last executing test programs: 8m53.224175893s ago: executing program 1 (id=2202): prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xb) r0 = getpid() setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x40005, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="ab50e3df348709aef965b9e11672ceea81dc9e3185b4c23122646b0885d60e90d7922169fb086e848d21a2395793a17f85bf47b80d7bf822ba8937d1dd129f96dc9d5fadce4af1a0f2433501a655dfbdac53b1a8763bc22b51c0c921e0a801c826b4a34a4990177eba7ad60c5f3accf77e86e4ba85428bc9b77d1c3e915fc8b5f9403dbedb4cf4676f4ad723406c197624f37eeea50da64317442efaaca9555052e1368d5e2dee3b19899ee7870e28f675aa8ce0e788e8b51c11fb4ecc", 0xbd}, {&(0x7f0000000a40)="f3962876d181c6de1ffa1b812da0604e161586101d2db2f4b9c0fe08e62fe2ff0718124e206f73bfd0a6497c05515dfb8bcb01cc8cd025eec51f270c346ff1a3355870dce1b8c5585272040408cec6e8782d98b5ce2c2b4100e29a0f4e96d8d9a087db54f8145d7bb9bf98c81c559d35a18c14e8bb03de88f74f338b2dc3edc5e35f9e153d41fd0c312f94b14e917561507d8a3471fe0f3ea2bc9e3ea7de86defc02ead777e1c995ba3543138bfa276f752539e76847c199891c538a6e03fbde5ce4284f7f2c587fdf07a46237e53b01d85e09c94c5928cb716767be9ea0cf4ea97db0104d7cc8a88c047e08fec3609279c7f27826211d53fd2738feecaab3f2ad44bf56c805f88385ba31b2478f32d0f6b93307f2f4696e32f3ca8403cbce222818a901bb9833694e168a6cd1998920b4d29517c81d140c393d8d28e0bd76b3f419904ed52d5f8cbde890d7d5da8de4231f544402902dda89ab113df0917a3090708fc7f976de63ba6014a2add6cb2968e32321df5eb7d7efbc93c0e8cb1c7a327ac45029387cd464a7e9139fc525f73b3e751aba8ee4a059002986e25a4e21b1345cbebb7bad08a45c9eb4b176c907bb9b346f8b3a12ecf9253dc8e9998aff02978f34efd6cc4ebb2c55aa1d1083809da39c35ca774f120817d88274d77b179f380cd7143dfa1a0fa6680d147e5e7ca15a25264c0fa71a6956265eb1008b86461c113b083e9fd7cdd3339839b8a2327991ff459954cfb000a1f9c31210442b1133770f54e75cd9b90a170bf11d42f215a7064f0f62db4aad7d10371626e9db02eb5ff344b6592e95d825153609b4ec5d81f978d6bde27c9eb8365c7cc3cd807b4b9526c6c86f4dd4a52d3edd51e090461781adf5ac6b9824b869fad190d6d2417b324491531e877e3838981245c7a746344650214f2642f48bb41e8290695a4fab1a56d37fe637125e053155a843c74f4ae92bebe7bcadea3f6cec4b894f6a8f96f02d84e8b5ccab92ee5a1d87cf2c8c16804b37ce5fc49eeeb8836e0bd567df3cb9da77c88480419dc92613ea38cc95296d7dd6237c9dd7ade510ec9a5c5b7e8b319d0715a46150ac6ab158d86f01ac80047a82cad729f4215da29c3496ff16a1e17e71f1d3afb7a50330a84e111d8a1bfdc3687db2cd4120c9b5acc06bec6fc5b753cbd80a684e2b850ffa76b863a3f4648514620a5656ced611c0eafb61311dd8c27dcf406737cf6b7eebaf94c339af53881a2f37a1419f2a300aab7309a9f0193d452816baaeaf253a935bb18ba5d692fa61a55f57c50c61195689f9bbc1d6821c7e81dbe32a846389f90f758c79a4f01ce7015a70e2239bf5c3cfd9d337de12e3a1c94b760dfee119c316b3b84db3b7cf8c3bc0a5883e53d6253a0202a65167aa83b4a3c36b87015849940311a5555774695b68dd806a23ab81620bea00f2e829f8832c20f975629687b6a218f7b3fbbdd819019d878d74544be3d872993bb5f4514e18925649cc7bb220b534a3b3d6acf5c103dcc6902778072366b15596f211016397c174a92edd330b3d0c4695ec036372f373bf748a360f86fdff7fb5306cc4b43ad8298a670fc9621d75f3306271164d7f410930927d8e2fdaa6f7b1bea86f7708f0ab58ab1b4d4d9e88b1af3f289f2173c337bfe63b607d36b47605cad7b1bad4f530ea2197220a75563dba4f59d960fd799c61e1e04cc690f1d80fcab6e4564f2e1610627946a46020ebb98b078f0d616f2f77f9b3aa99e9f4337ff74922aac33fdec1d7651cece24836eda188f9a9f7974e20a684e8b2ef52bdbfac2af34f937b3c859c7954c42a5a34ea1dd310b530165f6662ad1fd62031aee7e07fa68ee5ad3075e892db1b1065891986edc2b112b7810ecd3b87888795705c8d4d74794145798fb63b623ff0fbdac313c8347d006e6f59ba1b789067bb977833f31907d443202926e30f7f88a97f842fb3369cde2efa872c044460613316d4aed463e9fc37e60d603bcba04c64c1f475262521454911740e57dcb8390d4e68030a01aa89c2efbccee1b219e0daa8da8bdf39bb102ac306fbe1821e6ba673167ccc281ac8344907dfcd8fe18acaa02c97e4e51bf790ce41406d25b9ad091004f6d12fa6c7101f54b18c0e5b258fcbc57958ef8202884b3fda2eee15a8a31eb9092009d58d221cb1a99f935e3f69f7addb932c4dc0769fd87a5f492d98623947cdbf9d5c2c3e15418026c4d28f6de466b76cbb66336eeb834c0dccdd1db6b6f0c40aa166747e3f826616cf8a992ceac8d0f6a9dd57c1b09d3a379e6e2af0edc2ec0c4c609efae4d1f042d11aa85e6f93350b0d1ba55bd1947d72c6e8f121e5347881024f2e3478c602de24fa9405e6ed80a49566c5c2c70e86685e3151a2fbb305768abce3b9f34052416219c580a23a6c667df41e48377af3dd68af18608fd9474f9373933ab42b16c5449f935fd6d587921aa75bd164dc856efc6987817b5ed4065cee0ca3e8795d8ebbc3425eb94f2d95f2a369fed005901209450f9b94969c2a13c37732736dd7fc38646ce65e6d12e380074e2a83fd92f666244f1878c163c0e97b7cd7860151c003a94d831bc44e5dccffcb5bb50ff42ac0adc7c2eddbafd9177ea6122fc3e968faaf2654a45778bdb499fdc39fe5064fc9bedd57eb96f3c4463d5894464c168ffcc8c95eda0a96fdc27d77fe60477e1018f24c57464f12db9af3c8d5d0b926598ed74d7a3a6c223a321507b04345018a66ab900562743af51ed6ac3f517e4ae8a84f2c2c650f7c39f48a2b5313ae5bcad2cad55df8d52e856e52373e725e5d035df05998e4be8c7eeb71a18dc1e12f5b26a6d3a93385aaea7c16df42dfc517500e49ce4976f085fa28a1381e18f6d13947f4d091c7bd5a2f407c6559bb9ee7422cea1fb8761f75d6e624ee3b386f4f591ba40adffcda3a3afe493b983263ca21d7f1eef04410a549dce00b4b18c76f777ab1b25e8811957e03930febb0679b0386e53d938866349e5c1906f2510af1d87ea353440dae78829341bb197548849aae0927d405c7291f1207b3f76cc1ab5fbd942a02a6a7c93359eebc8d3fe06d43e3a75f30bdfebccd42ce61b4591cc7f337ac8d036bff77c3a0a7944633aa5bd11500d77acd326be4d376975cdc8cb6e857d23f1aef521cc99a9384102503f02ce57a2845f02ee13ba113ad08d2efd024eb4e113fcd5c408ece1aa61954c4bf5356bbabba96b4293f5142d8a651652e768260ecc9fd7b670fb60c5a2b5e6a3833530c7573cc3324d8235ec59cd3af7c4ff2454aae91be6e0849795ea3664f3493f9ae03e1b5836d54e25a1ba074b7d1c78b5f72694e19170237e884f4c475552a3abd106caeb6a788216d92e0f1407aa5489581d12925914862d34b7a5f28072a3cea89b1b21f92f88ae26c3e16073eeabffe21a0956888129a8ede39f9be82ae080b1845c7f4059532254a729c340b2df0aa6a4c0c6cd8d34ce9e091774385c1a35d00325be3bc2b5d9e6b332b3afa258ff358c311c0f7b1212c0adea8f21cb2b020311a248550de461191e457a414091e31d16f95030a7c2e69e97ec2f9485ffb38c94cacef9773a3d5cae95f564e26ffe6c00d2ed1aa4815fd812a249b4ed6c5af8c52d979b55c9ae25f6edab9350afd296a6d49fab9922a5b9c37fa30b2da404cdd2e6d1e3d5a7aeb07208495ab5b39cc5837675f6ee96ac19cfa668b08df1159a8e95ad41340a36f079ceb95af9c1f0b4ed72908e6e70486c64e7ed883a68f674ef8f09ffb776c500e84e9ae8222ce47ca858bed5a9042c57a9ea2e12816dbadee66b03bb164f3a6d9f6006935fc60bb69a1575d7208294210fbd9383791132e3ef3b3400a34ed53db319b691b0364f6a20ee0d3664f6d18b7e07bb0d4a82eb7c85d8b3be009b9d523779f5352d947db23d7c2eeb9aacd029ed0c5c5e7f7b17e628e6d51d14d4a901d439b89ed800b893b344b23b3381a371bfd94bb276427d6618e4099b67dbead5a5db6db83a5a805c97ba4f5434fef1ef28572cae61a85266e5a9b2b365aa6d7646f27cb559d28518cab8badac0b7421055be444e90116e486efec919ec02c4367ee5f95018a3ffd23a664c1e3ca4cfe9b650724c903a9947f1a0b4de00a46ca2399fdfb2876ebd915e0b65fa845f1cbf474d41d417cd0d2297f09f9423cea5d66ee5673a9b3764e173c7fc73ee94d779a9e6c569470b970271758ffe59475bb22023b53dd7f2794ff671845896c0738cd3a5aa29357eeeda7542e72ccf031d957cee8ba9b93a650575ec6134e7a98970f1d3522025be45f21eacbc784ecd017743a05d0f2d8a21ccb6efb45251d362a219586204b90dd0cbb9718084e10d6856a47378ee0b7577f9a734f374bd8a9c98c0250d28d34c6da20ee00f5d3896080034a2986d4054c5796035da6a764c48f562768702b50d5f29e389b222050e03f0a65b1336be8e8d7f1b5c096d9b4bead6d8c89ae6bc73acc4ffc1f191d7dacac6c751e3c2ec72c1302c815c5df0a65e2011ecaafd568c2c90882fef3ba2231f9eb780a7f797b49290a90de78e3adfd8757cd7a5e53ba0d1f3771109208e158541486341bf2b37c084851203ee6ea1a3b0aa1dabffa6de6758cf00714bdf6bd15bcb6e9ddc4619fb873334288030eb6ac78f9b011d0774195b6089a77784120728e10876b1e62174e0178473ed0ad2fe1124e733c610606e00f7faf06791270115cbdfea224b0867f1b9c6a7f58bb298e66e6f80c370f6e1fdd26ae2f4105adcd402c56a3acd50fe9b1e2dcba9fa18bff51c80f107d8583aee604552ff3f1f5e2d3f1b055f036d91127e95c4e5a3b88fc3d9f20d99792bf4965324f77149862180a23670d5314cc0347f4f262680c9c9f31df400557b4ee9b6d9ef44b2086e2ca5228e91f4dfeba4f759330abff2f433755d0bdf3818f60d018f7217d380ff06575b7627be993b731c59c33f45c54dff3b91caafd1e9c48fc22539e01482db43ed5079d0335e647fc564350af5aaec1b18a90d42b599534c8387c2c84c5ed6b1d9bce6d59c546c658d136d0d860c5b9bb10fa661bdbd8d23e6659772dd2456951e34ea150bb889a054827c43873814b3e4bb76091fa139e2dd4490f366f8a95815c4ea094a0de60c67da33afcaad99cbdeb754e58fe903431d47caa60a66fb9003a569902e81fa14f1de1497b4c291c17775a12fce6cd4395a83ff2aa5f31c1f344752e0190ee125abcb56a9b4fbe61ee1a5bf6f5421aeeecf248e9c6ecc98d9fe95b65140aa40b849fcb449bb0e41638f1bb98147023f1588710b650fce06e4e9c060328dc69665285d98dfb32f6bc5df2ff65ce42245f062ee5b5517209014b69d859d9c54baf4ac537197e0cae10b65ca0b7736bf8af4f7f55370ad18ba8ad2a95104da6a2be3f5816f41032c274c3ea152dc013d266fec9e2c8d8b9b919ce42441659cf58e11a8f86985e18ed8173f3be0e9cbea2fe27f54f3b812e309707f4349425f399cc116117d1124526360d7a0c60710be17317ce171bb23ecb4c2bcd72e06dbb15df36a91cbb7a0dd550cc4ead92fa08eeffb0cecce8c38ebd3a79d476fc37ac6c4d5e3112bf4a6689bf27d93d816510fe0ef0806be4aba0fc8ba11b70fea2ca5204a0cfce03886778c8de68f96be39a8d52f289f5fb378da5c6e92aa210884b4a341841e45f108c84ddaceebde09bba9bb3cc84d550a293940ec781590db9e30f27a6fa20481e5e0ea8332aaaddb18eb4e71de8b9833904ee7962df46c00572264725e3af", 0x1000}, {&(0x7f00000003c0)="15c3fd7ee78991dd", 0x8}, {&(0x7f0000000400)}], 0x4, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x28000000}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f0000001b80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xe6dac699fb4364a0}}, {{&(0x7f0000001ec0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f40)="91302c4f93bcfa7016f5c9468c8a08bdd6ed3de60b130f2564f9f75cc634b7d5d930f619a1657a7fc5bc8a1421675647e9bd71af0cc558fb3d89cf5b71d9222a85fb9e7138f64999a4ac8da50d0e64aff6d7a74867653086b9643cfe58fd1d3cdb536d77816adf17eaf4b125bfd3a12e85c12db866fef8cc727bec44ecf7d6f6b816a6afe0a759f1f7856ea9c958ea5d10fd9023aeb339355fd193cf535d94e8d17753486fae226ccc405633b361a9f3201ab6b7a7a7c5381adc812bb0f3b4032f11bdc8fd", 0xc5}, {0x0}, {&(0x7f0000003200)}], 0x3, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000091c0), 0x0, 0x40}}], 0x5, 0x0) (fail_nth: 9) recvmmsg(r3, &(0x7f00000000c0), 0x717b, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6) 8m52.256946079s ago: executing program 1 (id=2204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000008c0)={{r0}, "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"}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000018c0)={0x2, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_neg_reply={{0x6}, {0x6, @none}}}}, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0xffffffa6, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 8m45.191044264s ago: executing program 1 (id=2212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x97, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0xa, 0xc, 0xc, 0x52, @mcast1, @private1, 0x700, 0x20, 0x5, 0xa54}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x8, 0x3, 0x7f8798033b480353, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x20, 0x7870, 0x101, 0x9}}) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000140)=0xfff) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) epoll_create(0x208202) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8m41.718550744s ago: executing program 1 (id=2224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000000000}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x8, 0x20, 0x0, 0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'ip_vti0\x00', 0x800}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$kcm(0x10, 0x2, 0x0) 8m41.604205276s ago: executing program 1 (id=2226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000119c0), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000011b00)={0x0, 0x0, &(0x7f0000011ac0)={&(0x7f0000011a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40840) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$SIOCAX25ADDFWD(r7, 0x89ea, &(0x7f0000000100)={@default, @default}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdf}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESDEC=r4, @ANYRESHEX, @ANYRESDEC=r4, @ANYRESHEX, @ANYRESOCT=r4, @ANYRES32=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x1e, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 8m39.130444243s ago: executing program 1 (id=2232): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd2b, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x4008010) 8m23.904601663s ago: executing program 32 (id=2232): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd2b, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x4008010) 4m2.206544782s ago: executing program 3 (id=3073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xfc, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x227b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r8, &(0x7f0000000100)=""/107, 0x6b) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setuid(0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010808bd7000fcdbdf2501000000000000000b000000001400f661726f61640600000000000000696e6b"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000002640)=0x10) r10 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1000008, 0x97052, r10, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x2, 0x4) 4m0.990839469s ago: executing program 3 (id=3081): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0xa, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffe01}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x78d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80a0}, 0x8c0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000007c80)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) 4m0.025427853s ago: executing program 3 (id=3083): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 3m59.859730228s ago: executing program 3 (id=3085): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000001780), 0x12) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49ad}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) setns(0xffffffffffffffff, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') (async) write$cgroup_int(r0, &(0x7f0000001780), 0x12) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket(0xa, 0x5, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49ad}], 0x1c) (async) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) getpid() (async) syz_pidfd_open(r3, 0x0) (async) setns(0xffffffffffffffff, 0x0) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) 3m59.651641496s ago: executing program 3 (id=3087): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@hci, &(0x7f0000000040)=0x80, 0x0) getpeername$ax25(r1, &(0x7f0000000280)={{0x3, @netrom}, [@remote, @remote, @netrom, @null, @rose, @remote, @remote, @null]}, &(0x7f0000000180)=0x48) r2 = syz_io_uring_setup(0x833, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x200003ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xc}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x2100000a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 3m59.249370139s ago: executing program 3 (id=3088): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffdf}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x80) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001600), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0, @ANYRESHEX=r0], 0x2c}}, 0x800) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x185802, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a80), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) 3m58.936546847s ago: executing program 33 (id=3088): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffdf}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x80) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001600), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0, @ANYRESHEX=r0], 0x2c}}, 0x800) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x185802, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a80), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) 8.167420511s ago: executing program 0 (id=3845): syz_open_procfs(0x0, &(0x7f0000002940)='fd/3\x00') 8.08579634s ago: executing program 0 (id=3849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 8.011549971s ago: executing program 5 (id=3850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) pwrite64(r5, &(0x7f0000000400)="43d6abb21311d36e84261499e4efdd2a1bdfe9f074216fba6a", 0x19, 0xb) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, 0x0) 6.250453412s ago: executing program 0 (id=3852): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x4, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.999804626s ago: executing program 5 (id=3855): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x280}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.58726906s ago: executing program 5 (id=3859): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) ioctl$BLKRASET(r0, 0x1262, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xf, 0x10, 0x7, 0x0}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000040)={'fscrypt:', @auto=[0x31, 0x32, 0x37, 0x32, 0x36, 0x38, 0x64, 0x33, 0x31, 0x61, 0x33, 0x61, 0x39, 0x0, 0x0, 0x39]}, &(0x7f0000000080)={0x0, "5d9bc1e2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecac000", 0x13}, 0x48, 0xffffffffffffffff) 4.331878699s ago: executing program 5 (id=3862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 3.742531221s ago: executing program 4 (id=3864): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2cc", 0xce) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 3.59616624s ago: executing program 4 (id=3868): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000009c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000100)=""/48, 0x30, 0x0, 0x0, 0x3}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000001c0)={0x0, "b1ef9755de3cf7c6719811e19155e1f869dce0025bb41ab8327318ed51d618666087771719a61993d1f691a188e55bd1a54c7dfd4ee58f50fb286252d25bb7f0"}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000240)={0x8, "44455b37c21988d5f22fec2b9c08a9f67cedebd5f9cb9c044f4203ea075148fe9698f200d358dbc364fb74d23b40930f2038cbd042d0105e52503116fc0eeddc"}) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 3.513049216s ago: executing program 5 (id=3870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe0301"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80045b09, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r7 = fsmount(r1, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 3.459039356s ago: executing program 0 (id=3871): r0 = socket(0x1, 0x803, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@un=@abs={0x0, 0x0, 0x4e20}, 0xfef3, 0x0}, 0x881) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004851) setsockopt(r3, 0x84, 