last executing test programs: 8.233786912s ago: executing program 0 (id=1019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x7) r4 = socket(0x10, 0x80003, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000006c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000740)={0x20080522}, &(0x7f0000000780)={0x0, 0x89, 0x0, 0x81, 0xffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r7, {r7}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r9, &(0x7f0000000480)="fed4408b38c804d0aac1608d00c3ed196be5b7d182565fd2d9e1d16c5e285b2660f7ba74eb79d546241ad8c5f19495c4a174b1db828b34c75d1acbda2a81c6e0699222943f3f7501ecddfdb98dbdb16d0c2639a50e3e562fc3d466366f5eb2020398b89f224ece43d8d7869a7e2d808c4d743d137b84b68474a7964089e4a87d8880e4173bab637b08dd19eca1658a430cc20537e6b2639aa75151a6aead6b6ca514dd0bee788071035d9709937bfdf871ba7560f3196c946d3cf3f0710bf7c22327b4ddd96908d3", &(0x7f0000000580)=@buf="958452f12ffd315ea51fc2a38d0ef33bce422bb438876c", 0x1}, 0x20) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000280)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 8.013909368s ago: executing program 0 (id=1020): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000005c0)=0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) read(r7, &(0x7f0000000600)=""/152, 0x98) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x60}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r8, &(0x7f0000000340)='1,0', 0x3) r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) lseek(r9, 0x0, 0x2) socket$unix(0x1, 0x2, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/14, 0xe) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') socket$inet6(0xa, 0x80002, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write$FUSE_IOCTL(r10, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x3, 0x0, 0x6, 0xc4000000}}, 0x20) syz_clone3(&(0x7f0000000280)={0x204a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.972757217s ago: executing program 1 (id=1031): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) (async) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x1) (async, rerun: 64) ioctl$KDADDIO(r1, 0x4b34, 0x1000) (rerun: 64) 5.282866242s ago: executing program 1 (id=1033): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004040}, 0x4000) pipe(0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000780)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xa0044d07, &(0x7f0000000200)) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0x401) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)=0x1) syz_usb_connect$midi(0x0, 0xa7, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x1, 0x1, 0x8, 0x2af5a782ce27d2c9, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x0, [@midi_out_jack={0x11, 0x24, 0x3, 0x2, 0x0, 0x5, [{0x5, 0x40}, {0xa, 0x3}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0x3}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x3, 0xbf}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x10}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x64, 0x1, [{0x5, 0x3}]}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x56, 0x3, [{0x26, 0x68}, {0x0, 0x9}, {0x10, 0xd}], 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x9, 0x4, [{0x1, 0x9}, {0x2}, {0x1, 0x2}, {0x4, 0x9}], 0xf}], [{{0x9, 0x5, 0x3, 0x3, 0x20, 0x55, 0x1, 0x0, {0x5, 0x25, 0x1, 0x1, '>'}}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x8, 0x1a, 0x4, {0x12, 0x25, 0x1, 0xe, "75671683b6450aee24131484e7eb"}}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x1, 0x5, {0x9, 0x25, 0x1, 0x5, "d069ba1346"}}}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x5, 0x1, 0x9, 0x8, 0x80}, 0x206, &(0x7f00000003c0)={0x5, 0xf, 0x206, 0x2, [@generic={0x101, 0x10, 0x4, "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"}, @generic={0x100, 0x10, 0x2, "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"}]}, 0x2, [{0x4, &(0x7f00000007c0)=@string={0x0, 0x3, "4f71d7345a7f963eb98e680cd371c534e380ea44271a0666b4064d6788f054556ffadd834dc2907ca3c5d7ef36f97367bc435d6813e6b5fb099133c21000f919"}}, {0xca, &(0x7f0000000640)=@string={0xca, 0x3, "555cc21677c16faa381a4e1fb68cdac5b76738fea872516e3e3b87837ce1f7b02a4337e512f61f83eeb2f904880b87437a140da4a34345bb692b929e9f261482f449c519099da6036d4720fb28e07e1c9b0c380ca22c35ee9b9e3bed4b66838bcf9a2e767898ea4e428c595b255b9642cfb33f4895baa464ad8b7b697cf4cc6af260537c1098f78cbea5c49b2121526b5283dc741fc9a8239efed1c772eb5f1ee4d51ad2f71bede0dc7b0c70c7f3a48f083085111db2e0f1b50f8a2e5e2b5ab8a2efa1dd494df11f"}}]}) 4.932200066s ago: executing program 0 (id=1035): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/172) 4.931069651s ago: executing program 0 (id=1043): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000005c0)=0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) read(r7, &(0x7f0000000600)=""/152, 0x98) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x60}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r8, &(0x7f0000000340)='1,0', 0x3) r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) lseek(r9, 0x0, 0x2) socket$unix(0x1, 0x2, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/14, 0xe) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') socket$inet6(0xa, 0x80002, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write$FUSE_IOCTL(r10, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x3, 0x0, 0x6, 0xc4000000}}, 0x20) syz_clone3(&(0x7f0000000280)={0x204a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.910961946s ago: executing program 1 (id=1038): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, 0x0) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000340), 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c72713d3078303030303030303030303030303030362c009f9d08fee291719c421a"]) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x344}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f00000004c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@var={0x5, 0x0, 0x0, 0xe, 0x1, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x3}, @float={0x10, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000000080)=""/87, 0x49, 0x57, 0x1, 0x8}, 0x28) (async) ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x80000, 0x0, 0x0, @by_dev, @name={'syz', 0x0, '2\x00'}}) 3.774146s ago: executing program 1 (id=1039): r0 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000400), 0x0) close(r1) (async, rerun: 64) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x0, 0x3c, 0x0, 0x2}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r3, &(0x7f0000000680)}, 