last executing test programs: 5m44.172211342s ago: executing program 4 (id=763): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) 5m39.627369774s ago: executing program 4 (id=770): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1ab7e59a4430c3218938f6e7839fd0975dce8498e341216d27b067461045", &(0x7f0000000440)="0785ec4418780e0b2dbcbf8378c4f9db13b0c6ac11d0647742b5e3e0cb61b08afa2e2122fd0d35ce806ab3b794c93092c0fff5efa37eef91734c7cf1efd07e6b57317aece06d0c0fc06fcf3a4203e69e1a56a167f913fdbaba4936492da3e8bf9f2d73a3a19ab1b6cb353db59a20db6082a1abb444f981f67a8be8364027fec737f5823d368a152fa4b50e2745f7979d476d66484e5798b4b5e83a5b7d994b19374171563110d980cea6c9617e37b33c3fec5014a1975b88535884a3334b313d752e6b4a60de9122747ee1030cd8b2e845902c47d25c745e74c46d251617dc87ef63685b1d0bc31f2176ab2c32a1eb8ff003788e3e36e8", 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 5m39.114009797s ago: executing program 4 (id=775): r0 = userfaultfd(0x801) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c0568020000000000010902240001000040030904000a0203000600092100000801220700090581030000060903f18a64fea1991530eae2ece026d88693d336ff1bf9e41de3f886f264d5d3f2a827b179ae3bcf8bce"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0022070000000bf3ed537446c85a7331cf7664ca9f2db80af3680d82033a2966e624121b93679aa4bf9f2571e319d357fd2e9020839d66896dc823c84a861b46e40a5d8336f53f1b6c0000a4b47c936475a27c36e760960edc6b2e921e5b732f388c9c2ffdd87942e6475e61eb997ef73568fb23d42142dafb7981b4c7b88b460f4a"], 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r2, 0x0, 0x0, 0x4040, 0x0) sendto$inet6(r5, 0x0, 0xffffffffffffffcf, 0x44000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)}], 0x1}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2010}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_clone(0x40240400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m30.108037716s ago: executing program 4 (id=800): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="02010018080000000000000000000000030005000000000002000000000000000000000000000000030006000020000002"], 0x40}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 5m29.52762867s ago: executing program 4 (id=802): iopl(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffb) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'macsec0\x00', @link_local}) fchdir(r4) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='proc\x00', 0xa00810, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000002280)='oom_score\x00') 5m27.021023235s ago: executing program 4 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01180200030100004c0012800b00010067656e65766500003c0002801400070000000000000000000000ffffac1414bb050008000700000014000700fc01000000000000000000000000000008000100030000000a000100e2"], 0x78}, 0x1, 0x0, 0x0, 0x410c0}, 0x4044884) 5m11.71895769s ago: executing program 32 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01180200030100004c0012800b00010067656e65766500003c0002801400070000000000000000000000ffffac1414bb050008000700000014000700fc01000000000000000000000000000008000100030000000a000100e2"], 0x78}, 0x1, 0x0, 0x0, 0x410c0}, 0x4044884) 14.332403041s ago: executing program 2 (id=1837): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r1, 0x0, 0x20, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40011) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0xc010) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) fcntl$setlease(r0, 0x400, 0x1) 13.690005847s ago: executing program 2 (id=1840): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b717d0"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f"], 0x40}}, 0x0) 9.198099799s ago: executing program 3 (id=1848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x4c, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{0x3b, 0x0, 0xd00}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x173) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001080)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000440)="d31dc2ffb65ff525493e79140765a77dd6620da9220602258d3022dac19810df91782b8a412f88284f7d574a2f85ce5b606e5b7beda43d7b5333cfcde16f39f7205e17589bc49fbebc302eaec7b2", 0x4e}, {&(0x7f0000000540)="8e969410d6fcb88840cd6005c51542c2c38cb12aa2857c269bb091e02ea9b0eba503217f41a5f450a00d60b44b1a7118378d1854bab637c5df659ce7cdf1b53e0be4918f609feda77fdf94", 0x4b}, {&(0x7f00000005c0)="ba7fbd236e6de55e6abf80f001c985b791aab148a241e43973df82d263fd168b8f10f5591b0b06de008e26cda80c20ae5a592849b87aee751f5a92b1275395eaf6149734bad89c4639e7ab7b77f82fe84cafe14aeeefaf35050af95942f135aa567cd0e7dfdd99720cbf5f79fb6c27c8db9cd2ab9e150cd4e67a59550c90dd7432001398f1cb3fd2855f97905bd1e78732668200fa6ccc4450eafc47bb12bea77e68b32aa89f606eb7c0bf36d9", 0xad}, {&(0x7f0000000680)="1cc9c32fbfdc3457f24fc60275c11870644eccd78b53ee67a0a1320b7a7c8638318b0b4a0104765490350dfe9fb5429e141b78a25e8efff3bd6227e3cdeca271dadf8fb49b173922f0", 0x49}, {&(0x7f0000000700)="49b5f6641b4fd119126b5457440985c3e782c120f44eb14366e9db2edf50c6250c2d667b7bb1ea0e083d7ca8588ac5441b362a379d2fda743b030489afea5c445bc67176f06148b7efd29706b44db6073c75cdf128921d739b0bb4e1d9f6992aa4e76ff938cc46d4b962d3cb2551e145aeee170aca93e469b7f7ca7b04abea0048e2e6cd19c3f342e4e07d223da45fb344732c80170e17ebb7296b537424e8569490698faa49f8cfd15e4d2bfed912a661bbc224e2636bf9ba63679e9232ef99ea56913e1d398cc2e51ed259a130c8da09db689546c65c75fa915513f4d1c40ccc138c66c9a9b6958b318d", 0xeb}, {&(0x7f0000000800)="8c572d25839dfe8276f48f03cb7b", 0xe}, {&(0x7f0000000840)="f5c43c259a9239f7e8505fb6f8de208c72b3fb28ecb0aae5652ae9670cdf85d6e6c9ac9804e3b8da636d086e57557a0157", 0x31}, {&(0x7f0000000880)="166621b50c8d49e271f8f89826f966509b4fd4bcf2c8f6ba3b4f8f50f92c28b726b5fb46da46507184ad342c4a231c228870e5b68be181691fa059e69af32a9f01a3ea15e9159d9c47aaa7234542c57aa71ac0ed0075bed6cb092a78930d68904026410dabbdd3569c7cd0568606d95d2394ae43d2c4536fa53b1f9f5f4fc379b53f8b93e7bf80935336f8335497976619a0b34b4ad754d6745ef1abeb06121f6ddbf0e52ad7f2f3b9d3fa85d56ae7509b96595f4d413964db738b611fdeb49abfcc4ca9b1025875dd899f55486aeccc0205b2ac1e94", 0xd6}], 0x8, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x2c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2, r5]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r7, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r5]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x20000000}}], 0x1, 0x48014) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 8.436955278s ago: executing program 2 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) timerfd_create(0x0, 0x80000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8.075252933s ago: executing program 3 (id=1853): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = getpgrp(0x0) prlimit64(r1, 0xf, &(0x7f0000000100)={0x3, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = creat(&(0x7f0000000080)='./cgroup\x00', 0x78) recvmsg$unix(r2, &(0x7f00000009c0)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000440)=""/121, 0x79}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000007c0)=""/123, 0x7b}, {&(0x7f00000008c0)=""/38, 0x26}], 0x8, &(0x7f0000000980)}, 0x40000000) (async) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x1, r3, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x200}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@private0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) (async) ptrace$setsig(0x4203, 0x0, 0x8e4, &(0x7f0000000340)={0x3e, 0x7f, 0x7}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={&(0x7f0000000a00)="7157671c9e40b5ba41151d408d19719ef9a92640fb0eddc4f27930d68fef1a2f7b36dd5794fd372a724e869366853b82b6d152c9c942abe7862ec2edd49b77c628021be3209a328b770fc36d756d8386b02ed7067f40ef9122c518cdf5f4cf6f4e79e1ebe9d86b85aeb0bb8d8a41f888d34a6eeb26a8e5595cd99736c3154074fba0925b348b3d8b781ce3e09a9060f1fb04986a234ff5b97705c219482b7bb647d78cd716f04a030276ad9b4181a739db180588e6fe07eff11f5a36cc6dba4db9d32d27d5617bdea38a670df0e5", &(0x7f0000000b00)=""/173, &(0x7f0000000bc0)="c60e98c10777448b78acac1dd9b55c093468736de746a53af86ddf140557895d3fafa32cf8721d196823b65dd74ad3dbcb87435ce0580eea4d61fcb98e376a076ae8cb95f4abd3072c7bac7ccb923de67661fb5a8df0f8152c13e9fd3685ef3069afad9d16a75f38b25569654a4739d2c1eaaec555b6a648ed621959a699905a31260ca3abe274c085e6c960b5ee29dab8420d9df2623d1db0a65d911599ac6565f91c2207bb18786f7523f920eba100bd1e549721cdefcb0bce8adec7ee99dc6aa644b483712977dfaa0fa735d3", &(0x7f0000000cc0)="31443781234778bb305283cf8767e3f8269626f72e5c4b4f68941bc1bd1e680c7e0e26ada4630790a78c6bb5bc275b4d4ea21bb690f7e56087c58e89405fe2e2c4023e8916352d6dc30b78dafb30c6d9151b4db5e19e9e09b90c698eadf77316f150c6843ae206c9cf1f78a58ececf5bf2e6c635183312dadeb23737e128ec90368ccdb2680be66dd00f52fe4563ac4e35d7dbb482db8875aceb943b823d6a4ab2d53353e1ce4905d0f55b6a35bfecad476f6063348eeb", 0x8001, r2, 0x4}, 0x38) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'gretap0\x00', {0x2}}) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='iso9660\x00', 0x21c000, 0x0) 6.961680704s ago: executing program 2 (id=1856): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e000"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) mount(&(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000100)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x9, 0x418003) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000480)={0x3, [0x9, 0xd, 0x8], [{0x3, 0x81, 0x0, 0x1}, {0x32ed, 0x2, 0x1, 0x1, 0x1}, {0xb6, 0x8000, 0x1, 0x1}, {0xb, 0x7, 0x1}, {0x2, 0x7fff, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x1, 0x1}, {0xe, 0x8, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xd6, 0x400, 0x1, 0x1}, {0x6, 0xb, 0x0, 0x0, 0x1}, {0x4, 0xb, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x0, 0x1}], 0x7fffffff}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000180)={0x1}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000140)='J', 0x20000, 0x4800, 0x0, 0xf00) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) 5.911358552s ago: executing program 0 (id=1859): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r1, 0x44, "67cf5d7ea34ad83fc4fb54d82127f8cb14bb4682a1568ebcd90ea39f4744f4b5832e2decfd8dc6e16f99019bb97c6d869eea52148703c5b62040fbb2b4585af87fda358d"}, &(0x7f0000000100)=0x4c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi5\x00', 0x63c02, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = dup2(r2, r0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in=@dev}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x22) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, 0x402a032, r2, 0x1c896000) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000300)=0x6c13, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x2, 0x0, 0x4, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)="37cc7cae4627c355f7b998b6b7470f80c52556da44256a3b775971502ceacd575bbd625356750959b50c75df7d8ab0b39d8e83b5813f8b97571aea3e2c7ab81aca14835e1ec27cbe2591c67107cd82e941a14af4100f1c1b7a24beda0643f28b0158e17e2274e6a89534cfc8a5", 0x6d}, {&(0x7f0000000440)="a398088e0c9c96612d7145cef1de6fbc8e4a50b13b39ce81f871f6eb879e6dcba195e8abfc6a1622131551bcbd6646dffdbbf90c73052b643fe079cd457b17ef6e2fd41944", 0x45}], 0x2, &(0x7f0000000500)=[{0x90, 0x195, 0x0, "86ec0bea180dd446d768f77d0e38f9a0c8d2305a93db190465ed61e877967b1c7c7d3964778e20e166bd85a77671ddea29a27d73c30e4ee43878957aa5e12ec186c282f213ff4f9cb6802f055d38fdfc3cc504f35242d7d1ec4baa115b0d09a85754f6451076db5a3abf7af5082894d5e5a93377c410db66c40e5f9adecf"}, {0x20, 0x117, 0x0, "62c01cfefd07cc2db7b2b61d"}, {0x20, 0x108, 0x0, "ab5349c618f31379dff1bfb5764f979e"}, {0x108, 0x101, 0x6, "273953930c31adf909ce093d5e9096fd66a9258c70acac43c1001359d7ecdbc5793b3de45f37ece95ac8a4f895ae934a5b4cc5585074850815f916040ef32f1d6b5fca71f65547536d7e7b6b37cba8201d6c74c9632d49385f061f26025737f35523c9960f69c5cd376f2394fec2ace4c9d4526f97da126b02e2e46f3bc02d2541d53bf71e9168f204e473ad0f6cb14ee06a1c4ac26c82aff08c91427de1d621d92712291ca714e725240cc2738689486eb484e1357dfaaf933c288086c9f9c5872fa7f704573af2eb890fc3225e711436425f68a6785e8fb3cbdad61a4b93b161597ab5b4b54edcae7cd70cf7f9c88672f067d8a2"}, {0xd8, 0x10b, 0xd795, "ec2e14298cc4d4cd5872da9c278c7f543dd239ab6514d4e28c9c7c5312bc8b3bebfd777a2f2c02a15e4de8fbf7e0f360fbbf667adf745c218676b72279f2f1809520f633214db8921f931a90c57e98d00f40e734b60ffcc9cc1c730576a216de6ab4eacbb603009b08d2ffc24d1669391a53ccd00bad352a1ca171c8d74809b4cc3cdd56295a7112b9887f4ac564c9d05af23a6f49288085fac7903f692c60c037f65eeb099bfc77a94f5228ae89d0a421611548ddba557f9f9e8c8bef35cf9cfc77"}, {0xc0, 0x117, 0x1, "5f820cd61e69e241649568fcd2d17042aa8dccbc0449d439e45236bdedd56ae74a32915fd7eeb2b28aa1b2702a4fcfcbb4d11d01c3e6aba252cda1eb94f122c529a8c56aca15c3e90f35f74b91694e406135ec19320d6b7f3f736e40e7f88a89b5d3d98938f3caa531e2e3205701691f750647452d0b6bbac4a58d4f35ff56a9e22f69401733fc076a5f2276eb7c2e10b7ffd12cdd41ede13d841839275cb3706b1fc7a24e16612d8db717"}, {0xc8, 0x10e, 0xc0c, "2ad4512dc0cb34bc24230e610540c1e56b23717520acb89db5242f3bc7b03a8dddc7a3ecbcc66fb15cd6a12923643f964a0fbb237a0187457dd15367b48b27e37f4cddea7d624a7154c4883f34d78a1d9c5a113bdb603ccbec35be04f5afd1d5454908160c3e82be2314a9167f70cc842a71e3783bcfac8cc07144ba7b7e029ad7afae74e3b0d917396856fe3740e15b358ff522715eeae74c594fbc6f214fb6d59844ba6ef0da6377a39454bfab6bfb320a4e445b33"}], 0x438}, 0x20040091) syncfs(r5) close(r4) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000980)=0x0) syz_open_procfs(r6, &(0x7f00000009c0)='net/anycast6\x00') syz_open_dev$sg(&(0x7f0000000a00), 0x8000, 0x230001) write$P9_RSTAT(r4, &(0x7f0000000a40)={0x52, 0x7d, 0x1, {0x0, 0x4b, 0xfe3, 0x1, {0x4, 0x1, 0x7}, 0x40000000, 0x10001, 0x9, 0xfffffffffffffffe, 0x1, '!', 0x7, '\'[\x84{:!\'', 0x3, '-\xc6{', 0xd, '/dev/comedi5\x00'}}, 0x52) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000ac0)) r7 = syz_open_dev$hiddev(&(0x7f0000000b00), 0x5, 0x2000) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000b40)="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") r8 = socket(0x23, 0x80000, 0xbd8b) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000c40)) r9 = syz_open_procfs(r6, &(0x7f0000000c80)='stat\x00') sendmsg$SOCK_DESTROY(r9, &(0x7f0000001e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000d00)={0x1118, 0x15, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa2ad136cf06c2a0, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "82e810bf6f2c2dc80140ff0bcb1a0e5d3f615c1efbefc16dcbc53a1626cf6dc5e73408ce1c6ed18466268de82bd1fe78e96dbc8632dd5ce95c7d82ce2e60ceb4cab2d1964d06284b79a749e42e47ff41a28c19620cfdb986aeb36f5a64e96d417a0a1f2abd8e798cc8b4fa15ae1b9e6d7cad225bd67311bbbb9533a14d78978c0675420ff1909f3fdd5324305b37d6b34c4c7604faa32ca39cda7f9bed052bc34b57b47d841f650267a06f14ad854155553d11246ecc58313fd2fc89db6e79"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "aabea9900221676d5e19537b6a61dfa6ab448d71d0e04d5fec6b22884c417802183c5adf272f0b0ba0a59c82406f35289a190ad7e244"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1118}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040084) pwritev(r4, &(0x7f0000003100)=[{&(0x7f0000001ec0)="2545d47f0e62ae083f05c3bcaf952e83237fbf1c4b9e716086f5917e0ae8bdc43238a3756bfb15ff79bd3a9a0eceb3d1ed0cc439dd9450c4df8f9c18c22e891ae092dc0c9a1c498dc77da6bf5962df41b7ea8d2eeb2e7edfc052b9f56087c91726fb544159323808a693a13f2e1120ca287fce4092a821b8cb3e70b757c68cc289ad464692eef7afed1f43e0edeb1f00f4f48043f87a831a3967f87fb74c6ae8", 0xa0}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="20b5bd4605bb242ad3c2bf4b82bcd7ad31ebeb73d49d87de44f28c24919314def6ae1c063313cfba154b5194f17a2187da7e26e62ca4c29dab95d9de84f2e9794abd68e6f531673fde5f0ac1e561f7a1cf657b0bcbab891df07a4e959375d85ef6496f27211d42a0062d3194dad037d3d24b3ca7", 0x74}, {&(0x7f0000003000)="db532dd06307ea910980f6ba5aab9deb2da712575355f48ced8946cfc87600ab73002e8da3a8ecc5dccbac48bec1729342fd899e6cd15de7fb3f90cd97a8c224e4daa7e5", 0x44}, {&(0x7f0000003080)}, {&(0x7f00000030c0)}], 0x6, 0xff, 0x9) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000032c0)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003280)={&(0x7f00000031c0)={0xa0, 0x1405, 0x1, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) socket$inet_mptcp(0x2, 0x1, 0x106) 5.727071432s ago: executing program 2 (id=1860): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\n\x00\x00\x00\a\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) 5.615819778s ago: executing program 0 (id=1861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001b000)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES64=r0], 0x50) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x8000, 0x0) (async) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x8000, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x5, 0x1, 0x9, 0x43, 0x51, 0x89, 0x809, 0xf27, 0x6, 0x8008, 0x8, 0x5, 0x4, 0x8, 0x10000, 0xfffffff4]}) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0xced) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) (async) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r6, 0x40086602, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) (async) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, 0x0, 0x20000811) sendmsg(r7, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) (async) sendmsg(r7, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.897557985s ago: executing program 1 (id=1862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f"], 0x40}}, 0x0) 4.395976174s ago: executing program 2 (id=1863): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b717d0"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f"], 0x40}}, 0x0) 4.387993972s ago: executing program 1 (id=1864): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1ab7e59a4430c3218938f6e7839fd0975dce8498e341216d27b067461045", &(0x7f0000000440), 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 4.348369296s ago: executing program 3 (id=1865): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e000"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x9, 0x418003) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000480)={0x3, [0x9, 0xd, 0x8], [{0x3, 0x81, 0x0, 0x1}, {0x32ed, 0x2, 0x1, 0x1, 0x1}, {0xb6, 0x8000, 0x1, 0x1}, {0xb, 0x7, 0x1}, {0x2, 0x7fff, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x1, 0x1}, {0xe, 0x8, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xd6, 0x400, 0x1, 0x1}, {0x6, 0xb, 0x0, 0x0, 0x1}, {0x4, 0xb, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x0, 