0x14, &(0x7f0000000040)="0100000000", 0x5) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x241, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000140)={0xc, r6}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x4, 0xa2, 0x0, 0x4}]}}, @timestamp={0xd, 0x0, 0x0, 0x11b, 0x1, 0xf, 0x3, 0x26f}}}, 0x3a) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) socket$qrtr(0x2a, 0x2, 0x0) syz_usb_connect(0x0, 0x81, 0x0, 0x0) 3.24250871s ago: executing program 2 (id=3873): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.184357485s ago: executing program 2 (id=3874): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df4, 0x40, 0x0, 0x132}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r0, 0xffffffffffffffff, 0x0) 3.105275548s ago: executing program 6 (id=3875): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2, 0x80802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x88942, 0x149) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x4}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pipe(&(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020800000400"], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.004149281s ago: executing program 6 (id=3876): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304087b02040912c90e2fba6bad80f032148548fcee0e28fdc801"], 0x1c) close(0x3) 2.959765814s ago: executing program 2 (id=3877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'nq\x00', 0x8, 0x323b, 0x58}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 2.94207936s ago: executing program 2 (id=3878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="050029bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0c00238005001e"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.848116308s ago: executing program 2 (id=3879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc1205531, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x880) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x4, 0x0, "a730b801"}, 0x400000, 0x1, {0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40400d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000084) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r4, r4, 0x0, 0x200000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}, {@xino_off}], [], 0x2c}) 2.803888931s ago: executing program 6 (id=3880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 1.957535058s ago: executing program 6 (id=3881): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/177, &(0x7f0000000200)=0xb1) 1.897882808s ago: executing program 6 (id=3882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000002200)=""/4080, 0xff0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, 0x0, 0x0, 0x0) dup(r5) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES16=r1], 0x23c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) 1.459724696s ago: executing program 4 (id=3883): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = dup(r3) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x2500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0xf, 0x0, 0x0, 0x5, 0x0, 0xa}, @fwd={0xd}]}}, 0x0, 0x32, 0x0, 0x0, 0xe2e, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) 706.196974ms ago: executing program 2 (id=3884): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) listen(0xffffffffffffffff, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000014) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x1, 0x0, [{0x11000, 0x89, &(0x7f0000000580)=""/137}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 561.193379ms ago: executing program 4 (id=3885): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 458.785457ms ago: executing program 5 (id=3886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000280)="a4", 0x34000}], 0x1) 413.704673ms ago: executing program 4 (id=3887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [@routing={0x2b, 0x0, 0x0, 0xf}]}}}}}}, 0x6e) 93.584669ms ago: executing program 4 (id=3888): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 90.154403ms ago: executing program 0 (id=3889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="050029bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0c00238005001e"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 26.918647ms ago: executing program 6 (id=3890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}}], {0x14}}, 0x3c}}, 0x0) 0s ago: executing program 0 (id=3891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) kernel console output (not intermixed with test programs): 2] usb 7-1: Using ep0 maxpacket: 16 [ 1127.504926][ T116] usb 1-1: SerialNumber: syz [ 1127.511412][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.526367][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.536819][ T5962] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1127.571797][ T5962] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1127.581190][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.647013][ T5962] usb 7-1: config 0 descriptor?? [ 1127.660912][ T5926] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1127.693333][ T5926] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1127.930478][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3312'. [ 1128.300875][ T5962] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0015/input/input99 [ 1128.376369][ T5962] appleir 0003:05AC:8241.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 1128.491926][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1128.492193][T15863] usb 3-1: USB disconnect, device number 90 [ 1128.506262][ T5925] usb 7-1: USB disconnect, device number 8 [ 1128.533081][T15863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1128.550581][T15863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1128.610319][T15863] quatech2 3-1:0.51: device disconnected [ 1128.726036][ T116] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1128.733984][ T116] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1128.742359][ T116] uvcvideo 1-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1128.749965][ T116] uvcvideo 1-1:13.0: No valid video chain found. [ 1128.764218][ T116] usb 1-1: USB disconnect, device number 91 [ 1129.626388][T18750] 9pnet_fd: p9_fd_create_tcp (18750): problem connecting socket to 127.0.0.1 [ 1129.655606][T18750] 9pnet_fd: p9_fd_create_tcp (18750): problem connecting socket to 127.0.0.1 [ 1129.665895][T18750] 9pnet_fd: p9_fd_create_tcp (18750): problem connecting socket to 127.0.0.1 [ 1129.685155][T18750] 9pnet_fd: p9_fd_create_tcp (18750): problem connecting socket to 127.0.0.1 [ 1129.736839][T18750] 9pnet_fd: p9_fd_create_tcp (18750): problem connecting socket to 127.0.0.1 [ 1129.887440][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1129.976482][T18746] tmpfs: Unknown parameter 'usrquota' [ 1130.014000][T18750] 9pnet_fd: p9_fd_create_tcp (18750): problem connecting socket to 127.0.0.1 [ 1130.088845][T18750] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1130.149408][ T1147] Bluetooth: hci2: Frame reassembly failed (-84) [ 1130.157933][ T1147] Bluetooth: hci2: Frame reassembly failed (-84) [ 1130.216723][T18760] netlink: 'syz.2.3320': attribute type 10 has an invalid length. [ 1130.371214][T15863] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1130.386980][T18763] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 1130.544459][T15863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.559240][T15863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.592119][T15863] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1130.601359][T15863] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1130.612938][T15863] usb 5-1: Manufacturer: syz [ 1130.629420][T15863] usb 5-1: config 0 descriptor?? [ 1130.678796][T18767] netlink: 'syz.2.3322': attribute type 6 has an invalid length. [ 1130.706472][T18767] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1130.719952][T18767] Error validating options; rc = [-22] [ 1130.903989][ T5926] IPVS: starting estimator thread 0... [ 1130.984241][T18773] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1130.993315][T18773] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1131.002916][T18773] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1131.057424][T18772] IPVS: using max 42 ests per chain, 100800 per kthread [ 1131.648145][T18780] netlink: 'syz.0.3327': attribute type 29 has an invalid length. [ 1131.708335][T18783] xt_ecn: cannot match TCP bits for non-tcp packets [ 1132.163598][T15675] Bluetooth: hci2: command 0xfc11 tx timeout [ 1132.171347][T11519] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1132.574263][T18786] netlink: 'syz.0.3327': attribute type 29 has an invalid length. [ 1132.618444][T15863] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71 [ 1132.627347][T15863] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 1132.636556][T18786] netlink: 'syz.0.3327': attribute type 29 has an invalid length. [ 1132.754864][T15863] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71 [ 1132.763067][T15863] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 1132.770611][T15863] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 1132.780022][T18786] netlink: 'syz.0.3327': attribute type 29 has an invalid length. [ 1132.796162][T15863] usb 5-1: USB disconnect, device number 96 [ 1132.814963][T18786] netlink: 'syz.0.3327': attribute type 29 has an invalid length. [ 1132.831665][T18786] netlink: 'syz.0.3327': attribute type 29 has an invalid length. [ 1132.866718][T18786] netlink: 'syz.0.3327': attribute type 29 has an invalid length. [ 1133.072588][T18799] 9pnet_fd: p9_fd_create_tcp (18799): problem connecting socket to 127.0.0.1 [ 1133.095017][T18799] 9pnet_fd: p9_fd_create_tcp (18799): problem connecting socket to 127.0.0.1 [ 1133.105467][T18799] 9pnet_fd: p9_fd_create_tcp (18799): problem connecting socket to 127.0.0.1 [ 1133.117306][T18802] openvswitch: netlink: IP tunnel dst address not specified [ 1133.134865][T18802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=18802 comm=syz.2.3331 [ 1133.149309][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1133.210143][T18797] tmpfs: Unknown parameter 'usrquota' [ 1133.219380][T18799] 9pnet_fd: p9_fd_create_tcp (18799): problem connecting socket to 127.0.0.1 [ 1133.262638][T18799] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1134.255987][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1134.585463][T18817] syzkaller0: entered promiscuous mode [ 1134.590959][T18817] syzkaller0: entered allmulticast mode [ 1134.724907][T18817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1136.034190][T18837] xt_ecn: cannot match TCP bits for non-tcp packets [ 1137.344281][T17545] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1137.498487][T17545] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1137.517203][T17545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.546528][T17545] usb 3-1: Product: syz [ 1137.552992][T18748] Set syz1 is full, maxelem 65536 reached [ 1137.568122][T17545] usb 3-1: Manufacturer: syz [ 1137.580432][T17545] usb 3-1: SerialNumber: syz [ 1137.605276][T17545] usb 3-1: config 0 descriptor?? [ 1137.615133][T17545] hub 3-1:0.0: bad descriptor, ignoring hub [ 1137.639810][T17545] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1137.647274][T17545] f81232 3-1:0.0: f81534a converter detected [ 1138.366178][T18853] syz_tun: entered allmulticast mode [ 1139.389111][T18858] hugetlbfs: syz.6.3347 (18858): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1139.465762][T18852] syz_tun: left allmulticast mode [ 1139.763762][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3349'. [ 1140.168228][T18870] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3350'. [ 1141.412417][T17545] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1141.419559][T17545] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1141.637321][T18882] raw_sendmsg: syz.6.3354 forgot to set AF_INET. Fix it! [ 1143.168958][T17545] usb 3-1: reset high-speed USB device number 91 using dummy_hcd [ 1143.230944][T17545] usb 3-1: device reset changed ep0 maxpacket size! [ 1143.261839][T17545] usb 3-1: USB disconnect, device number 91 [ 1143.268344][T17545] f81232 3-1:0.0: device disconnected [ 1143.789895][T18901] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1144.075006][T17545] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1144.231503][T17545] usb 3-1: Using ep0 maxpacket: 32 [ 1144.247283][T17545] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 1144.270664][T17545] usb 3-1: config 0 has no interface number 0 [ 1144.355846][T17545] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1144.380006][T17545] usb 3-1: string descriptor 0 read error: -71 [ 1144.399199][T17545] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1144.421594][T17545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.470593][T17545] usb 3-1: config 0 descriptor?? [ 1144.497914][T17545] usb 3-1: can't set config #0, error -71 [ 1144.505472][T17545] usb 3-1: USB disconnect, device number 92 [ 1144.666179][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 1145.243010][T18929] hfsplus: unable to find HFS+ superblock [ 1145.637579][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3366'. [ 1145.966997][T18925] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1146.019612][T18925] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1146.336673][ T30] audit: type=1400 audit(3915626544.827:920): avc: denied { ioctl } for pid=18935 comm="syz.4.3368" path="/131/file0/file0" dev="fuse" ino=5 ioctlcmd=0x4d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1146.382639][ T30] audit: type=1400 audit(3915626544.869:921): avc: denied { ioctl } for pid=18905 comm="syz.0.3363" path="socket:[71321]" dev="sockfs" ino=71321 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1146.822413][T13142] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1146.908351][ T44] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1147.091140][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1147.103605][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.114865][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.125337][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1147.138370][T13142] usb 5-1: Using ep0 maxpacket: 16 [ 1147.143556][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1147.152989][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.163461][T13142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.174501][ T44] usb 3-1: config 0 descriptor?? [ 1147.179876][T13142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.191099][T13142] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1147.208063][T13142] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1147.217233][T13142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.237031][T13142] usb 5-1: config 0 descriptor?? [ 1147.581930][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1147.589953][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.155532][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.165810][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.196857][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.208122][T13142] usbhid 5-1:0.0: can't add hid device: -71 [ 1148.215496][T13142] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1148.231524][T13142] usb 5-1: USB disconnect, device number 97 [ 1148.241690][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.250707][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.263887][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.515952][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.523538][ T44] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1148.574536][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0017/input/input101 [ 1148.583395][T18960] trusted_key: encrypted_key: master key parameter 'defalt' is invalid [ 1148.679852][ T44] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1148.695810][ T44] usb 3-1: USB disconnect, device number 93 [ 1149.067246][T18972] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1150.917854][ T62] bridge0: port 3(batadv0) entered disabled state [ 1150.976262][ T62] bridge_slave_1: left allmulticast mode [ 1150.988266][ T62] bridge_slave_1: left promiscuous mode [ 1150.993913][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.035130][ T62] bridge_slave_0: left allmulticast mode [ 1151.040774][ T62] bridge_slave_0: left promiscuous mode [ 1151.063470][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.132632][T18991] 9p: Bad value for 'wfdno' [ 1151.140957][T17418] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1151.142425][ T62] tipc: Resetting bearer [ 1151.796994][T17418] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1151.911183][T17418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.964976][ T62] tipc: Disabling bearer [ 1151.990264][T17418] usb 1-1: Product: syz [ 1152.027822][T17418] usb 1-1: Manufacturer: syz [ 1152.033198][T17418] usb 1-1: SerialNumber: syz [ 1152.043825][T17418] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1152.066036][ T6009] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1152.366445][ T5928] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1152.537934][ T5925] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1152.555139][ T5928] usb 7-1: Using ep0 maxpacket: 16 [ 1152.570544][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.581870][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.591772][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1152.605069][ T5928] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1152.620587][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.631003][ T5928] usb 7-1: config 0 descriptor?? [ 1152.682915][T19010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.709787][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 1152.715276][T19010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.721867][ T5925] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1152.737327][ T5925] usb 5-1: config 0 has no interface number 0 [ 1152.754897][ T5925] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1152.773356][ T5925] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1152.786885][ T5925] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1152.798472][ T5925] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1152.816677][ T5925] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1152.831754][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.840496][ T5925] usb 5-1: Product: syz [ 1152.845104][ T5925] usb 5-1: Manufacturer: syz [ 1152.849823][ T5925] usb 5-1: SerialNumber: syz [ 1152.857481][ T5925] usb 5-1: config 0 descriptor?? [ 1152.867961][ T5925] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input102 [ 1152.894618][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.909570][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.920426][ T62] bond0 (unregistering): Released all slaves [ 1152.936662][ T62] bond1 (unregistering): Released all slaves [ 1152.952084][ T62] bond2 (unregistering): Released all slaves [ 1153.032053][ T5928] usbhid 7-1:0.0: can't add hid device: -71 [ 1153.038710][ T5928] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1153.049595][ T5928] usb 7-1: USB disconnect, device number 9 [ 1153.056216][ T6009] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1153.069415][ T6009] ath9k_htc: Failed to initialize the device [ 1153.084342][ T62] bond3 (unregistering): Released all slaves [ 1153.111795][ T116] usb 5-1: USB disconnect, device number 98 [ 1153.120685][ T6009] usb 1-1: ath9k_htc: USB layer deinitialized [ 1153.169191][ T44] usb 1-1: USB disconnect, device number 92 [ 1153.184314][ T62] tipc: Disabling bearer [ 1153.196483][ T62] tipc: Left network mode [ 1153.239767][ T62] IPVS: stopping backup sync thread 6449 ... [ 1153.298969][T19017] netlink: 'syz.2.3392': attribute type 11 has an invalid length. [ 1153.334357][ T62] hsr_slave_0: left promiscuous mode [ 1153.340117][ T62] hsr_slave_1: left promiscuous mode [ 1153.345715][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.353142][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.362796][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1153.371898][T19018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1153.381248][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1153.390139][T19018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1153.402512][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.410385][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.418923][ T62] batman_adv: batadv0: Interface deactivated: dummy0 [ 1153.425878][ T62] batman_adv: batadv0: Removing interface: dummy0 [ 1153.440709][ T62] veth1_macvtap: left promiscuous mode [ 1153.447041][ T62] veth0_macvtap: left promiscuous mode [ 1153.452780][ T62] veth1_vlan: left promiscuous mode [ 1153.458032][ T62] veth0_vlan: left promiscuous mode [ 1153.799911][T11519] Bluetooth: hci3: Malformed Event: 0x02 [ 1155.529864][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1155.567614][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1156.542359][ T116] infiniband syz1: ib_query_port failed (-19) [ 1156.639577][T19044] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1157.139812][T19046] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 1157.200156][T19038] netlink: 'syz.6.3398': attribute type 10 has an invalid length. [ 1157.317463][T19046] netdevsim netdevsim6 : left allmulticast mode [ 1157.369303][T19038] batman_adv: batadv0: Interface deactivated: dummy0 [ 1157.379881][T19038] batman_adv: batadv0: Removing interface: dummy0 [ 1157.504714][T19038] team0: Port device dummy0 added [ 1157.529133][T19055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3401'. [ 1157.628131][T15675] Bluetooth: hci3: command 0x0406 tx timeout [ 1157.804464][T15863] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1158.318431][T15863] usb 1-1: Using ep0 maxpacket: 16 [ 1158.398718][T15863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.409691][T15863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.420760][T15863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1158.443707][T15863] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1158.506742][T15863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.526684][T15863] usb 1-1: config 0 descriptor?? [ 1159.630813][T15863] usbhid 1-1:0.0: can't add hid device: -71 [ 1159.994928][T15863] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1160.011002][T15863] usb 1-1: USB disconnect, device number 93 [ 1160.588370][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1160.594904][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1160.749947][T19081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input103 [ 1161.272511][T19099] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3413'. [ 1161.407074][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e1cd000: rx timeout, send abort [ 1161.415583][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e1cf000: rx timeout, send abort [ 1161.424745][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e1cd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1161.440954][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e1cf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1161.994532][ T30] audit: type=1400 audit(3915626561.256:922): avc: denied { lock } for pid=19104 comm="syz.4.3416" path="socket:[71596]" dev="sockfs" ino=71596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1162.987545][T15863] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1163.002141][T19117] binder: 19115:19117 ioctl ab03 0 returned -22 [ 1163.009200][T19117] binder: 19115:19117 ioctl 1 200000000080 returned -22 [ 1163.056453][T19118] tipc: Started in network mode [ 1163.061417][T19118] tipc: Node identity 16593e333855, cluster identity 4711 [ 1163.070484][T19118] tipc: Enabled bearer , priority 0 [ 1163.143950][T15863] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1163.153503][T15863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.084246][T17545] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1164.121577][T15863] usb 7-1: Product: syz [ 1164.141774][T15863] usb 7-1: Manufacturer: syz [ 1164.157615][T15863] usb 7-1: SerialNumber: syz [ 1164.166015][T16893] tipc: Node number set to 772554291 [ 1164.188532][T15863] usb 7-1: can't set config #13, error -71 [ 1164.198352][T15863] usb 7-1: USB disconnect, device number 10 [ 1164.219485][T19114] tipc: Disabling bearer [ 1164.311081][T17545] usb 1-1: Using ep0 maxpacket: 16 [ 1164.325190][T17545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.339946][T17545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.350693][T17545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1164.368469][T17545] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1164.378853][T17545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.390152][T17545] usb 1-1: config 0 descriptor?? [ 1164.790911][T17545] usbhid 1-1:0.0: can't add hid device: -71 [ 1164.807629][T17545] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1164.827815][T17545] usb 1-1: USB disconnect, device number 94 [ 1165.278217][T19138] tipc: Started in network mode [ 1165.292608][T19138] tipc: Node identity 523e260e026, cluster identity 4711 [ 1165.313310][T19138] tipc: Enabled bearer , priority 0 [ 1165.372533][T19138] tipc: Disabling bearer [ 1165.392433][T19144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.483080][T19144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.635518][ T5928] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1165.662099][T19148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.718414][T19148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.082942][ T5928] usb 5-1: device descriptor read/64, error -71 [ 1166.349735][ T5928] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1166.395158][T19172] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3435'. [ 1166.452085][T19172] overlayfs: orphan index entry (index/00fb210001a07445f00bd84d5fb50326288a02bfb1145c5be89f02000000000000, ftype=2000, nlink=1) [ 1166.852400][ T5928] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1166.872528][ T5928] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1166.892663][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1166.909056][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1166.931662][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1167.048520][ T5928] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1167.064363][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1167.072444][ T5928] usb 5-1: Product: syz [ 1167.077411][ T5928] usb 5-1: Manufacturer: syz [ 1167.091401][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 1167.139314][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 1167.242569][ T5928] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1167.256268][ T5928] cdc_wdm 5-1:1.0: Unknown control protocol [ 1167.876828][T19182] xt_socket: unknown flags 0x4 [ 1168.097908][T19190] tipc: Enabled bearer , priority 10 [ 1168.105389][ T5962] usb 5-1: USB disconnect, device number 100 [ 1169.047046][T19217] 9pnet_fd: p9_fd_create_tcp (19217): problem connecting socket to 127.0.0.1 [ 1169.057202][T19217] 9pnet_fd: p9_fd_create_tcp (19217): problem connecting socket to 127.0.0.1 [ 1169.068927][T19217] 9pnet_fd: p9_fd_create_tcp (19217): problem connecting socket to 127.0.0.1 [ 1169.080576][T19217] 9pnet_fd: p9_fd_create_tcp (19217): problem connecting socket to 127.0.0.1 [ 1169.114715][T19217] 9pnet_fd: p9_fd_create_tcp (19217): problem connecting socket to 127.0.0.1 [ 1169.154815][T19217] 9pnet_fd: p9_fd_create_tcp (19217): problem connecting socket to 127.0.0.1 [ 1169.178634][ T5962] tipc: Node number set to 1348347406 [ 1169.202596][T19217] 9pnet_fd: p9_fd_create_tcp (19217): problem connecting socket to 127.0.0.1 [ 1169.236697][T19217] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1169.341748][T19221] FAULT_INJECTION: forcing a failure. [ 1169.341748][T19221] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.724141][T19221] CPU: 0 UID: 0 PID: 19221 Comm: syz.2.3450 Tainted: G L syzkaller #0 PREEMPT(full) [ 1169.724164][T19221] Tainted: [L]=SOFTLOCKUP [ 1169.724168][T19221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1169.724174][T19221] Call Trace: [ 1169.724178][T19221] [ 1169.724183][T19221] dump_stack_lvl+0x16c/0x1f0 [ 1169.724203][T19221] should_fail_ex+0x512/0x640 [ 1169.724220][T19221] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1169.724234][T19221] should_failslab+0xc2/0x120 [ 1169.724249][T19221] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1169.724261][T19221] ? __alloc_skb+0x156/0x410 [ 1169.724274][T19221] ? __alloc_skb+0x156/0x410 [ 1169.724283][T19221] __alloc_skb+0x156/0x410 [ 1169.724292][T19221] ? __alloc_skb+0x35d/0x410 [ 1169.724301][T19221] ? __pfx___alloc_skb+0x10/0x10 [ 1169.724312][T19221] ? netlink_autobind.isra.0+0x158/0x370 [ 1169.724330][T19221] netlink_alloc_large_skb+0x69/0x140 [ 1169.724345][T19221] netlink_sendmsg+0x698/0xdd0 [ 1169.724366][T19221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.724385][T19221] ____sys_sendmsg+0xa5d/0xc30 [ 1169.724402][T19221] ? copy_msghdr_from_user+0x10a/0x160 [ 1169.724414][T19221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1169.724435][T19221] ___sys_sendmsg+0x134/0x1d0 [ 1169.724448][T19221] ? __pfx____sys_sendmsg+0x10/0x10 [ 1169.724476][T19221] __sys_sendmsg+0x16d/0x220 [ 1169.724488][T19221] ? __pfx___sys_sendmsg+0x10/0x10 [ 1169.724513][T19221] do_syscall_64+0xcd/0xf80 [ 1169.724530][T19221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.724542][T19221] RIP: 0033:0x7f0b2d78f749 [ 1169.724552][T19221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.724563][T19221] RSP: 002b:00007f0b2e6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.724573][T19221] RAX: ffffffffffffffda RBX: 00007f0b2d9e5fa0 RCX: 00007f0b2d78f749 [ 1169.724580][T19221] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1169.724587][T19221] RBP: 00007f0b2e6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.724593][T19221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.724600][T19221] R13: 00007f0b2d9e6038 R14: 00007f0b2d9e5fa0 R15: 00007ffef01c3f58 [ 1169.724616][T19221] [ 1170.383560][T19232] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1170.839744][T19247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3458'. [ 1171.398082][T17545] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1171.572236][T17545] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.584575][T17545] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1171.655857][T17545] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1171.665132][T17545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.673178][T17545] usb 1-1: Product: syz [ 1171.684414][T17545] usb 1-1: Manufacturer: syz [ 1171.702025][T17545] usb 1-1: SerialNumber: syz [ 1171.720045][T17545] cdc_mbim 1-1:1.0: skipping garbage [ 1171.971033][T19250] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1172.004865][T17545] cdc_mbim 1-1:1.0: bind() failure [ 1172.013273][T17545] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1172.032061][T17545] cdc_ncm 1-1:1.1: bind() failure [ 1172.133962][T17545] usb 1-1: USB disconnect, device number 95 [ 1172.240595][T13142] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1172.255746][ T30] audit: type=1400 audit(3915626572.027:923): avc: denied { setopt } for pid=19264 comm="syz.0.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1172.357291][T19270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19270 comm=syz.2.3464 [ 1172.410759][T13142] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1172.419082][T13142] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1172.428232][T13142] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.438647][T13142] usb 7-1: config 220 has no interface number 2 [ 1172.444903][T13142] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1172.458229][T13142] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1172.464977][T13142] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1172.472027][T13142] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1172.480632][T13142] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1172.489768][T13142] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.498340][T13142] usb 7-1: Product: syz [ 1172.502500][T13142] usb 7-1: Manufacturer: syz [ 1172.507099][T13142] usb 7-1: SerialNumber: syz [ 1172.608997][ T5928] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1172.706308][T19259] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3462'. [ 1172.733350][T13142] usb 7-1: selecting invalid altsetting 0 [ 1172.747309][T13142] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1172.756214][T13142] uvcvideo 7-1:220.0: No valid video chain found. [ 1172.765434][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.769072][T13142] usb 7-1: selecting invalid altsetting 0 [ 1172.781905][T13142] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1172.785431][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.793346][T13142] usb 7-1: USB disconnect, device number 11 [ 1172.819915][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1172.836939][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.845175][ T5928] usb 3-1: Product: syz [ 1172.849504][ T5928] usb 3-1: Manufacturer: syz [ 1172.854095][ T5928] usb 3-1: SerialNumber: syz [ 1173.059450][ T5928] usb 3-1: USB disconnect, device number 94 [ 1173.296674][T19280] comedi comedi0: comedi_config --init_data is deprecated [ 1173.747442][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3470'. [ 1173.905739][T19290] netlink: 'syz.4.3471': attribute type 10 has an invalid length. [ 1174.211321][T19290] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1175.023457][T19301] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3473'. [ 1175.107260][T19297] overlayfs: orphan index entry (index/00fb210001a07445f00bd84d5fb50326288a02bfb1ecaef9dfe302000000000000, ftype=2000, nlink=1) [ 1175.183818][T19304] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1175.679066][T17545] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1175.764537][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3483'. [ 1175.827459][T17545] usb 1-1: Using ep0 maxpacket: 8 [ 1175.837250][T17545] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1175.837762][ T30] audit: type=1400 audit(3915626575.796:924): avc: denied { read } for pid=19339 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1175.871629][T17545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.923565][ T5925] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1175.998233][T17545] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1176.014068][T17545] pvrusb2: ********** [ 1176.022489][T17545] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1176.041338][T17545] pvrusb2: Important functionality might not be entirely working. [ 1176.165595][ T30] audit: type=1400 audit(3915626576.132:925): avc: denied { getopt } for pid=19339 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1176.500606][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 1176.514304][ T5925] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1176.524436][ T5925] usb 3-1: config 0 has no interface number 0 [ 1176.531555][T17545] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1176.544109][T17545] pvrusb2: ********** [ 1176.549785][ T5925] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1176.567259][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.579587][ T5925] usb 3-1: Product: syz [ 1176.587298][ T5925] usb 3-1: Manufacturer: syz [ 1176.596280][ T5925] usb 3-1: SerialNumber: syz [ 1176.603557][ T2337] pvrusb2: Invalid write control endpoint [ 1176.614689][ T5925] usb 3-1: config 0 descriptor?? [ 1176.622786][ T5925] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1176.733923][ T2337] pvrusb2: Invalid write control endpoint [ 1176.739676][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1176.759653][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1178.237919][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1178.248300][ T5925] gspca_spca1528: reg_w err -110 [ 1178.253264][ T2337] pvrusb2: Device being rendered inoperable [ 1178.260899][T19309] pvrusb2: Attempted to execute control transfer when device not ok [ 1178.269152][ T5925] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1178.278408][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1178.290647][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1178.308533][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1178.320630][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1178.345075][ T5925] usb 