0x20) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fff, 0x2) (async, rerun: 32) r6 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x20002005}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0xf0f046}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/nf_call_ip6tables\x00', 0x103a02, 0x100) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000001c0)={0x30, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, {0xa, 0x4e23, 0x6997, @private2, 0x4}, 0xffffffffffffffff, 0x4}}, 0x48) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000125601001c0012800a00010076786c616e0000000c000280d4182ae0eca3b86c"], 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x840) (async, rerun: 64) r10 = syz_open_dev$evdev(&(0x7f00000004c0), 0x20000000000, 0x840) (rerun: 64) syz_usb_disconnect(r10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) (async) r11 = fsopen(&(0x7f0000000680)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f00000006c0)='auto_da_alloc', &(0x7f0000000700)='0\x00', 0x0) ioctl$EVIOCRMFF(r10, 0x550c, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) 1.873445967s ago: executing program 0 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 1.754134966s ago: executing program 3 (id=1044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x50de}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.702214152s ago: executing program 0 (id=1045): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2202"], 0xfdef) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=@gettfilter={0x24, 0x2e, 0xa0553f3c5f0f6f1b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0xffff}, {0xffff, 0x10}, {0x1, 0x6}}}, 0x24}}, 0x0) recvfrom$packet(r1, &(0x7f0000002340)=""/37, 0x25, 0x2041, &(0x7f0000002480)={0x11, 0x1, r3, 0x1, 0x3, 0x6, @local}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001e00), 0x0, 0x10, &(0x7f0000001e40), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e80)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001f00)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2e, 0x0, 0x14, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x96, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0xab, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf9, 0xb5, 0x6}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x42fff09373a99168, 0x80, 0x4, 0x1, 0x40, 0x1}, 0xe3, &(0x7f0000000280)={0x5, 0xf, 0xe3, 0x2, [@generic={0xca, 0x10, 0xa, "704a712b089b0753442260a98a81037ecb144aeda66cb6962d649dfa39f39442e73b3e97a3cfcb70b3d90eb803c78fa35b54d3c5ae80e3d4ab52335291ba97ae6bf858aa608dfb31964192f3e0260695c73a226682d2296e7eaef55edc89df9c9128827de946569ed2beb7e347eeaab6821e2e8152a747ea21951f416283f99e3bdd671d436c9ce16b4381919131b3556791147608e84c68def62ae75cd27b5b0418b33fa85490d7a354e96f5334859f0ef28bc90b4ebaefef7841e312db62bd687092bc976ec7"}, @ssp_cap={0x14, 0x10, 0xa, 0x66, 0x2, 0x2, 0xf000, 0x3, [0xc0, 0x1f4f]}]}, 0x3, [{0x79, &(0x7f0000000380)=@string={0x79, 0x3, "a9f5bdaeba4249b20f1a2f954dd6f9890bb987d5ff1998c10cc25d3204ec60f8f3768aebda59ef4e533bd7e384292df77ba67251d48e7e9d08d65c06a956bdfc37083e43773dad7fe6b781af66e5e08d7c6cfd622c9f586438be0b71bd06ee4e16f6de5e15913d12b94b6c4e2d3c70f1af21f4b9577acd"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xd4dc}}, {0x85, &(0x7f0000000440)=@string={0x85, 0x3, "b64e5ebe5135e28c7971d27dbbf04eb60fdb84dd6a3ba9b2cb2896081df774ae98c5616b92371a4989c0ad84cfe589e7786d0a2b3a7cbe830ecd9c0ce92b2a57e0a490a880989584cab5c1cf8b85f6268ce20c5fa31f0de41c725fa5c7c345b71722bcbd54643ba24d9fe06d71cf379575e949fb1f93d57e61cd7922cbd5ef7eb2bf2e"}}]}) syz_usb_control_io(r5, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x20, 0xd, 0xbd, {0xbd, 0xf, "539a14125dde801bcea714be3414e0b3d7051318f994c03d819e4d26792b552146d4fba491d61b119ce6b0d73052b9840804b571c1b90dc33f0fef881a393cbc6395f542f6db0df33f00911477ae8953f0bf290b53dc03b277525696c208657221f2ff6734465e9052e77110741a917ff5149be914c6ada4975e0a4af171c540235f500a2867305945d0ea48385e02c6b19247848ae07a4f0ca12b30b6f3e2bd397f046b1ee0eee753df282256d5286fa618a0ee514e2e9e1adf80"}}, &(0x7f0000000640)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "69e5fe63c1e0a82b5e00522ba4964c07f8b0e587715bcff8fc49e5c60aad85c8a31e2a91c6e1c3804d31f4fde67b05928d5b057fc7d2a7618dfa9df3caa893a53fb53616230c24c4d16cdb"}}, &(0x7f00000006c0)={0x0, 0xf, 0x78, {0x5, 0xf, 0x78, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "d8dcdbd86bf056b9f27c70a8c755548c"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x2, 0xf0f, 0xd, [0xff0000]}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x1, 0xf, 0xe, [0x3f00, 0x30, 0xc000, 0x0, 0x30, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1d0, 0xff, 0xf, 0xfffb, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x6, 0xf00, 0x7, [0xff00, 0xff0000, 0x1010000, 0xf, 0x3f0f]}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x7, 0x0, "c53b249c", "65ba44ae"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x9, 0x2, 0x2, 0xe5a, 0x5}}}, &(0x7f0000002280)={0x84, &(0x7f0000000800)={0x20, 0x18, 0x55, "c183022c9ac6f090fda457759093979375ad5a11c4c805dd7f32d6c4cb39957be7692ad5f29d38868409c33b6fb6a91460f1d2eb078e59ded26837ecb7e5e85d955ed4adca241c09d0069cf5315474e2009b56bb57"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001f40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001f80)={0x20, 0x0, 0x8, {0x18beb032daf12aa2, 0x8, [0xf00]}}, &(0x7f0000001fc0)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000002000)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000002040)={0x40, 0xb, 0x2, "801f"}, &(0x7f0000002080)={0x40, 0xf, 0x2, 0x401}, &(0x7f00000020c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002100)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000002140)={0x40, 0x19, 0x2, "3fea"}, &(0x7f0000002180)={0x40, 0x1a, 0x2, 0x7392}, &(0x7f00000021c0)={0x40, 0x1c, 0x1}, &(0x7f0000002200)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000002240)={0x40, 0x21, 0x1, 0xb8}}) syz_usb_disconnect(r0) r6 = syz_open_dev$hiddev(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x81044804, &(0x7f00000009c0)={0x1, 0x8d6c30f34124690b, 0x55f}) 1.701932438s ago: executing program 3 (id=1046): syz_emit_ethernet(0xb9, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff05aaaaaaaaaa86dd60fa050000831100000000000000000000f5000000000000fe8000000000000000000000000000aa4e230e220083"], 0x0) 1.63423213s ago: executing program 3 (id=1047): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000abadc4bd43be2b8613f348260b0c4b88c4918bdd5adde741d64f7ab199dffce3286ae7410e6f0a5e9d7d2c3faea287062c67e23b04fab879d6faf335bfe765a5a2273da1ccd04119fdf5a8a6b3cc7d13238085fd86855272b8d3c5d931aa4a4de778bc52cee9005719bb35ba9d1a092b568acbca4e53", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000abadc4bd43be2b8613f348260b0c4b88c4918bdd5adde741d64f7ab199dffce3286ae7410e6f0a5e9d7d2c3faea287062c67e23b04fab879d6faf335bfe765a5a2273da1ccd04119fdf5a8a6b3cc7d13238085fd86855272b8d3c5d931aa4a4de778bc52cee9005719bb35ba9d1a092b568acbca4e53", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) ioctl$TIOCGSID(r1, 0x5429, 0x0) (async) ioctl$TIOCGSID(r1, 0x5429, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x11) syz_open_pts(r1, 0x101000) (async) syz_open_pts(r1, 0x101000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="80fd05000000", 0x6}], 0x1, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x3, 0xf, 0x0, 0xffffffff, 0x12, "ce678d0d5a13830e7ed6e122617bd731a65db8"}) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0x3, 0xf, 0x0, 0xffffffff, 0x12, "ce678d0d5a13830e7ed6e122617bd731a65db8"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0a00f81000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000ff0000850000000c000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.312164596s ago: executing program 3 (id=1051): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x800, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0xfff1, 0xa}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000040) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x800, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0xfff1, 0xa}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000040) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)="3db06f43e61edc023510a46d73", 0xd) (async) write(r2, &(0x7f0000000140)="3db06f43e61edc023510a46d73", 0xd) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="aac20000283eb4061c14bf252e427bae8fe6b49b7136f7e8a74f9d5deec2f237b3909f20b21c3d10e3cb17", @ANYRES16=r3, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x44004}, 0x8004) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="aac20000283eb4061c14bf252e427bae8fe6b49b7136f7e8a74f9d5deec2f237b3909f20b21c3d10e3cb17", @ANYRES16=r3, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x44004}, 0x8004) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.012455234s ago: executing program 3 (id=1054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 841.487316ms ago: executing program 3 (id=1056): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000840)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000880)) getpriority(0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000b00)={0x9, {0x20, 0x5, 0x8000, 0xfff, 0xfffffffffffff4b8}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0x58, 0x5) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x3100, 0x0) ioctl$DVD_AUTH(r3, 0x5392, &(0x7f0000000140)=@lsc={0x3, 0x2, "822c54a95f15a78a5192"}) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f00000000c0)={0x7, 0x1}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_EVENT(r1, 0x84, 0x7f, &(0x7f0000000680)={0x0, 0x8008}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000700)={r6, @in6={{0xa, 0x4e23, 0x7, @remote, 0x4}}, [0x1000, 0x2, 0x7, 0x6, 0xfffffffffffffffc, 0x10001, 0xffff, 0x0, 0x7, 0x1, 0x9, 0x80000000, 0x7, 0xffffffffffffff67, 0x8]}, &(0x7f0000000800)=0x100) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) mount$tmpfs(0x0, &(0x7f00000008c0)='./cgroup\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="6d700000fcff010000003d7374617469631500"]) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000980)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, &(0x7f00000009c0)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000c40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3e810010000800450000b000000000fb019078ac1e0001ac1414aa0301907803240000451440000001ffff000100070000000064010100867fffffffff000e08c82ce8fa6ee00100dd9452050902270e007552ce021281008548c8ee4a0000d5280007cfe33db52725fca0258407cfa11cab1a00108475be675de6a70a8525dc91e5c6020d0a54e119d91351a10100000000000000f97931a8670ee89cc324ffffffa30900a301c84600011205000000000000006e86c32fea131eb68af78585ba4e18d216031af87f259c5687e7465f9926f1b0c23e05e53268e1c3b9bf5baf119f13cafebcb19103fbcbb3fcecffd139012755682e2a9661169dd5780208e136c75a570ef20c5bf82df6bd790429f2d0e1a33b7e7f00ebf3512124b285551d930c8b3f4e9b2e53cf98b05add2f03b874b4bb46999d0393a1604af784add198b1ccaf3497a1e12e205505"], 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRESOCT=0x0], 0x60}}, 0x0) bind$netlink(r9, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x4, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x3fffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 573.02257ms ago: executing program 1 (id=1058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 232.113718ms ago: executing program 2 (id=1061): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = fsopen$ext4(&(0x7f00000027c0)='ext3\x00', 0x1) fsconfig$ext4_string(r1, 0x1, &(0x7f0000002800)='errors\x00', &(0x7f0000002840)='continue\x00', 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x18c82, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) r4 = syz_open_dev$sndpcmc(&(0x7f0000002980), 0x1, 0x802) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f00000029c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002300)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380), 0x0, &(0x7f00000023c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000002400)='./file0\x00', 0x0, 0x10c5020, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002580)) bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000026c0)={0x15, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002780)={0xffffffffffffffff, &(0x7f00000027c0), 0x0}, 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002440)='/proc/schedstat\x00', 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002500), 0x802, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r7, 0x80045010, &(0x7f0000002540)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000022c0)={0x8301}, 0x1) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000024c0)={@remote}, 0x14) read$FUSE(r5, &(0x7f0000000240)={0x2020}, 0x2020) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002dbd7000fcdbdf250900003bc1836e41fa64846cfd15b000"], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x44894) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="03500d00b5"], 0xc8) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0xa0044d07, &(0x7f0000000200)) 153.967298ms ago: executing program 2 (id=1062): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002900)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x33, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x1, 0x9, 0x25, 0x66, 0x0, 0x6, 0x1, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0xb, 0x16, [@private=0xa010102, @loopback]}]}}, "c7981566b2"}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002bc0)='./proc\x00', 0x1ff) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x67, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x13, 0xc2, 0x254e, 0x0, 0x0, {[@mptcp, @timestamp={0x8, 0xa, 0x8, 0x8f2}, @md5sig={0x13, 0x12, "4a671f39f73ac658beeb0d964e18d13e"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) mount(0x0, &(0x7f0000002c00)='./proc\x00', &(0x7f0000002c40)='proc\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0xc082, 0x0) epoll_pwait(r2, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x101, &(0x7f00000003c0)={[0x2]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000002d00)='./proc/net/ipt_hashlimit/lo\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) 72.755353ms ago: executing program 2 (id=1063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000000001) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@in_dx={0x69, 0x20, {0xd3dd, 0x2}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4c8, 0x9, 0xb, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xffffffffffffffa1, 0x0, 0x1}}, @nested_load_syzos={0x136, 0x68, {0x1, 0x10001, [@nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x0, {0x2, 0x2f, 0x2, 0x7fffffff, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x2}]}}, @nested_intel_msr_list_add={0x155, 0x30, {0x2, 0x2, 0x932, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0xbe13}}, @wrmsr={0x65, 0x0, {0x11e, 0x7fffffff}}], 0x1a8}) r4 = fsmount(0xffffffffffffffff, 0x0, 0xc) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x4e21, @private=0xa010103}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x6}, 0x0, 0x0, 0x80000000, 0x4a1, 0x1, 0x1ad, 0x3, 0x1}}], 0x58}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000240)="9a2e1df926b393d67e16967bfb891785afabf8f1141e32506d66728a9053603f3999b48bd79041f89fad64d1926812b96c24180b1e8636e7d0f61e230c0b9e75515c8cabdad90ce7a690219e3e4ee1d24831a87d40a5f2859f2882c100278c95a5768a6d38938ac1e425b539296cdc76c0ce43b871a014ce5a3f5cab811994f48480f4f6b95226a65e6386682f2dfb20113c6215044651dff8fadad231679b724d41a75aae6217a049266e400f7a817fcefc432d6748ed857ca295b1507bfb57dd6c30586ba4264d76aea95bd80e66957dc02fa1a94c9dcaf891ac6f673d5182071d056664f63defbc95e8ac803b3dd1798283e4caf716c39d6544cb4da62a64") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 72.540154ms ago: executing program 2 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 5.774056ms ago: executing program 2 (id=1065): syz_emit_ethernet(0xb9, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff05aaaaaaaaaa86dd60fa05000083110000000000000000000000400000000000fe8000000000000000000000000000aa4e230e220083"], 0x0) 5.551337ms ago: executing program 2 (id=1066): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x30c4, 0x0, '\x00', {0x0, @bt={0x8, 0xdc6, 0x0, 0x3, 0x2, 0x9, 0xe, 0x4, 0x80, 0x6, 0x1, 0x1000, 0x7, 0x2, 0x15, 0x26, {0x6, 0x20e}, 0x4, 0x7}}}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001a440)='./sys\x00', 0x1ed) mount(0x0, &(0x7f000001a480)='./sys\x00', &(0x7f000001a4c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000001a500)='./sys/class/fcloop/ctl/del_target_port\x00', 0x1, 0x0) write(r2, &(0x7f000001a540)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r3 = getpid() getpriority(0x1, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000f80)='pagemap\x00') r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f000001a0c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) syz_emit_ethernet(0x36, &(0x7f000001a400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x5000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0) pread64(r4, &(0x7f0000000fc0)=""/102400, 0x19000, 0x1000000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000dc0)={0x0, 0x0}, 0x8) r7 = syz_open_dev$vbi(&(0x7f0000019fc0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f000001a000)={0x0, @bt={0xec, 0x96, 0x1, 0x0, 0xd59f80, 0x9, 0x6, 0x1, 0x3, 0x5, 0x3, 0x2800, 0x2, 0xbb6, 0x0, 0x2, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000ec0)=@framed, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x1ffffffffffffe56, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000d40), 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x7, 0x200}, 0x10, r6}, 0x94) 0s ago: executing program 1 (id=1067): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='lo\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x2290, @rand_addr=0xe0000051}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000440)={0x4, 0x0, [{0x5e2796afef1a2f31, 0xffffffff, 0x2, 0x9, 0x1, 0x80000001, 0x5}, {0x80000001, 0x3, 0x7, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x4, 0x6, 0xe232, 0x1, 0xffffffff}, {0x80000001, 0x9, 0x1, 0x3, 0x400, 0x80, 0x666d}]}) socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000580)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x3}, {0x1}, {0x300, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 0s ago: executing program 2 (id=1068): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r3 = memfd_create(&(0x7f0000000180)=':]@}*\x00', 0x4) r4 = memfd_create(&(0x7f00000001c0)='/,@^\x9d$\x00', 0x0) r5 = memfd_create(&(0x7f0000000200)='*\'@}})&&\x00', 0x0) r6 = memfd_create(&(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x0) r7 = memfd_create(&(0x7f0000000280)='/-({/\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000002c0)={0x1, 0x5, [{r3, 0x0, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x1000}, {r5, 0x0, 0x1000}, {r6, 0x0, 0xfffff000, 0x103002000}, {r7, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) sendfile(r4, r6, &(0x7f0000000380)=0x401, 0xf0fc) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) preadv2(r8, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000740)=""/80, 0x50}], 0x6, 0xfac, 0x700000, 0x140) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x10000, 0x14c, 0x9}, 0x18) execveat(r9, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000b40)={[&(0x7f0000000900)='-}{\x00', &(0x7f0000000940)='\xa7\x00', &(0x7f0000000980)='/,@^\x9d$\x00', &(0x7f00000009c0)='b\x00', &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz1\x00', &(0x7f0000000a40)='*\'@}})&&\x00', &(0x7f0000000a80)='/-({/\x00', &(0x7f0000000ac0)='%\x00', &(0x7f0000000b00)='\x00']}, &(0x7f0000000c40)={[&(0x7f0000000bc0)='%(+-\\\x89', &(0x7f0000000c00)='/proc/sys/fs/binfmt_misc/syz1\x00']}, 