0x1}], 0x7fffffff}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000180)={0x1}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000140)='J', 0x20000, 0x4800, 0x0, 0xf00) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) 4.344552833s ago: executing program 5 (id=1866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000853c00004100000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.25183321s ago: executing program 0 (id=1867): sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x8000000010, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) r5 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4}) r6 = eventfd2(0x6, 0x80800) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000100)={&(0x7f0000000a00)={{@local, 0x1000}, {@host, 0xa000}, 0x400, "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"}, 0x418}) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000340)=r6, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) 4.007903866s ago: executing program 5 (id=1868): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, 0x0, 0x0) 3.995577558s ago: executing program 1 (id=1869): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0), &(0x7f0000000440)="0785ec4418780e0b2dbcbf8378c4f9db13b0c6ac11d0647742b5e3e0cb61b08afa2e2122fd0d35ce806ab3b794c93092c0fff5efa37eef91734c7cf1efd07e6b57317aece06d0c0fc06fcf3a4203e69e1a56a167f913fdbaba4936492da3e8bf9f2d73a3a19ab1b6cb353db59a20db6082a1abb444f981f67a8be8364027fec737f5823d368a152fa4b50e2745f7979d476d66484e5798b4b5e83a5b7d994b19374171563110d980cea6c9617e37b33c3fec5014a1975b88535884a3334b313d752e6b4a60de9122747ee1030cd8b2e845902c47d25c745e74c46d251617dc87ef63685b1d0bc31f2176ab2c32a1eb8ff003788e3e36e8", 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r7}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 3.330062541s ago: executing program 0 (id=1870): socket$nl_sock_diag(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x7, 0xd}, {0xc, 0xf}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@deltclass={0x40, 0x29, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0x10}, {0x6, 0xc}, {0xffff, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x8, 0xd8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f00000006c0)="2c69e35d998a203fff2cc66ce267c2b71293d209261b34180cd9362468d553017ed1a7982fd6bace8e05d4a9da732765d0f8da3163092cfc4e7682e49a6d229af5925572e11c7a0f2476a915a0ae24a99dca7d2bed9945c51692ba10296873ee83a0316f6d1b4f3fd4a1a71e57d7fb97e7ae41aff828bc1ca6556b7c631b6333e239f0626f1462c13c229681e8da89de45439a9aaab3c987196962b59d1f50cdae26d4f78272a8629f4ae33dc8b55a4b2e0dcd9910bd2a3fd399d428d35157570329346ee1bd151f0d957ccad842a7c70192", 0xd2}, {&(0x7f00000007c0)}], 0x4}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000f7dfdf2515efffff1f00018008000100", @ANYRES32=r2, @ANYBLOB="14000200766c616e3000000000000000000000003c00018008000100", @ANYRES32=r2, @ANYBLOB="140002007767320000000000000000000000000014000200776c616e31000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="0c0001800800030001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', r2, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket(0x1d, 0x2, 0x6) bind$inet(r5, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="2400700000be604087e32b8aca00c280080009000000000000000000", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000240), 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.277571244s ago: executing program 5 (id=1871): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) times(&(0x7f0000000280)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x5, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x85, 0x3, 0x0, 0xb9e4, 0x0, 0x100000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x4000000000000, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0x0, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xf32, 0x9, 0x2001, 0x0, 0x0, 0x0, 0xa562, 0x0, 0x80000005, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]}) unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 2.072747777s ago: executing program 3 (id=1872): mount(&(0x7f0000000000)=@sr0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1000048, 0x0) waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x75}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x10cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7, 0xee}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.813232641s ago: executing program 1 (id=1873): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000070000000600"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) 1.626221781s ago: executing program 5 (id=1874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f"], 0x40}}, 0x0) 1.454580697s ago: executing program 1 (id=1875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x4c, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{0x3b, 0x0, 0x3f00}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x173) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001080)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000440)="d31dc2ffb65ff525493e79140765a77dd6620da9220602258d3022dac19810df91782b8a412f88284f7d574a2f85ce5b606e5b7beda43d7b5333cfcde16f39f7205e17589bc49fbebc302eaec7b2", 0x4e}, {&(0x7f0000000540)="8e969410d6fcb88840cd6005c51542c2c38cb12aa2857c269bb091e02ea9b0eba503217f41a5f450a00d60b44b1a7118378d1854bab637c5df659ce7cdf1b53e0be4918f609feda77fdf94", 0x4b}, {&(0x7f00000005c0)="ba7fbd236e6de55e6abf80f001c985b791aab148a241e43973df82d263fd168b8f10f5591b0b06de008e26cda80c20ae5a592849b87aee751f5a92b1275395eaf6149734bad89c4639e7ab7b77f82fe84cafe14aeeefaf35050af95942f135aa567cd0e7dfdd99720cbf5f79fb6c27c8db9cd2ab9e150cd4e67a59550c90dd7432001398f1cb3fd2855f97905bd1e78732668200fa6ccc4450eafc47bb12bea77e68b32aa89f606eb7c0bf36d9", 0xad}, {&(0x7f0000000680)="1cc9c32fbfdc3457f24fc60275c11870644eccd78b53ee67a0a1320b7a7c8638318b0b4a0104765490350dfe9fb5429e141b78a25e8efff3bd6227e3cdeca271dadf8fb49b173922f0", 0x49}, {&(0x7f0000000700)="49b5f6641b4fd119126b5457440985c3e782c120f44eb14366e9db2edf50c6250c2d667b7bb1ea0e083d7ca8588ac5441b362a379d2fda743b030489afea5c445bc67176f06148b7efd29706b44db6073c75cdf128921d739b0bb4e1d9f6992aa4e76ff938cc46d4b962d3cb2551e145aeee170aca93e469b7f7ca7b04abea0048e2e6cd19c3f342e4e07d223da45fb344732c80170e17ebb7296b537424e8569490698faa49f8cfd15e4d2bfed912a661bbc224e2636bf9ba63679e9232ef99ea56913e1d398cc2e51ed259a130c8da09db689546c65c75fa915513f4d1c40ccc138c66c9a9b6958b318d", 0xeb}, {&(0x7f0000000800)="8c572d25839dfe8276f48f03cb7b", 0xe}, {&(0x7f0000000840)="f5c43c259a9239f7e8505fb6f8de208c72b3fb28ecb0aae5652ae9670cdf85d6e6c9ac9804e3b8da636d086e57557a0157", 0x31}, {&(0x7f0000000880)="166621b50c8d49e271f8f89826f966509b4fd4bcf2c8f6ba3b4f8f50f92c28b726b5fb46da46507184ad342c4a231c228870e5b68be181691fa059e69af32a9f01a3ea15e9159d9c47aaa7234542c57aa71ac0ed0075bed6cb092a78930d68904026410dabbdd3569c7cd0568606d95d2394ae43d2c4536fa53b1f9f5f4fc379b53f8b93e7bf80935336f8335497976619a0b34b4ad754d6745ef1abeb06121f6ddbf0e52ad7f2f3b9d3fa85d56ae7509b96595f4d413964db738b611fdeb49abfcc4ca9b1025875dd899f55486aeccc0205b2ac1e94", 0xd6}], 0x8, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x2c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2, r5]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r7, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r5]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x20000000}}], 0x1, 0x48014) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.347484552s ago: executing program 5 (id=1876): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xffc0, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 455.732425ms ago: executing program 1 (id=1877): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000380), 0x800) set_mempolicy(0x1, 0x0, 0x2) set_mempolicy(0x4000, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100", @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000000000000000000000be388d9702e2254c0cb332684b27cfc56b9faabe1b3645d7e6f1d7b224f2e9fd708b93241324a7f8511488fa06fc709eedea3dd6eea932796505fa6262c9604ebc932fbda8ad7ecc5f057680624a069abf04d0b1e5982fa23ec3cc25e2fcb481e6ddaeb41d3e72d5a9897f49d55e5e3e0149b159cfb4571e80454ec18e5273337437c005fefb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="0000000000000000b7"], 0x0}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x20022a, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000380)=""/196) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r6, 0x0, 0x0, 0x10000000005971}]) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 455.267388ms ago: executing program 0 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000853f00004100000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 423.912163ms ago: executing program 3 (id=1879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1ab7e59a4430c3218938f6e7839fd0975dce8498e341216d27b067461045", &(0x7f0000000440), 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 400.844444ms ago: executing program 5 (id=1880): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002880)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a80)={{r5, 0xffffffffffffffff}, &(0x7f0000002a00), &(0x7f0000002a40)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2500f900000000000000000000000000000000007e"], 0x34}}, 0x20008000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000001}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000140)={0xc, r8}) ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000010000000500000098be111420000400", @ANYRES32, @ANYBLOB="2e3c0000000000000000000000000000000000001bc4166fda3e30bf4685b3ab036c04faf7903d890499fa3f53dab3feae323f8e896cb8bfe7adbd42e866e851326128344ab647f93ee943e0bfc0d67379d42d806f82bda2214b371b67025d5258f4e2", @ANYRES32=r4, @ANYRES8=r5, @ANYBLOB="0200000004000000000000000f00"/28], 0x50) pipe2$watch_queue(&(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000000000000169, &(0x7f00000003c0)=ANY=[@ANYBLOB="ebd0", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000300186700000d0000000000000010000000186600000e00002ee977b3d199551a825404119499", @ANYRES32=r9, @ANYRES16], &(0x7f0000002bc0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x8, '\x00', r4, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) recvfrom$packet(r3, &(0x7f00000028c0)=""/224, 0xe0, 0x12040, &(0x7f00000029c0)={0x11, 0x7, r11, 0x1, 0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x110e22fff2) 3.362319ms ago: executing program 0 (id=1881): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 0s ago: executing program 3 (id=1882): mount(&(0x7f0000000000)=@sr0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1000048, 0x0) waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x75}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x10cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7, 0xee}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .348140][T11575] ceph: No mds server is up or the cluster is laggy [ 475.931784][ T24] libceph: connect (1)[c::]:6789 error -101 [ 475.975877][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 476.118622][ T5932] usb 6-1: USB disconnect, device number 12 [ 476.270712][ T24] libceph: connect (1)[c::]:6789 error -101 [ 476.293714][T11591] ceph: No mds server is up or the cluster is laggy [ 476.374680][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 476.565657][T11616] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 477.633248][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 477.633263][ T30] audit: type=1400 audit(1766516033.019:1208): avc: denied { listen } for pid=11627 comm="syz.3.1370" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.765042][T11631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11631 comm=syz.3.1370 [ 477.821731][ T24] libceph: connect (1)[c::]:6789 error -101 [ 477.828949][T11631] sctp: [Deprecated]: syz.3.1370 (pid 11631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.828949][T11631] Use struct sctp_sack_info instead [ 477.847210][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 478.023416][T11633] ceph: No mds server is up or the cluster is laggy [ 478.125987][ T24] libceph: connect (1)[c::]:6789 error -101 [ 478.153514][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 478.370200][ T30] audit: type=1400 audit(1766516033.739:1209): avc: denied { setopt } for pid=11642 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 478.442341][ T5866] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 478.537632][ T30] audit: type=1400 audit(1766516033.919:1210): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 478.717349][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 478.836999][ T5866] usb 4-1: config 3 has an invalid interface number: 224 but max is 2 [ 478.902256][ T5866] usb 4-1: config 3 has an invalid interface number: 180 but max is 2 [ 478.926615][ T5866] usb 4-1: config 3 has an invalid interface number: 180 but max is 2 [ 478.951454][ T5866] usb 4-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 478.970423][ T5866] usb 4-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 478.991396][ T5866] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 3 [ 479.001705][ T5866] usb 4-1: config 3 has no interface number 0 [ 479.011609][ T5866] usb 4-1: config 3 has no interface number 1 [ 479.022252][ T5866] usb 4-1: config 3 interface 224 altsetting 64 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 479.058602][ T5866] usb 4-1: config 3 interface 180 altsetting 4 has an endpoint descriptor with address 0x26, changing to 0x6 [ 479.089926][ T5866] usb 4-1: config 3 interface 180 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 479.090031][T11663] No source specified [ 479.108504][ T5866] usb 4-1: config 3 interface 180 altsetting 4 bulk endpoint 0xC has invalid maxpacket 1024 [ 479.115158][ T30] audit: type=1400 audit(1766516034.499:1211): avc: denied { read } for pid=11660 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 479.120199][ T5866] usb 4-1: config 3 interface 180 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 479.240705][ T5866] usb 4-1: config 3 interface 180 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 479.283120][ T5866] usb 4-1: config 3 interface 180 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 479.284326][ T30] audit: type=1400 audit(1766516034.669:1212): avc: denied { getopt } for pid=11667 comm="syz.0.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 479.365063][ T5866] usb 4-1: config 3 interface 180 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 479.394214][ T5866] usb 4-1: config 3 interface 180 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 479.406419][ T5866] usb 4-1: config 3 interface 180 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 479.417547][ T5866] usb 4-1: config 3 interface 180 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 479.449244][ T5866] usb 4-1: config 3 interface 180 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 479.734019][ T5866] usb 4-1: config 3 interface 224 has no altsetting 0 [ 479.984753][ T5866] usb 4-1: config 3 interface 180 has no altsetting 0 [ 480.016745][ T5866] usb 4-1: config 3 interface 180 has no altsetting 1 [ 480.034223][ T5866] usb 4-1: New USB device found, idVendor=5050, idProduct=0103, bcdDevice=95.06 [ 480.050645][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.068977][ T5866] usb 4-1: Product: 饼å«ï­ëŠŸèŠ”é„žéŸ¹ì‚¿ç¯…ï­¯ï«•ç¥…â³£ë£‘ç€¤á·’å˜¹ [ 480.089063][ T5866] usb 4-1: Manufacturer: 긇璥呫⠠嶃鞼ᱨ覚᜕昔滣ᨀ홵æ…҃蕶沠ᒎ糡î½îªŒæ„†ä­¾â´¤ä©ºí…ˆá±¦×¶å“…ʡ壂䑌┆襭ሴ顷쭻ឰⶦ [ 480.115569][ T5866] usb 4-1: SerialNumber: syz [ 480.141030][T11687] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 480.150841][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1383'. [ 480.161768][T11687] veth0_vlan: entered allmulticast mode [ 480.168486][T11687] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 480.361695][ T5866] hub 4-1:3.224: Invalid hub with more than one config or interface [ 480.372117][ T30] audit: type=1400 audit(1766516035.749:1213): avc: denied { kexec_image_load } for pid=11696 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 480.374953][ T5866] hub 4-1:3.224: probe with driver hub failed with error -22 [ 480.426287][ T5866] ftdi_sio 4-1:3.224: FTDI USB Serial Device converter detected [ 480.445562][ T5866] ftdi_sio ttyUSB0: unknown device type: 0x9506 [ 480.548678][ T5866] hub 4-1:3.180: Invalid hub with more than one config or interface [ 480.556863][ T5866] hub 4-1:3.180: probe with driver hub failed with error -22 [ 480.566026][ T5866] ftdi_sio 4-1:3.180: FTDI USB Serial Device converter detected [ 480.575252][ T5866] ftdi_sio ttyUSB1: unknown device type: 0x9506 [ 480.649934][T11706] overlay: ./file0 is not a directory [ 480.724850][T11707] fuse: Bad value for 'rootmode' [ 481.030455][ T5893] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 481.040153][ T5866] usb 4-1: USB disconnect, device number 52 [ 481.059049][ T5866] ftdi_sio 4-1:3.224: device disconnected [ 481.071430][ T5866] ftdi_sio 4-1:3.180: device disconnected [ 481.182326][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 481.189120][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.200320][ T5893] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 481.210399][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.220887][ T5893] usb 6-1: config 0 descriptor?? [ 481.345827][ T5983] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 481.368640][ T30] audit: type=1400 audit(1766516036.749:1214): avc: denied { mount } for pid=11711 comm="syz.2.1391" name="/" dev="ramfs" ino=34394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 481.572257][ T5983] usb 2-1: Using ep0 maxpacket: 8 [ 481.579247][ T5983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 481.588371][ T5983] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 481.597232][ T5983] usb 2-1: can't read configurations, error -71 [ 482.101459][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 483.777299][ T5893] usbhid 6-1:0.0: can't add hid device: -71 [ 483.804820][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 483.815371][ T30] audit: type=1400 audit(1766516039.199:1215): avc: denied { set_context_mgr } for pid=11740 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 483.850242][ T5893] usb 6-1: USB disconnect, device number 13 [ 485.147711][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 485.661230][ T30] audit: type=1400 audit(1766516041.039:1216): avc: denied { read } for pid=11761 comm="syz.2.1403" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 485.691807][ T30] audit: type=1400 audit(1766516041.039:1217): avc: denied { open } for pid=11761 comm="syz.2.1403" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 485.817326][ T30] audit: type=1400 audit(1766516041.199:1218): avc: denied { call } for pid=11740 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 485.840382][T11774] binder_alloc: 11740: binder_alloc_buf, no vma [ 485.855750][ T5893] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 485.870462][ T30] audit: type=1400 audit(1766516041.249:1219): avc: denied { getopt } for pid=11773 comm="syz.0.