1-1: USB disconnect, device number 96 [ 1178.364035][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1179.437608][T17545] usb 3-1: USB disconnect, device number 95 [ 1179.668430][T19372] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1179.760636][T19373] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1180.737687][T19391] netlink: 'syz.6.3503': attribute type 8 has an invalid length. [ 1181.120802][T19401] FAULT_INJECTION: forcing a failure. [ 1181.120802][T19401] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.134078][T19401] CPU: 0 UID: 0 PID: 19401 Comm: syz.4.3504 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.134107][T19401] Tainted: [L]=SOFTLOCKUP [ 1181.134113][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.134124][T19401] Call Trace: [ 1181.134131][T19401] [ 1181.134138][T19401] dump_stack_lvl+0x16c/0x1f0 [ 1181.134167][T19401] should_fail_ex+0x512/0x640 [ 1181.134201][T19401] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1181.134225][T19401] should_failslab+0xc2/0x120 [ 1181.134249][T19401] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1181.134268][T19401] ? __alloc_skb+0x156/0x410 [ 1181.134291][T19401] ? __alloc_skb+0x156/0x410 [ 1181.134305][T19401] __alloc_skb+0x156/0x410 [ 1181.134319][T19401] ? __alloc_skb+0x35d/0x410 [ 1181.134334][T19401] ? __pfx___alloc_skb+0x10/0x10 [ 1181.134352][T19401] ? genl_rcv_msg+0x4bb/0x800 [ 1181.134387][T19401] netlink_ack+0x15d/0xb80 [ 1181.134418][T19401] netlink_rcv_skb+0x332/0x420 [ 1181.134440][T19401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1181.134467][T19401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1181.134502][T19401] ? netlink_deliver_tap+0x1ae/0xd30 [ 1181.134528][T19401] genl_rcv+0x28/0x40 [ 1181.134551][T19401] netlink_unicast+0x5aa/0x870 [ 1181.134578][T19401] ? __pfx_netlink_unicast+0x10/0x10 [ 1181.134611][T19401] netlink_sendmsg+0x8c8/0xdd0 [ 1181.134639][T19401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1181.134673][T19401] ____sys_sendmsg+0xa5d/0xc30 [ 1181.134700][T19401] ? copy_msghdr_from_user+0x10a/0x160 [ 1181.134721][T19401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1181.134760][T19401] ___sys_sendmsg+0x134/0x1d0 [ 1181.134781][T19401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1181.134835][T19401] __sys_sendmsg+0x16d/0x220 [ 1181.134856][T19401] ? __pfx___sys_sendmsg+0x10/0x10 [ 1181.134902][T19401] do_syscall_64+0xcd/0xf80 [ 1181.134929][T19401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.134948][T19401] RIP: 0033:0x7f6b3198f749 [ 1181.134963][T19401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.134981][T19401] RSP: 002b:00007f6b328f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.134999][T19401] RAX: ffffffffffffffda RBX: 00007f6b31be5fa0 RCX: 00007f6b3198f749 [ 1181.135012][T19401] RDX: 0000000000048090 RSI: 0000200000000040 RDI: 0000000000000003 [ 1181.135022][T19401] RBP: 00007f6b328f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.135033][T19401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.135044][T19401] R13: 00007f6b31be6038 R14: 00007f6b31be5fa0 R15: 00007ffc8a77cf68 [ 1181.135071][T19401] [ 1181.517646][ T30] audit: type=1400 audit(3915626581.759:926): avc: denied { ioctl } for pid=19402 comm="syz.6.3505" path="socket:[73314]" dev="sockfs" ino=73314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1181.900765][T19413] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3509'. [ 1182.032797][T19412] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1182.086160][T19415] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1183.073493][T19427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 1184.260480][T19433] syzkaller0: entered promiscuous mode [ 1184.265945][T19433] syzkaller0: entered allmulticast mode [ 1185.641262][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3518'. [ 1186.224054][T19451] tipc: Enabled bearer , priority 0 [ 1186.533434][T19444] tipc: Disabling bearer [ 1187.054107][T19472] atomic_op ffff88807a357998 conn xmit_atomic 0000000000000000 [ 1187.161720][ T30] audit: type=1326 audit(3915626587.680:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19473 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3198f749 code=0x7ffc0000 [ 1187.224959][ T30] audit: type=1326 audit(3915626587.701:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19473 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3198f749 code=0x7ffc0000 [ 1187.250119][ T30] audit: type=1326 audit(3915626587.764:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19473 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b3198f749 code=0x7ffc0000 [ 1187.301388][ T30] audit: type=1326 audit(3915626587.795:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19473 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3198f749 code=0x7ffc0000 [ 1187.746630][T19483] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3530'. [ 1187.907361][ T30] audit: type=1326 audit(3915626587.795:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19473 comm="syz.4.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3198f749 code=0x7ffc0000 [ 1187.956350][T19482] overlayfs: orphan index entry (index/00fb21000170090e79e43e4938927b0ff9159abf8b11bae2eadc01000000000000, ftype=2000, nlink=1) [ 1188.871617][T19500] fuse: Unknown parameter '0xffffffffffffffff' [ 1188.930333][ T30] audit: type=1400 audit(3915626589.538:932): avc: denied { create } for pid=19501 comm="syz.4.3536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 1188.962427][T19500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1189.000708][ T30] audit: type=1400 audit(3915626589.601:933): avc: denied { create } for pid=19501 comm="syz.4.3536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 1189.040164][ T30] audit: type=1400 audit(3915626589.601:934): avc: denied { read } for pid=19505 comm="syz.6.3537" dev="nsfs" ino=4026532792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1189.081328][T19506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19506 comm=syz.6.3537 [ 1189.130455][ T30] audit: type=1400 audit(3915626589.601:935): avc: denied { open } for pid=19505 comm="syz.6.3537" path="net:[4026532792]" dev="nsfs" ino=4026532792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1189.212505][ T30] audit: type=1400 audit(3915626589.643:936): avc: denied { ioctl } for pid=19501 comm="syz.4.3536" path="socket:[72661]" dev="sockfs" ino=72661 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 1189.279353][T19515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3540'. [ 1189.402896][T19518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1191.297480][T19535] netlink: 'syz.6.3545': attribute type 10 has an invalid length. [ 1191.322658][T19535] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1191.932762][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1191.932802][ T30] audit: type=1400 audit(3915626592.687:1008): avc: denied { mount } for pid=19549 comm="syz.2.3551" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1192.252228][ T30] audit: type=1400 audit(3915626593.013:1009): avc: denied { mount } for pid=19556 comm="syz.4.3553" name="/" dev="ramfs" ino=74792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1192.289057][ T30] audit: type=1400 audit(3915626593.065:1010): avc: denied { unmount } for pid=16689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1192.448220][ T30] audit: type=1400 audit(3915626593.223:1011): avc: denied { write } for pid=19558 comm="syz.4.3554" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1192.683204][ T30] audit: type=1400 audit(3915626593.475:1012): avc: denied { unmount } for pid=17109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1192.697539][ T5925] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1192.726707][T19562] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3555'. [ 1192.737291][ T30] audit: type=1400 audit(3915626593.506:1013): avc: denied { ioctl } for pid=19561 comm="syz.6.3555" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1192.847311][ T30] audit: type=1400 audit(3915626593.643:1014): avc: denied { mounton } for pid=19563 comm="syz.2.3556" path="/145/file0" dev="tmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1192.871485][ T5925] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.026588][ T5925] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1193.044958][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.059603][ T5925] usb 5-1: Product: syz [ 1193.063766][ T5925] usb 5-1: Manufacturer: syz [ 1193.537545][ T5925] usb 5-1: SerialNumber: syz [ 1193.552622][ T5925] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1193.561043][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 1193.588065][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1193.612740][ T5925] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1193.621061][ T5925] usb 5-1: media controller created [ 1193.639609][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1193.759615][ T5925] DVB: Unable to find symbol mt352_attach() [ 1193.766750][ T30] audit: type=1400 audit(3915626594.619:1015): avc: denied { create } for pid=19558 comm="syz.4.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1193.786851][ T5925] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1193.870698][ T30] audit: type=1400 audit(3915626594.640:1016): avc: denied { setopt } for pid=19558 comm="syz.4.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1193.870812][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 1193.961195][T19582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3559'. [ 1194.071304][T16344] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1194.154876][ T5925] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1194.194187][ T5925] usb 5-1: USB disconnect, device number 101 [ 1194.253026][T16344] usb 3-1: Using ep0 maxpacket: 8 [ 1194.262221][T16344] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1194.279417][ T30] audit: type=1400 audit(3915626595.154:1017): avc: denied { sys_module } for pid=19578 comm="syz.5.3559" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1194.308455][T16344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.327578][ T5925] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1194.346279][T16344] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1194.355784][T16344] pvrusb2: ********** [ 1194.363487][T16344] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1194.393163][T16344] pvrusb2: Important functionality might not be entirely working. [ 1194.414770][T16344] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1194.486311][T16344] pvrusb2: ********** [ 1194.624012][ T2337] pvrusb2: Invalid write control endpoint [ 1194.646299][T19592] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3561'. [ 1195.291140][T19575] pvrusb2: Invalid write control endpoint [ 1195.301774][T16344] usb 3-1: USB disconnect, device number 96 [ 1195.374543][ T2337] pvrusb2: Invalid write control endpoint [ 1195.380456][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1195.452694][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1195.474570][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1195.494335][ T2337] pvrusb2: Device being rendered inoperable [ 1195.505444][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1195.534282][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1195.574738][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1195.592628][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1195.604768][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1196.322979][T19603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3565'. [ 1196.700913][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1196.700924][ T30] audit: type=1400 audit(3915626597.695:1026): avc: denied { read write } for pid=19605 comm="syz.4.3566" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1196.877807][ T30] audit: type=1400 audit(3915626597.727:1027): avc: denied { open } for pid=19605 comm="syz.4.3566" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1196.906268][ T30] audit: type=1400 audit(3915626597.758:1028): avc: denied { bind } for pid=19602 comm="syz.2.3565" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1197.093332][ T30] audit: type=1400 audit(3915626597.758:1029): avc: denied { name_bind } for pid=19602 comm="syz.2.3565" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1197.119611][ T30] audit: type=1400 audit(3915626597.758:1030): avc: denied { node_bind } for pid=19602 comm="syz.2.3565" saddr=ff05::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1197.142532][ T30] audit: type=1400 audit(3915626597.936:1031): avc: denied { create } for pid=19606 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1197.162571][ T30] audit: type=1400 audit(3915626597.947:1032): avc: denied { write } for pid=19606 comm="syz.6.3567" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1197.358459][ T30] audit: type=1400 audit(3915626598.304:1033): avc: denied { create } for pid=19623 comm="syz.2.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1197.631762][ T30] audit: type=1400 audit(3915626598.314:1034): avc: denied { setopt } for pid=19623 comm="syz.2.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1197.691649][T19621] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1198.599748][T19621] block device autoloading is deprecated and will be removed. [ 1199.203696][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1199.300867][ T30] audit: type=1400 audit(3915626600.424:1035): avc: denied { shutdown } for pid=19633 comm="syz.0.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.413589][T16344] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1199.507850][T19652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3575'. [ 1199.635641][T16344] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1199.654530][T16344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.665101][T16344] usb 3-1: Product: syz [ 1199.964779][ T5925] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1200.008873][T16344] usb 3-1: Manufacturer: syz [ 1200.013104][ T5948] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1200.018971][T16344] usb 3-1: SerialNumber: syz [ 1200.162641][ T5925] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1200.175830][ T5948] usb 7-1: Using ep0 maxpacket: 8 [ 1200.194612][ T5948] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1200.229736][ T5925] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1200.241089][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.253310][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.275794][ T5925] usb 1-1: Product: syz [ 1200.280982][ T5948] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1200.298394][ T5925] usb 1-1: Manufacturer: syz [ 1200.307711][ T5948] pvrusb2: ********** [ 1200.311856][ T5925] usb 1-1: SerialNumber: syz [ 1200.334158][ T5948] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1200.375194][ T5948] pvrusb2: Important functionality might not be entirely working. [ 1200.396383][ T5948] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1200.427560][ T5948] pvrusb2: ********** [ 1200.467908][ T2337] pvrusb2: Invalid write control endpoint [ 1200.678791][T19648] pvrusb2: Invalid write control endpoint [ 1200.690398][T19635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.838709][T19635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.848090][ T5948] usb 7-1: USB disconnect, device number 12 [ 1200.927898][ T2337] pvrusb2: Invalid write control endpoint [ 1200.943494][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1200.965148][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1200.965900][T19635] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1200.983262][T19635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1200.992375][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1200.992390][ T2337] pvrusb2: Device being rendered inoperable [ 1200.992444][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1200.992484][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1201.071045][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1201.089948][ T44] usb 1-1: USB disconnect, device number 97 [ 1201.097047][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1201.126905][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1201.899086][T16344] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1201.924547][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1201.924563][ T30] audit: type=1400 audit(3915626603.175:1039): avc: denied { ioctl } for pid=19664 comm="syz.0.3581" path="socket:[74960]" dev="sockfs" ino=74960 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1201.927979][T16344] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1201.940835][ T30] audit: type=1400 audit(3915626603.175:1040): avc: denied { setopt } for pid=19664 comm="syz.0.3581" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1202.054868][T19670] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 19670 comm: syz.4.3579) [ 1202.060643][T16344] uvcvideo 3-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1203.033170][ T30] audit: type=1400 audit(3915626603.290:1041): avc: denied { create } for pid=19662 comm="syz.4.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1203.046727][T16344] uvcvideo 3-1:13.0: No valid video chain found. [ 1203.085321][T16344] usb 3-1: USB disconnect, device number 97 [ 1203.100923][ T30] audit: type=1400 audit(3915626603.311:1042): avc: denied { read write } for pid=19672 comm="syz.2.3582" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1203.859677][ T30] audit: type=1400 audit(3915626603.311:1043): avc: denied { open } for pid=19672 comm="syz.2.3582" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1203.937345][ T30] audit: type=1400 audit(3915626603.311:1044): avc: denied { module_load } for pid=19662 comm="syz.4.3579" path=2F2173656C696E7578776B311FD06DC37F39C99E2A0D5493FDE291EFAA16236A978FBCDE590FCCC56D56CB15766D2870C92D515A23D27B84BF06 dev="mqueue" ino=74957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1204.089200][ T30] audit: type=1400 audit(3915626603.332:1045): avc: denied { ioctl } for pid=19672 comm="syz.2.3582" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1204.154829][ T30] audit: type=1400 audit(3915626604.340:1046): avc: denied { create } for pid=19672 comm="syz.2.