0x100) ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000c80)={0x1, 0x80, 0x2, 0x1, 0xf3, 0x2b}) fcntl$addseals(r5, 0x409, 0x1) r10 = openat(r9, &(0x7f0000001700)='./file0\x00', 0x21a142, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000001740)={0x1, 0x1, 0x84da, 0x6, r1}, &(0x7f0000001780)=0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r11, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r12, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400c800) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r14, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, r15, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x201c44f0, 0x6}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20008004) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001ac0), r9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x5c, r16, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffffe}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x9}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6ff4}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x69}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xee}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x60000000) openat$md_node(0xffffffffffffff9c, &(0x7f0000001c00)='./md0\x00', 0x80000, 0x0) kernel console output (not intermixed with test programs): 77/0x7f [ 131.736137][ T8276] RIP: 0033:0x7fcce69a94d9 [ 131.736146][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.736156][ T8276] RSP: 002b:00007fcce7820028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.736167][ T8276] RAX: ffffffffffffffda RBX: 00007fcce6c25fa0 RCX: 00007fcce69a94d9 [ 131.736174][ T8276] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 131.736179][ T8276] RBP: 00007fcce7820090 R08: 0000000000000000 R09: 0000000000000000 [ 131.736185][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.736191][ T8276] R13: 00007fcce6c26038 R14: 00007fcce6c25fa0 R15: 00007ffc21154568 [ 131.736205][ T8276] [ 131.800407][ T8280] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 131.818936][ T8280] usb 1-1: USB disconnect, device number 2 [ 131.863010][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 131.873648][ T8280] hub 1-0:1.0: USB hub found [ 131.874144][ T8280] hub 1-0:1.0: 6 ports detected [ 132.053212][ T5891] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 132.132119][ T8287] kvm: pic: single mode not supported [ 132.132402][ T8287] kvm: pic: single mode not supported [ 132.134318][ T8287] kvm: pic: non byte write [ 132.224366][ T5891] usb 1-1: New USB device found: idVendor=0627, idProduct=0001, bcdDevice=0.00 [ 132.241185][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 132.241213][ T5891] usb 1-1: Product: QEMU USB Tablet [ 132.241222][ T5891] usb 1-1: Manufacturer: QEMU [ 132.241230][ T5891] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 132.264996][ T5891] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input17 [ 132.329924][ T5891] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 132.370201][ T8301] FAULT_INJECTION: forcing a failure. [ 132.370201][ T8301] name failslab, interval 1, probability 0, space 0, times 0 [ 132.370221][ T8301] CPU: 3 UID: 0 PID: 8301 Comm: syz.2.766 Not tainted syzkaller #0 PREEMPT(full) [ 132.370233][ T8301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.370240][ T8301] Call Trace: [ 132.370244][ T8301] [ 132.370248][ T8301] dump_stack_lvl+0x100/0x190 [ 132.370271][ T8301] should_fail_ex.cold+0x5/0xa [ 132.370288][ T8301] should_failslab+0xc2/0x120 [ 132.370301][ T8301] kmem_cache_alloc_noprof+0x92/0x6a0 [ 132.370318][ T8301] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.370334][ T8301] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 132.370352][ T8301] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 132.370367][ T8301] idr_get_free+0x52e/0xa00 [ 132.370386][ T8301] idr_alloc_u32+0x1ac/0x320 [ 132.370402][ T8301] ? __pfx_idr_alloc_u32+0x10/0x10 [ 132.370416][ T8301] ? __lock_acquire+0x5c0/0x1f40 [ 132.370432][ T8301] ? ____sys_sendmsg+0xa13/0xb90 [ 132.370443][ T8301] ? ___sys_sendmsg+0x208/0x270 [ 132.370453][ T8301] ? __pfx___nla_validate_parse+0x10/0x10 [ 132.370475][ T8301] gen_new_kid+0xc5/0x1b0 [ 132.370487][ T8301] ? __pfx_gen_new_kid+0x10/0x10 [ 132.370502][ T8301] u32_change+0x2372/0x3520 [ 132.370516][ T8301] ? find_held_lock+0x2b/0x80 [ 132.370527][ T8301] ? tc_new_tfilter+0x1f30/0x24e0 [ 132.370541][ T8301] ? __pfx_u32_change+0x10/0x10 [ 132.370560][ T8301] ? lockdep_rtnl_is_held+0x26/0x40 [ 132.370574][ T8301] ? __pfx_u32_change+0x10/0x10 [ 132.370586][ T8301] tc_new_tfilter+0x9e2/0x24e0 [ 132.370606][ T8301] ? avc_has_perm_noaudit+0x11e/0x470 [ 132.370622][ T8301] ? __pfx_tc_new_tfilter+0x10/0x10 [ 132.370655][ T8301] ? __lock_acquire+0x5c0/0x1f40 [ 132.370677][ T8301] ? lock_acquire+0x1d1/0x380 [ 132.370691][ T8301] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 132.370707][ T8301] ? find_held_lock+0x2b/0x80 [ 132.370719][ T8301] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 132.370735][ T8301] ? __pfx_tc_new_tfilter+0x10/0x10 [ 132.370750][ T8301] rtnetlink_rcv_msg+0x95e/0xe90 [ 132.370767][ T8301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.370789][ T8301] netlink_rcv_skb+0x159/0x420 [ 132.370804][ T8301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.370821][ T8301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.370842][ T8301] ? netlink_deliver_tap+0x1ae/0xb50 [ 132.370859][ T8301] netlink_unicast+0x668/0x950 [ 132.370876][ T8301] ? __pfx_netlink_unicast+0x10/0x10 [ 132.370895][ T8301] netlink_sendmsg+0x9ac/0x10c0 [ 132.370912][ T8301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.370931][ T8301] ? selinux_socket_sendmsg+0x198/0x2f0 [ 132.370949][ T8301] ? ____sys_sendmsg+0xa13/0xb90 [ 132.370959][ T8301] ____sys_sendmsg+0xa13/0xb90 [ 132.370969][ T8301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.370985][ T8301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.370999][ T8301] ? lock_acquire+0x1d1/0x380 [ 132.371012][ T8301] ? get_pid_task+0x2a/0x250 [ 132.371024][ T8301] ___sys_sendmsg+0x208/0x270 [ 132.371035][ T8301] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.371046][ T8301] ? get_pid_task+0x106/0x250 [ 132.371061][ T8301] ? find_held_lock+0x2b/0x80 [ 132.371081][ T8301] __sys_sendmsg+0x160/0x210 [ 132.371096][ T8301] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.371117][ T8301] do_syscall_64+0x123/0x7b0 [ 132.371132][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.371158][ T8301] RIP: 0033:0x7f5811da94d9 [ 132.371167][ T8301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.371178][ T8301] RSP: 002b:00007f5812cf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.371189][ T8301] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811da94d9 [ 132.371195][ T8301] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 132.371201][ T8301] RBP: 00007f5812cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 132.371207][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.371213][ T8301] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 132.371227][ T8301] [ 132.563293][ T7990] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 132.624509][ T8313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=8313 comm=syz.2.771 [ 132.682772][ T1046] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 132.690328][ T10] usb 5-1: USB disconnect, device number 9 [ 132.694279][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.694307][ T1449] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.843721][ T1046] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 132.846090][ T1046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.846103][ T1046] usb 6-1: Product: syz [ 132.846110][ T1046] usb 6-1: Manufacturer: syz [ 132.846116][ T1046] usb 6-1: SerialNumber: syz [ 132.865341][ T6532] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 133.578388][ T8325] FAULT_INJECTION: forcing a failure. [ 133.578388][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 133.578415][ T8325] CPU: 1 UID: 0 PID: 8325 Comm: syz.2.776 Not tainted syzkaller #0 PREEMPT(full) [ 133.578435][ T8325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.578445][ T8325] Call Trace: [ 133.578451][ T8325] [ 133.578458][ T8325] dump_stack_lvl+0x100/0x190 [ 133.578492][ T8325] should_fail_ex.cold+0x5/0xa [ 133.578521][ T8325] should_failslab+0xc2/0x120 [ 133.578543][ T8325] kmem_cache_alloc_noprof+0x92/0x6a0 [ 133.578570][ T8325] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.578596][ T8325] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 133.578626][ T8325] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 133.578652][ T8325] idr_get_free+0x52e/0xa00 [ 133.578685][ T8325] idr_alloc_u32+0x1ac/0x320 [ 133.578711][ T8325] ? __pfx_idr_alloc_u32+0x10/0x10 [ 133.578735][ T8325] ? __lock_acquire+0x5c0/0x1f40 [ 133.578761][ T8325] ? ____sys_sendmsg+0xa13/0xb90 [ 133.578778][ T8325] ? ___sys_sendmsg+0x208/0x270 [ 133.578796][ T8325] ? __pfx___nla_validate_parse+0x10/0x10 [ 133.578824][ T8325] gen_new_kid+0xc5/0x1b0 [ 133.578844][ T8325] ? __pfx_gen_new_kid+0x10/0x10 [ 133.578868][ T8325] u32_change+0x2372/0x3520 [ 133.578891][ T8325] ? find_held_lock+0x2b/0x80 [ 133.578909][ T8325] ? tc_new_tfilter+0x1f30/0x24e0 [ 133.578934][ T8325] ? __pfx_u32_change+0x10/0x10 [ 133.578970][ T8325] ? lockdep_rtnl_is_held+0x26/0x40 [ 133.579000][ T8325] ? __pfx_u32_change+0x10/0x10 [ 133.579020][ T8325] tc_new_tfilter+0x9e2/0x24e0 [ 133.579057][ T8325] ? avc_has_perm_noaudit+0x11e/0x470 [ 133.579084][ T8325] ? __pfx_tc_new_tfilter+0x10/0x10 [ 133.579117][ T8325] ? __lock_acquire+0x5c0/0x1f40 [ 133.579151][ T8325] ? lock_acquire+0x1d1/0x380 [ 133.579174][ T8325] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 133.579199][ T8325] ? find_held_lock+0x2b/0x80 [ 133.579217][ T8325] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 133.579240][ T8325] ? __pfx_tc_new_tfilter+0x10/0x10 [ 133.579261][ T8325] rtnetlink_rcv_msg+0x95e/0xe90 [ 133.579286][ T8325] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.579321][ T8325] netlink_rcv_skb+0x159/0x420 [ 133.579344][ T8325] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.579371][ T8325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.579404][ T8325] ? netlink_deliver_tap+0x1ae/0xb50 [ 133.579434][ T8325] netlink_unicast+0x668/0x950 [ 133.579463][ T8325] ? __pfx_netlink_unicast+0x10/0x10 [ 133.579495][ T8325] netlink_sendmsg+0x9ac/0x10c0 [ 133.579526][ T8325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.579558][ T8325] ? selinux_socket_sendmsg+0x198/0x2f0 [ 133.579588][ T8325] ? ____sys_sendmsg+0xa13/0xb90 [ 133.579604][ T8325] ____sys_sendmsg+0xa13/0xb90 [ 133.579620][ T8325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.579648][ T8325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.579673][ T8325] ? lock_acquire+0x1d1/0x380 [ 133.579696][ T8325] ? get_pid_task+0x2a/0x250 [ 133.579716][ T8325] ___sys_sendmsg+0x208/0x270 [ 133.579737][ T8325] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.579755][ T8325] ? get_pid_task+0x106/0x250 [ 133.579783][ T8325] ? find_held_lock+0x2b/0x80 [ 133.579820][ T8325] __sys_sendmsg+0x160/0x210 [ 133.579844][ T8325] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.579884][ T8325] do_syscall_64+0x123/0x7b0 [ 133.579911][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.579930][ T8325] RIP: 0033:0x7f5811da94d9 [ 133.579946][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.579962][ T8325] RSP: 002b:00007f5812cf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.579986][ T8325] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811da94d9 [ 133.579998][ T8325] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 133.580008][ T8325] RBP: 00007f5812cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 133.580019][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.580029][ T8325] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 133.580055][ T8325] [ 133.803161][ T43] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 133.825088][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.825284][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.846246][ T44] kauditd_printk_skb: 15 callbacks suppressed [ 133.846259][ T44] audit: type=1400 audit(1700000021.051:16741): avc: denied { write } for pid=8343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.893704][ T6532] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 133.893788][ T6532] ath9k_htc: Failed to initialize the device [ 133.896780][ T44] audit: type=1400 audit(1700000021.101:16742): avc: denied { write } for pid=8353 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.912275][ T7990] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 133.917284][ T6532] usb 6-1: ath9k_htc: USB layer deinitialized [ 133.924761][ T11] usb 6-1: USB disconnect, device number 12 [ 134.083128][ T7990] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.083931][ T7990] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 134.083954][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.083967][ T7990] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.083978][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.083990][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 134.084719][ T7990] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 134.084739][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.084750][ T7990] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.084761][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.084773][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 134.085515][ T7990] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 134.085535][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.085551][ T7990] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.085562][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.085574][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 134.087712][ T7990] usb 8-1: string descriptor 0 read error: -22 [ 134.087938][ T7990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.091642][ T7990] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 134.162664][ T5931] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 134.313092][ T5931] usb 7-1: New USB device found: idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.313899][ T5931] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.313918][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.313930][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.313940][ T5931] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.314717][ T5931] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.314729][ T5931] usb 7-1: Manufacturer: syz [ 134.316051][ T5931] usb 7-1: config 0 descriptor?? [ 134.345669][ T50] usb 8-1: USB disconnect, device number 12 [ 134.465267][ T8363] capability: warning: `syz.1.786' uses 32-bit capabilities (legacy support in use) [ 134.467840][ T8363] warning: `syz.1.786' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.525464][ T8367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.788'. [ 134.543280][ T8369] netlink: 168 bytes leftover after parsing attributes in process `syz.1.789'. [ 134.546267][ T8369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=8369 comm=syz.1.789 [ 134.722084][ T5931] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 134.724371][ T5931] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 134.826294][ T44] audit: type=1400 audit(1700000022.031:16743): avc: denied { write } for pid=8378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.878761][ T44] audit: type=1400 audit(1700000022.081:16744): avc: denied { write } for pid=8385 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.897939][ T5785] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 134.942439][ T44] audit: type=1400 audit(1700000022.141:16745): avc: denied { write } for pid=8398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.001037][ T44] audit: type=1400 audit(1700000022.201:16746): avc: denied { write } for pid=8402 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.123060][ T7990] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 135.129212][ T44] audit: type=1400 audit(1700000022.331:16747): avc: denied { listen } for pid=8407 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.322600][ T5931] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 135.446210][ T8413] netlink: 56 bytes leftover after parsing attributes in process `syz.0.801'. [ 135.473418][ T5931] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 135.478873][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.478894][ T5931] usb 6-1: Product: syz [ 135.478907][ T5931] usb 6-1: Manufacturer: syz [ 135.478919][ T5931] usb 6-1: SerialNumber: syz [ 135.505744][ T5891] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.523748][ T8415] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 135.527056][ T44] audit: type=1400 audit(1700000022.731:16748): avc: denied { relabelto } for pid=8414 comm="syz.3.802" name="217" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 135.527722][ T44] audit: type=1400 audit(1700000022.731:16749): avc: denied { associate } for pid=8414 comm="syz.3.802" name="217" dev="tmpfs" ino=1154 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 135.531045][ T8415] ufs: You didn't specify the type of your ufs filesystem [ 135.531045][ T8415] [ 135.531045][ T8415] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 135.531045][ T8415] [ 135.531045][ T8415] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 135.531071][ T8415] ufs: ufstype=old is supported read-only [ 135.532014][ T8415] ufs: ufs_fill_super(): bad magic number [ 135.546712][ T8423] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 135.555245][ T44] audit: type=1400 audit(1700000022.761:16750): avc: denied { write } for pid=5784 comm="syz-executor" name="217" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 135.557360][ T8423] 8021q: adding VLAN 0 to HW filter on device bond8 [ 135.569899][ T8423] bond8: entered promiscuous mode [ 135.569912][ T8423] bond8: entered allmulticast mode [ 135.575677][ T8423] macvlan2: entered promiscuous mode [ 135.575694][ T8423] macvlan2: entered allmulticast mode [ 135.576494][ T8423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.728465][ T5931] usb 7-1: USB disconnect, device number 14 [ 136.126120][ T8431] netlink: 'syz.3.807': attribute type 10 has an invalid length. [ 136.126180][ T8431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.807'. [ 136.126393][ T8431] batadv0: entered promiscuous mode [ 136.126403][ T8431] batadv0: entered allmulticast mode [ 136.127325][ T8431] bridge0: port 3(batadv0) entered blocking state [ 136.127423][ T8431] bridge0: port 3(batadv0) entered disabled state [ 136.129307][ T8431] bridge0: port 3(batadv0) entered blocking state [ 136.129366][ T8431] bridge0: port 3(batadv0) entered forwarding state [ 136.313903][ T8438] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.313920][ T8438] block device autoloading is deprecated and will be removed. [ 136.353832][ T8442] bridge0: port 1(veth0_to_bridge) entered blocking state [ 136.353985][ T8442] bridge0: port 1(veth0_to_bridge) entered disabled state [ 136.354118][ T8442] veth0_to_bridge: entered allmulticast mode [ 136.355150][ T8442] veth0_to_bridge: entered promiscuous mode [ 136.355559][ T8442] bridge0: port 1(veth0_to_bridge) entered blocking state [ 