fs_reclaim_acquire+0xae/0x150 [ 129.289330][ T6672] should_failslab+0xc2/0x120 [ 129.293983][ T6672] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 129.299332][ T6672] ? seq_open+0x55/0x170 [ 129.303555][ T6672] seq_open+0x55/0x170 [ 129.307605][ T6672] kernfs_fop_open+0x5e4/0xdb0 [ 129.312348][ T6672] do_dentry_open+0xf59/0x1ea0 [ 129.317087][ T6672] ? __pfx_kernfs_fop_open+0x10/0x10 [ 129.322346][ T6672] ? inode_permission+0xdd/0x5f0 [ 129.327267][ T6672] vfs_open+0x82/0x3f0 [ 129.331312][ T6672] ? may_open+0x1f2/0x400 [ 129.335632][ T6672] path_openat+0x1e6a/0x2d60 [ 129.340216][ T6672] ? __pfx_path_openat+0x10/0x10 [ 129.345128][ T6672] ? __pfx___lock_acquire+0x10/0x10 [ 129.350300][ T6672] ? lock_acquire.part.0+0x11b/0x380 [ 129.355568][ T6672] ? find_held_lock+0x2d/0x110 [ 129.360312][ T6672] do_filp_open+0x20c/0x470 [ 129.364791][ T6672] ? __pfx_do_filp_open+0x10/0x10 [ 129.369787][ T6672] ? find_held_lock+0x2d/0x110 [ 129.374537][ T6672] ? _raw_spin_unlock+0x28/0x50 [ 129.379380][ T6672] ? alloc_fd+0x41f/0x760 [ 129.383688][ T6672] do_sys_openat2+0x17a/0x1e0 [ 129.388338][ T6672] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.393524][ T6672] ? __fget_files+0x206/0x3a0 [ 129.398190][ T6672] __x64_sys_creat+0xcd/0x120 [ 129.402842][ T6672] ? __pfx___x64_sys_creat+0x10/0x10 [ 129.408101][ T6672] ? __pfx_ksys_write+0x10/0x10 [ 129.412938][ T6672] ? do_syscall_64+0x91/0x250 [ 129.417589][ T6672] do_syscall_64+0xcd/0x250 [ 129.422072][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.427946][ T6672] RIP: 0033:0x7f3eae185d29 [ 129.432345][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.451936][ T6672] RSP: 002b:00007f3eaefd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 129.460333][ T6672] RAX: ffffffffffffffda RBX: 00007f3eae375fa0 RCX: 00007f3eae185d29 [ 129.468280][ T6672] RDX: 0000000000000000 RSI: 0000000000000033 RDI: 0000000020000600 [ 129.476223][ T6672] RBP: 00007f3eaefd5090 R08: 0000000000000000 R09: 0000000000000000 [ 129.484166][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.492123][ T6672] R13: 0000000000000000 R14: 00007f3eae375fa0 R15: 00007ffe9b1ea048 [ 129.500077][ T6672] [ 129.504627][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.589685][ T5867] usb 2-1: config 0 descriptor?? [ 129.660732][ T5866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 129.710812][ T51] libceph: connect (1)[c::]:6789 error -101 [ 129.716848][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 130.351212][ T51] libceph: connect (1)[c::]:6789 error -101 [ 130.357400][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 130.369316][ T6674] ceph: No mds server is up or the cluster is laggy [ 130.390414][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 130.416318][ T5866] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 130.458158][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 130.505800][ T6674] 9pnet_virtio: no channels available for device syz [ 130.524157][ T5866] usb 1-1: can't read configurations, error -61 [ 130.538531][ T5896] usb 4-1: USB disconnect, device number 7 [ 130.656371][ T5866] usb usb1-port1: attempt power cycle [ 131.090143][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 131.141914][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.351804][ T5896] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.402694][ T5896] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.493054][ T5866] usb 1-1: device not accepting address 12, error -71 [ 131.578658][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.742911][ T6691] binder: 6690:6691 ioctl c0306201 20000580 returned -22 [ 131.772985][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.872391][ T6697] overlayfs: missing 'lowerdir' [ 132.333365][ T6686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.351629][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.380420][ T5866] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 132.400986][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 132.422401][ T5866] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 132.588736][ T5867] usbhid 2-1:0.0: can't add hid device: -71 [ 132.594968][ T5867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.620677][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.627016][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.638306][ T5867] usb 2-1: USB disconnect, device number 9 [ 132.660859][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 132.668022][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 132.668036][ T29] audit: type=1400 audit(2000000054.030:287): avc: denied { create } for pid=6699 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.668435][ T5866] usb 1-1: can't read configurations, error -61 [ 132.748872][ T6702] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 132.790820][ T5866] usb usb1-port1: unable to enumerate USB device [ 133.354604][ T5867] usb 4-1: USB disconnect, device number 8 [ 134.572122][ T29] audit: type=1400 audit(2000000055.940:288): avc: denied { append } for pid=6719 comm="syz.0.201" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 134.979709][ T29] audit: type=1400 audit(2000000056.340:289): avc: denied { sqpoll } for pid=6729 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 135.000740][ T51] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.130709][ T5866] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 135.193583][ T51] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.306330][ T51] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.320594][ T51] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.340850][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.515712][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.516997][ T6742] ceph: No mds server is up or the cluster is laggy [ 135.550130][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 135.556187][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 135.781018][ T29] audit: type=1326 audit(2000000057.140:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb486785d29 code=0x7fc00000 [ 135.821851][ T9] libceph: connect (1)[c::]:6789 error -101 [ 135.821906][ T6726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.827893][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 135.838572][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.856295][ T51] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.869157][ T29] audit: type=1326 audit(2000000057.140:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb486785d29 code=0x7fc00000 [ 135.897115][ T5866] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 135.911327][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.932281][ T5866] usb 3-1: config 0 descriptor?? [ 135.995704][ T29] audit: type=1326 audit(2000000057.140:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb486785d29 code=0x7fc00000 [ 136.023549][ T6745] 9pnet_virtio: no channels available for device syz [ 136.163736][ T6757] overlayfs: failed to resolve './file1': -2 [ 136.281506][ T29] audit: type=1326 audit(2000000057.140:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb486785d29 code=0x7fc00000 [ 136.322238][ T29] audit: type=1326 audit(2000000057.140:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb486785d29 code=0x7fc00000 [ 136.615763][ T29] audit: type=1326 audit(2000000057.140:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb486785d29 code=0x7fc00000 [ 136.670605][ T29] audit: type=1326 audit(2000000057.140:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb486785d29 code=0x7fc00000 [ 136.703217][ T51] usb 4-1: USB disconnect, device number 9 [ 136.722299][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 136.734939][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 136.794032][ T5866] usb 3-1: USB disconnect, device number 16 [ 137.490716][ T6765] netlink: 'syz.0.213': attribute type 4 has an invalid length. [ 137.840539][ T51] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 138.472290][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 138.472308][ T29] audit: type=1400 audit(2000000059.830:352): avc: denied { create } for pid=6775 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.560408][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 138.571702][ T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.586945][ T51] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 138.596306][ T51] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 138.604522][ T51] usb 1-1: Product: syz [ 138.608714][ T51] usb 1-1: SerialNumber: syz [ 138.621554][ T51] usb 1-1: config 0 descriptor?? [ 138.750532][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.900547][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 138.907926][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.925149][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.929365][ T6786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.936480][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.952479][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.978419][ T29] audit: type=1400 audit(2000000060.340:353): avc: denied { read } for pid=6764 comm="syz.0.213" path="socket:[12298]" dev="sockfs" ino=12298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.001737][ T51] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 139.015385][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.026127][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.060176][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.069442][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.079183][ T9] usb 4-1: config 0 descriptor?? [ 139.174186][ T51] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 139.190368][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.198390][ T51] usb 3-1: Product: syz [ 139.202601][ T51] usb 3-1: Manufacturer: syz [ 139.207410][ T51] usb 3-1: SerialNumber: syz [ 139.220558][ T51] usb 3-1: config 0 descriptor?? [ 139.348591][ T6791] overlayfs: missing 'lowerdir' [ 139.568507][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.603402][ T51] usb-storage 3-1:0.0: USB Mass Storage device detected [ 139.619444][ T9] usb 4-1: USB disconnect, device number 10 [ 139.642743][ T9] usblp0: removed [ 139.693395][ T6798] warning: `syz.3.216' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.709469][ T51] libceph: connect (1)[c::]:6789 error -101 [ 139.718745][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 139.736919][ T6794] ceph: No mds server is up or the cluster is laggy [ 139.867764][ T6803] x_tables: duplicate underflow at hook 4 [ 140.175772][ T6794] 9pnet_virtio: no channels available for device syz [ 140.264984][ T29] audit: type=1400 audit(2000000061.630:354): avc: denied { mounton } for pid=6807 comm="syz.1.224" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 140.292986][ T5866] usb 1-1: USB disconnect, device number 14 [ 140.326245][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.642339][ T6808] ALSA: seq fatal error: cannot create timer (-22) [ 140.712463][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 140.726118][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.738571][ T9] usb 4-1: config 0 has no interface number 0 [ 140.745937][ T29] audit: type=1400 audit(2000000062.110:355): avc: denied { ioctl } for pid=6810 comm="syz.0.225" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12344 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.756726][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.784349][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.793523][ T9] usb 4-1: Product: syz [ 140.798130][ T9] usb 4-1: Manufacturer: syz [ 140.802800][ T9] usb 4-1: SerialNumber: syz [ 140.809361][ T9] usb 4-1: config 0 descriptor?? [ 140.816478][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 142.017190][ T6818] wg2: entered promiscuous mode [ 142.022614][ T6818] wg2: entered allmulticast mode [ 142.095287][ T9] usb 4-1: qt2_attach - failed to power on unit: -71 [ 142.102154][ T9] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 142.113601][ T9] usb 4-1: USB disconnect, device number 11 [ 142.156643][ T29] audit: type=1400 audit(2000000063.520:356): avc: denied { mounton } for pid=6828 comm="syz.4.231" path="/proc/213/task" dev="proc" ino=12367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 142.226835][ T29] audit: type=1400 audit(2000000063.590:357): avc: denied { ioctl } for pid=6828 comm="syz.4.231" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 142.352768][ T5868] usb 3-1: USB disconnect, device number 17 [ 142.551382][ T29] audit: type=1400 audit(2000000063.830:358): avc: denied { bind } for pid=6830 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.060872][ T29] audit: type=1400 audit(2000000063.830:359): avc: denied { listen } for pid=6830 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.107020][ T29] audit: type=1400 audit(2000000063.830:360): avc: denied { connect } for pid=6830 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.139437][ T29] audit: type=1400 audit(2000000063.870:361): avc: denied { write } for pid=6830 comm="syz.3.230" path="socket:[11481]" dev="sockfs" ino=11481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.565482][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 143.565500][ T29] audit: type=1400 audit(2000000064.930:363): avc: denied { name_bind } for pid=6846 comm="syz.1.235" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 143.906915][ T6851] overlayfs: missing 'lowerdir' [ 144.480559][ T5868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 145.240400][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 145.345980][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.357021][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.357065][ T5868] usb 2-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 145.357088][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.386377][ T5868] usb 2-1: config 0 descriptor?? [ 145.505679][ T29] audit: type=1400 audit(2000000066.870:364): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 145.667669][ T6889] fuse: Unknown parameter 'group_id00000000000000000000' [ 146.471739][ T51] libceph: connect (1)[c::]:6789 error -101 [ 146.477944][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 146.547934][ T6914] overlayfs: failed to resolve './file1': -2 [ 146.554231][ T5896] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.717069][ T6910] ceph: No mds server is up or the cluster is laggy [ 146.730559][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 146.763366][ T51] libceph: connect (1)[c::]:6789 error -101 [ 146.780258][ T5896] usb 5-1: config 195 has an invalid interface number: 194 but max is 0 [ 146.791612][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 146.797933][ T5896] usb 5-1: config 195 has no interface number 0 [ 146.888300][ T5896] usb 5-1: config 195 interface 194 has no altsetting 0 [ 146.918159][ T5896] usb 5-1: New USB device found, idVendor=14b2, idProduct=3c08, bcdDevice=14.06 [ 146.927895][ T6915] 9pnet_virtio: no channels available for device syz [ 146.937207][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.946045][ T5896] usb 5-1: Product: syz [ 146.954685][ T5896] usb 5-1: Manufacturer: syz [ 146.963975][ T5896] usb 5-1: SerialNumber: syz [ 147.013633][ T29] audit: type=1400 audit(2000000068.380:365): avc: denied { read } for pid=6917 comm="syz.0.249" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 147.044860][ T6918] netlink: 'syz.0.249': attribute type 39 has an invalid length. [ 147.050445][ T29] audit: type=1400 audit(2000000068.380:366): avc: denied { open } for pid=6917 comm="syz.0.249" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 147.190394][ T5896] usb 5-1: USB disconnect, device number 8 [ 147.273837][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 147.281865][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.298193][ T5868] usb 2-1: USB disconnect, device number 10 [ 147.427779][ T6924] random: crng reseeded on system resumption [ 148.030311][ T29] audit: type=1400 audit(2000000069.390:367): avc: denied { ioctl } for pid=6935 comm="syz.3.255" path="/dev/input/event2" dev="devtmpfs" ino=929 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.400587][ T29] audit: type=1400 audit(2000000000.180:368): avc: denied { write } for pid=6935 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.436902][ T29] audit: type=1400 audit(2000000000.350:369): avc: denied { setopt } for pid=6935 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.712352][ T6927] syz.0.252 (6927) used greatest stack depth: 21312 bytes left [ 148.810448][ T29] audit: type=1400 audit(2000000000.700:370): avc: denied { write } for pid=6946 comm="syz.3.256" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.051975][ T6952] fuse: Bad value for 'fd' [ 149.792207][ T6955] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 149.826517][ T6955] netlink: 'syz.0.258': attribute type 4 has an invalid length. [ 149.834744][ T6955] netlink: 212 bytes leftover after parsing attributes in process `syz.0.258'. [ 149.887173][ T29] audit: type=1400 audit(2000000001.780:371): avc: denied { ioctl } for pid=6954 comm="syz.0.258" path="socket:[11657]" dev="sockfs" ino=11657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 150.197491][ T6923] Restarting kernel threads ... done. [ 151.118989][ T29] audit: type=1326 audit(2000000003.020:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.0.262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb486785d29 code=0x0 [ 151.532865][ T29] audit: type=1400 audit(2000000003.450:373): avc: denied { ioctl } for pid=6975 comm="syz.3.264" path="socket:[11702]" dev="sockfs" ino=11702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.970393][ T51] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.050498][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 152.140267][ T51] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.148792][ T6996] program syz.4.271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.171173][ T6994] bridge_slave_0: left allmulticast mode [ 152.176974][ T6994] bridge_slave_0: left promiscuous mode [ 152.179586][ T29] audit: type=1400 audit(2000000004.080:374): avc: denied { bind } for pid=6993 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.188509][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.220602][ T51] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.238862][ T51] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.248613][ T29] audit: type=1400 audit(2000000004.080:375): avc: denied { name_bind } for pid=6993 comm="syz.3.270" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 152.271406][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.298532][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.310809][ T6990] Cannot find del_set index 0 as target [ 152.317461][ T6981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.326083][ T6994] bridge_slave_1: left allmulticast mode [ 152.335996][ T51] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.343295][ T6994] bridge_slave_1: left promiscuous mode [ 152.343559][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.359635][ T29] audit: type=1400 audit(2000000004.080:376): avc: denied { node_bind } for pid=6993 comm="syz.3.270" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 152.360044][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.381443][ T5866] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 152.399008][ T29] audit: type=1400 audit(2000000004.210:377): avc: denied { name_connect } for pid=6993 comm="syz.3.270" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 152.421128][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.433819][ T29] audit: type=1400 audit(2000000004.210:378): avc: denied { setopt } for pid=6989 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 152.601699][ T5866] usb 3-1: config 0 descriptor?? [ 153.276758][ T6994] bond0: (slave bond_slave_0): Releasing backup interface [ 153.389920][ T51] usb 2-1: USB disconnect, device number 11 [ 153.943676][ T6994] bond0: (slave bond_slave_1): Releasing backup interface [ 154.009288][ T6994] team0: Port device team_slave_0 removed [ 154.053271][ T6994] team0: Port device team_slave_1 removed [ 154.059682][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.071337][ T6994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.148830][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.161036][ T6994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.191107][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.241465][ T29] audit: type=1400 audit(2000000006.140:379): avc: denied { write } for pid=7016 comm="syz.4.275" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.297301][ T29] audit: type=1400 audit(2000000006.190:380): avc: denied { read write } for pid=7019 comm="syz.3.277" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 154.326074][ T29] audit: type=1400 audit(2000000006.190:381): avc: denied { open } for pid=7019 comm="syz.3.277" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 154.520619][ T5868] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.793570][ T29] audit: type=1326 audit(2000000006.700:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7025 comm="syz.1.278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2adf185d29 code=0x0 [ 154.821928][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.835764][ T5868] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.845246][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.858954][ T5868] usb 4-1: config 0 descriptor?? [ 154.884777][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 154.930531][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 155.093662][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.106890][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.127185][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 