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.902865][ T5983] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 486.022500][ T5893] usb 4-1: device descriptor read/64, error -71 [ 486.082456][ T5983] usb 3-1: device descriptor read/64, error -71 [ 486.180925][T11779] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 486.345067][T11785] futex_wake_op: syz.1.1409 tries to shift op by -1; fix this program [ 486.405816][ T5893] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 486.422579][ T5983] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 486.551632][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 486.628737][ T5893] usb 4-1: device descriptor read/64, error -71 [ 486.693042][T11787] team16: entered promiscuous mode [ 486.698204][T11787] team16: entered allmulticast mode [ 486.752716][ T5893] usb usb4-port1: attempt power cycle [ 486.800840][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.811702][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.819672][ T5983] usb 3-1: device descriptor read/64, error -71 [ 486.831927][ T30] audit: type=1400 audit(2000000000.920:1220): avc: denied { setopt } for pid=11795 comm="syz.5.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 486.851979][ T58] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 486.932513][ T5983] usb usb3-port1: attempt power cycle [ 487.002296][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 487.011056][ T58] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 487.020355][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.028531][ T58] usb 1-1: Product: syz [ 487.032848][ T58] usb 1-1: Manufacturer: syz [ 487.037417][ T58] usb 1-1: SerialNumber: syz [ 487.042300][ T5866] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 487.044681][ T58] usb 1-1: config 0 descriptor?? [ 487.050340][ T8929] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 487.070653][ T58] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 487.081551][ T58] dvb-usb: bulk message failed: -22 (2/0) [ 487.090605][ T58] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.100490][ T58] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 487.108929][ T58] usb 1-1: media controller created [ 487.112487][ T5893] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 487.122902][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.133261][ T5893] usb 4-1: device descriptor read/8, error -71 [ 487.140761][ T58] usb 1-1: selecting invalid altsetting 7 [ 487.146623][ T58] cxusb: set interface failed [ 487.151294][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 487.174986][ T58] DVB: Unable to find symbol lgdt330x_attach() [ 487.181222][ T58] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 487.192405][ T5866] usb 2-1: device descriptor read/64, error -71 [ 487.232301][ T58] rc_core: IR keymap rc-dvico-portable not found [ 487.238654][ T58] Registered IR keymap rc-empty [ 487.246175][ T58] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 487.256795][ T58] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input32 [ 487.270852][T11782] dvb-usb: bulk message failed: -22 (67/0) [ 487.277990][ T58] dvb-usb: schedule remote query interval to 100 msecs. [ 487.285005][ T5983] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 487.301410][ T58] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 487.322911][ T5983] usb 3-1: device descriptor read/8, error -71 [ 487.393850][ T5893] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 487.394543][ T58] usb 1-1: USB disconnect, device number 25 [ 487.409580][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 487.423166][ T5893] usb 4-1: device descriptor read/8, error -71 [ 487.447822][ T58] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 487.463589][ T5866] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 487.533259][ T5893] usb usb4-port1: unable to enumerate USB device [ 487.562313][ T5983] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 487.582982][ T5983] usb 3-1: device descriptor read/8, error -71 [ 487.602286][ T5866] usb 2-1: device descriptor read/64, error -71 [ 487.713077][ T5866] usb usb2-port1: attempt power cycle [ 487.715593][ T5983] usb usb3-port1: unable to enumerate USB device [ 487.969053][ T30] audit: type=1400 audit(2000000002.060:1221): avc: denied { read append } for pid=11805 comm="syz.5.1414" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 487.996273][ T30] audit: type=1400 audit(2000000002.060:1222): avc: denied { open } for pid=11805 comm="syz.5.1414" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 488.024541][ T30] audit: type=1400 audit(2000000002.120:1223): avc: denied { listen } for pid=11805 comm="syz.5.1414" lport=42573 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 488.047950][ T30] audit: type=1400 audit(2000000002.120:1224): avc: denied { accept } for pid=11805 comm="syz.5.1414" lport=42573 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 488.111392][T11806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 488.118398][T11806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 488.122286][ T5866] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 488.124525][T11806] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.138088][T11806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 488.144171][T11806] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 488.152158][T11806] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 488.152745][ T5866] usb 2-1: device descriptor read/8, error -71 [ 488.181539][T11806] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 488.483775][ T5866] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 488.523046][ T5866] usb 2-1: device descriptor read/8, error -71 [ 488.605370][T11820] lo speed is unknown, defaulting to 1000 [ 488.642707][ T5866] usb usb2-port1: unable to enumerate USB device [ 488.839626][T11820] lo speed is unknown, defaulting to 1000 [ 488.898433][T11820] lo speed is unknown, defaulting to 1000 [ 488.939389][T11820] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 488.985059][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1418'. [ 488.994177][T11826] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 489.006599][T11826] overlayfs: conflicting lowerdir path [ 489.113434][T11820] lo speed is unknown, defaulting to 1000 [ 489.136010][T11820] lo speed is unknown, defaulting to 1000 [ 489.598711][T11820] lo speed is unknown, defaulting to 1000 [ 489.619653][T11820] lo speed is unknown, defaulting to 1000 [ 489.635159][T11820] lo speed is unknown, defaulting to 1000 [ 489.982660][ T5866] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 490.106330][ T5817] Bluetooth: hci3: command 0x0c1a tx timeout [ 490.193433][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 490.215440][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 490.223662][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.244251][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 490.255256][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.604065][ T5866] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 490.744526][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.930782][T11837] openvswitch: netlink: IP tunnel dst address not specified [ 490.952312][ T5866] usb 6-1: Product: syz [ 490.956469][ T5866] usb 6-1: Manufacturer: syz [ 490.976009][T11857] overlayfs: failed to resolve './file0': -2 [ 491.038857][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 491.049102][ T5866] usb 6-1: SerialNumber: syz [ 491.064074][ T5866] usb 6-1: config 0 descriptor?? [ 491.092306][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 491.092321][ T30] audit: type=1400 audit(2000000005.180:1227): avc: denied { create } for pid=11856 comm="syz.3.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 491.119358][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 491.180243][T11861] netlink: 'syz.3.1426': attribute type 10 has an invalid length. [ 491.210396][T11861] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1426'. [ 491.275470][ T5866] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 491.362177][ T30] audit: type=1400 audit(2000000005.450:1228): avc: denied { create } for pid=11868 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 491.966679][ T5866] gspca_sunplus: reg_w_riv err -71 [ 491.982330][ T5866] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 492.007414][T11873] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 492.019076][ T30] audit: type=1400 audit(2000000005.620:1229): avc: denied { ioctl } for pid=11868 comm="syz.1.1428" path="socket:[34725]" dev="sockfs" ino=34725 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 492.046172][ T30] audit: type=1400 audit(2000000005.860:1230): avc: denied { getopt } for pid=11868 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 492.106796][ T5866] usb 6-1: USB disconnect, device number 15 [ 492.128320][ T30] audit: type=1400 audit(2000000005.860:1231): avc: denied { append } for pid=11868 comm="syz.1.1428" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 492.332749][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 492.343257][ T30] audit: type=1400 audit(2000000006.440:1232): avc: denied { read append } for pid=11884 comm="syz.1.1431" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 492.404699][T11892] sctp: [Deprecated]: syz.0.1433 (pid 11892) Use of int in max_burst socket option. [ 492.404699][T11892] Use struct sctp_assoc_value instead [ 492.451136][ T30] audit: type=1400 audit(2000000006.460:1233): avc: denied { open } for pid=11884 comm="syz.1.1431" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 493.097265][ T30] audit: type=1400 audit(2000000006.460:1234): avc: denied { ioctl } for pid=11884 comm="syz.1.1431" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 493.631339][ T30] audit: type=1400 audit(2000000007.720:1235): avc: denied { connect } for pid=11912 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 493.706540][ T30] audit: type=1400 audit(2000000007.750:1236): avc: denied { write } for pid=11912 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 493.732354][ T5893] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 494.372269][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 494.392007][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 494.412396][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 494.422287][ T5893] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 494.446532][ T5893] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 494.486526][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.538552][ T5893] usb 1-1: Product: syz [ 494.554295][ T5893] usb 1-1: Manufacturer: syz [ 494.574658][ T5893] usb 1-1: SerialNumber: syz [ 494.607619][ T5893] usb 1-1: config 0 descriptor?? [ 494.647307][ T5893] opticon 1-1:0.0: opticon converter detected [ 494.684849][ T5893] usb 1-1: opticon converter now attached to ttyUSB0 [ 494.758129][T11931] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 494.920129][T11934] bond2: (slave geneve5): making interface the new active one [ 494.935447][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.984735][T11934] bond2: (slave geneve5): Enslaving as an active interface with an up link [ 494.997767][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.061637][ T4243] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 495.080053][T11945] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 495.113434][ T4243] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 495.145585][ T4243] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 495.171553][ T4243] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 495.279245][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 495.290121][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 495.522529][T11956] ip6tnl1: entered promiscuous mode [ 495.648214][T11952] ceph: No mds server is up or the cluster is laggy [ 495.763799][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'. [ 495.788606][T11959] vlan0: entered promiscuous mode [ 498.896734][ T5893] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 498.950091][ T24] usb 1-1: USB disconnect, device number 26 [ 499.022563][ T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 499.044968][ T24] opticon 1-1:0.0: device disconnected [ 499.112255][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 499.145498][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 499.185535][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 499.203277][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 499.217822][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 499.266244][T12014] sp0: Synchronizing with TNC [ 499.278603][ T5893] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 499.308742][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.322701][ T24] libceph: connect (1)[c::]:6789 error -101 [ 499.329616][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 499.342104][ T5893] usb 4-1: Product: syz [ 499.349544][ T5893] usb 4-1: Manufacturer: syz [ 499.355311][T12004] [U] è [ 499.359330][ T5893] usb 4-1: SerialNumber: syz [ 499.362292][ T7077] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 499.433522][T12018] ceph: No mds server is up or the cluster is laggy [ 499.512496][ T24] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 499.554200][ T7077] usb 2-1: Using ep0 maxpacket: 32 [ 499.589697][ T7077] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 499.590176][ T5893] usb 4-1: config 0 descriptor?? [ 499.611468][ T7077] usb 2-1: config 0 has no interface number 0 [ 499.623857][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 499.644541][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 499.680117][ T7077] usb 2-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.761598][ T7077] usb 2-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 499.762494][ T5893] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 499.789572][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 499.818468][ T7077] usb 2-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 499.834326][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 499.845641][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 499.857366][ T24] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 499.872950][ T7077] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 499.872984][ T7077] usb 2-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 499.873006][ T7077] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 499.873027][ T7077] usb 2-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 499.873154][ T24] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 499.873172][ T24] usb 1-1: config 5 has no interface number 0 [ 499.873204][ T24] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 499.873224][ T24] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 499.873248][ T24] usb 1-1: config 5 interface 246 has no altsetting 0 [ 499.875825][ T7077] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 499.875852][ T7077] usb 2-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 499.875871][ T7077] usb 2-1: Product: syz [ 499.876023][ T7077] usb 2-1: Manufacturer: syz [ 499.876039][ T7077] usb 2-1: SerialNumber: syz [ 499.876366][ T24] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 499.876389][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.876417][ T24] usb 1-1: Product: syz [ 499.876431][ T24] usb 1-1: Manufacturer: syz [ 499.876446][ T24] usb 1-1: SerialNumber: syz [ 499.879201][ T7077] usb 2-1: config 0 descriptor?? [ 499.888746][T12003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 499.905226][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 499.909249][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 499.909627][ T7077] spcp8x5 2-1:0.110: SPCP8x5 converter detected [ 499.919984][ T7077] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 499.926852][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 500.153889][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 500.361266][T12033] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 500.361306][T12033] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 500.361374][T12033] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 500.361391][T12033] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 500.366548][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 501.138201][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.138289][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.180092][ T8102] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 501.190149][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 501.190165][ T30] audit: type=1400 audit(2000000015.280:1239): avc: denied { ioctl } for pid=12002 comm="syz.1.1458" path="socket:[34987]" dev="sockfs" ino=34987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 501.244580][ T24] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 501.246883][ T24] usb 1-1: USB disconnect, device number 27 [ 501.247513][ T3465] usb 1-1: Failed to submit usb control message: -19 [ 501.247568][ T3465] usb 1-1: unable to send the bmi data to the device: -19 [ 501.247584][ T3465] usb 1-1: unable to get target info from device [ 501.247598][ T3465] usb 1-1: could not get target info (-19) [ 501.247614][ T3465] usb 1-1: could not probe fw (-19) [ 501.266841][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 501.956440][ T30] audit: type=1400 audit(2000000015.820:1240): avc: denied { setopt } for pid=11993 comm="syz.3.