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1204.157374][T17418] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1204.223688][ T30] audit: type=1400 audit(3915626604.372:1047): avc: denied { getopt } for pid=19672 comm="syz.2.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1204.299807][ T5928] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1204.324571][ T30] audit: type=1400 audit(3915626605.694:1048): avc: denied { connect } for pid=19672 comm="syz.2.3582" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1204.501464][ T5928] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1204.510014][ T5928] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1204.557220][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1204.591710][ T5928] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1204.610662][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1204.639504][ T5928] usb 5-1: Product: syz [ 1204.659374][ T5928] usb 5-1: Manufacturer: syz [ 1204.669431][ T5928] usb 5-1: SerialNumber: syz [ 1204.685909][ T5928] usb 5-1: config 0 descriptor?? [ 1204.701430][ T5928] hub 5-1:0.0: bad descriptor, ignoring hub [ 1204.711005][T17418] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1204.718766][ T5928] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1204.720552][T17418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.740321][ T5928] usb 5-1: selecting invalid altsetting 0 [ 1204.761187][T17418] usb 7-1: Product: syz [ 1204.765548][T17418] usb 7-1: Manufacturer: syz [ 1204.778374][T17418] usb 7-1: SerialNumber: syz [ 1205.072539][T19684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.081321][T19684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.430219][T17418] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1206.531272][T17418] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1206.542515][T17418] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1206.559607][T17418] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1206.578398][T17418] usb 7-1: USB disconnect, device number 13 [ 1207.014705][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1207.014738][ T30] audit: type=1400 audit(3915626608.235:1061): avc: denied { map } for pid=19707 comm="syz.0.3588" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1207.329794][T15675] Bluetooth: hci0: command 0x0405 tx timeout [ 1207.605424][ T30] audit: type=1400 audit(3915626609.148:1062): avc: denied { read } for pid=19722 comm="syz.2.3594" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1207.637608][ T30] audit: type=1400 audit(3915626609.169:1063): avc: denied { open } for pid=19722 comm="syz.2.3594" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1207.993140][ T30] audit: type=1400 audit(3915626609.201:1064): avc: denied { map } for pid=19722 comm="syz.2.3594" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1208.150918][ T5926] usb 5-1: USB disconnect, device number 102 [ 1208.236845][ T30] audit: type=1400 audit(3915626609.201:1065): avc: denied { execute } for pid=19722 comm="syz.2.3594" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1208.262899][ T44] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 1208.274607][ T30] audit: type=1400 audit(3915626609.201:1066): avc: denied { mounton } for pid=19722 comm="syz.2.3594" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1208.301839][T19688] delete_channel: no stack [ 1208.306610][ T30] audit: type=1400 audit(3915626609.211:1067): avc: denied { mount } for pid=19722 comm="syz.2.3594" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1209.478975][ T44] usb 3-1: Invalid ep0 maxpacket: 32 [ 1209.497653][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1209.600269][T19735] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1209.624423][ T44] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 1209.645366][T19735] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1209.774605][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3599'. [ 1209.786633][ T44] usb 3-1: Invalid ep0 maxpacket: 32 [ 1209.849152][ T44] usb usb3-port1: attempt power cycle [ 1209.888135][ T30] audit: type=1400 audit(3915626611.531:1068): avc: denied { bind } for pid=19731 comm="syz.4.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1210.179001][ T30] audit: type=1400 audit(3915626611.846:1069): avc: denied { write } for pid=19742 comm="syz.4.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1210.206350][ T44] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 1210.238923][ T44] usb 3-1: Invalid ep0 maxpacket: 32 [ 1210.301609][ T30] audit: type=1400 audit(3915626611.867:1070): avc: denied { connect } for pid=19742 comm="syz.4.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1210.482173][ T44] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1210.511241][ T44] usb 3-1: device descriptor read/8, error -71 [ 1210.626896][ T44] usb usb3-port1: unable to enumerate USB device [ 1211.350564][ T5928] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1212.050997][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1212.051037][ T30] audit: type=1400 audit(3915626613.809:1079): avc: denied { bind } for pid=19762 comm="syz.6.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1212.115383][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 1212.326814][ T5928] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 1212.347824][ T5928] usb 3-1: config 0 has no interface number 1 [ 1212.778214][ T5928] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1213.039295][T19768] can: request_module (can-proto-0) failed. [ 1213.187331][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.673460][ T30] audit: type=1400 audit(3915626615.069:1080): avc: denied { connect } for pid=19770 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1213.748424][ T5928] usb 3-1: Product: syz [ 1213.753502][ T5928] usb 3-1: Manufacturer: syz [ 1213.767643][ T5928] usb 3-1: SerialNumber: syz [ 1213.772616][ T30] audit: type=1400 audit(3915626615.069:1081): avc: denied { getopt } for pid=19770 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1213.794182][ T5928] usb 3-1: config 0 descriptor?? [ 1213.816706][T19768] syzkaller0: entered promiscuous mode [ 1213.824570][T19768] syzkaller0: entered allmulticast mode [ 1213.827747][ T44] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1213.852201][ T5928] viperboard 3-1:0.61: version 0.00 found at bus 003 address 102 [ 1213.879061][ T5928] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1213.899433][ T5928] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1213.961065][ T5928] viperboard 3-1:0.0: version 0.00 found at bus 003 address 102 [ 1213.988808][T19785] FAULT_INJECTION: forcing a failure. [ 1213.988808][T19785] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.113759][T19785] CPU: 1 UID: 0 PID: 19785 Comm: syz.0.3609 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.113790][T19785] Tainted: [L]=SOFTLOCKUP [ 1214.113796][T19785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1214.113807][T19785] Call Trace: [ 1214.113813][T19785] [ 1214.113821][T19785] dump_stack_lvl+0x16c/0x1f0 [ 1214.113849][T19785] should_fail_ex+0x512/0x640 [ 1214.113874][T19785] ? __kmalloc_noprof+0xca/0x910 [ 1214.113904][T19785] should_failslab+0xc2/0x120 [ 1214.113926][T19785] __kmalloc_noprof+0xeb/0x910 [ 1214.113953][T19785] ? video_usercopy+0x1a0/0x16c0 [ 1214.113978][T19785] ? video_usercopy+0x1a0/0x16c0 [ 1214.113997][T19785] ? do_vfs_ioctl+0x128/0x14f0 [ 1214.114015][T19785] video_usercopy+0x1a0/0x16c0 [ 1214.114037][T19785] ? __pfx___video_do_ioctl+0x10/0x10 [ 1214.114057][T19785] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1214.114082][T19785] ? __pfx_video_usercopy+0x10/0x10 [ 1214.114118][T19785] v4l2_ioctl+0x1bd/0x250 [ 1214.114137][T19785] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1214.114156][T19785] __x64_sys_ioctl+0x18e/0x210 [ 1214.114177][T19785] do_syscall_64+0xcd/0xf80 [ 1214.114201][T19785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.114217][T19785] RIP: 0033:0x7f4aa718f749 [ 1214.114231][T19785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1214.114247][T19785] RSP: 002b:00007f4aa80aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1214.114264][T19785] RAX: ffffffffffffffda RBX: 00007f4aa73e5fa0 RCX: 00007f4aa718f749 [ 1214.114275][T19785] RDX: 0000200000001500 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 1214.114285][T19785] RBP: 00007f4aa80aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.114296][T19785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.114305][T19785] R13: 00007f4aa73e6038 R14: 00007f4aa73e5fa0 R15: 00007fff79e0efb8 [ 1214.114328][T19785] [ 1214.123346][ T5928] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1214.386018][T19792] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3611'. [ 1214.490212][T19793] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1214.845881][ T30] audit: type=1400 audit(3915626616.255:1082): avc: denied { write } for pid=19786 comm="syz.2.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1214.913409][ T44] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1214.925574][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.934502][ T30] audit: type=1400 audit(3915626616.255:1083): avc: denied { nlmsg_write } for pid=19786 comm="syz.2.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1214.958483][ T44] usb 5-1: Product: syz [ 1214.963000][ T44] usb 5-1: Manufacturer: syz [ 1214.967776][ T44] usb 5-1: SerialNumber: syz [ 1214.973313][ T30] audit: type=1400 audit(3915626616.276:1084): avc: denied { create } for pid=19786 comm="syz.2.3611" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1215.089709][ T5928] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1215.132196][ T30] audit: type=1400 audit(3915626616.287:1085): avc: denied { unlink } for pid=19786 comm="syz.2.3611" name="#c3" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1215.137909][ T5928] usb 3-1: USB disconnect, device number 102 [ 1215.223576][ T44] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1215.239759][ T44] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1215.879840][ T44] uvcvideo 5-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1215.888602][ T44] uvcvideo 5-1:13.0: No valid video chain found. [ 1215.895014][ T30] audit: type=1400 audit(3915626616.297:1086): avc: denied { mount } for pid=19786 comm="syz.2.3611" name="/" dev="overlay" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1215.902276][T19806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'. [ 1215.919314][ T44] usb 5-1: USB disconnect, device number 103 [ 1215.968701][T19809] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3616'. [ 1216.025909][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3613'. [ 1216.041988][ T30] audit: type=1400 audit(3915626616.308:1087): avc: denied { setattr } for pid=19786 comm="syz.2.3611" name="file1" dev="overlay" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1216.173672][T19806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1216.227684][ T30] audit: type=1400 audit(3915626616.308:1088): avc: denied { rename } for pid=19786 comm="syz.2.3611" name="#c5" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1217.537698][T19823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19823 comm=syz.2.3621 [ 1217.970627][T19828] netlink: 'syz.4.3617': attribute type 3 has an invalid length. [ 1218.287075][T19832] netlink: 'syz.0.3623': attribute type 10 has an invalid length. [ 1218.298967][T19832] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1218.309551][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1218.309566][ T30] audit: type=1400 audit(3915626620.339:1092): avc: denied { ioctl } for pid=19831 comm="syz.0.3623" path="socket:[75400]" dev="sockfs" ino=75400 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1219.047961][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1219.055081][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1219.064430][ T44] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1219.188298][T16893] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1219.228179][ T44] usb 1-1: config index 0 descriptor too short (expected 58386, got 18) [ 1219.236921][ T44] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1219.244997][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1219.262881][ T44] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1219.272904][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.284193][ T44] usb 1-1: config 0 descriptor?? [ 1219.291850][ T44] pwc: Creative Labs Webcam Pro Ex detected. [ 1219.912760][T19838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.922500][T16893] usb 7-1: Using ep0 maxpacket: 32 [ 1219.943568][T19838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.960552][T16893] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1219.961518][ T44] pwc: Failed to set LED on/off time (-71) [ 1219.975862][T16893] usb 7-1: config 0 has no interface number 0 [ 1219.980184][ T44] pwc: send_video_command error -71 [ 1220.030333][ T44] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1220.040988][ T44] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1220.046155][T16893] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1220.052433][ T44] usb 1-1: USB disconnect, device number 98 [ 1220.060810][T16893] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1220.072755][T16893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.074648][ T30] audit: type=1400 audit(3915626622.229:1093): avc: denied { ioctl } for pid=19850 comm="syz.4.3629" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1220.081010][T16893] usb 7-1: Product: syz [ 1220.106875][T19851] binder: 19850:19851 ioctl 40046205 0 returned -22 [ 1220.124462][T16893] usb 7-1: Manufacturer: syz [ 1220.130465][T16893] usb 7-1: SerialNumber: syz [ 1220.155616][T16893] usb 7-1: config 0 descriptor?? [ 1220.172261][T16893] smsc75xx v1.0.0 [ 1221.400275][ T30] audit: type=1400 audit(3915626623.625:1094): avc: denied { ioctl } for pid=19843 comm="syz.6.3618" path="socket:[75581]" dev="sockfs" ino=75581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1221.475074][T15863] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1222.272455][T15863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.286155][T15863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1222.316910][T19869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.331161][T15863] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1222.347884][T15863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.369455][T15863] usb 5-1: Product: syz [ 1222.449734][T15863] usb 5-1: Manufacturer: syz [ 1222.454402][T15863] usb 5-1: SerialNumber: syz [ 1222.743260][ T5928] usb 5-1: USB disconnect, device number 104 [ 1222.846133][T16893] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1222.895055][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3630'. [ 1223.021670][T16893] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1223.049245][T16893] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1223.066541][T16893] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1223.180192][T16893] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1223.198648][T16893] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1223.253332][T16893] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1223.300505][T16893] usb 7-1: USB disconnect, device number 14 [ 1223.370401][T19884] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1223.370461][ T30] audit: type=1400 audit(3915626625.693:1095): avc: denied { listen } for pid=19883 comm="syz.2.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1223.387551][T19887] netlink: 'syz.0.3637': attribute type 3 has an invalid length. [ 1223.411254][T19886] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1224.799219][T15863] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1225.010266][T15863] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1225.027674][T15863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.057925][T15863] usb 3-1: config 0 descriptor?? [ 1225.441117][T19901] binder: 19900:19901 ioctl 40046205 0 returned -22 [ 1225.486636][ T44] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1225.588693][T19905] overlayfs: missing 'lowerdir' [ 1225.646450][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 1225.654348][ T44] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1225.663772][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.680676][ T44] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1225.687746][ T44] pvrusb2: ********** [ 1225.691802][ T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1225.702794][ T44] pvrusb2: Important functionality might not be entirely working. [ 1225.714421][ T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1225.726941][ T44] pvrusb2: ********** [ 1225.818041][ T5871] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1225.867126][ T2337] pvrusb2: Invalid write control endpoint [ 1225.903393][ T2337] pvrusb2: Invalid write control endpoint [ 1225.909423][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1225.921699][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1225.933388][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1225.943649][ T2337] pvrusb2: Device being rendered inoperable [ 1225.950573][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1225.957944][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1225.966887][ T5871] usb 7-1: config 0 has no interfaces? [ 1225.973083][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1225.978540][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1225.989259][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1226.000484][ T5871] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1226.009807][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.017840][ T5871] usb 7-1: Product: syz [ 1226.022863][ T5871] usb 7-1: Manufacturer: syz [ 1226.029139][ T5871] usb 7-1: SerialNumber: syz [ 1226.035827][ T5871] usb 7-1: config 0 descriptor?? [ 1226.061048][T19897] pvrusb2: Attempted to execute control transfer when device not ok [ 1226.072423][ T5871] usb 1-1: USB disconnect, device number 99 [ 1226.086874][ T30] audit: type=1400 audit(3915626628.549:1096): avc: denied { unmount } for pid=16689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1226.119938][ T30] audit: type=1400 audit(3915626628.580:1097): avc: denied { create } for pid=19907 comm="syz.5.