155.143413][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.154599][ T9] usb 1-1: config 0 descriptor?? [ 155.260467][ T5867] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.272081][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 155.279417][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 155.283750][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 155.288225][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 155.310658][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 155.342902][ T5866] usb 3-1: USB disconnect, device number 18 [ 155.346632][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 155.392716][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 155.400536][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 155.413907][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 155.434311][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 155.537622][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.599531][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.609485][ T5867] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 155.623608][ T9] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 155.630781][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.641157][ T9] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 155.656380][ T5867] usb 5-1: config 0 descriptor?? [ 155.758224][ T29] audit: type=1400 audit(2000000007.670:383): avc: denied { setopt } for pid=7032 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.784556][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.799473][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.840667][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.848178][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.867147][ T29] audit: type=1400 audit(2000000007.780:384): avc: denied { ioctl } for pid=7019 comm="syz.3.277" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 155.892682][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.901968][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.3.277'. [ 155.959661][ T5867] usbhid 5-1:0.0: can't add hid device: -71 [ 155.979928][ T29] audit: type=1400 audit(2000000007.830:385): avc: denied { relabelfrom } for pid=7034 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.005689][ T5868] pwc: recv_control_msg error -71 req 02 val 2500 [ 156.033560][ T5867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 156.044956][ T29] audit: type=1400 audit(2000000007.830:386): avc: denied { relabelto } for pid=7034 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.066782][ T5868] pwc: recv_control_msg error -71 req 02 val 2400 [ 156.138446][ T5867] usb 5-1: USB disconnect, device number 9 [ 156.156123][ T5868] pwc: recv_control_msg error -71 req 02 val 2600 [ 156.180798][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 156.192421][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 156.224588][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 156.240204][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 156.281202][ T5868] pwc: Registered as video103. [ 156.299484][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 156.410416][ T5868] usb 4-1: USB disconnect, device number 12 [ 157.786184][ T9] cp2112 0003:10C4:EA90.000C: error requesting version [ 158.367158][ T9] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -71 [ 158.380812][ T29] audit: type=1400 audit(2000000010.290:387): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.383032][ T9] usb 1-1: USB disconnect, device number 15 [ 158.605124][ T7062] misc userio: The device must be registered before sending interrupts [ 158.630082][ T29] audit: type=1400 audit(2000000010.390:388): avc: denied { accept } for pid=7059 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.981466][ T7087] ======================================================= [ 159.981466][ T7087] WARNING: The mand mount option has been deprecated and [ 159.981466][ T7087] and is ignored by this kernel. Remove the mand [ 159.981466][ T7087] option from the mount to silence this warning. [ 159.981466][ T7087] ======================================================= [ 160.028896][ T7087] lo speed is unknown, defaulting to 1000 [ 160.035069][ T7087] lo speed is unknown, defaulting to 1000 [ 160.045381][ T7087] lo speed is unknown, defaulting to 1000 [ 160.063628][ T7087] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.091400][ T7087] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 160.142881][ T29] audit: type=1400 audit(2000000011.940:389): avc: denied { write } for pid=7081 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 160.177733][ T7087] lo speed is unknown, defaulting to 1000 [ 160.188439][ T7087] lo speed is unknown, defaulting to 1000 [ 160.198768][ T7087] lo speed is unknown, defaulting to 1000 [ 160.208875][ T7087] lo speed is unknown, defaulting to 1000 [ 160.218830][ T7087] lo speed is unknown, defaulting to 1000 [ 161.508210][ T29] audit: type=1400 audit(2000000013.420:390): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.619977][ T29] audit: type=1400 audit(2000000013.420:391): avc: denied { read } for pid=5485 comm="dhcpcd" name="n101" dev="tmpfs" ino=3348 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.663423][ T29] audit: type=1400 audit(2000000013.420:392): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3348 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.688953][ T29] audit: type=1400 audit(2000000013.420:393): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3348 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.758767][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 161.767441][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 161.768890][ T29] audit: type=1400 audit(2000000013.690:394): avc: denied { read } for pid=7107 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.877699][ T29] audit: type=1400 audit(2000000013.790:395): avc: denied { open } for pid=7107 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.910666][ T29] audit: type=1400 audit(2000000013.790:396): avc: denied { getattr } for pid=7107 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.946973][ T7101] ceph: No mds server is up or the cluster is laggy [ 161.980288][ T7111] 9pnet_virtio: no channels available for device syz [ 162.216483][ T7127] process 'syz.2.304' launched './file0' with NULL argv: empty string added [ 162.229582][ T29] audit: type=1400 audit(2000000014.140:397): avc: denied { execute_no_trans } for pid=7126 comm="syz.2.304" path="/47/file0" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.398549][ T29] audit: type=1400 audit(2000000014.310:398): avc: denied { write } for pid=7102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.482124][ T7135] fuse: Unknown parameter 'group_id00000000000000000000' [ 163.360463][ T5818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.370992][ T7151] loop9: detected capacity change from 0 to 1 [ 163.393195][ T7151] Dev loop9: unable to read RDB block 1 [ 163.398857][ T7151] loop9: unable to read partition table [ 163.405256][ T7151] loop9: partition table beyond EOD, truncated [ 163.417525][ T7151] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 163.797930][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.814381][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.824586][ T5818] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 163.836276][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.850971][ T5818] usb 5-1: config 0 descriptor?? [ 164.960682][ T5868] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 165.396728][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 165.396796][ T29] audit: type=1400 audit(2000000017.310:407): avc: denied { watch } for pid=7178 comm="syz.3.313" path="/64" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.428666][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.510016][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.521777][ T5868] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 165.533521][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.542905][ T5868] usb 1-1: config 0 descriptor?? [ 165.782443][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 165.803474][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 165.820668][ T5868] usb 1-1: USB disconnect, device number 16 [ 166.146781][ T5818] usbhid 5-1:0.0: can't add hid device: -71 [ 166.162818][ T5818] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 166.189165][ T5818] usb 5-1: USB disconnect, device number 10 [ 166.240552][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 166.367931][ T7195] netlink: 56 bytes leftover after parsing attributes in process `syz.0.320'. [ 166.404435][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.473304][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.483361][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.492771][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.504022][ T7191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 166.516224][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.630442][ T5818] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.691798][ T29] audit: type=1400 audit(2000000018.610:408): avc: denied { connect } for pid=7194 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.714418][ T29] audit: type=1400 audit(2000000018.620:409): avc: denied { write } for pid=7194 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.733977][ T29] audit: type=1400 audit(2000000018.620:410): avc: denied { read } for pid=7194 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.851982][ T7200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.990616][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 167.041315][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 167.112043][ T29] audit: type=1400 audit(2000000019.030:411): avc: denied { connect } for pid=7194 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.120174][ T5818] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 167.141098][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.149192][ T5818] usb 5-1: Product: syz [ 167.153613][ T5818] usb 5-1: Manufacturer: syz [ 167.158401][ T5818] usb 5-1: SerialNumber: syz [ 167.164362][ T7204] FAULT_INJECTION: forcing a failure. [ 167.164362][ T7204] name failslab, interval 1, probability 0, space 0, times 0 [ 167.167387][ T5818] usb 5-1: config 0 descriptor?? [ 167.183910][ T5818] hub 5-1:0.0: bad descriptor, ignoring hub [ 167.186403][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.1.322 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 167.190692][ T5818] hub 5-1:0.0: probe with driver hub failed with error -5 [ 167.200399][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 167.200413][ T7204] Call Trace: [ 167.200420][ T7204] [ 167.200427][ T7204] dump_stack_lvl+0x16c/0x1f0 [ 