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 502.222535][T12035] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 502.315005][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 502.370873][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 502.911524][T12056] lo speed is unknown, defaulting to 1000 [ 503.496510][ T8929] usb 2-1: USB disconnect, device number 40 [ 503.541619][ T5923] usb 4-1: USB disconnect, device number 57 [ 503.627165][ T8929] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 503.807866][ T8929] spcp8x5 2-1:0.110: device disconnected [ 504.307510][T12068] /dev/nullb0: Can't open blockdev [ 504.486002][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1471'. [ 504.505549][T12078] vlan2: entered promiscuous mode [ 504.517695][T12078] bond0: entered promiscuous mode [ 504.529168][ T5983] libceph: connect (1)[c::]:6789 error -1 [ 504.542427][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 504.548395][T12078] bond_slave_0: entered promiscuous mode [ 504.558749][T12078] bond_slave_1: entered promiscuous mode [ 504.622220][T12080] ceph: No mds server is up or the cluster is laggy [ 504.680394][T12078] batadv0: entered promiscuous mode [ 504.821122][ T30] audit: type=1400 audit(2000000018.910:1241): avc: denied { map } for pid=12070 comm="syz.1.1469" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 504.845483][ T5923] libceph: connect (1)[c::]:6789 error -1 [ 504.851293][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 504.964310][ T30] audit: type=1400 audit(2000000019.020:1242): avc: denied { read } for pid=12070 comm="syz.1.1469" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 504.996977][ T30] audit: type=1400 audit(2000000019.020:1243): avc: denied { open } for pid=12070 comm="syz.1.1469" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 505.139506][T12092] tracefs: Unknown parameter 'xino' [ 505.296759][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1469'. [ 505.431375][T12088] netlink: 'syz.1.1469': attribute type 3 has an invalid length. [ 505.577502][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 505.927572][ T30] audit: type=1400 audit(2000000019.230:1244): avc: denied { remount } for pid=12089 comm="syz.3.1472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 506.743179][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 507.253486][T12111] lo speed is unknown, defaulting to 1000 [ 507.443792][ T30] audit: type=1400 audit(2000000021.540:1245): avc: denied { append } for pid=12118 comm="syz.0.1480" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 508.753590][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 508.764676][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 508.895706][T12137] ceph: No mds server is up or the cluster is laggy [ 509.086798][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 509.197786][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 509.304357][T12145] /dev/nullb0: Can't open blockdev [ 510.553122][T12151] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 510.560872][T12151] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 510.569177][T12151] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 510.577130][T12151] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 510.588558][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 510.616475][ T30] audit: type=1400 audit(2000000024.710:1246): avc: denied { create } for pid=12148 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 510.677954][T12154] random: crng reseeded on system resumption [ 512.956280][ T30] audit: type=1400 audit(2000000024.770:1247): avc: denied { write } for pid=12148 comm="syz.5.1486" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 512.997594][ T30] audit: type=1400 audit(2000000024.830:1248): avc: denied { bind } for pid=12148 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 513.085035][ T30] audit: type=1400 audit(2000000027.180:1249): avc: denied { create } for pid=12152 comm="syz.2.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 513.985462][ T7077] libceph: connect (1)[c::]:6789 error -101 [ 514.007503][ T7077] libceph: mon0 (1)[c::]:6789 connect error [ 514.314981][T12182] ceph: No mds server is up or the cluster is laggy [ 514.501375][ T7077] libceph: connect (1)[c::]:6789 error -101 [ 514.523905][ T7077] libceph: mon0 (1)[c::]:6789 connect error [ 514.688229][T12193] ceph: No mds server is up or the cluster is laggy [ 514.836464][ T7077] libceph: connect (1)[c::]:6789 error -101 [ 514.865185][ T7077] libceph: mon0 (1)[c::]:6789 connect error [ 515.047554][ T30] audit: type=1400 audit(2000000029.130:1250): avc: denied { map } for pid=12188 comm="syz.0.1496" path="socket:[36476]" dev="sockfs" ino=36476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 515.158544][ T30] audit: type=1400 audit(2000000029.130:1251): avc: denied { read } for pid=12188 comm="syz.0.1496" path="socket:[36476]" dev="sockfs" ino=36476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 516.530470][T12223] futex_wake_op: syz.5.1505 tries to shift op by -1; fix this program [ 517.167853][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1505'. [ 517.332460][T12225] team1: entered promiscuous mode [ 517.337614][T12225] team1: entered allmulticast mode [ 517.535029][ T58] libceph: connect (1)[c::]:6789 error -101 [ 517.541042][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 517.638205][T12235] ceph: No mds server is up or the cluster is laggy [ 518.015115][ T8929] libceph: connect (1)[c::]:6789 error -1 [ 518.048079][ T8929] libceph: mon0 (1)[c::]:6789 connect error [ 518.089902][T12241] ceph: No mds server is up or the cluster is laggy [ 518.882272][ T8929] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 520.569453][ T30] audit: type=1400 audit(2000000034.640:1252): avc: denied { link } for pid=12262 comm="syz.3.1515" name="#34" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 520.602319][ T30] audit: type=1400 audit(2000000034.650:1253): avc: denied { rename } for pid=12262 comm="syz.3.1515" name="#35" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 520.625817][ T30] audit: type=1804 audit(2000000034.650:1254): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1515" name="/newroot/315/bus/file0" dev="overlay" ino=1719 res=1 errno=0 [ 520.983054][ T8929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.020191][T12272] fuseblk: Unknown parameter 'roo' [ 521.031063][ T8929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.041305][ T30] audit: type=1804 audit(2000000034.660:1255): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1515" name="/newroot/315/bus/file0" dev="overlay" ino=1719 res=1 errno=0 [ 521.076961][ T8929] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 521.101743][ T8929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.130304][ T8929] usb 6-1: config 0 descriptor?? [ 521.147139][ T8929] usb 6-1: can't set config #0, error -71 [ 521.175159][ T8929] usb 6-1: USB disconnect, device number 16 [ 521.776330][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1521'. [ 521.804549][ T30] audit: type=1400 audit(2000000035.890:1256): avc: denied { append } for pid=12286 comm="syz.0.1520" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 521.852556][T12287] kAFS: unable to lookup cell '.' [ 521.963394][ T30] audit: type=1400 audit(2000000036.060:1257): avc: denied { write } for pid=12283 comm="syz.3.1521" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 521.993232][ T30] audit: type=1400 audit(2000000036.080:1258): avc: denied { open } for pid=12283 comm="syz.3.1521" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 522.019553][T12284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12284 comm=syz.3.1521 [ 522.035648][T12284] batadv_slave_1: entered promiscuous mode [ 522.045216][T12284] xt_socket: unknown flags 0x4 [ 522.159729][T12283] batadv_slave_1: left promiscuous mode [ 523.086260][ T30] audit: type=1400 audit(2000000037.020:1259): avc: denied { execute } for pid=12301 comm="syz.5.1524" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 524.212174][T12323] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1530'. [ 524.495858][T12326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1531'. [ 524.642352][ T7218] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 524.842309][ T7218] usb 4-1: Using ep0 maxpacket: 32 [ 524.855241][ T7218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 524.872410][ T7218] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 524.897379][ T7218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.935175][ T7218] usb 4-1: Product: syz [ 524.939479][ T7218] usb 4-1: Manufacturer: syz [ 524.950644][ T7218] usb 4-1: SerialNumber: syz [ 524.958099][ T7218] usb 4-1: config 0 descriptor?? [ 524.983759][ T7218] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 524.998770][ T7218] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 525.224227][ T30] audit: type=1400 audit(2000000039.310:1260): avc: denied { connect } for pid=12334 comm="syz.1.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 525.311905][ T7218] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 525.328868][T12323] comedi: valid board names for 8255 driver are: [ 525.354577][T12323] 8255 [ 525.357385][T12323] comedi: valid board names for vmk80xx driver are: [ 525.367600][T12340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1535'. [ 525.376635][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1535'. [ 525.397644][ T30] audit: type=1400 audit(2000000039.390:1261): avc: denied { create } for pid=12322 comm="syz.3.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 525.417777][T12323] vmk80xx [ 525.420981][T12323] comedi: valid board names for usbduxsigma driver are: [ 525.429460][T12323] usbduxsigma [ 525.440925][T12323] comedi: valid board names for usbduxfast driver are: [ 525.449300][T12343] netlink: 'syz.0.1536': attribute type 1 has an invalid length. [ 525.458886][T12323] usbduxfast [ 525.465367][T12323] comedi: valid board names for usbdux driver are: [ 525.473979][T12323] usbdux [ 525.478739][T12323] comedi: valid board names for ni6501 driver are: [ 525.544584][T12323] ni6501 [ 525.548725][T12323] comedi: valid board names for dt9812 driver are: [ 525.558223][T12323] dt9812 [ 525.573816][T12323] comedi: valid board names for ni_labpc_cs driver are: [ 525.604592][T12323] ni_labpc_cs [ 525.608854][T12323] comedi: valid board names for ni_daq_700 driver are: [ 525.616225][T12323] ni_daq_700 [ 525.620590][T12323] comedi: valid board names for labpc_pci driver are: [ 525.859731][T12323] labpc_pci [ 525.859789][T12323] comedi: valid board names for adl_pci9118 driver are: [ 525.859819][T12323] pci9118dg [ 525.859842][T12323] pci9118hg [ 525.859869][T12323] pci9118hr [ 525.859891][T12323] comedi: valid board names for 8255_pci driver are: [ 525.859946][T12323] 8255_pci [ 525.859968][T12323] comedi: valid board names for s526 driver are: [ 525.859996][T12323] s526 [ 525.860017][T12323] comedi: valid board names for multiq3 driver are: [ 525.860045][T12323] multiq3 [ 525.860066][T12323] comedi: valid board names for pcmuio driver are: [ 525.860094][T12323] pcmuio48 [ 525.860115][T12323] pcmuio96 [ 525.860141][T12323] comedi: valid board names for pcmmio driver are: [ 525.860169][T12323] pcmmio [ 525.860190][T12323] comedi: valid board names for pcmda12 driver are: [ 525.860218][T12323] pcmda12 [ 525.860239][T12323] comedi: valid board names for pcmad driver are: [ 525.860266][T12323] pcmad12 [ 525.860287][T12323] pcmad16 [ 525.860314][T12323] comedi: valid board names for ni_labpc driver are: [ 525.860342][T12323] lab-pc-1200 [ 525.860597][T12323] lab-pc-1200ai [ 525.860760][T12323] lab-pc+ [ 525.860829][T12323] comedi: valid board names for atmio16 driver are: [ 525.860857][T12323] atmio16 [ 525.860878][T12323] atmio16d [ 525.860904][T12323] comedi: valid board names for ni_at_ao driver are: [ 525.860932][T12323] at-ao-6 [ 525.860959][T12323] at-ao-10 [ 525.860981][T12323] comedi: valid board names for ni_at_a2150 driver are: [ 525.861009][T12323] ni_at_a2150 [ 525.861031][T12323] comedi: valid board names for adq12b driver are: [ 525.861059][T12323] adq12b [ 525.861080][T12323] comedi: valid board names for mpc624 driver are: [ 525.861108][T12323] mpc624 [ 525.861129][T12323] comedi: valid board names for c6xdigio driver are: [ 525.861157][T12323] c6xdigio [ 525.861178][T12323] comedi: valid board names for aio_iiro_16 driver are: [ 525.861206][T12323] aio_iiro_16 [ 525.861233][T12323] comedi: valid board names for aio_aio12_8 driver are: [ 525.861262][T12323] aio_aio12_8 [ 525.861289][T12323] aio_ai12_8 [ 525.861316][T12323] aio_ao12_4 [ 525.861337][T12323] comedi: valid board names for fl512 driver are: [ 525.861365][T12323] fl512 [ 525.861386][T12323] comedi: valid board names for dmm32at driver are: [ 525.861414][T12323] dmm32at [ 525.861435][T12323] comedi: valid board names for dt282x driver are: [ 525.861462][T12323] dt2821 [ 525.861490][T12323] dt2821-f [ 525.861511][T12323] dt2821-g [ 525.861537][T12323] dt2823 [ 525.861575][T12323] dt2824-pgh [ 525.861607][T12323] dt2824-pgl [ 525.861628][T12323] dt2825 [ 525.861654][T12323] dt2827 [ 525.861674][T12323] dt2828 [ 525.861700][T12323] dt2829 [ 525.861722][T12323] dt21-ez [ 525.861747][T12323] dt23-ez [ 525.861769][T12323] dt24-ez [ 525.861795][T12323] dt24-ez-pgl [ 525.861816][T12323] comedi: valid board names for dt2817 driver are: [ 525.861843][T12323] dt2817 [ 525.861891][T12323] comedi: valid board names for dt2815 driver are: [ 525.861920][T12323] dt2815 [ 525.861941][T12323] comedi: valid board names for dt2814 driver are: [ 525.861969][T12323] dt2814 [ 525.866534][T12323] comedi: valid board names for dt2811 driver are: [ 525.866568][T12323] dt2811-pgh [ 525.866601][T12323] dt2811-pgl [ 525.866626][T12323] comedi: valid board names for dt2801 driver are: [ 525.866680][T12323] dt2801 [ 525.866707][T12323] comedi: valid board names for das6402 driver are: [ 525.866735][T12323] das6402-12 [ 525.866757][T12323] das6402-16 [ 525.866784][T12323] comedi: valid board names for das1800 driver are: [ 525.866812][T12323] das-1701st [ 525.866834][T12323] das-1701st-da [ 525.866861][T12323] das-1702st [ 525.866882][T12323] das-1702st-da [ 525.866908][T12323] das-1702hr [ 525.866929][T12323] das-1702hr-da [ 525.866955][T12323] das-1701ao [ 525.866977][T12323] das-1702ao [ 525.867003][T12323] das-1801st [ 525.867023][T12323] das-1801st-da [ 525.867049][T12323] das-1802st [ 525.867070][T12323] das-1802st-da [ 525.867096][T12323] das-1802hr [ 525.867117][T12323] das-1802hr-da [ 525.867143][T12323] das-1801hc [ 525.867164][T12323] das-1802hc [ 525.867190][T12323] das-1801ao [ 525.867211][T12323] das-1802ao [ 525.867237][T12323] comedi: valid board names for das800 driver are: [ 525.867265][T12323] das-800 [ 525.867286][T12323] cio-das800 [ 525.867312][T12323] das-801 [ 525.867332][T12323] cio-das801 [ 525.867359][T12323] das-802 [ 525.867379][T12323] cio-das802 [ 525.867405][T12323] cio-das802/16 [ 525.867426][T12323] comedi: valid board names for isa-das08 driver are: [ 525.867453][T12323] isa-das08 [ 525.867474][T12323] das08-pgm [ 525.867500][T12323] das08-pgh [ 525.867521][T12323] das08-pgl [ 525.867547][T12323] das08-aoh [ 525.867568][T12323] das08-aol [ 525.867599][T12323] das08-aom [ 525.867620][T12323] das08/jr-ao [ 525.867646][T12323] das08jr-16-ao [ 525.867667][T12323] pc104-das08 [ 525.867694][T12323] das08jr/16 [ 525.867718][T12323] comedi: valid board names for das16m1 driver are: [ 525.867771][T12323] das16m1 [ 525.867792][T12323] comedi: valid board names for dac02 driver are: [ 525.867820][T12323] dac02 [ 525.867847][T12323] comedi: valid board names for rti802 driver are: [ 525.867875][T12323] rti802 [ 525.867897][T12323] comedi: valid board names for rti800 driver are: [ 525.867924][T12323] rti800 [ 525.867945][T12323] rti815 [ 525.867971][T12323] comedi: valid board names for pcm3724 driver are: [ 525.867999][T12323] pcm3724 [ 525.868020][T12323] comedi: valid board names for pcl818 driver are: [ 525.868047][T12323] pcl818l [ 525.868068][T12323] pcl818h [ 525.868094][T12323] pcl818hd [ 525.868114][T12323] pcl818hg [ 525.868141][T12323] pcl818 [ 525.868161][T12323] pcl718 [ 525.868187][T12323] pcm3718 [ 525.868209][T12323] comedi: valid board names for pcl816 driver are: [ 525.868236][T12323] pcl816 [ 525.868257][T12323] pcl814b [ 525.868283][T12323] comedi: valid board names for pcl812 driver are: [ 525.868311][T12323] pcl812 [ 525.868331][T12323] pcl812pg [ 525.868357][T12323] acl8112pg [ 525.868378][T12323] acl8112dg [ 525.868404][T12323] acl8112hg [ 525.868424][T12323] a821pgl [ 525.868451][T12323] a821pglnda [ 525.868471][T12323] a821pgh [ 525.868498][T12323] a822pgl [ 525.868518][T12323] a822pgh [ 525.868544][T12323] a823pgl [ 525.868565][T12323] a823pgh [ 525.868595][T12323] pcl813 [ 525.868616][T12323] pcl813b [ 525.868642][T12323] acl8113 [ 525.868662][T12323] iso813 [ 525.868688][T12323] acl8216 [ 525.868709][T12323] a826pg [ 525.868735][T12323] comedi: valid board names for pcl730 driver are: [ 525.868763][T12323] pcl730 [ 525.868783][T12323] iso730 [ 525.868808][T12323] acl7130 [ 525.868837][T12323] pcm3730 [ 525.868862][T12323] pcl725 [ 525.868888][T12323] p8r8dio [ 525.868909][T12323] acl7225b [ 525.868935][T12323] p16r16dio [ 525.868956][T12323] pcl733 [ 525.868982][T12323] pcl734 [ 525.869003][T12323] opmm-1616-xt [ 525.869029][T12323] pearl-mm-p [ 525.869050][T12323] ir104-pbf [ 525.869076][T12323] comedi: valid board names for pcl726 driver are: [ 525.869103][T12323] pcl726 [ 525.869124][T12323] pcl727 [ 525.869150][T12323] pcl728 [ 525.869171][T12323] acl6126 [ 525.869197][T12323] acl6128 [ 525.869217][T12323] comedi: valid board names for pcl724 driver are: [ 525.869245][T12323] pcl724 [ 525.869266][T12323] pcl722 [ 525.869291][T12323] pcl731 [ 525.869312][T12323] acl7122 [ 525.869338][T12323] acl7124 [ 525.869358][T12323] pet48dio [ 525.869384][T12323] pcmio48 [ 525.869405][T12323] onyx-mm-dio [ 525.869431][T12323] comedi: valid board names for pcl711 driver are: [ 525.869458][T12323] pcl711 [ 525.869479][T12323] pcl711b [ 525.869505][T12323] acl8112hg [ 525.869527][T12323] acl8112dg [ 525.869553][T12323] comedi: valid board names for amplc_pc263 driver are: [ 525.869585][T12323] pc263 [ 525.870090][T12323] comedi: valid board names for amplc_pc236 driver are: [ 525.870120][T12323] pc36at [ 525.870142][T12323] comedi: valid board names for amplc_dio200 driver are: [ 525.870170][T12323] pc212e [ 525.870192][T12323] pc214e [ 525.870218][T12323] pc215e [ 525.870239][T12323] pc218e [ 525.870266][T12323] pc272e [ 525.870287][T12323] comedi: valid board names for comedi_parport driver are: [ 525.870316][T12323] comedi_parport [ 525.870338][T12323] comedi: valid board names for comedi_test driver are: [ 525.870384][T12323] comedi_test [ 525.870405][T12323] comedi: valid board names for comedi_bond driver are: [ 525.870432][T12323] comedi_bond [ 525.964305][ T5893] usb 4-1: USB disconnect, device number 58 [ 526.267697][T12363] cgroup: Invalid name [ 526.277740][ T8929] libceph: connect (1)[c::]:6789 error -101 [ 526.277849][ T8929] libceph: mon0 (1)[c::]:6789 connect error [ 526.382303][ T5893] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 526.445137][T12362] ceph: No mds server is up or the cluster is laggy [ 527.165629][ T8929] libceph: connect (1)[c::]:6789 error -101 [ 527.165837][ T8929] libceph: mon0 (1)[c::]:6789 connect error [ 527.633608][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 527.636109][ T5893] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 527.636136][ T5893] usb 1-1: config 1 has no interface number 0 [ 527.636159][ T5893] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 527.636175][ T5893] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 527.636189][ T5893] usb 1-1: config 1 interface 105 has no altsetting 0 [ 527.637940][ T5893] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 527.637958][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.637970][ T5893] usb 1-1: Product: syz [ 527.637979][ T5893] usb 1-1: Manufacturer: syz [ 527.638043][ T5893] usb 1-1: SerialNumber: syz [ 527.640234][T12359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 527.640288][T12359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.209102][T12359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.209215][T12359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.264117][T12386] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 528.264133][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 528.265907][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 528.265922][ T30] audit: type=1400 audit(2000000042.360:1264): avc: denied { module_load } for pid=12381 comm="syz.1.