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1226.161453][ T30] audit: type=1400 audit(3915626628.622:1098): avc: denied { create } for pid=19909 comm="syz.4.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1226.181991][ T30] audit: type=1400 audit(3915626628.622:1099): avc: denied { ioctl } for pid=19909 comm="syz.4.3646" path="socket:[77367]" dev="sockfs" ino=77367 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1226.230388][T19913] tmpfs: Bad value for 'mpol' [ 1226.427251][T19905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.436831][T19905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.543315][ T30] audit: type=1400 audit(3915626629.000:1100): avc: denied { execute } for pid=19912 comm="syz.4.3647" path="/183/cpu.stat" dev="tmpfs" ino=1002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1226.889927][T15863] usb 3-1: Cannot set autoneg [ 1226.894967][T15863] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1226.974571][ T5926] usb 7-1: USB disconnect, device number 15 [ 1226.983640][T19890] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1227.121995][ T30] audit: type=1400 audit(3915626629.630:1101): avc: denied { set_context_mgr } for pid=19923 comm="syz.4.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1227.156904][T19925] syzkaller0: entered promiscuous mode [ 1227.163477][T19925] syzkaller0: entered allmulticast mode [ 1227.216712][ T30] audit: type=1400 audit(3915626629.724:1102): avc: denied { map } for pid=19923 comm="syz.4.3650" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1227.268399][ T30] audit: type=1400 audit(3915626629.787:1103): avc: denied { call } for pid=19923 comm="syz.4.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1227.829272][T19940] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3654'. [ 1227.849384][T19940] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3654'. [ 1227.923252][T19941] netlink: 'syz.6.3653': attribute type 3 has an invalid length. [ 1227.972916][T19949] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3655'. [ 1229.000557][T19958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1229.857616][ T30] audit: type=1400 audit(3915626632.422:1104): avc: denied { getopt } for pid=19968 comm="syz.5.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1229.857923][ T30] audit: type=1400 audit(3915626632.422:1105): avc: denied { create } for pid=19968 comm="syz.5.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1229.896967][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3660'. [ 1230.005084][T19978] sch_fq: defrate 4294967295 ignored. [ 1230.076325][ T5928] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1230.333262][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 1230.344096][ T5928] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1230.441748][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.473316][ T5928] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1230.960728][ T5928] pvrusb2: ********** [ 1230.970980][ T5928] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1231.007558][ T5928] pvrusb2: Important functionality might not be entirely working. [ 1231.025001][ T5928] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1231.049610][ T5928] pvrusb2: ********** [ 1231.059793][ T2337] pvrusb2: Invalid write control endpoint [ 1231.232779][T19997] pvrusb2: Invalid write control endpoint [ 1231.251344][T16893] usb 7-1: USB disconnect, device number 16 [ 1231.350371][ T30] audit: type=1400 audit(3915626634.050:1106): avc: denied { getopt } for pid=19995 comm="syz.5.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1231.611882][ T2337] pvrusb2: Invalid write control endpoint [ 1231.617644][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1231.659300][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1231.676745][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1231.716765][ T2337] pvrusb2: Device being rendered inoperable [ 1231.726283][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1231.733561][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1231.762348][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1231.767801][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1231.819694][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1231.928456][T20007] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 1231.965800][T20007] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 1232.001417][T20010] netlink: 'syz.6.3668': attribute type 10 has an invalid length. [ 1232.097198][T20014] netlink: 'syz.2.3669': attribute type 3 has an invalid length. [ 1232.335463][ T30] audit: type=1400 audit(3915626635.110:1107): avc: denied { setopt } for pid=20006 comm="syz.6.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1232.416875][ T30] audit: type=1400 audit(3915626635.141:1108): avc: denied { connect } for pid=20006 comm="syz.6.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1232.800594][ T30] audit: type=1400 audit(3915626635.141:1109): avc: denied { write } for pid=20006 comm="syz.6.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1233.138970][ T30] audit: type=1400 audit(3915626635.929:1110): avc: denied { ioctl } for pid=20021 comm="syz.4.3672" path="socket:[79047]" dev="sockfs" ino=79047 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1233.179337][T20023] netlink: 'syz.6.3673': attribute type 10 has an invalid length. [ 1233.455993][T20027] netlink: 'syz.0.3674': attribute type 10 has an invalid length. [ 1233.932752][T20040] syzkaller0: entered promiscuous mode [ 1233.938474][T20040] syzkaller0: entered allmulticast mode [ 1233.962443][ T5928] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1234.174198][ T5928] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1234.184954][ T5928] usb 7-1: config 0 has no interface number 0 [ 1234.205010][ T5928] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1234.228778][ T30] audit: type=1400 audit(3915626637.084:1111): avc: denied { ioctl } for pid=20033 comm="syz.0.3677" path="socket:[78301]" dev="sockfs" ino=78301 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1234.305636][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.323030][ T5928] usb 7-1: config 0 descriptor?? [ 1235.546466][ T5928] usb 7-1: selecting invalid altsetting 1 [ 1235.552359][ T5928] dvb_ttusb_budget: ttusb_init_controller: error [ 1235.591474][ T5928] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1235.602209][T20050] binder: 20049:20050 ioctl c0306201 0 returned -14 [ 1235.648364][ T5928] DVB: Unable to find symbol cx22700_attach() [ 1235.693202][ T5928] DVB: Unable to find symbol tda10046_attach() [ 1235.702978][ T5928] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1236.231676][ T5928] usb 7-1: USB disconnect, device number 17 [ 1236.601865][T20062] ufs: You didn't specify the type of your ufs filesystem [ 1236.601865][T20062] [ 1236.601865][T20062] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1236.601865][T20062] [ 1236.601865][T20062] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1236.633416][T20062] ufs: ufstype=old is supported read-only [ 1236.644074][T20062] ufs: ufs_fill_super(): bad magic number [ 1236.984514][T20071] netlink: 'syz.0.3685': attribute type 3 has an invalid length. [ 1237.769717][ T30] audit: type=1400 audit(3915626640.810:1112): avc: denied { bind } for pid=20078 comm="syz.5.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1237.817696][ T30] audit: type=1400 audit(3915626640.810:1113): avc: denied { listen } for pid=20078 comm="syz.5.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1237.858723][ T30] audit: type=1400 audit(3915626640.810:1114): avc: denied { read } for pid=20078 comm="syz.5.3689" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1237.896408][ T5928] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1237.909429][ T30] audit: type=1400 audit(3915626640.810:1115): avc: denied { open } for pid=20078 comm="syz.5.3689" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1237.961834][ T30] audit: type=1400 audit(3915626640.810:1116): avc: denied { connect } for pid=20078 comm="syz.5.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1238.006012][ T30] audit: type=1400 audit(3915626640.810:1117): avc: denied { write } for pid=20078 comm="syz.5.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1238.044088][ T5928] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1238.045443][ T30] audit: type=1400 audit(3915626640.810:1118): avc: denied { setopt } for pid=20078 comm="syz.5.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1238.121777][ T5928] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid maxpacket 2608, setting to 64 [ 1238.172739][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1238.198252][ T5928] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1238.213102][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1238.241508][ T5928] usb 7-1: Product: syz [ 1238.245795][ T5928] usb 7-1: Manufacturer: syz [ 1238.252527][ T5928] usb 7-1: SerialNumber: syz [ 1238.268680][ T5928] usb 7-1: config 0 descriptor?? [ 1238.279329][ T6255] kernel read not supported for file /dsp (pid: 6255 comm: kworker/0:9) [ 1238.289563][ T5928] usb 7-1: selecting invalid altsetting 0 [ 1238.497853][T20068] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1238.586533][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1238.616896][T16344] usb 7-1: USB disconnect, device number 18 [ 1238.654599][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3692'. [ 1238.724321][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1239.175443][ T30] audit: type=1400 audit(3915626642.280:1119): avc: denied { ioctl } for pid=20093 comm="syz.6.3694" path="pid:[4026533406]" dev="nsfs" ino=4026533406 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1239.471175][T20098] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3693'. [ 1241.177092][T20108] pimreg: entered allmulticast mode [ 1241.470696][T16344] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1241.502095][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3699'. [ 1241.809311][T16344] usb 7-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1241.829730][T16344] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1241.864418][T16344] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.40 [ 1241.908872][T16344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.944226][T16344] usb 7-1: Product: ␉ [ 1241.963894][T16344] usb 7-1: Manufacturer: 얨汽뮨龋춫枍怃经隠➇埐้쿆೼橬ቖ힞겟⁓㠀錈뿮똆헶ꂊ༵뾅顜尭㲙ᘏ왃寋ࣨ憠堒폔ﰝꮀ餉꡹⑨ﶪ쎰䪼䓩彗桤૱路ⱬ雴各㋉跔隀ꁸ⪙첤♼埂햳度㨠귗䇟ᅵ明洂侷䯿蠰ᖍ햯윁髱ꏽ嘁 [ 1242.024780][T16344] usb 7-1: SerialNumber: syz [ 1242.329042][T20119] 9pnet_fd: p9_fd_create_tcp (20119): problem connecting socket to 127.0.0.1 [ 1243.071078][T16344] usbhid 7-1:1.0: can't add hid device: -71 [ 1243.077302][T16344] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1243.145877][ T30] audit: type=1400 audit(3915626646.458:1120): avc: denied { shutdown } for pid=20129 comm="syz.4.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1243.185290][T16344] usb 7-1: USB disconnect, device number 19 [ 1243.196893][T20133] 9pnet_fd: p9_fd_create_tcp (20133): problem connecting socket to 127.0.0.1 [ 1243.405347][T20137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.860917][T20137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.083994][T20141] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3706'. [ 1244.131326][ T30] audit: type=1400 audit(3915626647.487:1121): avc: denied { read } for pid=20142 comm="syz.0.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1244.400774][ T30] audit: type=1400 audit(3915626647.770:1122): avc: denied { audit_write } for pid=20142 comm="syz.0.3707" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1244.494591][T20151] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 1244.840474][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3709'. [ 1245.139233][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3711'. [ 1246.631604][ T30] audit: type=1400 audit(3915626649.797:1123): avc: denied { bind } for pid=20171 comm="syz.4.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1246.698516][ T30] audit: type=1400 audit(3915626649.797:1124): avc: denied { setopt } for pid=20171 comm="syz.4.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1247.432830][T20184] syzkaller0: entered promiscuous mode [ 1247.441136][T20184] syzkaller0: entered allmulticast mode [ 1247.448962][T20190] netlink: 'syz.6.3721': attribute type 10 has an invalid length. [ 1247.546241][ T30] audit: type=1400 audit(3915626651.067:1125): avc: denied { read } for pid=20183 comm="syz.5.3720" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1247.710651][ T30] audit: type=1400 audit(3915626651.067:1126): avc: denied { open } for pid=20183 comm="syz.5.3720" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1247.764563][ T30] audit: type=1400 audit(3915626651.067:1127): avc: denied { ioctl } for pid=20183 comm="syz.5.3720" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1248.633062][T20207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.671253][T20207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.683350][ T30] audit: type=1400 audit(3915626652.264:1128): avc: denied { setopt } for pid=20206 comm="syz.2.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1248.972859][T20218] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3725'. [ 1249.065546][T20219] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1249.358781][ T30] audit: type=1400 audit(3915626652.977:1129): avc: denied { write } for pid=20204 comm="syz.5.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1249.752404][ T6255] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1250.370674][ T6255] usb 5-1: Using ep0 maxpacket: 8 [ 1250.381066][ T6255] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1250.407452][ T6255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.425207][ T6255] usb 5-1: Product: syz [ 1250.443753][ T6255] usb 5-1: Manufacturer: syz [ 1250.458110][ T6255] usb 5-1: SerialNumber: syz [ 1250.527809][ T6255] usb 5-1: config 0 descriptor?? [ 1250.539978][ T6255] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1250.642864][T20238] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1250.669632][T20241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.690580][T20241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.763228][ T30] audit: type=1326 audit(3915626654.447:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20204 comm="syz.5.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059558f749 code=0x7fc00000 [ 1250.974591][ T30] audit: type=1400 audit(3915626654.668:1131): avc: denied { bind } for pid=20248 comm="syz.5.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1251.073120][T20252] overlayfs: failed to resolve './file1/file0': -2 [ 1251.735551][ T6255] gspca_sonixj: reg_w1 err -71 [ 1251.813462][ T6255] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1251.822611][ T6255] usb 5-1: USB disconnect, device number 105 [ 1251.889746][ T44] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1251.982946][T20264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3744'. [ 1252.029993][ T30] audit: type=1400 audit(3915626655.770:1132): avc: denied { accept } for pid=20267 comm="syz.0.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1252.070654][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 1252.077112][ T44] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.088110][ T44] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.107566][ T44] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.128221][ T44] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1252.143479][ T30] audit: type=1400 audit(3915626655.896:1133): avc: denied { read } for pid=20265 comm="syz.2.3745" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1252.223891][ T44] usb 7-1: config 7 interface 0 has no altsetting 0 [ 1252.231039][ T44] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1252.242311][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.251828][ T30] audit: type=1400 audit(3915626655.896:1134): avc: denied { open } for pid=20265 comm="syz.2.3745" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1252.354477][ T30] audit: type=1400 audit(3915626655.927:1135): avc: denied { ioctl } for pid=20265 comm="syz.2.3745" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1252.403429][T20273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3747'. [ 1252.516984][T20273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1252.749814][ T44] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0018/input/input105 [ 1252.855995][ T30] audit: type=1400 audit(3915626656.599:1136): avc: denied { ioctl } for pid=20277 comm="syz.4.3748" path="socket:[79782]" dev="sockfs" ino=79782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1252.966148][ T30] audit: type=1400 audit(3915626656.694:1137): avc: denied { read } for pid=5170 comm="acpid" name="mouse1" dev="devtmpfs" ino=3813 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1253.031925][ T44] kye 0003:0458:5010.0018: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 1253.051363][ T44] usb 7-1: USB disconnect, device number 20 [ 1253.249090][T20293] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1253.380354][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3752'. [ 1253.685147][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1253.685179][ T30] audit: type=1400 audit(3915626657.513:1142): avc: denied { write } for pid=20296 comm="syz.2.3753" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1253.740580][ T24] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 1254.069763][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.081257][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1254.092711][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1254.661990][ T24] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1254.672039][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.685247][T20301] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1254.692954][ T30] audit: type=1400 audit(3915626658.573:1143): avc: denied { sqpoll } for pid=20307 comm="syz.5.