167.200456][ T7204] should_fail_ex+0x497/0x5b0 [ 167.209958][ T5818] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 167.217597][ T7204] ? fs_reclaim_acquire+0xae/0x150 [ 167.217635][ T7204] should_failslab+0xc2/0x120 [ 167.217657][ T7204] __kmalloc_noprof+0xcb/0x510 [ 167.217676][ T7204] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 167.217702][ T7204] tomoyo_realpath_from_path+0xb9/0x720 [ 167.217725][ T7204] ? tomoyo_path_number_perm+0x235/0x590 [ 167.217745][ T7204] ? tomoyo_path_number_perm+0x235/0x590 [ 167.217768][ T7204] tomoyo_path_number_perm+0x248/0x590 [ 167.217786][ T7204] ? tomoyo_path_number_perm+0x235/0x590 [ 167.217807][ T7204] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.217851][ T7204] ? __pfx_lock_release+0x10/0x10 [ 167.217870][ T7204] ? trace_lock_acquire+0x14e/0x1f0 [ 167.227419][ T5818] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 167.228718][ T7204] ? lock_acquire+0x2f/0xb0 [ 167.228744][ T7204] ? __fget_files+0x40/0x3a0 [ 167.324547][ T7204] ? __fget_files+0x206/0x3a0 [ 167.329214][ T7204] security_file_ioctl+0x9b/0x240 [ 167.334230][ T7204] __x64_sys_ioctl+0xb7/0x200 [ 167.338908][ T7204] do_syscall_64+0xcd/0x250 [ 167.343399][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.349292][ T7204] RIP: 0033:0x7f2adf185d29 [ 167.353688][ T7204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.373281][ T7204] RSP: 002b:00007f2adff48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.381684][ T7204] RAX: ffffffffffffffda RBX: 00007f2adf375fa0 RCX: 00007f2adf185d29 [ 167.389649][ T7204] RDX: 00000000200000c0 RSI: 00000000c020aa08 RDI: 0000000000000004 [ 167.397611][ T7204] RBP: 00007f2adff48090 R08: 0000000000000000 R09: 0000000000000000 [ 167.405582][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.413535][ T7204] R13: 0000000000000000 R14: 00007f2adf375fa0 R15: 00007ffdec73d598 [ 167.421498][ T7204] [ 167.470366][ T7204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.112611][ T5818] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 168.134753][ T7211] wg2: entered promiscuous mode [ 168.139673][ T7211] wg2: entered allmulticast mode [ 168.152820][ T5818] usb 5-1: USB disconnect, device number 11 [ 169.144345][ T7217] random: crng reseeded on system resumption [ 169.225289][ T7217] Restarting kernel threads ... done. [ 169.255540][ T7219] wg2: entered promiscuous mode [ 169.260939][ T7219] wg2: entered allmulticast mode [ 169.515247][ T9] usb 4-1: USB disconnect, device number 13 [ 169.519354][ T29] audit: type=1400 audit(2000000021.430:412): avc: denied { ioctl } for pid=7229 comm="syz.3.329" path="socket:[12186]" dev="sockfs" ino=12186 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.784311][ T29] audit: type=1400 audit(2000000021.580:413): avc: denied { listen } for pid=7221 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.248867][ T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.318862][ T29] audit: type=1400 audit(2000000022.220:414): avc: denied { read write } for pid=7229 comm="syz.3.329" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.429788][ T29] audit: type=1400 audit(2000000022.220:415): avc: denied { open } for pid=7229 comm="syz.3.329" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.453410][ T51] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.456242][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 170.471618][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 170.479496][ T7239] ceph: No mds server is up or the cluster is laggy [ 170.499231][ T51] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.514806][ T51] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.524312][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.550531][ T5866] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 170.681370][ T7227] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.736571][ T51] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.736987][ T29] audit: type=1400 audit(2000000022.650:416): avc: denied { open } for pid=7238 comm="syz.4.331" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 170.770591][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.872834][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.923182][ T5866] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 170.932370][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.959257][ T5866] usb 4-1: config 0 descriptor?? [ 171.494926][ T5136] Bluetooth: hci3: command 0x0406 tx timeout [ 171.510987][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 171.517201][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 171.524598][ T5866] kye 0003:0458:5019.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 171.535236][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 171.541366][ T5136] Bluetooth: hci0: command 0x0406 tx timeout [ 171.571288][ T5866] kye 0003:0458:5019.000D: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0 [ 171.582609][ T5866] kye 0003:0458:5019.000D: tablet-enabling feature report not found [ 171.595362][ T5866] kye 0003:0458:5019.000D: tablet enabling failed [ 171.607064][ T7249] ceph: No mds server is up or the cluster is laggy [ 171.659757][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 171.673991][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 171.742480][ T5866] usb 4-1: USB disconnect, device number 14 [ 171.789952][ T7254] 9pnet_virtio: no channels available for device syz [ 172.044497][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 172.050584][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 172.239761][ T51] usb 2-1: USB disconnect, device number 12 [ 172.400518][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 172.420515][ T5866] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 172.668376][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 172.880672][ T7264] wg2: left promiscuous mode [ 172.885337][ T7264] wg2: left allmulticast mode [ 172.900823][ T7265] wg2: entered promiscuous mode [ 172.902378][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.905764][ T7265] wg2: entered allmulticast mode [ 172.922142][ T5866] usb 3-1: config 0 descriptor?? [ 172.951811][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.953513][ T5866] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 172.966424][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.987455][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.996671][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.007043][ T7258] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 173.016781][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.047036][ T51] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 174.253947][ T51] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.265542][ T51] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.281832][ T51] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.334576][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.453965][ T7271] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.511987][ T51] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.582881][ T7282] overlayfs: failed to resolve './file1': -2 [ 174.609393][ T29] audit: type=1400 audit(2000000026.480:417): avc: denied { create } for pid=7279 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.790664][ T29] audit: type=1400 audit(2000000026.580:418): avc: denied { write } for pid=7279 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.223331][ T5868] usb 1-1: USB disconnect, device number 17 [ 175.395544][ T51] usb 5-1: USB disconnect, device number 12 [ 175.482389][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 175.491646][ T7291] netlink: 'syz.1.342': attribute type 7 has an invalid length. [ 175.499826][ T7291] netlink: 'syz.1.342': attribute type 8 has an invalid length. [ 175.508199][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 175.520800][ T7291] ip6gretap0: entered promiscuous mode [ 175.527424][ T7291] syz_tun: entered promiscuous mode [ 175.551797][ T7291] ip6gretap0: left promiscuous mode [ 175.559053][ T7291] syz_tun: left promiscuous mode [ 176.473801][ T5866] usb 3-1: USB disconnect, device number 19 [ 176.536204][ T29] audit: type=1400 audit(2000000028.450:419): avc: denied { read } for pid=7314 comm="syz.2.350" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.559645][ T29] audit: type=1400 audit(2000000028.450:420): avc: denied { open } for pid=7314 comm="syz.2.350" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.583207][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.846189][ T29] audit: type=1400 audit(2000000028.760:421): avc: denied { read } for pid=7322 comm="syz.0.353" path="socket:[13275]" dev="sockfs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.883296][ T29] audit: type=1400 audit(2000000028.790:422): avc: denied { ioctl } for pid=7322 comm="syz.0.353" path="socket:[13275]" dev="sockfs" ino=13275 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.919177][ T5866] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 176.946235][ T29] audit: type=1400 audit(2000000028.790:423): avc: denied { append } for pid=7322 comm="syz.0.353" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.968830][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.995692][ T29] audit: type=1400 audit(2000000028.790:424): avc: denied { getopt } for pid=7322 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.014938][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.100419][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 177.107071][ T5866] usb 3-1: config 0 has an invalid interface number: 81 but max is 0 [ 177.116239][ T5866] usb 3-1: config 0 has no interface number 0 [ 177.152846][ T5866] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=98.72 [ 177.162330][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.170538][ T5866] usb 3-1: Product: syz [ 177.174738][ T5866] usb 3-1: Manufacturer: syz [ 177.179339][ T5866] usb 3-1: SerialNumber: syz [ 177.187549][ T5866] usb 3-1: config 0 descriptor?? [ 177.272656][ T5818] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.707657][ T5866] sierra 3-1:0.81: Sierra USB modem converter detected [ 177.735100][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 177.741340][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 177.827283][ T7332] ceph: No mds server is up or the cluster is laggy [ 178.036438][ T7332] 9pnet_virtio: no channels available for device syz [ 178.302619][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 178.311661][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.364259][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.381605][ T5818] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 178.389528][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 178.393862][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.414163][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 178.419870][ T5818] usb 2-1: config 0 descriptor?? [ 