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 528.266026][T12386] Invalid ELF header type: 2 != 1 [ 529.263855][ T5893] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 529.264059][ T5893] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 529.319234][ T5893] usb 1-1: USB disconnect, device number 28 [ 529.381858][ T30] audit: type=1400 audit(2000000043.470:1265): avc: denied { mount } for pid=12392 comm="syz.1.1549" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 529.429532][T12397] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 529.487014][T12397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.625111][T12403] netlink: 'syz.0.1550': attribute type 10 has an invalid length. [ 529.625124][T12403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1550'. [ 529.665073][T12401] bond3: (slave veth5): Enslaving as an active interface with a down link [ 530.568472][ T30] audit: type=1400 audit(2000000044.660:1266): avc: denied { mounton } for pid=12404 comm="syz.3.1551" path="/322/file0" dev="tmpfs" ino=1764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 530.610689][T12408] 9p: Bad value for 'rfdno' [ 530.664422][T12408] ubi: mtd0 is already attached to ubi31 [ 530.988196][T12397] bond3: (slave dummy0): making interface the new active one [ 531.022679][T12397] dummy0: entered promiscuous mode [ 531.050274][T12397] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 531.070785][T12403] bond3: (slave dummy0): Releasing active interface [ 531.856048][ T30] audit: type=1400 audit(2000000045.950:1267): avc: denied { getopt } for pid=12419 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.995436][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1558'. [ 532.025859][ T5185] Dev loop6: unable to read RDB block 1 [ 532.031820][ T5185] loop6: unable to read partition table [ 532.042388][ T5185] loop6: partition table beyond EOD, truncated [ 532.123083][T12158] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 532.284707][T12158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.294907][T12158] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 532.312587][T12158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.385430][ T7218] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 532.432396][T12158] usb 4-1: config 0 descriptor?? [ 532.593151][ T7218] usb 1-1: Using ep0 maxpacket: 32 [ 532.698318][ T7218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 533.434458][ T7218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 533.452637][T12158] lenovo 0003:17EF:6047.0018: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 533.518850][ T7218] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 533.652430][ T7218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 533.673350][T12158] lenovo 0003:17EF:6047.0018: Failed to switch F7/9/11 mode: -71 [ 533.692552][T12158] lenovo 0003:17EF:6047.0018: Failed to switch middle button: -71 [ 533.723254][ T7218] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 533.732648][T12158] lenovo 0003:17EF:6047.0018: Fn-lock setting failed: -71 [ 533.742256][ T7218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.758961][T12158] lenovo 0003:17EF:6047.0018: Sensitivity setting failed: -71 [ 533.781154][ T7218] usb 1-1: Product: syz [ 533.923680][ T7218] usb 1-1: Manufacturer: syz [ 533.928737][T12158] usb 4-1: USB disconnect, device number 59 [ 533.936576][ T7218] usb 1-1: SerialNumber: syz [ 534.094022][ T7218] usb 1-1: config 0 descriptor?? [ 534.126405][ T7218] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 534.151293][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 534.271103][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 534.488753][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 534.845141][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 534.894869][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 534.937096][T12158] libceph: connect (1)[c::]:6789 error -101 [ 534.943372][T12158] libceph: mon0 (1)[c::]:6789 connect error [ 535.045705][T12458] ceph: No mds server is up or the cluster is laggy [ 535.237356][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 535.239263][T12355] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 535.262170][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 535.287292][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 535.287766][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 535.335052][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 535.335204][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 535.390040][T12462] ceph: No mds server is up or the cluster is laggy [ 535.696552][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 535.779980][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 535.901182][T12474] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 535.924450][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 536.080205][T12481] futex_wake_op: syz.5.1572 tries to shift op by -1; fix this program [ 536.154532][T12487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12487 comm=syz.5.1572 [ 536.491685][T12498] lo speed is unknown, defaulting to 1000 [ 537.411798][T12158] usb 1-1: USB disconnect, device number 29 [ 538.182131][T12512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12512 comm=syz.5.1578 [ 538.222816][T12512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12512 comm=syz.5.1578 [ 538.275056][T12158] libceph: connect (1)[c::]:6789 error -101 [ 538.295750][T12158] libceph: mon0 (1)[c::]:6789 connect error [ 538.296966][T12518] geneve3: entered promiscuous mode [ 538.302048][T12515] ceph: No mds server is up or the cluster is laggy [ 538.545494][T12498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1575'. [ 538.567205][T12498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1575'. [ 538.590313][T12535] futex_wake_op: syz.3.1586 tries to shift op by -1; fix this program [ 538.663508][ T5983] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 538.665581][T12536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12536 comm=syz.3.1586 [ 538.838290][ T5983] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 538.951767][ T5983] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.989571][ T5983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 539.003490][ T5983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 539.033983][ T30] audit: type=1400 audit(2000000053.120:1268): avc: denied { mount } for pid=12530 comm="syz.5.1585" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 539.063446][T12541] IPv6: NLM_F_CREATE should be specified when creating new route [ 539.066022][ T5983] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.117614][ T5983] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 539.132423][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.158458][ T5983] usb 1-1: Product: syz [ 539.169508][ T5983] usb 1-1: Manufacturer: syz [ 539.196464][ T5983] usb 1-1: SerialNumber: syz [ 539.218613][ T5983] usb 1-1: config 0 descriptor?? [ 539.236348][ T5983] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input36 [ 539.881373][ T5983] usb 1-1: USB disconnect, device number 30 [ 539.915773][ T30] audit: type=1400 audit(2000000053.990:1269): avc: denied { mounton } for pid=12544 comm="syz.2.1588" path="/322/file0" dev="tmpfs" ino=1787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 539.924699][T12528] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1583'. [ 540.015874][ T30] audit: type=1400 audit(2000000054.070:1270): avc: denied { read } for pid=12544 comm="syz.2.1588" name="file0" dev="tmpfs" ino=1787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 540.089412][ T30] audit: type=1400 audit(2000000054.070:1271): avc: denied { open } for pid=12544 comm="syz.2.1588" path="/322/file0" dev="tmpfs" ino=1787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 540.590259][ T7218] libceph: connect (1)[c::]:6789 error -1 [ 540.611885][T12566] ceph: No mds server is up or the cluster is laggy [ 540.619007][ T7218] libceph: mon0 (1)[c::]:6789 connect error [ 542.316141][T12589] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 542.412411][ T7077] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 542.616118][ T7077] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.715612][ T7077] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 542.763033][ T7077] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 542.765351][ T7218] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 542.785327][ T30] audit: type=1400 audit(2000000056.850:1272): avc: denied { add_name } for pid=12590 comm="syz.1.1601" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.791321][T12596] o2cb: This node has not been configured. [ 542.812790][T12596] o2cb: Cluster check failed. Fix errors before retrying. [ 542.822067][ T7077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.842301][T12596] (syz.1.1601,12596,1):user_dlm_register:674 ERROR: status = -22 [ 542.850193][T12596] (syz.1.1601,12596,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 542.866497][ T7077] usb 4-1: config 0 descriptor?? [ 542.874412][ T7077] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 542.881044][ T7077] dvb-usb: bulk message failed: -22 (3/0) [ 542.915763][ T30] audit: type=1400 audit(2000000056.880:1273): avc: denied { create } for pid=12590 comm="syz.1.1601" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 542.978398][ T7077] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 543.026447][ T7077] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 543.042350][ T7218] usb 6-1: Using ep0 maxpacket: 8 [ 543.044411][ T7077] usb 4-1: media controller created [ 543.075562][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.088303][ T7077] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.096848][ T7218] usb 6-1: unable to get BOS descriptor or descriptor too short [ 543.112254][ T30] audit: type=1400 audit(2000000056.880:1274): avc: denied { associate } for pid=12590 comm="syz.1.1601" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 543.157174][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.167184][ T7218] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 543.284688][ T7218] usb 6-1: config 7 has no interface number 0 [ 543.291783][ T7077] dvb-usb: bulk message failed: -22 (6/0) [ 543.325080][ T7077] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 543.346774][ T7077] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 543.404045][ T7077] dvb-usb: schedule remote query interval to 150 msecs. [ 543.410984][ T7077] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 543.430774][ T30] audit: type=1400 audit(2000000056.940:1275): avc: denied { mounton } for pid=12590 comm="syz.1.1601" path="/" dev="ocfs2_dlmfs" ino=39326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 543.482302][ T5893] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 543.484529][ T7077] usb 4-1: USB disconnect, device number 60 [ 543.555646][ T7218] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 543.557541][ T7077] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 543.660266][ T7218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.705220][ T7218] usb 6-1: Product: syz [ 543.722335][ T7218] usb 6-1: Manufacturer: syz [ 543.729891][ T7218] usb 6-1: SerialNumber: syz [ 543.752343][ T5893] usb 3-1: device descriptor read/64, error -71 [ 543.860503][ T30] audit: type=1400 audit(2000000057.950:1276): avc: denied { read append } for pid=12606 comm="syz.3.1604" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 543.862285][ T5923] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 544.034325][ T7218] usb 6-1: USB disconnect, device number 17 [ 544.042368][ T5893] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 544.145705][ T30] audit: type=1400 audit(2000000058.240:1277): avc: denied { read } for pid=12609 comm="syz.5.1605" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 544.152424][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 544.192865][ T5893] usb 3-1: device descriptor read/64, error -71 [ 544.255598][ T5923] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 544.270601][ T5923] usb 1-1: config 0 has no interface number 0 [ 544.282635][ T5923] usb 1-1: config 0 interface 29 has no altsetting 0 [ 544.301736][ T5923] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 544.302433][ T5893] usb usb3-port1: attempt power cycle [ 544.336570][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.356638][ T5923] usb 1-1: Product: syz [ 544.372377][ T5923] usb 1-1: Manufacturer: syz [ 544.407729][ T5923] usb 1-1: SerialNumber: syz [ 544.420876][ T30] audit: type=1400 audit(2000000058.510:1278): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 544.462491][ T5923] usb 1-1: config 0 descriptor?? [ 544.699681][ T5923] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 544.792495][ T7077] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 544.825554][T12617] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 544.833465][T12617] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 544.842122][T12617] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 544.850048][T12617] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 544.913907][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'. [ 545.102532][ T7077] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.120588][ T5893] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 545.145956][ T5893] usb 3-1: device descriptor read/8, error -71 [ 545.184998][ T7077] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 545.251842][ T7077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.332167][ T7077] usb 2-1: config 0 descriptor?? [ 545.422943][ T5893] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 545.526444][ T5893] usb 3-1: device descriptor read/8, error -71 [ 545.558738][T12620] syzkaller0: entered promiscuous mode [ 545.572095][T12620] syzkaller0: entered allmulticast mode [ 545.646565][ T5893] usb usb3-port1: unable to enumerate USB device [ 545.751304][ T30] audit: type=1400 audit(2000000059.840:1279): avc: denied { setopt } for pid=12623 comm="syz.5.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 545.786926][ T7077] prodikeys 0003:041E:2801.0019: item fetching failed at offset 0/5 [ 545.834055][ T7077] prodikeys 0003:041E:2801.0019: hid parse failed [ 545.840568][ T7077] prodikeys 0003:041E:2801.0019: probe with driver prodikeys failed with error -22 [ 545.869198][ T30] audit: type=1400 audit(2000000059.960:1280): avc: denied { ioctl } for pid=12623 comm="syz.5.1608" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 546.343022][ T7077] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 546.496681][ T30] audit: type=1400 audit(2000000060.590:1281): avc: denied { create } for pid=12632 comm="syz.5.