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1254.716177][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 1254.723622][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1254.734296][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 1254.746594][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 1254.753841][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1254.764863][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 1255.301190][ T24] usb 1-1: USB disconnect, device number 100 [ 1255.728137][ T30] audit: type=1400 audit(3915626659.591:1144): avc: denied { setopt } for pid=20354 comm="syz.5.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1256.853234][ T6255] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1256.906431][T20369] input: syz1 as /devices/virtual/input/input106 [ 1256.996919][ T6255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.008166][ T6255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.018842][ T6255] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1257.567509][T20381] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3772'. [ 1257.772046][ T6255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.799304][ T6255] usb 7-1: config 0 descriptor?? [ 1258.463125][ T6255] usb 7-1: can't set config #0, error -71 [ 1258.470172][ T6255] usb 7-1: USB disconnect, device number 21 [ 1258.540115][ T30] audit: type=1400 audit(3915626662.310:1145): avc: denied { ioctl } for pid=20378 comm="syz.0.3771" path="socket:[80112]" dev="sockfs" ino=80112 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1258.633916][ T30] audit: type=1400 audit(3915626662.688:1146): avc: denied { bind } for pid=20391 comm="syz.5.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1258.678407][ T30] audit: type=1400 audit(3915626662.688:1147): avc: denied { name_bind } for pid=20391 comm="syz.5.3777" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1258.784367][ T30] audit: type=1400 audit(3915626662.688:1148): avc: denied { node_bind } for pid=20391 comm="syz.5.3777" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1258.862513][ T30] audit: type=1400 audit(3915626662.709:1149): avc: denied { name_connect } for pid=20391 comm="syz.5.3777" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1259.883703][T20406] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1259.896157][T20406] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1261.774853][T20413] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1261.785197][ T30] audit: type=1400 audit(3915626666.005:1150): avc: denied { mount } for pid=20411 comm="syz.0.3780" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1262.063511][ T30] audit: type=1400 audit(3915626666.005:1151): avc: denied { mounton } for pid=20411 comm="syz.0.3780" path="/120/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1262.273623][ T30] audit: type=1400 audit(3915626666.530:1152): avc: denied { unmount } for pid=17781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1262.331605][ T870] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1262.475409][T20432] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3786'. [ 1262.949880][ T870] usb 5-1: Using ep0 maxpacket: 32 [ 1262.962558][ T870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.981816][ T870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.997426][ T870] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1263.046648][ T870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.062829][ T870] usb 5-1: config 0 descriptor?? [ 1263.070606][ T870] hub 5-1:0.0: USB hub found [ 1263.215506][T17545] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1263.264945][ T870] hub 5-1:0.0: 29 ports detected [ 1263.277639][ T870] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1263.374728][T17545] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1263.390989][T17545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.432351][T17545] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1263.449163][T17545] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1263.567575][T17545] usb 1-1: Manufacturer: syz [ 1263.593331][T17545] usb 1-1: config 0 descriptor?? [ 1263.659792][ T870] usb 5-1: USB disconnect, device number 106 [ 1263.673293][T17545] rc_core: IR keymap rc-hauppauge not found [ 1263.679595][T17545] Registered IR keymap rc-empty [ 1263.687046][T17545] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1263.718415][T17545] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input107 [ 1263.921334][ T30] audit: type=1326 audit(3915626668.263:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.6.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1219d8f749 code=0x7ffc0000 [ 1263.958691][ T30] audit: type=1326 audit(3915626668.294:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.6.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1219d8f749 code=0x7ffc0000 [ 1263.958875][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1263.985734][ T870] usb 1-1: USB disconnect, device number 101 [ 1263.988640][ C0] igorplugusb 1-1:0.0: submit urb failed: -19 [ 1264.029194][ T30] audit: type=1326 audit(3915626668.294:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20462 comm="syz.6.3797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1219d8f749 code=0x0 [ 1264.135949][ T30] audit: type=1400 audit(3915626668.483:1156): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=40004 daddr=10.128.1.120 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1264.423364][ T30] audit: type=1400 audit(3915626668.661:1157): avc: denied { connect } for pid=20467 comm="syz.2.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1264.523453][ T30] audit: type=1400 audit(3915626668.661:1158): avc: denied { write } for pid=20467 comm="syz.2.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1264.787806][ T30] audit: type=1400 audit(3915626669.113:1159): avc: denied { write } for pid=20470 comm="syz.4.3800" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1265.218966][ T30] audit: type=1400 audit(3915626669.627:1160): avc: denied { name_bind } for pid=20476 comm="syz.6.3801" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1265.255337][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1265.267664][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1265.277202][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1266.255259][ T30] audit: type=1400 audit(3915626670.719:1161): avc: denied { read } for pid=20496 comm="syz.2.3809" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1266.290562][ T30] audit: type=1400 audit(3915626670.740:1162): avc: denied { open } for pid=20496 comm="syz.2.3809" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1266.513612][T20509] Bluetooth: MGMT ver 1.23 [ 1266.844917][ T870] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1267.019649][ T870] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1267.031151][ T870] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1267.098987][ T870] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1267.126235][ T870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.599197][T20515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1267.689481][ T870] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1267.891751][ T870] usb 1-1: USB disconnect, device number 102 [ 1268.705906][T20548] syzkaller0: entered promiscuous mode [ 1268.714555][T20548] syzkaller0: entered allmulticast mode [ 1268.837377][T20549] dummy0: entered allmulticast mode [ 1268.838230][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1268.838242][ T30] audit: type=1400 audit(3915626673.428:1165): avc: denied { create } for pid=20533 comm="syz.4.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1269.091920][ T30] audit: type=1400 audit(3915626673.680:1166): avc: denied { write } for pid=20533 comm="syz.4.3825" path="socket:[80511]" dev="sockfs" ino=80511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1269.807246][T17545] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 1270.044860][T17545] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.103224][T17545] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1270.122832][T17545] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1270.159967][T17545] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1270.188740][T17545] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.223263][T20558] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1270.238372][T17545] hub 7-1:1.0: bad descriptor, ignoring hub [ 1270.255392][T17545] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1270.273265][T17545] cdc_wdm 7-1:1.0: skipping garbage [ 1270.285108][T17545] cdc_wdm 7-1:1.0: skipping garbage [ 1270.299480][T17545] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1270.313030][T17545] cdc_wdm 7-1:1.0: Unknown control protocol [ 1270.569595][ T870] usb 7-1: USB disconnect, device number 22 [ 1270.977697][T20613] block nbd0: not configured, cannot reconfigure [ 1271.000713][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3839'. [ 1271.025776][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3839'. [ 1271.054052][T20338] netdevsim netdevsim6 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.063341][T20338] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.081076][T20338] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.108495][T20338] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.240979][T20624] netlink: 'syz.0.3842': attribute type 1 has an invalid length. [ 1271.290545][T20624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1271.302647][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3842'. [ 1271.325047][T20624] macvlan0: entered promiscuous mode [ 1271.331060][T20624] macvlan0: entered allmulticast mode [ 1271.351832][T20624] bond1: (slave ip6gretap1): making interface the new active one [ 1271.361331][T20624] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1271.507965][ T30] audit: type=1400 audit(3915626676.220:1167): avc: denied { remount } for pid=20632 comm="syz.5.3847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1273.016949][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3850'. [ 1273.025840][T20645] lo: entered promiscuous mode [ 1273.030650][T20645] lo: entered allmulticast mode [ 1273.044500][T20645] tunl0: entered promiscuous mode [ 1273.049551][T20645] tunl0: entered allmulticast mode [ 1273.056178][T20645] gre0: entered promiscuous mode [ 1273.061604][T20645] gre0: entered allmulticast mode [ 1273.067082][T20645] gretap0: entered promiscuous mode [ 1273.072263][T20645] gretap0: entered allmulticast mode [ 1273.078022][T20645] erspan0: entered promiscuous mode [ 1273.083200][T20645] erspan0: entered allmulticast mode [ 1273.113678][T20645] ip_vti0: entered promiscuous mode [ 1273.118881][T20645] ip_vti0: entered allmulticast mode [ 1273.124847][T20645] ip6_vti0: entered promiscuous mode [ 1273.130112][T20645] ip6_vti0: entered allmulticast mode [ 1273.135851][T20645] sit0: entered promiscuous mode [ 1273.140764][T20645] sit0: entered allmulticast mode [ 1273.146152][T20645] ip6tnl0: entered promiscuous mode [ 1273.151397][T20645] ip6tnl0: entered allmulticast mode [ 1273.157362][T20645] ip6gre0: entered promiscuous mode [ 1273.162560][T20645] ip6gre0: entered allmulticast mode [ 1273.168147][T20645] syz_tun: entered promiscuous mode [ 1273.186984][T20645] syz_tun: entered allmulticast mode [ 1273.193057][T20645] ip6gretap0: entered promiscuous mode [ 1273.198489][T20645] ip6gretap0: entered allmulticast mode [ 1273.204433][T20645] bridge0: entered promiscuous mode [ 1273.209628][T20645] bridge0: entered allmulticast mode [ 1273.215315][T20645] vcan0: entered promiscuous mode [ 1273.220344][T20645] vcan0: entered allmulticast mode [ 1273.225801][T20645] bond0: entered promiscuous mode [ 1273.230929][T20645] bond_slave_0: entered promiscuous mode [ 1273.236627][T20645] bond_slave_1: entered promiscuous mode [ 1273.242358][T20645] bond0: entered allmulticast mode [ 1273.247449][T20645] bond_slave_0: entered allmulticast mode [ 1273.253480][T20645] bond_slave_1: entered allmulticast mode [ 1273.259775][T20645] team0: entered promiscuous mode [ 1273.264773][T20645] team_slave_0: entered promiscuous mode [ 1273.270457][T20645] team_slave_1: entered promiscuous mode [ 1273.276138][T20645] team0: entered allmulticast mode [ 1273.281215][T20645] team_slave_0: entered allmulticast mode [ 1273.286935][T20645] team_slave_1: entered allmulticast mode [ 1273.293169][T20645] dummy0: entered promiscuous mode [ 1273.298270][T20645] dummy0: entered allmulticast mode [ 1273.303842][T20645] nlmon0: entered promiscuous mode [ 1273.308924][T20645] nlmon0: entered allmulticast mode [ 1273.324623][T20645] 0X: entered promiscuous mode [ 1273.329719][T20645] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1273.523122][T20656] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 1273.540184][T20656] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 1273.655754][T17545] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1273.840492][T17545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1273.854609][T17545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.876558][T17545] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1273.925942][T17545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.508331][T17545] usb 1-1: config 0 descriptor?? [ 1274.729950][ T30] audit: type=1400 audit(3915626679.600:1168): avc: denied { read } for pid=20672 comm="syz.2.3857" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1274.995717][T17545] isku 0003:1E7D:319C.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 1275.126286][T20674] No control pipe specified [ 1275.146072][ T30] audit: type=1400 audit(3915626679.642:1169): avc: denied { open } for pid=20672 comm="syz.2.3857" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1275.187141][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1275.205581][T17545] isku 0003:1E7D:319C.0019: couldn't init struct isku_device [ 1275.389814][ T30] audit: type=1400 audit(3915626679.674:1170): avc: denied { setopt } for pid=20667 comm="syz.6.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1275.777629][T17545] isku 0003:1E7D:319C.0019: couldn't install keyboard [ 1275.785813][T17545] isku 0003:1E7D:319C.0019: probe with driver isku failed with error -32 [ 1275.799887][T17545] usb 1-1: USB disconnect, device number 103 [ 1276.080042][ T30] audit: type=1400 audit(3915626681.028:1171): avc: denied { read write } for pid=20704 comm="syz.4.3868" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1276.122257][ T6255] hid_parser_main: 5 callbacks suppressed [ 1276.122277][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.150198][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.158183][ T30] audit: type=1400 audit(3915626681.060:1172): avc: denied { open } for pid=20704 comm="syz.4.3868" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1276.182168][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.189565][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.197925][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.207429][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.214956][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.225553][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.233236][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.240966][ T6255] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 1276.296595][ T6255] hid-generic 0000:0000:0003.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1276.408771][T17545] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1276.416601][ T30] audit: type=1400 audit(3915626681.375:1173): avc: denied { read } for pid=20718 comm="syz.2.3874" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1276.491332][ T30] audit: type=1400 audit(3915626681.375:1174): avc: denied { open } for pid=20718 comm="syz.2.3874" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1276.536845][ T30] audit: type=1400 audit(3915626681.375:1175): avc: denied { ioctl } for pid=20718 comm="syz.2.3874" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1276.592464][T17545] usb 5-1: config 0 has no interfaces? [ 1276.598499][T17545] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1276.612792][T17545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.631630][T17545] usb 5-1: config 0 descriptor?? [ 1277.395195][T20740] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1277.521552][ T44] usb 5-1: USB disconnect, device number 107 [ 1277.595275][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1277.602987][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1277.932059][ T30] audit: type=1400 audit(3915626682.960:1176): avc: denied { read } for pid=20745 comm="syz.6.3882" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1277.961144][T20748] loop6: detected capacity change from 0 to 524288000 [ 1278.086900][ T30] audit: type=1400 audit(3915626682.991:1177): avc: denied { open } for pid=20745 comm="syz.6.3882" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1278.791104][T20748] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3882'. [ 1278.832806][T20749] bond1: option ad_user_port_key: invalid value (45908) [ 1278.839884][T20749] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1278.889610][T20749] bond1 (unregistering): Released all slaves [ 1279.486549][T20771] [ 1279.486561][T20771] ===================================================== [ 1279.486569][T20771] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1279.486583][T20771] syzkaller #0 Tainted: G L [ 1279.486594][T20771] ----------------------------------------------------- [ 1279.486600][T20771] syz.4.3888/20771 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1279.486621][T20771] ffff888032e8b468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x21/0x120 [ 1279.486676][T20771] [ 1279.486676][T20771] and this task is already holding: [ 1279.486683][T20771] ffffffff8f07d0f8 (kbd_event_lock){....}-{3:3}, at: kbd_event+0x8a/0x1840 [ 1279.486731][T20771] which would create a new lock dependency: [ 1279.486738][T20771] (kbd_event_lock){....}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1279.486777][T20771] [ 1279.486777][T20771] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1279.486785][T20771] (&dev->event_lock#2){..-.