178.515834][ T5866] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 178.545362][ T5866] usb 3-1: USB disconnect, device number 20 [ 178.567296][ T5866] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 178.588438][ T5866] sierra 3-1:0.81: device disconnected [ 178.650998][ T5818] usbhid 2-1:0.0: can't add hid device: -71 [ 178.651081][ T5818] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.653531][ T5818] usb 2-1: USB disconnect, device number 13 [ 178.696286][ T5868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 178.936510][ T5868] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.954339][ T5868] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 178.969478][ T5868] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.497813][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.509162][ T7345] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 179.524729][ T5868] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.541148][ T6897] Bluetooth: hci5: Frame reassembly failed (-84) [ 179.553928][ T6897] Bluetooth: hci5: Frame reassembly failed (-84) [ 180.062748][ T5868] usb 5-1: USB disconnect, device number 13 [ 181.770458][ T5826] Bluetooth: hci5: command 0xfc11 tx timeout [ 181.778478][ T5828] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 181.990490][ T5868] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.646227][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.669033][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.679392][ T7397] wg2: entered promiscuous mode [ 182.684386][ T7397] wg2: entered allmulticast mode [ 182.700463][ T5868] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 182.720391][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.737468][ T5868] usb 5-1: config 0 descriptor?? [ 183.065039][ T7406] overlayfs: missing 'lowerdir' [ 183.190466][ T5818] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 183.224316][ T7409] ipvlan2: entered promiscuous mode [ 183.231345][ T7409] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 184.345946][ T5818] usb 2-1: config 2 has an invalid interface number: 186 but max is 0 [ 184.354192][ T5818] usb 2-1: config 2 has no interface number 0 [ 184.361870][ T5818] usb 2-1: config 2 interface 186 has no altsetting 0 [ 184.432025][ T5818] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 184.445049][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.475698][ T5868] usbhid 5-1:0.0: can't add hid device: -71 [ 184.492246][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 184.528283][ T5818] usb 2-1: Product: syz [ 184.536066][ T5818] usb 2-1: Manufacturer: syz [ 184.540795][ T5818] usb 2-1: SerialNumber: syz [ 184.647508][ T5868] usb 5-1: USB disconnect, device number 14 [ 184.922159][ T7434] lo speed is unknown, defaulting to 1000 [ 185.107660][ T7442] random: crng reseeded on system resumption [ 185.270490][ T969] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.367193][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.410847][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.120070][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.130840][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.153004][ T5818] catc 2-1:2.186: Can't set altsetting 1. [ 186.158996][ T5818] catc 2-1:2.186: probe with driver catc failed with error -5 [ 186.177266][ T7448] wg2: left promiscuous mode [ 186.180920][ T5818] usb 2-1: USB disconnect, device number 14 [ 186.181956][ T7448] wg2: left allmulticast mode [ 186.198142][ T7442] Restarting kernel threads ... done. [ 186.205253][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.218062][ T7449] wg2: entered promiscuous mode [ 186.223098][ T7449] wg2: entered allmulticast mode [ 186.277382][ T969] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.287404][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.335268][ T969] usb 4-1: config 0 descriptor?? [ 186.430533][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 186.604045][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.625506][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.655022][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 186.680917][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.699392][ T9] usb 3-1: config 0 descriptor?? [ 186.840243][ T7459] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 186.850460][ T29] audit: type=1400 audit(2000000006.300:425): avc: denied { getopt } for pid=7458 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.870690][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.882967][ T7459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.384'. [ 187.122486][ T969] usbhid 4-1:0.0: can't add hid device: -71 [ 187.128680][ T969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 187.140711][ T29] audit: type=1400 audit(2000000006.590:426): avc: denied { setattr } for pid=7464 comm="syz.4.385" name="NETLINK" dev="sockfs" ino=13557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.190155][ T969] usb 4-1: USB disconnect, device number 15 [ 187.488855][ T9] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 187.497415][ T9] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 188.191055][ T9] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 188.240081][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.434128][ T9] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 188.451540][ T9] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 188.564539][ T9] usb 3-1: USB disconnect, device number 21 [ 189.449795][ T29] audit: type=1400 audit(2000000002.100:427): avc: denied { create } for pid=7490 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 189.469989][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.530525][ T29] audit: type=1400 audit(2000000002.120:428): avc: denied { write } for pid=7490 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 189.835106][ T29] audit: type=1400 audit(2000000002.470:429): avc: denied { ioctl } for pid=7500 comm="syz.0.396" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 190.349468][ T7507] overlayfs: failed to resolve './file1': -2 [ 190.532205][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.358266][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.379741][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.390425][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 191.399702][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.416995][ T9] usb 4-1: config 0 descriptor?? [ 192.034433][ T9] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 192.042810][ T9] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 192.794414][ T29] audit: type=1400 audit(2000000004.890:430): avc: denied { getopt } for pid=7524 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.848420][ T9] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 193.191057][ T969] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 193.249988][ T9] cp2112 0003:10C4:EA90.000F: error setting SMBus config [ 193.266529][ T9] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -71 [ 193.299516][ T9] usb 4-1: USB disconnect, device number 16 [ 193.351327][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 193.363128][ T969] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 193.405513][ T969] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 193.450808][ T969] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 193.477258][ T969] usb 2-1: config 1 has no interface number 0 [ 193.483770][ T969] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.495575][ T969] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 193.508928][ T969] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 193.518288][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.543173][ T969] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 193.856026][ T29] audit: type=1326 audit(2000000000.690:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.4.408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3eae185d29 code=0x0 [ 194.063734][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.070123][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.089969][ T969] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 194.919740][ T969] usb 2-1: USB disconnect, device number 15 [ 194.993545][ T969] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 195.354077][ T7571] overlayfs: failed to resolve './file1': -2 [ 195.750786][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 196.261010][ T29] audit: type=1400 audit(2000000003.070:432): avc: denied { write } for pid=7580 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 196.655079][ T7585] syz.2.417: attempt to access beyond end of device [ 196.655079][ T7585] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 196.675703][ T7585] syz.2.417: attempt to access beyond end of device [ 196.675703][ T7585] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 196.691068][ T7585] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 196.704931][ T7585] syz.2.417: attempt to access beyond end of device [ 196.704931][ T7585] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 196.718317][ T7585] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 196.730584][ T7585] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 196.750554][ T7585] UDF-fs: Scanning with blocksize 512 failed [ 196.799633][ T7585] syz.2.417: attempt to access beyond end of device [ 196.799633][ T7585] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 196.820350][ T7585] syz.2.417: attempt to access beyond end of device [ 196.820350][ T7585] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 196.854171][ T7585] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 196.881194][ T7585] syz.2.417: attempt to access beyond end of device [ 196.881194][ T7585] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 197.597161][ T7589] random: crng reseeded on system resumption [ 197.676620][ T7589] Restarting kernel threads ... done. [ 197.730613][ T7585] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 197.761595][ T7585] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 197.779451][ T7580] [U] v3 [ 197.789982][ T7585] UDF-fs: Scanning with blocksize 1024 failed [ 197.844123][ T7585] syz.2.417: attempt to access beyond end of device [ 197.844123][ T7585] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 197.910758][ T7585] syz.2.417: attempt to access beyond end of device [ 197.910758][ T7585] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 197.961450][ T7585] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 197.973986][ T7585] syz.2.417: attempt to access beyond end of device [ 197.973986][ T7585] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 198.008705][ T7585] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 198.039798][ T7585] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 198.063928][ T7585] UDF-fs: Scanning with blocksize 2048 failed [ 198.081410][ T7585] syz.2.417: attempt to access beyond end of device [ 198.081410][ T7585] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 198.098208][ T7585] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 198.098750][ T7585] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 198.098763][ T7585] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 198.098770][ T7585] UDF-fs: Scanning with blocksize 4096 failed [ 198.098775][ T7585] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 198.351366][ T29] audit: type=1326 audit(2000000005.180:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7604 comm="syz.2.421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98b3385d29 code=0x0 [ 198.730485][ T969] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 198.817380][ T29] audit: type=1400 audit(2000000005.650:434): avc: denied { shutdown } for pid=7608 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.272600][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.287498][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.288145][ T7620] FAULT_INJECTION: forcing a failure. [ 199.288145][ T7620] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.298857][ T969] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 199.310562][ T7620] CPU: 1 UID: 0 PID: 7620 Comm: syz.2.424 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 199.310589][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 199.310601][ T7620] Call Trace: [ 199.310607][ T7620] [ 199.310615][ T7620] dump_stack_lvl+0x16c/0x1f0 [ 199.310640][ T7620] should_fail_ex+0x497/0x5b0 [ 199.310664][ T7620] ? page_copy_sane+0xcd/0x2d0 [ 199.310692][ T7620] copy_page_from_iter_atomic+0x39f/0x1920 [ 199.319682][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.330263][ T7620] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 199.330289][ T7620] ? shmem_write_begin+0x177/0x300 [ 199.330305][ T7620] ? __pfx_fault_in_readable+0x10/0x10 [ 199.330323][ T7620] ? __pfx_shmem_write_begin+0x10/0x10 [ 199.330345][ T7620] generic_perform_write+0x4a1/0x920 [ 199.330379][ T7620] ? __pfx_generic_perform_write+0x10/0x10 [ 199.407532][ T7620] ? inode_needs_update_time.part.0+0x191/0x270 [ 199.413779][ T7620] shmem_file_write_iter+0x10e/0x140 [ 199.419051][ T7620] vfs_write+0x5ae/0x1150 [ 199.423367][ T7620] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 199.429157][ T7620] ? __pfx___mutex_lock+0x10/0x10 [ 199.434169][ T7620] ? __pfx_vfs_write+0x10/0x10 [ 199.438926][ T7620] ksys_write+0x12b/0x250 [ 199.443240][ T7620] ? __pfx_ksys_write+0x10/0x10 [ 199.448088][ T7620] do_syscall_64+0xcd/0x250 [ 199.452581][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.458461][ T7620] RIP: 0033:0x7f98b3385d29 [ 199.462859][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.482450][ T7620] RSP: 002b:00007f98b428f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.490848][ T7620] RAX: ffffffffffffffda RBX: 00007f98b3575fa0 RCX: 00007f98b3385d29 [ 199.498798][ T7620] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000005 [ 199.506750][ T7620] RBP: 00007f98b428f090 R08: 0000000000000000 R09: 0000000000000000 [ 199.514704][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.522657][ T7620] R13: 0000000000000000 R14: 00007f98b3575fa0 R15: 00007fff824fae18 [ 199.530620][ T7620] [ 199.534792][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 199.540829][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 199.549644][ T7618] ceph: No mds server is up or the cluster is laggy [ 199.559735][ T29] audit: type=1400 audit(2000000006.130:435): avc: denied { mount } for pid=7616 comm="syz.2.424" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.563543][ T969] usb 1-1: config 0 descriptor?? [ 199.707481][ T7627] 9pnet_virtio: no channels available for device syz [ 199.850492][ T29] audit: type=1400 audit(2000000006.430:436): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.925149][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 199.931239][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 200.010528][ T29] audit: type=1400 audit(2000000006.840:437): avc: denied { ioctl } for pid=7628 comm="syz.2.427" path="socket:[15108]" dev="sockfs" ino=15108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.222701][ T7636] overlayfs: failed to resolve './file1': -2 [ 200.270469][ T5867] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 200.421031][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 200.432803][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.451404][ T5867] usb 3-1: config 127 has an invalid interface number: 2 but max is 0 [ 200.465596][ T5867] usb 3-1: config 127 has no interface number 0 [ 200.478080][ T5867] usb 3-1: config 127 interface 2 has no altsetting 0 [ 200.491423][ T5867] usb 3-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=71.bd [ 200.500738][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.508940][ T5867] usb 3-1: Product: Ђ [ 200.518959][ T5867] usb 3-1: Manufacturer: э [ 200.623311][ T5867] usb 3-1: SerialNumber: 㫖Ⱃቅ偮辰с䔝ާ㖱孇흦驑㻁痦雮䓯ꈙ슰ꊉ絅顱脿蘕䛬ᔿ㘫휻뿲胈誜썀덦꿻㷇䞷ါ䎹夵撱࣓띘港闸牺畫逳疙쁹쎻ᣫ嘵࿥۸嶉ꌎ杖᪝⯵ꖁ़鞵塯廝ὴ軁샐㹀谹⋪菰ᘄ⾸ [ 200.729197][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 200.737832][ T969] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 200.750729][ T969] usb 1-1: USB disconnect, device number 18 [ 200.880489][ T5867] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware [ 200.927448][ T5867] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 200.927917][ T7643] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 200.935571][ T5867] dib0700: firmware download failed at 7 with -22 [ 200.941034][ T5867] usb 3-1: USB disconnect, device number 22 [ 200.949684][ T7643] netlink: 'syz.1.431': attribute type 8 has an invalid length. [ 200.968500][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 201.405561][ T29] audit: type=1400 audit(2000000008.240:438): avc: denied { read write } for pid=7648 comm="syz.4.433" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 201.455543][ T29] audit: type=1400 audit(2000000008.240:439): avc: denied { open } for pid=7648 comm="syz.4.433" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 201.939385][ T29] audit: type=1400 audit(2000000008.770:440): avc: denied { read } for pid=7656 comm="syz.2.436" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.023793][ T29] audit: type=1400 audit(2000000008.860:441): avc: denied { open } for pid=7656 comm="syz.2.436" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.346267][ T29] audit: type=1400 audit(2000000008.880:442): avc: denied { ioctl } for pid=7656 comm="syz.2.436" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.378017][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.413266][ T5867] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 202.475090][ T7665] Bluetooth: MGMT ver 1.23 [ 202.487554][ T7665] bond0: entered promiscuous mode [ 202.487568][ T7665] bond_slave_0: entered promiscuous mode [ 202.487669][ T7665] bond_slave_1: entered promiscuous mode [ 202.561397][ T5867] usb 2-1: not running at top speed; connect to a high speed hub [ 202.562495][ T5867] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 202.562521][ T5867] usb 2-1: config 95 has no interface number 0 [ 202.562547][ T5867] usb 2-1: config 95 interface 1 has no altsetting 0 [ 202.565250][ T5867] usb 2-1: string descriptor 0 read error: -22 [ 202.565323][ T5867] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 202.565349][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.635079][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 202.635213][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 202.642100][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 202.695540][ T7668] ceph: No mds server is up or the cluster is laggy [ 203.033228][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 203.033357][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 203.058071][ T7674] 9pnet_virtio: no channels available for device syz [ 203.837502][ T5867] usb 2-1: USB disconnect, device number 16 [ 204.146927][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.245499][ T7692] netlink: 68 bytes leftover after parsing attributes in process `syz.3.442'. [ 204.245588][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 204.245676][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.442'. [ 204.657988][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 204.658264][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 205.090447][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 205.090482][ T29] audit: type=1400 audit(2000000011.810:447): avc: denied { bind } for pid=7698 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.535905][ T29] audit: type=1400 audit(2000000012.370:448): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 205.969377][ T29] audit: type=1400 audit(2000000012.700:449): avc: denied { create } for pid=7704 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.988633][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.088085][ T29] audit: type=1400 audit(2000000012.710:450): avc: denied { write } for pid=7704 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.107233][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.300125][ T969] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 206.400615][ T5866] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.293606][ T29] audit: type=1400 audit(2000000013.360:451): avc: denied { mount } for pid=7709 comm="syz.4.449" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 207.350553][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 207.355839][ T7711] lo speed is unknown, defaulting to 1000 [ 207.530634][ T5896] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 207.680553][ T5866] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 207.688761][ T5866] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 207.708319][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 207.718439][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.728493][ T5866] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.742164][ T5866] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.751466][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.759974][ T5896] usb 5-1: device descriptor read/64, error -71 [ 207.830596][ T7716] kvm: pic: non byte read [ 207.978185][ T5866] usb 2-1: usb_control_msg returned -32 [ 207.983940][ T5866] usbtmc 2-1:16.0: can't read capabilities [ 207.992273][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.005402][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.013359][ T5896] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 208.160576][ T5896] usb 5-1: device descriptor read/64, error -71 [ 208.400461][ T29] audit: type=1400 audit(2000000015.110:452): avc: denied { mounton } for pid=7722 comm="syz.0.452" path="/100/file0" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 208.426907][ T5896] usb usb5-port1: attempt power