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 546.555151][ T7077] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 546.575875][ T7077] usb 3-1: config 0 interface 0 has no altsetting 0 [ 546.604635][ T7077] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 546.636525][ T7077] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 546.671048][ T7077] usb 3-1: Product: syz [ 546.695325][ T7077] usb 3-1: Manufacturer: syz [ 546.712272][ T7077] usb 3-1: SerialNumber: syz [ 546.743167][ T7077] usb 3-1: config 0 descriptor?? [ 546.787679][ T7077] usb 3-1: selecting invalid altsetting 0 [ 547.898983][ T5923] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 547.928426][ T5923] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 548.310488][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 548.444634][ T30] audit: type=1400 audit(2000000062.540:1282): avc: denied { map } for pid=12650 comm="syz.1.1615" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 548.839876][ T30] audit: type=1400 audit(2000000062.560:1283): avc: denied { execute } for pid=12650 comm="syz.1.1615" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 548.863610][ T30] audit: type=1400 audit(2000000062.930:1284): avc: denied { ioctl } for pid=12650 comm="syz.1.1615" path="socket:[39614]" dev="sockfs" ino=39614 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 549.114890][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.130663][ T7077] usb 3-1: USB disconnect, device number 49 [ 549.138416][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.272838][ T5923] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 549.289222][T12653] /dev/nullb0: Can't open blockdev [ 549.480502][ T5923] usb 1-1: USB disconnect, device number 31 [ 550.139665][T12676] x_tables: duplicate underflow at hook 1 [ 550.153382][ T7077] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 550.300106][T12158] libceph: connect (1)[c::]:6789 error -1 [ 550.306807][T12158] libceph: mon0 (1)[c::]:6789 connect error [ 550.346450][ T7077] usb 3-1: unable to get BOS descriptor or descriptor too short [ 550.452839][ T5923] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 550.477323][ T7077] usb 3-1: config 1 has an invalid interface number: 91 but max is 0 [ 550.486236][ T7077] usb 3-1: config 1 has no interface number 0 [ 550.499628][T12680] ceph: No mds server is up or the cluster is laggy [ 550.669957][ T7077] usb 3-1: config 1 interface 91 has no altsetting 0 [ 550.670329][T12158] libceph: connect (1)[c::]:6789 error -1 [ 550.676865][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 550.693837][T12158] libceph: mon0 (1)[c::]:6789 connect error [ 550.710344][ T7077] usb 3-1: string descriptor 0 read error: -22 [ 550.723160][ T7077] usb 3-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=58.9c [ 550.762897][ T7077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.840745][ T7077] imon 3-1:1.91: unable to register, err -19 [ 550.853870][ T5923] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 550.906639][T12690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.988401][T12692] netlink: 'syz.3.1623': attribute type 1 has an invalid length. [ 550.996311][T12692] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1623'. [ 551.025239][T12692] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 551.306856][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.320817][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.330054][ T7077] usb 3-1: USB disconnect, device number 50 [ 551.395162][ T58] libceph: connect (1)[c::]:6789 error -1 [ 551.430464][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 551.444513][ T5923] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 551.463554][ T5923] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 551.471719][ T5923] usb 6-1: Product: syz [ 551.476021][ T5923] usb 6-1: Manufacturer: syz [ 551.480589][ T5923] usb 6-1: SerialNumber: syz [ 551.547574][T12694] ceph: No mds server is up or the cluster is laggy [ 551.696129][ T7077] libceph: connect (1)[c::]:6789 error -1 [ 551.781728][ T7077] libceph: mon0 (1)[c::]:6789 connect error [ 551.824494][ T30] audit: type=1400 audit(2000000065.920:1285): avc: denied { watch watch_reads } for pid=12699 comm="syz.1.1625" path="pipe:[5294]" dev="pipefs" ino=5294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 552.084370][ T5923] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 552.253728][T12709] overlayfs: missing 'lowerdir' [ 553.349717][ T5923] visor 6-1:1.0: probe with driver visor failed with error -110 [ 554.931937][ T58] usb 6-1: USB disconnect, device number 18 [ 555.467101][ T58] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 555.652419][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 555.680618][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.841821][ T30] audit: type=1400 audit(2000000069.930:1286): avc: denied { ioctl } for pid=12740 comm="syz.2.1637" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 555.891226][T12739] veth5: entered promiscuous mode [ 555.896502][ T58] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 555.906557][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.918361][ T58] usb 6-1: config 0 descriptor?? [ 556.348511][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.370678][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.391202][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1634'. [ 556.410791][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 556.423835][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 556.435951][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 556.444467][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 556.572948][T12768] ceph: No mds server is up or the cluster is laggy [ 557.127328][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 557.145400][ T58] input: HID 28bd:0933 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.001A/input/input38 [ 557.158185][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 557.449357][ T58] uclogic 0003:28BD:0933.001A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0 [ 558.220215][T12158] usb 6-1: USB disconnect, device number 19 [ 560.368470][T12798] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 560.503935][ T30] audit: type=1400 audit(2000000074.600:1287): avc: denied { listen } for pid=12809 comm="syz.3.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 561.609412][ T30] audit: type=1400 audit(2000000075.700:1288): avc: denied { bind } for pid=12816 comm="syz.1.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 561.633720][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 562.415836][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.426879][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.977793][T12832] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 563.036345][T12832] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1658'. [ 563.171965][T12834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.188932][T12834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.219892][T12834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.230239][T12834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.316989][T12840] futex_wake_op: syz.5.1661 tries to shift op by -1; fix this program [ 563.395287][T12841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12841 comm=syz.5.1661 [ 563.573944][ T5923] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 563.752332][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 563.779856][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.958649][ T5923] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 564.006262][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.049680][ T5923] usb 1-1: config 0 descriptor?? [ 564.390728][T12847] syzkaller0: entered promiscuous mode [ 564.396278][T12847] syzkaller0: entered allmulticast mode [ 564.422367][ T58] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 564.480228][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 564.585303][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.662741][ T58] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 564.674271][ T58] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 564.683995][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.240044][ T58] usb 4-1: config 0 descriptor?? [ 565.250595][ T5923] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.001B/input/input39 [ 565.392146][ T5923] uclogic 0003:28BD:0933.001B: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 566.487007][ T5983] usb 1-1: USB disconnect, device number 32 [ 566.519813][ T30] audit: type=1400 audit(2000000080.610:1289): avc: denied { audit_write } for pid=12849 comm="syz.3.1665" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 566.603505][T12871] fido_id[12871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 566.727119][T12882] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 566.735691][T12882] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1672'. [ 567.140390][T12884] futex_wake_op: syz.5.1673 tries to shift op by -1; fix this program [ 567.202790][T12885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12885 comm=syz.5.1673 [ 567.681443][T12890] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1675'. [ 567.982564][ T5893] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 568.312336][ T30] audit: type=1400 audit(2000000082.290:1290): avc: denied { name_connect } for pid=12898 comm="syz.1.1678" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 568.572423][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 568.588439][ T5893] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.607171][ T5893] usb 6-1: config 0 has no interface number 0 [ 568.623711][ T5893] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.654266][ T5893] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.677854][ T5893] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 568.687848][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.846369][ T58] Bluetooth: Can't get state to change to load configuration err [ 568.854654][ T58] Bluetooth: Loading sysconfig file failed [ 568.860503][ T58] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 568.868516][ T7077] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 568.925176][ T5893] usb 6-1: config 0 descriptor?? [ 569.289561][ T58] usb 4-1: USB disconnect, device number 61 [ 569.383930][ T7077] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.403275][ T7077] usb 1-1: config 0 interface 0 has no altsetting 0 [ 569.596931][ T7077] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 569.615736][ T7077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.627642][ T7077] usb 1-1: config 0 descriptor?? [ 569.633832][ T5893] usbhid 6-1:0.1: can't add hid device: -71 [ 569.654544][ T5893] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 569.696780][ T5893] usb 6-1: USB disconnect, device number 20 [ 570.890363][T12930] futex_wake_op: syz.2.1685 tries to shift op by -1; fix this program [ 570.934715][ T7077] aquacomputer_d5next 0003:0C70:F0B6.001C: item fetching failed at offset 5/7 [ 570.951362][T12934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12934 comm=syz.2.1685 [ 570.993007][ T7077] aquacomputer_d5next 0003:0C70:F0B6.001C: probe with driver aquacomputer_d5next failed with error -22 [ 571.198661][T12933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28437 sclass=netlink_route_socket pid=12933 comm=syz.5.1686 [ 571.244268][T12938] netlink: 'syz.3.1687': attribute type 58 has an invalid length. [ 571.262294][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1687'. [ 571.264569][ T7077] usb 1-1: USB disconnect, device number 33 [ 571.431960][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 571.440860][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 571.447843][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 571.454243][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 572.410228][T12158] libceph: connect (1)[c::]:6789 error -101 [ 572.418055][T12158] libceph: mon0 (1)[c::]:6789 connect error [ 572.426729][ T5983] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 572.456658][T12942] ceph: No mds server is up or the cluster is laggy [ 572.482652][ T5949] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 572.640060][ T7077] libceph: connect (1)[c::]:6789 error -1 [ 572.645967][ T5983] usb 6-1: Using ep0 maxpacket: 16 [ 572.675206][ T7077] libceph: mon0 (1)[c::]:6789 connect error [ 572.687009][ T5983] usb 6-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 572.696437][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 572.715795][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.743110][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 572.760932][ T5983] usb 6-1: Product: syz [ 572.781656][ T5983] usb 6-1: Manufacturer: syz [ 572.800085][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 572.815172][ T5983] usb 6-1: SerialNumber: syz [ 572.821027][ T5983] usb 6-1: config 0 descriptor?? [ 572.832332][T12956] ceph: No mds server is up or the cluster is laggy [ 572.849519][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 572.869672][ T5983] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 572.913947][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 572.939861][ T7077] libceph: connect (1)[c::]:6789 error -1 [ 572.952900][ T7077] libceph: mon0 (1)[c::]:6789 connect error [ 572.991259][ T5949] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 573.028047][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.059530][ T5949] usb 3-1: Product: syz [ 573.093394][ T5983] gspca_sn9c20x: Write register 1000 failed -71 [ 573.099816][ T5949] usb 3-1: Manufacturer: syz [ 573.106067][ T5983] gspca_sn9c20x: Device initialization failed [ 573.117646][ T5949] usb 3-1: SerialNumber: syz [ 573.149596][ T5983] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 573.187866][ T5949] usb 3-1: config 0 descriptor?? [ 573.199824][ T5983] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 573.255614][ T5949] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 573.266076][ T5983] usb 6-1: USB disconnect, device number 21 [ 573.321902][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 573.343282][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 573.384465][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 573.403977][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 573.619138][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 573.859766][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 574.008479][T12640] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 574.057238][T12962] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 574.100297][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 574.161521][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 574.227902][T12971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.253551][T12971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.218272][ T5893] usb 3-1: USB disconnect, device number 51 [ 575.380421][T12985] futex_wake_op: syz.5.1698 tries to shift op by -1; fix this program [ 575.444377][T12989] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1698'. [ 575.913117][T13000] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 577.032527][ T7077] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 577.280274][ T7077] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.310735][ T7077] usb 4-1: config 0 has no interface number 0 [ 577.348241][ T7077] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.430538][ T7077] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.478313][ T7077] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 577.540130][ T7077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.658127][ T7077] usb 4-1: config 0 descriptor?? [ 578.340955][ T7077] usbhid 4-1:0.1: can't add hid device: -71 [ 578.398467][ T7077] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 578.437258][ T7077] usb 4-1: USB disconnect, device number 62 [ 578.541645][ T58] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 578.775134][ T58] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 578.787445][ T58] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 578.811509][ T58] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.855359][ T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a2a1, bcdDevice= 0.40 [ 579.488787][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.660577][ T58] usb 1-1: Product: syz [ 579.667076][ T58] usb 1-1: Manufacturer: syz [ 579.672035][ T58] usb 1-1: SerialNumber: syz [ 579.796542][ T58] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 579.803839][ T58] cdc_mbim 1-1:1.0: bind() failure [ 580.540382][ T30] audit: type=1400 audit(2000000094.630:1291): avc: denied { getopt } for pid=13093 comm="syz.1.1717" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 580.584497][T13072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.585728][T13073] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.605003][T13072] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 580.605158][T13073] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 580.632137][T13073] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.736720][T13073] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.763548][T13050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.782890][T13072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.789147][T13072] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 580.801770][T13050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.831763][ T58] usb 1-1: USB disconnect, device number 34 [ 580.838134][T13072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.847292][ T30] audit: type=1400 audit(2000000094.920:1292): avc: denied { connect } for pid=13049 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 580.906840][T13072] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 580.927157][T13072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 580.952763][T13072] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 580.978765][T13072] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.987508][T13072] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 580.992245][ T5867] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 581.107531][T13111] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1720'. [ 581.154118][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 581.169717][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 581.181285][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 581.191245][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 581.208690][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 581.222976][ T5867] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 581.232338][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.240543][ T5867] usb 3-1: Product: syz [ 581.245454][ T5867] usb 3-1: Manufacturer: syz [ 581.250155][ T5867] usb 3-1: SerialNumber: syz [ 581.262798][ T5867] usb 3-1: config 0 descriptor?? [ 581.280690][ T5867] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input41 [ 581.294426][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 581.341799][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 581.380287][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 581.548037][ T30] audit: type=1400 audit(2000000095.590:1293): avc: denied { append } for pid=13110 comm="syz.3.1720" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 581.714141][ T58] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 581.749658][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 581.848794][T12640] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 581.864529][ T58] usb 6-1: device descriptor read/64, error -71 [ 581.871117][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 581.906924][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 581.937921][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 582.130589][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 582.142492][ T58] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 582.158511][T13081] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 583.082943][ T30] audit: type=1400 audit(2000000096.710:1294): avc: denied { bind } for pid=13127 comm="syz.3.