}-{3:3} [ 1279.486807][T20771] [ 1279.486807][T20771] ... which became SOFTIRQ-irq-safe at: [ 1279.486816][T20771] lock_acquire+0x179/0x330 [ 1279.486837][T20771] _raw_spin_lock_irqsave+0x3a/0x60 [ 1279.486859][T20771] input_inject_event+0x9f/0x3b0 [ 1279.486880][T20771] led_set_brightness+0x217/0x290 [ 1279.486897][T20771] led_trigger_event+0xda/0x270 [ 1279.486918][T20771] kbd_bh+0x247/0x330 [ 1279.486937][T20771] tasklet_action_common+0x254/0x3f0 [ 1279.486965][T20771] handle_softirqs+0x219/0x950 [ 1279.486989][T20771] __irq_exit_rcu+0x109/0x170 [ 1279.487013][T20771] irq_exit_rcu+0x9/0x30 [ 1279.487038][T20771] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1279.487060][T20771] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1279.487081][T20771] _raw_spin_unlock_irq+0x29/0x50 [ 1279.487102][T20771] n_tty_ioctl_helper+0x113/0x2b0 [ 1279.487117][T20771] n_tty_ioctl+0x7f/0x3a0 [ 1279.487139][T20771] tty_ioctl+0x700/0x1650 [ 1279.487157][T20771] __x64_sys_ioctl+0x18e/0x210 [ 1279.487177][T20771] do_syscall_64+0xcd/0xf80 [ 1279.487200][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.487217][T20771] [ 1279.487217][T20771] to a SOFTIRQ-irq-unsafe lock: [ 1279.487224][T20771] (tasklist_lock){.+.+}-{3:3} [ 1279.487241][T20771] [ 1279.487241][T20771] ... which became SOFTIRQ-irq-unsafe at: [ 1279.487249][T20771] ... [ 1279.487253][T20771] lock_acquire+0x179/0x330 [ 1279.487273][T20771] _raw_read_lock+0x5f/0x70 [ 1279.487293][T20771] __do_wait+0x105/0x890 [ 1279.487311][T20771] do_wait+0x21d/0x570 [ 1279.487329][T20771] kernel_wait+0x9f/0x160 [ 1279.487348][T20771] call_usermodehelper_exec_work+0xf1/0x170 [ 1279.487374][T20771] process_one_work+0x9ba/0x1b20 [ 1279.487396][T20771] worker_thread+0x6c8/0xf10 [ 1279.487419][T20771] kthread+0x3c5/0x780 [ 1279.487438][T20771] ret_from_fork+0x983/0xb10 [ 1279.487458][T20771] ret_from_fork_asm+0x1a/0x30 [ 1279.487484][T20771] [ 1279.487484][T20771] other info that might help us debug this: [ 1279.487484][T20771] [ 1279.487491][T20771] Chain exists of: [ 1279.487491][T20771] &dev->event_lock#2 --> kbd_event_lock --> tasklist_lock [ 1279.487491][T20771] [ 1279.487526][T20771] Possible interrupt unsafe locking scenario: [ 1279.487526][T20771] [ 1279.487532][T20771] CPU0 CPU1 [ 1279.487537][T20771] ---- ---- [ 1279.487543][T20771] lock(tasklist_lock); [ 1279.487555][T20771] local_irq_disable(); [ 1279.487562][T20771] lock(&dev->event_lock#2); [ 1279.487580][T20771] lock(kbd_event_lock); [ 1279.487595][T20771] [ 1279.487599][T20771] lock(&dev->event_lock#2); [ 1279.487617][T20771] [ 1279.487617][T20771] *** DEADLOCK *** [ 1279.487617][T20771] [ 1279.487622][T20771] 5 locks held by syz.4.3888/20771: [ 1279.487633][T20771] #0: ffff88802bd4a118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 1279.487685][T20771] #1: ffff88802b8e1230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 1279.487738][T20771] #2: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 1279.487784][T20771] #3: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 1279.487828][T20771] #4: ffffffff8f07d0f8 (kbd_event_lock){....}-{3:3}, at: kbd_event+0x8a/0x1840 [ 1279.487875][T20771] [ 1279.487875][T20771] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1279.487884][T20771] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1279.487913][T20771] IN-SOFTIRQ-W at: [ 1279.487924][T20771] lock_acquire+0x179/0x330 [ 1279.487945][T20771] _raw_spin_lock_irqsave+0x3a/0x60 [ 1279.487965][T20771] input_inject_event+0x9f/0x3b0 [ 1279.487985][T20771] led_set_brightness+0x217/0x290 [ 1279.488002][T20771] led_trigger_event+0xda/0x270 [ 1279.488022][T20771] kbd_bh+0x247/0x330 [ 1279.488042][T20771] tasklet_action_common+0x254/0x3f0 [ 1279.488069][T20771] handle_softirqs+0x219/0x950 [ 1279.488094][T20771] __irq_exit_rcu+0x109/0x170 [ 1279.488118][T20771] irq_exit_rcu+0x9/0x30 [ 1279.488144][T20771] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1279.488167][T20771] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1279.488188][T20771] _raw_spin_unlock_irq+0x29/0x50 [ 1279.488209][T20771] n_tty_ioctl_helper+0x113/0x2b0 [ 1279.488226][T20771] n_tty_ioctl+0x7f/0x3a0 [ 1279.488248][T20771] tty_ioctl+0x700/0x1650 [ 1279.488266][T20771] __x64_sys_ioctl+0x18e/0x210 [ 1279.488287][T20771] do_syscall_64+0xcd/0xf80 [ 1279.488309][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.488328][T20771] INITIAL USE at: [ 1279.488338][T20771] lock_acquire+0x179/0x330 [ 1279.488359][T20771] _raw_spin_lock_irqsave+0x3a/0x60 [ 1279.488380][T20771] input_inject_event+0x9f/0x3b0 [ 1279.488399][T20771] led_set_brightness+0x217/0x290 [ 1279.488416][T20771] kbd_led_trigger_activate+0xcb/0x110 [ 1279.488437][T20771] led_trigger_set+0x59a/0xc50 [ 1279.488457][T20771] led_trigger_set_default+0x1e0/0x2e0 [ 1279.488480][T20771] led_classdev_register_ext+0x71d/0xa30 [ 1279.488500][T20771] input_leds_connect+0x552/0x8e0 [ 1279.488527][T20771] input_attach_handler.isra.0+0x176/0x250 [ 1279.488546][T20771] input_register_device+0xab9/0x11b0 [ 1279.488564][T20771] atkbd_connect+0x5f8/0xa60 [ 1279.488587][T20771] serio_driver_probe+0x7f/0xd0 [ 1279.488603][T20771] really_probe+0x241/0xb20 [ 1279.488620][T20771] __driver_probe_device+0x1de/0x470 [ 1279.488636][T20771] driver_probe_device+0x4c/0x1b0 [ 1279.488659][T20771] __driver_attach+0x283/0x5e0 [ 1279.488676][T20771] bus_for_each_dev+0x13e/0x1d0 [ 1279.488700][T20771] serio_handle_event+0x281/0xb30 [ 1279.488718][T20771] process_one_work+0x9ba/0x1b20 [ 1279.488740][T20771] worker_thread+0x6c8/0xf10 [ 1279.488763][T20771] kthread+0x3c5/0x780 [ 1279.488783][T20771] ret_from_fork+0x983/0xb10 [ 1279.488803][T20771] ret_from_fork_asm+0x1a/0x30 [ 1279.488829][T20771] } [ 1279.488835][T20771] ... key at: [] __key.7+0x0/0x40 [ 1279.488853][T20771] -> (kbd_event_lock){....}-{3:3} { [ 1279.488877][T20771] INITIAL USE at: [ 1279.488887][T20771] lock_acquire+0x179/0x330 [ 1279.488908][T20771] _raw_spin_lock_irqsave+0x3a/0x60 [ 1279.488929][T20771] vt_reset_unicode+0x1e/0x160 [ 1279.488953][T20771] reset_vc+0x77/0x280 [ 1279.488979][T20771] vc_init+0x9e/0x490 [ 1279.488995][T20771] con_init+0x2c2/0x700 [ 1279.489015][T20771] console_init+0x152/0x600 [ 1279.489035][T20771] start_kernel+0x298/0x4d0 [ 1279.489051][T20771] x86_64_start_reservations+0x18/0x30 [ 1279.489069][T20771] x86_64_start_kernel+0x130/0x190 [ 1279.489086][T20771] common_startup_64+0x13e/0x148 [ 1279.489107][T20771] } [ 1279.489112][T20771] ... key at: [] kbd_event_lock+0x18/0x60 [ 1279.489134][T20771] ... acquired at: [ 1279.489140][T20771] _raw_spin_lock+0x2e/0x40 [ 1279.489159][T20771] kbd_event+0x8a/0x1840 [ 1279.489179][T20771] input_handle_events_default+0x119/0x1b0 [ 1279.489205][T20771] input_pass_values+0x74e/0x880 [ 1279.489224][T20771] input_handle_event+0xf00/0x14d0 [ 1279.489243][T20771] input_inject_event+0x1e8/0x3b0 [ 1279.489261][T20771] evdev_write+0x457/0x750 [ 1279.489280][T20771] vfs_write+0x2a0/0x11d0 [ 1279.489301][T20771] ksys_write+0x1f8/0x250 [ 1279.489322][T20771] do_syscall_64+0xcd/0xf80 [ 1279.489346][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.489363][T20771] [ 1279.489367][T20771] [ 1279.489367][T20771] the dependencies between the lock to be acquired [ 1279.489373][T20771] and SOFTIRQ-irq-unsafe lock: [ 1279.489391][T20771] -> (tasklist_lock){.+.+}-{3:3} { [ 1279.489418][T20771] HARDIRQ-ON-R at: [ 1279.489430][T20771] lock_acquire+0x179/0x330 [ 1279.489453][T20771] _raw_read_lock+0x5f/0x70 [ 1279.489474][T20771] __do_wait+0x105/0x890 [ 1279.489493][T20771] do_wait+0x21d/0x570 [ 1279.489512][T20771] kernel_wait+0x9f/0x160 [ 1279.489532][T20771] call_usermodehelper_exec_work+0xf1/0x170 [ 1279.489559][T20771] process_one_work+0x9ba/0x1b20 [ 1279.489582][T20771] worker_thread+0x6c8/0xf10 [ 1279.489605][T20771] kthread+0x3c5/0x780 [ 1279.489625][T20771] ret_from_fork+0x983/0xb10 [ 1279.489650][T20771] ret_from_fork_asm+0x1a/0x30 [ 1279.489678][T20771] SOFTIRQ-ON-R at: [ 1279.489689][T20771] lock_acquire+0x179/0x330 [ 1279.489712][T20771] _raw_read_lock+0x5f/0x70 [ 1279.489733][T20771] __do_wait+0x105/0x890 [ 1279.489752][T20771] do_wait+0x21d/0x570 [ 1279.489770][T20771] kernel_wait+0x9f/0x160 [ 1279.489791][T20771] call_usermodehelper_exec_work+0xf1/0x170 [ 1279.489817][T20771] process_one_work+0x9ba/0x1b20 [ 1279.489839][T20771] worker_thread+0x6c8/0xf10 [ 1279.489862][T20771] kthread+0x3c5/0x780 [ 1279.489882][T20771] ret_from_fork+0x983/0xb10 [ 1279.489900][T20771] ret_from_fork_asm+0x1a/0x30 [ 1279.489926][T20771] INITIAL USE at: [ 1279.489936][T20771] lock_acquire+0x179/0x330 [ 1279.489956][T20771] _raw_write_lock_irq+0x36/0x50 [ 1279.489978][T20771] copy_process+0x4668/0x7430 [ 1279.489993][T20771] kernel_clone+0xfc/0x910 [ 1279.490008][T20771] user_mode_thread+0xc8/0x110 [ 1279.490024][T20771] rest_init+0x23/0x2b0 [ 1279.490040][T20771] start_kernel+0x3ef/0x4d0 [ 1279.490056][T20771] x86_64_start_reservations+0x18/0x30 [ 1279.490075][T20771] x86_64_start_kernel+0x130/0x190 [ 1279.490093][T20771] common_startup_64+0x13e/0x148 [ 1279.490115][T20771] INITIAL READ USE at: [ 1279.490126][T20771] lock_acquire+0x179/0x330 [ 1279.490146][T20771] _raw_read_lock+0x5f/0x70 [ 1279.490167][T20771] __do_wait+0x105/0x890 [ 1279.490186][T20771] do_wait+0x21d/0x570 [ 1279.490205][T20771] kernel_wait+0x9f/0x160 [ 1279.490225][T20771] call_usermodehelper_exec_work+0xf1/0x170 [ 1279.490251][T20771] process_one_work+0x9ba/0x1b20 [ 1279.490273][T20771] worker_thread+0x6c8/0xf10 [ 1279.490296][T20771] kthread+0x3c5/0x780 [ 1279.490315][T20771] ret_from_fork+0x983/0xb10 [ 1279.490334][T20771] ret_from_fork_asm+0x1a/0x30 [ 1279.490361][T20771] } [ 1279.490367][T20771] ... key at: [] tasklist_lock+0x18/0x40 [ 1279.490388][T20771] ... acquired at: [ 1279.490394][T20771] _raw_read_lock+0x5f/0x70 [ 1279.490414][T20771] send_sigio+0xb8/0x3e0 [ 1279.490432][T20771] kill_fasync+0x214/0x510 [ 1279.490450][T20771] lease_break_callback+0x23/0x30 [ 1279.490471][T20771] __break_lease+0x6cd/0x1800 [ 1279.490496][T20771] vfs_truncate+0x4ce/0x6d0 [ 1279.490518][T20771] __x64_sys_truncate+0x172/0x1e0 [ 1279.490541][T20771] do_syscall_64+0xcd/0xf80 [ 1279.490563][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.490581][T20771] [ 1279.490585][T20771] -> (&f_owner->lock){....}-{3:3} { [ 1279.490611][T20771] INITIAL USE at: [ 1279.490622][T20771] lock_acquire+0x179/0x330 [ 1279.490642][T20771] _raw_write_lock_irq+0x36/0x50 [ 1279.490670][T20771] __f_setown+0x61/0x3c0 [ 1279.490686][T20771] generic_setlease+0xed4/0x1280 [ 1279.490714][T20771] kernel_setlease+0x106/0x140 [ 1279.490741][T20771] vfs_setlease+0x1e8/0x280 [ 1279.490767][T20771] do_fcntl_add_lease+0x3c4/0x550 [ 1279.490793][T20771] fcntl_setlease+0xfc/0x180 [ 1279.490820][T20771] do_fcntl+0x153b/0x1660 [ 1279.490837][T20771] __x64_sys_fcntl+0x163/0x200 [ 1279.490854][T20771] do_syscall_64+0xcd/0xf80 [ 1279.490878][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.490896][T20771] INITIAL READ USE at: [ 1279.490906][T20771] lock_acquire+0x179/0x330 [ 1279.490927][T20771] _raw_read_lock_irq+0x67/0x80 [ 1279.490948][T20771] f_getown+0x57/0x300 [ 1279.490964][T20771] sock_ioctl+0x1f2/0x6b0 [ 1279.490989][T20771] __x64_sys_ioctl+0x18e/0x210 [ 1279.491009][T20771] do_syscall_64+0xcd/0xf80 [ 1279.491032][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.491051][T20771] } [ 1279.491056][T20771] ... key at: [] __key.1+0x0/0x40 [ 1279.491086][T20771] ... acquired at: [ 1279.491093][T20771] _raw_read_lock_irqsave+0x74/0x90 [ 1279.491114][T20771] send_sigio+0x31/0x3e0 [ 1279.491131][T20771] kill_fasync+0x214/0x510 [ 1279.491148][T20771] lease_break_callback+0x23/0x30 [ 1279.491169][T20771] __break_lease+0x6cd/0x1800 [ 1279.491193][T20771] notify_change+0xa57/0x1290 [ 1279.491214][T20771] vfs_utimes+0x407/0x820 [ 1279.491232][T20771] do_utimes+0x20d/0x2a0 [ 1279.491248][T20771] __x64_sys_utimensat+0x1c6/0x290 [ 1279.491265][T20771] do_syscall_64+0xcd/0xf80 [ 1279.491289][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.491307][T20771] [ 1279.491311][T20771] -> (&new->fa_lock){....}-{3:3} { [ 1279.491335][T20771] INITIAL USE at: [ 1279.491348][T20771] lock_acquire+0x179/0x330 [ 1279.491369][T20771] _raw_write_lock_irq+0x36/0x50 [ 1279.491391][T20771] fasync_remove_entry+0xb2/0x1e0 [ 1279.491410][T20771] fasync_helper+0xaf/0xd0 [ 1279.491428][T20771] lease_modify+0x232/0x500 [ 1279.491452][T20771] locks_remove_file+0x29e/0x5c0 [ 1279.491480][T20771] __fput+0x351/0xb70 [ 1279.491494][T20771] task_work_run+0x150/0x240 [ 1279.491516][T20771] exit_to_user_mode_loop+0xfb/0x540 [ 1279.491542][T20771] do_syscall_64+0x4ee/0xf80 [ 1279.491565][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.491582][T20771] INITIAL READ USE at: [ 1279.491593][T20771] lock_acquire+0x179/0x330 [ 1279.491614][T20771] _raw_read_lock_irqsave+0x74/0x90 [ 1279.491635][T20771] kill_fasync+0x138/0x510 [ 1279.491658][T20771] lease_break_callback+0x23/0x30 [ 1279.491681][T20771] __break_lease+0x6cd/0x1800 [ 1279.491708][T20771] notify_change+0xa57/0x1290 [ 1279.491730][T20771] vfs_utimes+0x407/0x820 [ 1279.491746][T20771] do_utimes+0x20d/0x2a0 [ 1279.491763][T20771] __x64_sys_utimensat+0x1c6/0x290 [ 1279.491782][T20771] do_syscall_64+0xcd/0xf80 [ 1279.491805][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.491823][T20771] } [ 1279.491828][T20771] ... key at: [] __key.0+0x0/0x40 [ 1279.491856][T20771] ... acquired at: [ 1279.491862][T20771] _raw_read_lock_irqsave+0x74/0x90 [ 1279.491883][T20771] kill_fasync+0x138/0x510 [ 1279.491899][T20771] tty_wakeup+0xe8/0x120 [ 1279.491914][T20771] start_tty+0x127/0x190 [ 1279.491931][T20771] tty_send_xchar+0x2a5/0x380 [ 1279.491951][T20771] n_tty_ioctl_helper+0x209/0x2b0 [ 1279.491967][T20771] n_tty_ioctl+0x7f/0x3a0 [ 1279.491989][T20771] tty_ioctl+0x700/0x1650 [ 1279.492008][T20771] __x64_sys_ioctl+0x18e/0x210 [ 1279.492027][T20771] do_syscall_64+0xcd/0xf80 [ 1279.492049][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.492066][T20771] [ 1279.492070][T20771] -> (&tty->flow.lock){....}-{3:3} { [ 1279.492095][T20771] INITIAL USE at: [ 1279.492107][T20771] lock_acquire+0x179/0x330 [ 1279.492129][T20771] _raw_spin_lock_irqsave+0x3a/0x60 [ 1279.492149][T20771] start_tty+0x21/0x190 [ 1279.492166][T20771] n_tty_set_termios+0x713/0xf60 [ 1279.492190][T20771] tty_set_termios+0x6bd/0x980 [ 1279.492216][T20771] set_termios+0x5c6/0x880 [ 1279.492242][T20771] tty_mode_ioctl+0x57e/0xd30 [ 1279.492257][T20771] n_tty_ioctl_helper+0x4b/0x2b0 [ 1279.492273][T20771] n_tty_ioctl+0x7f/0x3a0 [ 1279.492295][T20771] tty_ioctl+0x700/0x1650 [ 1279.492314][T20771] __x64_sys_ioctl+0x18e/0x210 [ 1279.492332][T20771] do_syscall_64+0xcd/0xf80 [ 1279.492355][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.492373][T20771] } [ 1279.492378][T20771] ... key at: [] __key.4+0x0/0x40 [ 1279.492407][T20771] ... acquired at: [ 1279.492413][T20771] lock_acquire+0x179/0x330 [ 1279.492432][T20771] _raw_spin_lock_irqsave+0x3a/0x60 [ 1279.492452][T20771] stop_tty+0x21/0x120 [ 1279.492467][T20771] fn_hold+0xaf/0xd0 [ 1279.492483][T20771] k_spec+0xf0/0x150 [ 1279.492500][T20771] kbd_event+0xcfe/0x1840 [ 1279.492521][T20771] input_handle_events_default+0x119/0x1b0 [ 1279.492547][T20771] input_pass_values+0x74e/0x880 [ 1279.492565][T20771] input_handle_event+0xf00/0x14d0 [ 1279.492584][T20771] input_inject_event+0x1e8/0x3b0 [ 1279.492603][T20771] evdev_write+0x457/0x750 [ 1279.492622][T20771] vfs_write+0x2a0/0x11d0 [ 1279.492643][T20771] ksys_write+0x1f8/0x250 [ 1279.492669][T20771] do_syscall_64+0xcd/0xf80 [ 1279.492692][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.492710][T20771] [ 1279.492714][T20771] [ 1279.492714][T20771] stack backtrace: [ 1279.492727][T20771] CPU: 0 UID: 0 PID: 20771 Comm: syz.4.3888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1279.492754][T20771] Tainted: [L]=SOFTLOCKUP [ 1279.492761][T20771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1279.492773][T20771] Call Trace: [ 1279.492779][T20771] [ 1279.492786][T20771] dump_stack_lvl+0x116/0x1f0 [ 1279.492811][T20771] check_irq_usage+0x8e6/0xbc0 [ 1279.492836][T20771] ? check_path.constprop.0+0x24/0x50 [ 1279.492858][T20771] ? __lock_acquire+0x167f/0x2890 [ 1279.492878][T20771] __lock_acquire+0x167f/0x2890 [ 1279.492900][T20771] ? __lock_acquire+0x436/0x2890 [ 1279.492922][T20771] lock_acquire+0x179/0x330 [ 1279.492943][T20771] ? stop_tty+0x21/0x120 [ 1279.492962][T20771] _raw_spin_lock_irqsave+0x3a/0x60 [ 1279.492983][T20771] ? stop_tty+0x21/0x120 [ 1279.492999][T20771] stop_tty+0x21/0x120 [ 1279.493016][T20771] fn_hold+0xaf/0xd0 [ 1279.493034][T20771] k_spec+0xf0/0x150 [ 1279.493052][T20771] ? __pfx_k_spec+0x10/0x10 [ 1279.493070][T20771] kbd_event+0xcfe/0x1840 [ 1279.493093][T20771] ? __pfx_kbd_event+0x10/0x10 [ 1279.493117][T20771] ? lock_acquire+0x179/0x330 [ 1279.493140][T20771] input_handle_events_default+0x119/0x1b0 [ 1279.493169][T20771] input_pass_values+0x74e/0x880 [ 1279.493191][T20771] input_handle_event+0xf00/0x14d0 [ 1279.493211][T20771] ? _copy_from_user+0x59/0xd0 [ 1279.493239][T20771] input_inject_event+0x1e8/0x3b0 [ 1279.493262][T20771] evdev_write+0x457/0x750 [ 1279.493284][T20771] ? __pfx_evdev_write+0x10/0x10 [ 1279.493306][T20771] ? bpf_lsm_file_permission+0x9/0x10 [ 1279.493324][T20771] ? security_file_permission+0x71/0x210 [ 1279.493352][T20771] ? rw_verify_area+0xcf/0x6c0 [ 1279.493372][T20771] ? __pfx_evdev_write+0x10/0x10 [ 1279.493392][T20771] vfs_write+0x2a0/0x11d0 [ 1279.493416][T20771] ? __pfx_vfs_write+0x10/0x10 [ 1279.493437][T20771] ? find_held_lock+0x2b/0x80 [ 1279.493464][T20771] ? __fget_files+0x204/0x3c0 [ 1279.493491][T20771] ? __fget_files+0x20e/0x3c0 [ 1279.493518][T20771] ksys_write+0x1f8/0x250 [ 1279.493540][T20771] ? __pfx_ksys_write+0x10/0x10 [ 1279.493566][T20771] do_syscall_64+0xcd/0xf80 [ 1279.493591][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.493610][T20771] RIP: 0033:0x7f6b3198f749 [ 1279.493624][T20771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.493643][T20771] RSP: 002b:00007f6b328f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1279.493664][T20771] RAX: ffffffffffffffda RBX: 00007f6b31be5fa0 RCX: 00007f6b3198f749 [ 1279.493677][T20771] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 1279.493689][T20771] RBP: 00007f6b31a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1279.493700][T20771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.493711][T20771] R13: 00007f6b31be6038 R14: 00007f6b31be5fa0 R15: 00007ffc8a77cf68 [ 1279.493729][T20771] [ 1284.429500][T15675] Bluetooth: hci0: command 0x0405 tx timeout