cycle [ 208.550521][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 208.562861][ T7726] usbtmc 2-1:16.0: Unable to send data, error -71 [ 208.648229][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 208.657686][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 208.723606][ T7728] ceph: No mds server is up or the cluster is laggy [ 208.960511][ T5896] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 209.039098][ T7728] 9pnet_virtio: no channels available for device syz [ 209.129513][ T29] audit: type=1400 audit(2000000015.960:453): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 209.475166][ T5896] usb 5-1: device not accepting address 17, error -71 [ 209.507934][ T29] audit: type=1400 audit(2000000016.160:454): avc: denied { block_suspend } for pid=7738 comm="syz.4.454" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.140545][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.143949][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 210.143985][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:3 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 210.144000][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 210.144007][ T5826] Workqueue: hci3 hci_rx_work [ 210.144026][ T5826] Call Trace: [ 210.144030][ T5826] [ 210.144036][ T5826] dump_stack_lvl+0x16c/0x1f0 [ 210.144051][ T5826] sysfs_warn_dup+0x7f/0xa0 [ 210.144070][ T5826] sysfs_create_dir_ns+0x24d/0x2b0 [ 210.144092][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 210.144107][ T5826] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 210.144122][ T5826] ? kobject_add_internal+0x12d/0x990 [ 210.144140][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 210.144156][ T5826] kobject_add_internal+0x2c8/0x990 [ 210.144174][ T5826] kobject_add+0x16f/0x240 [ 210.144190][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 210.144205][ T5826] ? class_to_subsys+0x3e/0x160 [ 210.144221][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 210.144235][ T5826] ? kobject_put+0xab/0x5a0 [ 210.144252][ T5826] device_add+0x289/0x1a70 [ 210.144267][ T5826] ? __pfx_dev_set_name+0x10/0x10 [ 210.144283][ T5826] ? __pfx_device_add+0x10/0x10 [ 210.144297][ T5826] ? mgmt_send_event_skb+0x2f2/0x460 [ 210.144315][ T5826] hci_conn_add_sysfs+0x17e/0x230 [ 210.144332][ T5826] le_conn_complete_evt+0x107f/0x1da0 [ 210.144349][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 210.144362][ T5826] ? trace_contention_end+0xee/0x140 [ 210.144375][ T5826] ? __mutex_lock+0x1cc/0xa60 [ 210.144398][ T5826] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 210.144412][ T5826] ? skb_pull_data+0x166/0x210 [ 210.144430][ T5826] hci_le_meta_evt+0x2e2/0x5d0 [ 210.144445][ T5826] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 210.144460][ T5826] hci_event_packet+0x666/0x1180 [ 210.144474][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 210.144490][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 210.144503][ T5826] ? mark_held_locks+0x9f/0xe0 [ 210.144516][ T5826] ? kcov_remote_start+0x3cf/0x6e0 [ 210.144530][ T5826] ? lockdep_hardirqs_on+0x7c/0x110 [ 210.144550][ T5826] hci_rx_work+0x2c5/0x16b0 [ 210.144564][ T5826] ? process_one_work+0x921/0x1ba0 [ 210.144578][ T5826] process_one_work+0x9c5/0x1ba0 [ 210.144593][ T5826] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 210.144605][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 210.144616][ T5826] ? rcu_is_watching+0x12/0xc0 [ 210.144635][ T5826] ? assign_work+0x1a0/0x250 [ 210.144648][ T5826] worker_thread+0x6c8/0xf00 [ 210.144667][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 210.144678][ T5826] kthread+0x2c1/0x3a0 [ 210.144690][ T5826] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.144706][ T5826] ? __pfx_kthread+0x10/0x10 [ 210.144729][ T5826] ret_from_fork+0x45/0x80 [ 210.144746][ T5826] ? __pfx_kthread+0x10/0x10 [ 210.144771][ T5826] ret_from_fork_asm+0x1a/0x30 [ 210.144798][ T5826] [ 210.144832][ T5826] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 210.144860][ T5826] Bluetooth: hci3: failed to register connection device [ 210.243442][ T5867] usb 2-1: USB disconnect, device number 17 [ 210.510389][ T5866] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 210.630580][ T7755] siw: device registration error -23 [ 210.843035][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.854656][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.864811][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.878028][ T5866] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 210.887484][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.923885][ T5866] usb 1-1: config 0 descriptor?? [ 210.928425][ T969] usb 3-1: device descriptor read/all, error -71 [ 211.074821][ T5867] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 211.747710][ T5866] corsair-psu 0003:1B1C:1C0D.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.0-1/input0 [ 211.761079][ T29] audit: type=1400 audit(2000000018.200:455): avc: denied { bind } for pid=7735 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.802485][ T29] audit: type=1400 audit(2000000018.200:456): avc: denied { setopt } for pid=7735 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.830433][ T5866] corsair-psu 0003:1B1C:1C0D.0010: unable to initialize device (-38) [ 211.901642][ T5866] corsair-psu 0003:1B1C:1C0D.0010: probe with driver corsair-psu failed with error -38 [ 211.956279][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 212.099425][ T5867] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 212.112944][ T5867] usb 2-1: config 0 has no interface number 0 [ 212.119324][ T5867] usb 2-1: config 0 interface 19 has no altsetting 0 [ 212.129168][ T29] audit: type=1400 audit(2000000018.930:457): avc: denied { create } for pid=7762 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.152435][ T29] audit: type=1400 audit(2000000018.950:458): avc: denied { connect } for pid=7762 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.201187][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 212.250164][ T29] audit: type=1400 audit(2000000019.080:459): avc: denied { write } for pid=7762 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.304341][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice=f5.26 [ 212.316079][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.324222][ T5867] usb 2-1: Product: syz [ 212.328449][ T5867] usb 2-1: Manufacturer: syz [ 212.333206][ T5867] usb 2-1: SerialNumber: syz [ 212.353113][ T5867] usb 2-1: config 0 descriptor?? [ 212.366819][ T5867] appletouch 2-1:0.19: Could not find int-in endpoint [ 212.374413][ T5867] appletouch 2-1:0.19: probe with driver appletouch failed with error -5 [ 212.390990][ T5867] usbhid 2-1:0.19: couldn't find an input interrupt endpoint [ 212.500411][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 213.389417][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.403876][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.425905][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 213.434992][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 213.447154][ T5866] usb 2-1: USB disconnect, device number 18 [ 213.448104][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.464868][ T29] audit: type=1400 audit(2000000020.260:460): avc: denied { append } for pid=7783 comm="syz.0.466" name="event3" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.558413][ T9] usb 5-1: config 0 descriptor?? [ 214.432219][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 215.373088][ T29] audit: type=1400 audit(2000000021.550:461): avc: denied { read } for pid=7796 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.419438][ T7800] input: syz0 as /devices/virtual/input/input12 [ 215.425988][ T7800] input: failed to attach handler leds to device input12, error: -6 [ 215.451731][ T5896] usb 1-1: USB disconnect, device number 19 [ 215.640001][ T7804] input: syz1 as /devices/virtual/input/input13 [ 215.834575][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 216.418526][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 216.434681][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 216.449243][ T7812] batadv0: entered promiscuous mode [ 216.952320][ T7812] team0: entered promiscuous mode [ 216.958490][ T7812] team_slave_0: entered promiscuous mode [ 216.964730][ T7812] team_slave_1: entered promiscuous mode [ 216.975287][ T29] audit: type=1400 audit(2000000023.480:462): avc: denied { setopt } for pid=7815 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.028546][ T7812] team0: left promiscuous mode [ 217.052328][ T7812] team_slave_0: left promiscuous mode [ 217.076168][ T7812] team_slave_1: left promiscuous mode [ 217.384728][ T7812] batadv0: left promiscuous mode [ 217.414175][ T29] audit: type=1400 audit(2000000024.210:463): avc: denied { create } for pid=7823 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 218.150570][ T29] audit: type=1400 audit(2000000024.210:464): avc: denied { write } for pid=7823 comm="syz.1.474" path="socket:[15605]" dev="sockfs" ino=15605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 218.240550][ T7830] netlink: 52 bytes leftover after parsing attributes in process `syz.1.474'. [ 218.612566][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 218.621922][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 219.202524][ T51] usb 5-1: USB disconnect, device number 19 [ 219.270588][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 219.469014][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.580292][ T7859] fuse: Unknown parameter 'group_id00000000000000000000' [ 220.116112][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.126160][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.135438][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.268153][ T7846] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.276636][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 220.278415][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.354982][ T29] audit: type=1400 audit(2000000027.180:465): avc: denied { create } for pid=7860 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.566835][ T29] audit: type=1400 audit(2000000027.180:466): avc: denied { connect } for pid=7860 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.983245][ T29] audit: type=1400 audit(2000000027.700:467): avc: denied { mount } for pid=7870 comm="syz.0.486" name="/" dev="rpc_pipefs" ino=15664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 221.006483][ T29] audit: type=1400 audit(2000000027.710:468): avc: denied { unmount } for pid=7870 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 221.644536][ T29] audit: type=1400 audit(2000000027.920:469): avc: denied { connect } for pid=7872 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.005115][ T969] usb 3-1: USB disconnect, device number 25 [ 222.029174][ T7879] input: syz0 as /devices/virtual/input/input14 [ 222.034906][ T5828] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 222.060998][ T29] audit: type=1400 audit(2000000028.860:470): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.109495][ T7879] [ 222.111850][ T7879] ====================================================== [ 222.118867][ T7879] WARNING: possible circular locking dependency detected [ 222.125884][ T7879] 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 Not tainted [ 222.132991][ T7879] ------------------------------------------------------ [ 222.140006][ T7879] syz.1.489/7879 is trying to acquire lock: [ 222.145902][ T7879] ffff88807f3c7070 (&newdev->mutex){+.