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 583.367827][ T58] usb 6-1: device descriptor read/64, error -71 [ 583.422441][ T30] audit: type=1400 audit(2000000096.720:1295): avc: denied { listen } for pid=13127 comm="syz.3.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 583.465129][T12158] usb 3-1: USB disconnect, device number 52 [ 583.530185][ T30] audit: type=1400 audit(2000000096.720:1296): avc: denied { accept } for pid=13127 comm="syz.3.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 583.550598][ T58] usb usb6-port1: attempt power cycle [ 584.467435][ T30] audit: type=1800 audit(2000000097.780:1297): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1724" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 585.370668][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1730'. [ 585.418220][ T30] audit: type=1400 audit(2000000099.510:1298): avc: denied { ioctl } for pid=13154 comm="syz.5.1730" path="socket:[41435]" dev="sockfs" ino=41435 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 585.454413][T13155] qnx4: unable to read the superblock [ 585.622138][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 585.632661][T13157] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 585.836338][T13167] overlayfs: conflicting lowerdir path [ 586.008321][ T30] audit: type=1400 audit(2000000100.090:1299): avc: denied { read } for pid=13159 comm="syz.1.1733" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 586.101763][T13174] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 586.109701][T13174] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 586.118414][T13174] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 586.126289][T13174] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 586.181071][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1734'. [ 586.442516][ T30] audit: type=1400 audit(2000000100.100:1300): avc: denied { open } for pid=13159 comm="syz.1.1733" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 586.469168][ T30] audit: type=1400 audit(2000000100.110:1301): avc: denied { ioctl } for pid=13159 comm="syz.1.1733" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 587.035087][T13184] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 587.094142][ T30] audit: type=1400 audit(2000000101.190:1302): avc: denied { relabelto } for pid=13183 comm="syz.5.1737" name="cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 587.203400][ T30] audit: type=1400 audit(2000000101.220:1303): avc: denied { associate } for pid=13183 comm="syz.5.1737" name="cgroup.procs" dev="cgroup" ino=410 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sendmail_exec_t:s0" [ 588.130117][ T30] audit: type=1400 audit(2000000102.220:1304): avc: denied { create } for pid=13194 comm="syz.2.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 588.232412][ T30] audit: type=1400 audit(2000000102.240:1305): avc: denied { sys_admin } for pid=13194 comm="syz.2.1740" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 588.902357][T13226] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 588.920388][T13226] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1749'. [ 588.992262][ T5949] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 589.033131][T13227] Device name cannot be null; rc = [-22] [ 589.056349][T13227] netlink: 'syz.1.1749': attribute type 2 has an invalid length. [ 589.072672][ T5867] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 589.173753][ T5949] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 589.183770][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.194268][ T5949] usb 6-1: config 0 descriptor?? [ 589.252573][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 589.262667][ T5867] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 589.271124][ T5867] usb 1-1: config 179 has no interface number 0 [ 589.322262][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 589.352652][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 589.392278][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.417671][ T5949] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 589.442724][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 589.482237][ T5867] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 589.522405][ T5867] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 589.531503][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.575241][T13222] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 589.710759][ T5949] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 589.752397][ T5949] [drm] Initialized udl on minor 2 [ 589.826796][ T30] audit: type=1400 audit(2000000103.920:1306): avc: denied { listen } for pid=13229 comm="syz.1.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 589.874669][ T30] audit: type=1400 audit(2000000103.970:1307): avc: denied { getopt } for pid=13214 comm="syz.5.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.882616][T13215] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1746'. [ 589.908016][ T5867] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input42 [ 589.967534][ T30] audit: type=1400 audit(2000000103.970:1308): avc: denied { nlmsg_read } for pid=13214 comm="syz.5.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 590.041705][ T5949] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 590.053028][T13235] /dev/nullb0: Can't open blockdev [ 590.106206][ T5949] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 590.139026][ T58] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 590.157632][ T5949] usb 6-1: USB disconnect, device number 25 [ 590.183112][ T58] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 590.200502][T13241] bridge0: port 3(veth0_to_bridge) entered blocking state [ 590.230033][T13241] bridge0: port 3(veth0_to_bridge) entered disabled state [ 590.257963][T13241] veth0_to_bridge: entered allmulticast mode [ 590.284246][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 590.296032][T13241] veth0_to_bridge: entered promiscuous mode [ 590.316830][T13241] bridge0: port 3(veth0_to_bridge) entered blocking state [ 590.324286][T13241] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 591.802898][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 591.802917][ T30] audit: type=1800 audit(2000000105.840:1312): pid=13269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1760" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 592.430710][T13271] siw: device registration error -23 [ 592.494055][T12158] usb 1-1: USB disconnect, device number 35 [ 592.500005][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 592.500047][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 592.602826][T13273] tc_dump_action: action bad kind [ 592.608549][T13273] tc_dump_action: action bad kind [ 593.645378][ T58] libceph: connect (1)[c::]:6789 error -101 [ 593.673150][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 593.860189][T13285] ceph: No mds server is up or the cluster is laggy [ 594.482465][ T30] audit: type=1400 audit(2000000108.500:1313): avc: denied { map } for pid=13301 comm="syz.1.1769" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 594.525907][ T30] audit: type=1400 audit(2000000108.500:1314): avc: denied { execute } for pid=13301 comm="syz.1.1769" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 594.750390][ T30] audit: type=1800 audit(2000000108.710:1315): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1770" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 595.006577][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1771'. [ 595.016035][T13312] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 595.092912][T13314] overlayfs: conflicting lowerdir path [ 595.857217][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 595.872463][T13316] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 595.890391][T13316] overlayfs: conflicting lowerdir path [ 597.098594][T13332] futex_wake_op: syz.3.1777 tries to shift op by -1; fix this program [ 597.163251][T13336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1777'. [ 597.539978][T13340] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1779'. [ 597.614035][T13342] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 597.640958][T13342] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 597.673270][ T30] audit: type=1400 audit(2000000111.760:1316): avc: denied { firmware_load } for pid=13341 comm="syz.3.1780" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 597.694426][T13342] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 597.795226][T13343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1779'. [ 598.073832][T13354] udevd[13354]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 598.342464][T12158] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 598.862589][T12158] usb 1-1: Using ep0 maxpacket: 32 [ 598.887401][T12158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 598.916280][T12158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 598.937696][T13376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13376 comm=syz.3.1785 [ 598.992276][T12158] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 599.022389][T12158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 599.034753][T13376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.036052][T12158] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 599.058184][T12158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.068260][T12158] usb 1-1: Product: syz [ 599.082431][T12158] usb 1-1: Manufacturer: syz [ 599.087056][T12158] usb 1-1: SerialNumber: syz [ 599.112298][ T5867] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 599.121772][T12158] usb 1-1: config 0 descriptor?? [ 599.188336][T12158] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 599.223923][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 599.264049][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 599.294325][ T5867] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 599.308697][T13389] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 599.322271][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.330525][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 599.643040][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 599.675176][T13353] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 599.698297][ T5867] usb 3-1: config 0 descriptor?? [ 599.965803][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 600.316516][ T5867] cp210x 3-1:0.0: cp210x converter detected [ 600.370894][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 600.425664][T13395] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 600.442130][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 600.606908][ T5170] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 600.812046][ T30] audit: type=1400 audit(2000000114.900:1317): avc: denied { ioctl } for pid=13370 comm="syz.2.1786" path="socket:[42167]" dev="sockfs" ino=42167 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 601.566347][ T8929] libceph: connect (1)[c::]:6789 error -101 [ 601.573255][ T5867] usb 3-1: cp210x converter now attached to ttyUSB0 [ 601.582885][ T5867] usb 3-1: USB disconnect, device number 53 [ 601.589023][ T8929] libceph: mon0 (1)[c::]:6789 connect error [ 601.614909][T13402] ceph: No mds server is up or the cluster is laggy [ 601.902880][ T5867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 601.910897][ T5867] cp210x 3-1:0.0: device disconnected [ 601.970779][ T5983] usb 1-1: USB disconnect, device number 36 [ 602.128412][ T30] audit: type=1400 audit(2000000116.220:1318): avc: denied { name_bind } for pid=13417 comm="syz.2.1795" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 604.252444][ T5867] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 604.525076][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 604.547074][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 604.625603][T13414] binfmt_misc: register: failed to install interpreter file ./file0 [ 604.669044][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 604.690927][T13469] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 604.759869][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 604.858221][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 605.145005][ T5867] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 605.210285][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.256746][ T5867] usb 4-1: Product: syz [ 605.261102][ T5867] usb 4-1: Manufacturer: syz [ 605.265805][ T5867] usb 4-1: SerialNumber: syz [ 605.389868][ T5867] usb 4-1: config 0 descriptor?? [ 605.598345][ T5867] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input44 [ 605.608812][T12158] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 606.182286][T12158] usb 3-1: device descriptor read/64, error -71 [ 606.340518][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 606.449850][T12158] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 606.477114][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 606.529514][T13354] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 606.602662][T12158] usb 3-1: device descriptor read/64, error -71 [ 606.620111][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 606.648791][T13494] nftables ruleset with unbound set [ 606.779999][T12158] usb usb3-port1: attempt power cycle [ 607.185295][T13488] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 607.220336][ T5170] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 607.314446][ T5983] usb 4-1: USB disconnect, device number 63 [ 607.320425][ C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 607.382408][T12158] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 607.386767][T13492] netlink: 'syz.5.1807': attribute type 1 has an invalid length. [ 607.397717][T13492] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1807'. [ 607.431950][T13492] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 607.443027][T12158] usb 3-1: device descriptor read/8, error -71 [ 607.560598][T13508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.571051][T13508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.682257][T12158] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 607.723620][T12158] usb 3-1: device descriptor read/8, error -71 [ 607.832693][T12158] usb usb3-port1: unable to enumerate USB device [ 607.923301][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 608.356434][T13521] futex_wake_op: syz.0.1813 tries to shift op by -1; fix this program [ 608.419486][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 608.444258][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1813'. [ 608.671171][T13528] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 608.679168][T13528] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 608.687779][T13528] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 608.695541][T13528] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 608.714577][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 609.591718][ T30] audit: type=1400 audit(2000000123.680:1319): avc: denied { append } for pid=13537 comm="syz.2.1817" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 609.619309][ T30] audit: type=1400 audit(2000000123.690:1320): avc: denied { ioctl } for pid=13539 comm="syz.5.1818" path="socket:[42440]" dev="sockfs" ino=42440 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 609.767526][T13546] netlink: 'syz.5.1818': attribute type 1 has an invalid length. [ 611.798334][ T30] audit: type=1400 audit(2000000125.850:1321): avc: denied { getopt } for pid=13566 comm="syz.3.