+.}-{4:4}, at: uinput_request_submit.part.0+0x25/0x2e0 [ 222.148539][ T29] audit: type=1400 audit(2000000028.860:471): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.156095][ T7879] [ 222.156095][ T7879] but task is already holding lock: [ 222.156105][ T7879] ffff88807f3c60b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xbf0 [ 222.156148][ T7879] [ 222.156148][ T7879] which lock already depends on the new lock. [ 222.156148][ T7879] [ 222.156153][ T7879] [ 222.156153][ T7879] the existing dependency chain (in reverse order) is: [ 222.156159][ T7879] [ 222.156159][ T7879] -> #3 (&ff->mutex){+.+.}-{4:4}: [ 222.221254][ T7879] __mutex_lock+0x19b/0xa60 [ 222.226259][ T7879] input_ff_flush+0x63/0x170 [ 222.231346][ T7879] uinput_dev_flush+0x2a/0x40 [ 222.236512][ T7879] input_flush_device+0x97/0xd0 [ 222.241853][ T7879] evdev_release+0x33d/0x400 [ 222.246938][ T7879] __fput+0x3f8/0xb60 [ 222.251414][ T7879] __fput_sync+0xa1/0xc0 [ 222.256147][ T7879] __x64_sys_close+0x86/0x100 [ 222.261319][ T7879] do_syscall_64+0xcd/0x250 [ 222.266315][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.272703][ T7879] [ 222.272703][ T7879] -> #2 (&dev->mutex#2){+.+.}-{4:4}: [ 222.280139][ T7879] __mutex_lock+0x19b/0xa60 [ 222.285141][ T7879] input_register_handle+0xca/0x5e0 [ 222.290835][ T7879] kbd_connect+0xca/0x160 [ 222.295657][ T7879] input_attach_handler.isra.0+0x181/0x260 [ 222.301964][ T7879] input_register_device+0xa84/0x1110 [ 222.307860][ T7879] acpi_button_add+0x57a/0xb70 [ 222.313127][ T7879] acpi_device_probe+0xc6/0x330 [ 222.318481][ T7879] really_probe+0x23e/0xa90 [ 222.323478][ T7879] __driver_probe_device+0x1de/0x440 [ 222.329254][ T7879] driver_probe_device+0x4c/0x1b0 [ 222.334771][ T7879] __driver_attach+0x283/0x580 [ 222.340030][ T7879] bus_for_each_dev+0x13c/0x1d0 [ 222.345370][ T7879] bus_add_driver+0x2e9/0x690 [ 222.350538][ T7879] driver_register+0x15c/0x4b0 [ 222.355807][ T7879] __acpi_bus_register_driver+0xdf/0x130 [ 222.361936][ T7879] acpi_button_driver_init+0x82/0x110 [ 222.367815][ T7879] do_one_initcall+0x128/0x700 [ 222.373078][ T7879] kernel_init_freeable+0x5c7/0x900 [ 222.378772][ T7879] kernel_init+0x1c/0x2b0 [ 222.383597][ T7879] ret_from_fork+0x45/0x80 [ 222.388506][ T7879] ret_from_fork_asm+0x1a/0x30 [ 222.393766][ T7879] [ 222.393766][ T7879] -> #1 (input_mutex){+.+.}-{4:4}: [ 222.401034][ T7879] __mutex_lock+0x19b/0xa60 [ 222.406033][ T7879] input_register_device+0x98a/0x1110 [ 222.411912][ T7879] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 222.418385][ T7879] __x64_sys_ioctl+0x190/0x200 [ 222.423645][ T7879] do_syscall_64+0xcd/0x250 [ 222.428642][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.435031][ T7879] [ 222.435031][ T7879] -> #0 (&newdev->mutex){+.+.}-{4:4}: [ 222.442567][ T7879] __lock_acquire+0x249e/0x3c40 [ 222.447909][ T7879] lock_acquire.part.0+0x11b/0x380 [ 222.453512][ T7879] __mutex_lock+0x19b/0xa60 [ 222.458519][ T7879] uinput_request_submit.part.0+0x25/0x2e0 [ 222.464827][ T7879] uinput_dev_upload_effect+0x175/0x1f0 [ 222.470864][ T7879] input_ff_upload+0x55b/0xbf0 [ 222.476216][ T7879] evdev_do_ioctl+0xf45/0x1ae0 [ 222.481486][ T7879] evdev_ioctl+0x16a/0x1a0 [ 222.486397][ T7879] __x64_sys_ioctl+0x190/0x200 [ 222.491672][ T7879] do_syscall_64+0xcd/0x250 [ 222.496668][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.503058][ T7879] [ 222.503058][ T7879] other info that might help us debug this: [ 222.503058][ T7879] [ 222.513269][ T7879] Chain exists of: [ 222.513269][ T7879] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 222.513269][ T7879] [ 222.525576][ T7879] Possible unsafe locking scenario: [ 222.525576][ T7879] [ 222.532998][ T7879] CPU0 CPU1 [ 222.538358][ T7879] ---- ---- [ 222.543707][ T7879] lock(&ff->mutex); [ 222.547659][ T7879] lock(&dev->mutex#2); [ 222.554405][ T7879] lock(&ff->mutex); [ 222.560875][ T7879] lock(&newdev->mutex); [ 222.565175][ T7879] [ 222.565175][ T7879] *** DEADLOCK *** [ 222.565175][ T7879] [ 222.573287][ T7879] 2 locks held by syz.1.489/7879: [ 222.578278][ T7879] #0: ffff8880791c1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl+0x80/0x1a0 [ 222.587293][ T7879] #1: ffff88807f3c60b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x1dd/0xbf0 [ 222.596477][ T7879] [ 222.596477][ T7879] stack backtrace: [ 222.602335][ T7879] CPU: 1 UID: 0 PID: 7879 Comm: syz.1.489 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 222.612893][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 222.622920][ T7879] Call Trace: [ 222.626172][ T7879] [ 222.629076][ T7879] dump_stack_lvl+0x116/0x1f0 [ 222.633728][ T7879] print_circular_bug+0x419/0x5d0 [ 222.638725][ T7879] check_noncircular+0x31a/0x400 [ 222.643636][ T7879] ? __pfx_check_noncircular+0x10/0x10 [ 222.649066][ T7879] ? lockdep_lock+0xc6/0x200 [ 222.653632][ T7879] ? __pfx_lockdep_lock+0x10/0x10 [ 222.658634][ T7879] __lock_acquire+0x249e/0x3c40 [ 222.663457][ T7879] ? __pfx___lock_acquire+0x10/0x10 [ 222.668627][ T7879] lock_acquire.part.0+0x11b/0x380 [ 222.673710][ T7879] ? uinput_request_submit.part.0+0x25/0x2e0 [ 222.679663][ T7879] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 222.685267][ T7879] ? rcu_is_watching+0x12/0xc0 [ 222.690005][ T7879] ? trace_lock_acquire+0x14e/0x1f0 [ 222.695181][ T7879] ? uinput_request_submit.part.0+0x25/0x2e0 [ 222.701132][ T7879] ? lock_acquire+0x2f/0xb0 [ 222.705608][ T7879] ? uinput_request_submit.part.0+0x25/0x2e0 [ 222.711567][ T7879] __mutex_lock+0x19b/0xa60 [ 222.716063][ T7879] ? uinput_request_submit.part.0+0x25/0x2e0 [ 222.722018][ T7879] ? lock_acquire+0x2f/0xb0 [ 222.726493][ T7879] ? uinput_request_submit.part.0+0x25/0x2e0 [ 222.732444][ T7879] ? __pfx___mutex_lock+0x10/0x10 [ 222.737457][ T7879] ? _raw_spin_unlock+0x28/0x50 [ 222.742282][ T7879] ? __pfx_uinput_request_reserve_slot+0x10/0x10 [ 222.748595][ T7879] ? input_ff_upload+0x1dd/0xbf0 [ 222.753505][ T7879] ? uinput_request_submit.part.0+0x25/0x2e0 [ 222.759456][ T7879] uinput_request_submit.part.0+0x25/0x2e0 [ 222.765235][ T7879] uinput_dev_upload_effect+0x175/0x1f0 [ 222.770750][ T7879] ? __pfx_uinput_dev_upload_effect+0x10/0x10 [ 222.776790][ T7879] ? lock_acquire+0x2f/0xb0 [ 222.781277][ T7879] ? __might_fault+0xe3/0x190 [ 222.785931][ T7879] ? __might_fault+0xe3/0x190 [ 222.790582][ T7879] input_ff_upload+0x55b/0xbf0 [ 222.795317][ T7879] evdev_do_ioctl+0xf45/0x1ae0 [ 222.800058][ T7879] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 222.805236][ T7879] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 222.812064][ T7879] ? __pfx_evdev_ioctl+0x10/0x10 [ 222.816977][ T7879] evdev_ioctl+0x16a/0x1a0 [ 222.821370][ T7879] ? __pfx_evdev_ioctl+0x10/0x10 [ 222.826282][ T7879] __x64_sys_ioctl+0x190/0x200 [ 222.831024][ T7879] do_syscall_64+0xcd/0x250 [ 222.835503][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.841370][ T7879] RIP: 0033:0x7f2adf185d29 [ 222.845757][ T7879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.865336][ T7879] RSP: 002b:00007f2adff48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.873729][ T7879] RAX: ffffffffffffffda RBX: 00007f2adf375fa0 RCX: 00007f2adf185d29 [ 222.881683][ T7879] RDX: 0000000020000040 RSI: 0000000040304580 RDI: 0000000000000006 [ 222.889633][ T7879] RBP: 00007f2adf201a20 R08: 0000000000000000 R09: 0000000000000000 [ 222.897580][ T7879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.905526][ T7879] R13: 0000000000000000 R14: 00007f2adf375fa0 R15: 00007ffdec73d598 [ 222.913486][ T7879] [ 222.939268][ T7885] FAULT_INJECTION: forcing a failure. [ 222.939268][ T7885] name failslab, interval 1, probability 0, space 0, times 0 [ 222.982997][ T29] audit: type=1400 audit(2000000028.860:472): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.993703][ T7885] CPU: 1 UID: 0 PID: 7885 Comm: syz.3.491 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 223.015989][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 223.026052][ T7885] Call Trace: [ 223.029331][ T7885] [ 223.032259][ T7885] dump_stack_lvl+0x16c/0x1f0 [ 223.036946][ T7885] should_fail_ex+0x497/0x5b0 [ 223.041632][ T7885] ? fs_reclaim_acquire+0xae/0x150 [ 223.046737][ T7885] should_failslab+0xc2/0x120 [ 223.051398][ T7885] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 223.057187][ T7885] ? __alloc_skb+0x2b1/0x380 [ 223.061766][ T7885] __alloc_skb+0x2b1/0x380 [ 223.066184][ T7885] ? __pfx___alloc_skb+0x10/0x10 [ 223.071109][ T7885] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 223.077074][ T7885] netlink_alloc_large_skb+0x69/0x130 [ 223.082432][ T7885] netlink_sendmsg+0x689/0xd70 [ 223.087182][ T7885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.092452][ T7885] ____sys_sendmsg+0xaaf/0xc90 [ 223.097200][ T7885] ? copy_msghdr_from_user+0x10b/0x160 [ 223.102638][ T7885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.107907][ T7885] ? rcu_is_watching+0x12/0xc0 [ 223.112655][ T7885] ? lock_release+0x4e2/0x6f0 [ 223.117311][ T7885] ? get_pid_task+0xfc/0x250 [ 223.121890][ T7885] ___sys_sendmsg+0x135/0x1e0 [ 223.126555][ T7885] ? get_pid_task+0x35/0x250 [ 223.131132][ T7885] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.136329][ T7885] ? lock_release+0x4e2/0x6f0 [ 223.141004][ T7885] ? __pfx_lock_release+0x10/0x10 [ 223.146017][ T7885] ? trace_lock_acquire+0x14e/0x1f0 [ 223.151208][ T7885] ? __fget_files+0x206/0x3a0 [ 223.155875][ T7885] __sys_sendmsg+0x16e/0x220 [ 223.160463][ T7885] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.165558][ T7885] ? rcu_is_watching+0x12/0xc0 [ 223.170307][ T7885] ? rcu_is_watching+0x12/0xc0 [ 223.175057][ T7885] do_syscall_64+0xcd/0x250 [ 223.179542][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.185418][ T7885] RIP: 0033:0x7fc425185d29 [ 223.189815][ T7885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.209402][ T7885] RSP: 002b:00007fc425f1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.217795][ T7885] RAX: ffffffffffffffda RBX: 00007fc425375fa0 RCX: 00007fc425185d29 [ 223.225748][ T7885] RDX: 0000000000000040 RSI: 0000000020000c40 RDI: 0000000000000003 [ 223.233876][ T7885] RBP: 00007fc425f1b090 R08: 0000000000000000 R09: 0000000000000000 [ 223.241826][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.249789][ T7885] R13: 0000000000000000 R14: 00007fc425375fa0 R15: 00007fff443da8b8 [ 223.257746][ T7885]