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 611.826109][ T5867] kernel write not supported for file /zero (pid: 5867 comm: kworker/0:4) [ 612.997916][T13593] : Can't lookup blockdev [ 613.004224][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1828'. [ 614.432581][T13615] lo speed is unknown, defaulting to 1000 [ 614.444918][T13615] lo speed is unknown, defaulting to 1000 [ 614.453586][T13615] lo speed is unknown, defaulting to 1000 [ 614.932866][ T5867] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 615.048524][T12158] lo speed is unknown, defaulting to 1000 [ 615.055771][T13615] infiniband syz1: set active [ 615.061214][T13615] infiniband syz1: added lo [ 615.082228][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 615.090339][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.102360][ T5867] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 615.107050][T13615] RDS/IB: syz1: added [ 615.111524][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.126336][ T5867] usb 1-1: config 0 descriptor?? [ 615.134370][ T5867] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 615.232199][T13615] smc: adding ib device syz1 with port count 1 [ 615.254787][T13615] smc: ib device syz1 port 1 has no pnetid [ 615.279265][ T5983] lo speed is unknown, defaulting to 1000 [ 615.292726][T13615] lo speed is unknown, defaulting to 1000 [ 615.363168][T13627] futex_wake_op: syz.2.1837 tries to shift op by -1; fix this program [ 615.464708][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 615.473839][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 615.714809][T13637] delete_channel: no stack [ 615.751068][T13634] bond1: option arp_validate: invalid value (18446744073709551615) [ 615.761753][T13634] bond1 (unregistering): Released all slaves [ 615.909570][ C0] blk_print_req_error: 46 callbacks suppressed [ 615.909587][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 615.925366][ C0] buffer_io_error: 45 callbacks suppressed [ 615.925383][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 615.931482][T13615] lo speed is unknown, defaulting to 1000 [ 615.939106][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 615.939130][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 615.939171][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 615.971769][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 615.979687][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 615.989287][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 615.997183][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 616.006777][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 616.014701][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 616.024290][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 616.102297][ T30] audit: type=1400 audit(2000000130.190:1322): avc: denied { map } for pid=13641 comm="syz.3.1841" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 616.104054][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 616.135713][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 616.144067][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 616.153669][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 616.165263][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 616.174893][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 616.186038][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 616.195646][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 616.299391][ T5185] ldm_validate_partition_table(): Disk read failed. [ 616.312271][T12158] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 616.336471][ T5185] Dev loop7: unable to read RDB block 0 [ 616.342571][ T30] audit: type=1400 audit(2000000130.420:1323): avc: denied { getopt } for pid=13641 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 616.893971][ T5867] gspca_vc032x: reg_r err -32 [ 616.900094][ T5867] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 616.912278][ T5185] loop7: unable to read partition table [ 616.918143][ T5185] loop7: partition table beyond EOD, truncated [ 616.932234][ T30] audit: type=1800 audit(2000000130.510:1324): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1842" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 616.982249][T12158] usb 3-1: Using ep0 maxpacket: 32 [ 617.016650][T12158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 617.041137][T12158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 617.051615][T12158] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 617.063586][T12158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 617.077883][T12158] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 617.102283][T12158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.110289][T12158] usb 3-1: Product: syz [ 617.114792][T12158] usb 3-1: Manufacturer: syz [ 617.119398][T12158] usb 3-1: SerialNumber: syz [ 617.127174][T12158] usb 3-1: config 0 descriptor?? [ 617.137793][T12158] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45 [ 617.151448][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.164490][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 617.166190][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.213371][T13615] lo speed is unknown, defaulting to 1000 [ 617.227379][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 617.231986][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'. [ 617.473064][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 617.852497][T13354] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 617.894996][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 617.907085][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 617.911069][ T5983] usb 1-1: USB disconnect, device number 37 [ 617.916585][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 618.111462][ T5170] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 618.291586][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 618.661753][T13615] lo speed is unknown, defaulting to 1000 [ 619.082426][ T30] audit: type=1800 audit(2000000133.040:1325): pid=13658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1844" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 619.340292][T13615] lo speed is unknown, defaulting to 1000 [ 620.340524][ T5949] usb 3-1: USB disconnect, device number 58 [ 620.397712][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 620.414623][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 620.458136][T13679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.476289][T13679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.496901][T13672] ceph: No mds server is up or the cluster is laggy [ 620.716744][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 621.076828][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 621.521538][T13690] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 623.027985][T13716] nfs: Unknown parameter '0©gÚ AdòäÈëkª.å¿LªràJ—§Ó¡#)ñþV' [ 623.723259][ T30] audit: type=1400 audit(2000000137.820:1326): avc: denied { ioctl } for pid=13721 comm="syz.0.1859" path="socket:[43227]" dev="sockfs" ino=43227 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 623.885701][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.892018][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.735790][T13739] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 625.027373][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 626.094900][T13756] SELinux: failed to load policy [ 626.102431][ T30] audit: type=1400 audit(2000000140.150:1327): avc: denied { load_policy } for pid=13753 comm="syz.0.1867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 626.128491][T12158] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 626.302288][T12158] usb 3-1: device descriptor read/64, error -71 [ 626.716789][T12158] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 627.146434][T12158] usb 3-1: device descriptor read/64, error -71 [ 627.664775][T12158] usb usb3-port1: attempt power cycle [ 628.102547][T12158] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 628.123543][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1874'. [ 628.132833][T12158] usb 3-1: device descriptor read/8, error -71 [ 628.722258][T12158] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 628.742996][T12158] usb 3-1: device descriptor read/8, error -71 [ 628.852674][T12158] usb usb3-port1: unable to enumerate USB device [ 628.915912][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 628.947861][T13793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13793 comm=syz.0.1870 [ 629.691328][ T30] audit: type=1400 audit(2000000143.780:1328): avc: denied { mount } for pid=13807 comm="syz.0.1881" name="/" dev="autofs" ino=44232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 630.090242][T13808] [ 630.092572][T13808] ====================================================== [ 630.099562][T13808] WARNING: possible circular locking dependency detected [ 630.106553][T13808] syzkaller #0 Tainted: G L [ 630.112511][T13808] ------------------------------------------------------ [ 630.119595][T13808] syz.0.1881/13808 is trying to acquire lock: [ 630.125717][T13808] ffff888031b05c68 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 630.134743][T13808] [ 630.134743][T13808] but task is already holding lock: [ 630.142080][T13808] ffff88805cc1f948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 630.151818][T13808] [ 630.151818][T13808] which lock already depends on the new lock. [ 630.151818][T13808] [ 630.162214][T13808] [ 630.162214][T13808] the existing dependency chain (in reverse order) is: [ 630.171553][T13808] [ 630.171553][T13808] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 630.179278][T13808] __mutex_lock+0x1aa/0x1ca0 [ 630.184563][T13808] autofs_notify_daemon+0x4a6/0xd60 [ 630.190265][T13808] autofs_wait+0x10f3/0x1ac0 [ 630.195372][T13808] autofs_mount_wait+0x132/0x3c0 [ 630.200915][T13808] autofs_d_automount+0x4b2/0x960 [ 630.206456][T13808] __traverse_mounts+0x1b9/0x830 [ 630.211924][T13808] step_into_slowpath+0x772/0xf50 [ 630.217462][T13808] path_lookupat+0x627/0xc40 [ 630.222557][T13808] filename_lookup+0x224/0x5f0 [ 630.227835][T13808] kern_path+0x35/0x50 [ 630.232405][T13808] lookup_bdev+0xd8/0x280 [ 630.237242][T13808] resume_store+0x1d6/0x490 [ 630.242264][T13808] kobj_attr_store+0x58/0x80 [ 630.247386][T13808] sysfs_kf_write+0xf2/0x150 [ 630.252503][T13808] kernfs_fop_write_iter+0x3af/0x570 [ 630.258324][T13808] vfs_write+0x7d3/0x11d0 [ 630.263166][T13808] ksys_write+0x12a/0x250 [ 630.268694][T13808] do_syscall_64+0xcd/0xf80 [ 630.273702][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.280192][T13808] [ 630.280192][T13808] -> #2 (&of->mutex){+.+.}-{4:4}: [ 630.287393][T13808] __mutex_lock+0x1aa/0x1ca0 [ 630.292513][T13808] kernfs_seq_start+0x4f/0x2a0 [ 630.297871][T13808] seq_read_iter+0x2c1/0x12d0 [ 630.303076][T13808] kernfs_fop_read_iter+0x46c/0x610 [ 630.308780][T13808] copy_splice_read+0x618/0xc20 [ 630.314145][T13808] do_splice_read+0x285/0x370 [ 630.319339][T13808] splice_direct_to_actor+0x2a1/0xa30 [ 630.325213][T13808] do_splice_direct+0x174/0x240 [ 630.330566][T13808] do_sendfile+0xb06/0xe50 [ 630.335488][T13808] __x64_sys_sendfile64+0x1d8/0x220 [ 630.341188][T13808] do_syscall_64+0xcd/0xf80 [ 630.346291][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.352783][T13808] [ 630.352783][T13808] -> #1 (&p->lock){+.+.}-{4:4}: [ 630.359880][T13808] __mutex_lock+0x1aa/0x1ca0 [ 630.365011][T13808] seq_read_iter+0xe1/0x12d0 [ 630.370117][T13808] kernfs_fop_read_iter+0x46c/0x610 [ 630.375838][T13808] copy_splice_read+0x618/0xc20 [ 630.381189][T13808] do_splice_read+0x285/0x370 [ 630.386382][T13808] splice_file_to_pipe+0x109/0x120 [ 630.392039][T13808] do_sendfile+0x400/0xe50 [ 630.396990][T13808] __x64_sys_sendfile64+0x1d8/0x220 [ 630.402742][T13808] do_syscall_64+0xcd/0xf80 [ 630.407754][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.414154][T13808] [ 630.414154][T13808] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 630.421626][T13808] __lock_acquire+0x1669/0x2890 [ 630.427021][T13808] lock_acquire+0x179/0x330 [ 630.432073][T13808] __mutex_lock+0x1aa/0x1ca0 [ 630.437196][T13808] anon_pipe_write+0x15d/0x1bd0 [ 630.442570][T13808] __kernel_write_iter+0x720/0xb10 [ 630.448182][T13808] __kernel_write+0xf5/0x140 [ 630.453264][T13808] autofs_notify_daemon+0x4db/0xd60 [ 630.458953][T13808] autofs_wait+0x10f3/0x1ac0 [ 630.464039][T13808] autofs_mount_wait+0x132/0x3c0 [ 630.469464][T13808] autofs_d_automount+0x4b2/0x960 [ 630.474978][T13808] __traverse_mounts+0x1b9/0x830 [ 630.480425][T13808] step_into_slowpath+0x772/0xf50 [ 630.485943][T13808] path_lookupat+0x627/0xc40 [ 630.491059][T13808] filename_lookup+0x224/0x5f0 [ 630.496341][T13808] kern_path+0x35/0x50 [ 630.500917][T13808] lookup_bdev+0xd8/0x280 [ 630.505748][T13808] resume_store+0x1d6/0x490 [ 630.510800][T13808] kobj_attr_store+0x58/0x80 [ 630.516330][T13808] sysfs_kf_write+0xf2/0x150 [ 630.521428][T13808] kernfs_fop_write_iter+0x3af/0x570 [ 630.527225][T13808] vfs_write+0x7d3/0x11d0 [ 630.532055][T13808] ksys_write+0x12a/0x250 [ 630.536892][T13808] do_syscall_64+0xcd/0xf80 [ 630.541904][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.548300][T13808] [ 630.548300][T13808] other info that might help us debug this: [ 630.548300][T13808] [ 630.558534][T13808] Chain exists of: [ 630.558534][T13808] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 630.558534][T13808] [ 630.570963][T13808] Possible unsafe locking scenario: [ 630.570963][T13808] [ 630.578392][T13808] CPU0 CPU1 [ 630.583749][T13808] ---- ---- [ 630.589100][T13808] lock(&sbi->pipe_mutex); [ 630.593587][T13808] lock(&of->mutex); [ 630.600153][T13808] lock(&sbi->pipe_mutex); [ 630.607155][T13808] lock(&pipe->mutex); [ 630.611280][T13808] [ 630.611280][T13808] *** DEADLOCK *** [ 630.611280][T13808] [ 630.619406][T13808] 5 locks held by syz.0.1881/13808: [ 630.624634][T13808] #0: ffff88803469e9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 630.633668][T13808] #1: ffff888035c9c420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 630.642599][T13808] #2: ffff888058ff8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 630.652325][T13808] #3: ffff88801d29b4b8 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 630.662298][T13808] #4: ffff88805cc1f948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 630.672448][T13808] [ 630.672448][T13808] stack backtrace: [ 630.678313][T13808] CPU: 0 UID: 0 PID: 13808 Comm: syz.0.1881 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.678330][T13808] Tainted: [L]=SOFTLOCKUP [ 630.678333][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 630.678341][T13808] Call Trace: [ 630.678346][T13808] [ 630.678352][T13808] dump_stack_lvl+0x116/0x1f0 [ 630.678369][T13808] print_circular_bug+0x275/0x340 [ 630.678383][T13808] check_noncircular+0x146/0x160 [ 630.678397][T13808] __lock_acquire+0x1669/0x2890 [ 630.678410][T13808] ? __kasan_check_byte+0x13/0x50 [ 630.678427][T13808] lock_acquire+0x179/0x330 [ 630.678439][T13808] ? anon_pipe_write+0x15d/0x1bd0 [ 630.678456][T13808] ? __pfx___might_resched+0x10/0x10 [ 630.678466][T13808] ? rcu_is_watching+0x12/0xc0 [ 630.678477][T13808] __mutex_lock+0x1aa/0x1ca0 [ 630.678492][T13808] ? anon_pipe_write+0x15d/0x1bd0 [ 630.678507][T13808] ? is_bpf_text_address+0x94/0x1a0 [ 630.678521][T13808] ? kernel_text_address+0x8d/0x100 [ 630.678536][T13808] ? anon_pipe_write+0x15d/0x1bd0 [ 630.678551][T13808] ? unwind_get_return_address+0x59/0xa0 [ 630.678567][T13808] ? __bfs+0x148/0x290 [ 630.678577][T13808] ? __pfx___mutex_lock+0x10/0x10 [ 630.678592][T13808] ? check_irq_usage+0xe8/0xbc0 [ 630.678607][T13808] ? anon_pipe_write+0x15d/0x1bd0 [ 630.678622][T13808] anon_pipe_write+0x15d/0x1bd0 [ 630.678638][T13808] ? lockdep_unlock+0x64/0xd0 [ 630.678655][T13808] ? __lock_acquire+0x12c2/0x2890 [ 630.678668][T13808] ? __pfx_anon_pipe_write+0x10/0x10 [ 630.678684][T13808] ? lock_acquire+0x179/0x330 [ 630.678697][T13808] ? __pfx_anon_pipe_write+0x10/0x10 [ 630.678712][T13808] __kernel_write_iter+0x720/0xb10 [ 630.678727][T13808] ? __pfx___kernel_write_iter+0x10/0x10 [ 630.678741][T13808] ? __mutex_lock+0x27b/0x1ca0 [ 630.678755][T13808] ? __kernel_text_address+0xd/0x40 [ 630.678770][T13808] ? autofs_notify_daemon+0x45a/0xd60 [ 630.678794][T13808] __kernel_write+0xf5/0x140 [ 630.678808][T13808] ? __pfx___kernel_write+0x10/0x10 [ 630.678822][T13808] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 630.678840][T13808] autofs_notify_daemon+0x4db/0xd60 [ 630.678854][T13808] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 630.678866][T13808] ? kernfs_fop_write_iter+0x3af/0x570 [ 630.678882][T13808] ? vfs_write+0x7d3/0x11d0 [ 630.678895][T13808] ? ksys_write+0x12a/0x250 [ 630.678914][T13808] ? lockdep_init_map_type+0x5c/0x270 [ 630.678927][T13808] ? lockdep_init_map_type+0x5c/0x270 [ 630.678941][T13808] autofs_wait+0x10f3/0x1ac0 [ 630.678955][T13808] ? __pfx_autofs_wait+0x10/0x10 [ 630.678976][T13808] ? __pfx_path_check_mount+0x10/0x10 [ 630.678988][T13808] ? find_held_lock+0x2b/0x80 [ 630.679004][T13808] ? path_has_submounts+0xcf/0x120 [ 630.679017][T13808] ? do_raw_spin_unlock+0x172/0x230 [ 630.679032][T13808] ? find_held_lock+0x2b/0x80 [ 630.679049][T13808] autofs_mount_wait+0x132/0x3c0 [ 630.679062][T13808] autofs_d_automount+0x4b2/0x960 [ 630.679075][T13808] __traverse_mounts+0x1b9/0x830 [ 630.679094][T13808] step_into_slowpath+0x772/0xf50 [ 630.679107][T13808] ? __up_read+0x2d1/0x700 [ 630.679121][T13808] ? __pfx_step_into_slowpath+0x10/0x10 [ 630.679135][T13808] ? lookup_slow+0x40/0x70 [ 630.679147][T13808] path_lookupat+0x627/0xc40 [ 630.679161][T13808] filename_lookup+0x224/0x5f0 [ 630.679176][T13808] ? __pfx_filename_lookup+0x10/0x10 [ 630.679194][T13808] ? getname_kernel+0x52/0x370 [ 630.679212][T13808] ? __asan_memcpy+0x3c/0x60 [ 630.679223][T13808] kern_path+0x35/0x50 [ 630.679237][T13808] lookup_bdev+0xd8/0x280 [ 630.679253][T13808] ? __pfx_lookup_bdev+0x10/0x10 [ 630.679268][T13808] ? __asan_memcpy+0x3c/0x60 [ 630.679279][T13808] resume_store+0x1d6/0x490 [ 630.679295][T13808] ? __pfx_resume_store+0x10/0x10 [ 630.679313][T13808] ? find_held_lock+0x2b/0x80 [ 630.679330][T13808] ? __pfx_resume_store+0x10/0x10 [ 630.679345][T13808] kobj_attr_store+0x58/0x80 [ 630.679360][T13808] ? __pfx_kobj_attr_store+0x10/0x10 [ 630.679374][T13808] sysfs_kf_write+0xf2/0x150 [ 630.679386][T13808] kernfs_fop_write_iter+0x3af/0x570 [ 630.679402][T13808] ? __pfx_sysfs_kf_write+0x10/0x10 [ 630.679414][T13808] vfs_write+0x7d3/0x11d0 [ 630.679428][T13808] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 630.679445][T13808] ? __pfx_vfs_write+0x10/0x10 [ 630.679463][T13808] ksys_write+0x12a/0x250 [ 630.679476][T13808] ? __pfx_ksys_write+0x10/0x10 [ 630.679491][T13808] do_syscall_64+0xcd/0xf80 [ 630.679506][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.679518][T13808] RIP: 0033:0x7f398038f749 [ 630.679528][T13808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.679540][T13808] RSP: 002b:00007f3981233038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 630.679550][T13808] RAX: ffffffffffffffda RBX: 00007f39805e5fa0 RCX: 00007f398038f749 [ 630.679557][T13808] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 630.679563][T13808] RBP: 00007f3980413f91 R08: 0000000000000000 R09: 0000000000000000 [ 630.679570][T13808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.679576][T13808] R13: 00007f39805e6038 R14: 00007f39805e5fa0 R15: 00007ffcd15d59f8 [ 630.679586][T13808] [ 631.219365][T13808] PM: Image not found (code -22) [ 631.262360][ T30] audit: type=1400 audit(2000000144.180:1329): avc: denied { ioctl } for pid=13807 comm="syz.0.1881" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 631.338399][ T30] audit: type=1400 audit(2000000145.320:1330): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1