136.355639][ T8442] bridge0: port 1(veth0_to_bridge) entered listening state [ 136.362723][ T5857] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 136.378308][ T14] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 136.378319][ T14] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 136.464061][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.464467][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.484200][ T8451] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 136.504372][ T8451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.510095][ T8451] bond2: entered promiscuous mode [ 136.510118][ T8451] bond2: entered allmulticast mode [ 136.516697][ T5857] usb 5-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 136.522529][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.522548][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 136.522586][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.524756][ T8451] macvlan2: entered promiscuous mode [ 136.524772][ T8451] macvlan2: entered allmulticast mode [ 136.527003][ T5857] usb 5-1: config 0 descriptor?? [ 136.528828][ T8451] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.534091][ T5891] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 136.534259][ T5891] ath9k_htc: Failed to initialize the device [ 136.553274][ T5891] usb 6-1: ath9k_htc: USB layer deinitialized [ 136.556799][ T5486] usb 6-1: USB disconnect, device number 13 [ 136.560679][ T5857] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 136.561178][ T5857] dvb-usb: bulk message failed: -22 (3/0) [ 136.576667][ T5857] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 136.577624][ T5857] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 136.577675][ T5857] usb 5-1: media controller created [ 136.580278][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.601134][ T5857] dvb-usb: bulk message failed: -22 (6/0) [ 136.601193][ T5857] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 136.607394][ T5857] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input18 [ 136.618198][ T5857] dvb-usb: schedule remote query interval to 150 msecs. [ 136.618213][ T5857] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 136.637123][ T5785] Bluetooth: hci1: failed to read key size for handle 200 [ 136.776037][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 136.776353][ T5857] dvb-usb: error while querying for an remote control event. [ 136.786541][ T11] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 136.788104][ T11] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 136.942560][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 136.942590][ T5857] dvb-usb: error while querying for an remote control event. [ 137.044063][ T11] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 137.102484][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 137.102503][ T5857] dvb-usb: error while querying for an remote control event. [ 137.203082][ T7990] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 137.262552][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 137.262574][ T5857] dvb-usb: error while querying for an remote control event. [ 137.422758][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 137.422778][ T5857] dvb-usb: error while querying for an remote control event. [ 137.555162][ T6532] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 137.582466][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 137.582487][ T5857] dvb-usb: error while querying for an remote control event. [ 137.594995][ T8473] ceph: No mds server is up or the cluster is laggy [ 137.643299][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 137.663002][ T8483] netlink: 36 bytes leftover after parsing attributes in process `syz.3.826'. [ 137.711845][ T8486] FAULT_INJECTION: forcing a failure. [ 137.711845][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 137.711873][ T8486] CPU: 1 UID: 0 PID: 8486 Comm: syz.3.827 Not tainted syzkaller #0 PREEMPT(full) [ 137.711885][ T8486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.711899][ T8486] Call Trace: [ 137.711907][ T8486] [ 137.711911][ T8486] dump_stack_lvl+0x100/0x190 [ 137.711970][ T8486] should_fail_ex.cold+0x5/0xa [ 137.711994][ T8486] should_failslab+0xc2/0x120 [ 137.712012][ T8486] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.712029][ T8486] ? kvm_arch_vcpu_create+0x488/0xab0 [ 137.712048][ T8486] kvm_arch_vcpu_create+0x488/0xab0 [ 137.712069][ T8486] kvm_vm_ioctl+0x19f4/0x2950 [ 137.712087][ T8486] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 137.712105][ T8486] ? kasan_quarantine_put+0x104/0x240 [ 137.712116][ T8486] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.712135][ T8486] ? find_held_lock+0x2b/0x80 [ 137.712162][ T8486] ? tomoyo_path_number_perm+0x28f/0x580 [ 137.712180][ T8486] ? tomoyo_path_number_perm+0x28f/0x580 [ 137.712200][ T8486] ? tomoyo_path_number_perm+0x188/0x580 [ 137.712218][ T8486] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.712235][ T8486] ? __pfx_futex_wait+0x10/0x10 [ 137.712254][ T8486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.712266][ T8486] ? do_vfs_ioctl+0x241/0x13f0 [ 137.712278][ T8486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 137.712287][ T8486] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 137.712299][ T8486] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 137.712313][ T8486] ? __fget_files+0x34/0x3d0 [ 137.712332][ T8486] ? selinux_file_ioctl+0x1e0/0x290 [ 137.712359][ T8486] ? selinux_file_ioctl+0x1e7/0x290 [ 137.712370][ T8486] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 137.712385][ T8486] __x64_sys_ioctl+0x18e/0x210 [ 137.712398][ T8486] do_syscall_64+0x123/0x7b0 [ 137.712414][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.712427][ T8486] RIP: 0033:0x7f680bda94d9 [ 137.712445][ T8486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.712456][ T8486] RSP: 002b:00007f680ccd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.712468][ T8486] RAX: ffffffffffffffda RBX: 00007f680c025fa0 RCX: 00007f680bda94d9 [ 137.712475][ T8486] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000f [ 137.712481][ T8486] RBP: 00007f680be3804e R08: 0000000000000000 R09: 0000000000000000 [ 137.712488][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.712495][ T8486] R13: 00007f680c026038 R14: 00007f680c025fa0 R15: 00007ffd1774c298 [ 137.712510][ T8486] [ 137.712596][ T8486] kvm: failed to allocate vcpu's emulator [ 137.742421][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 137.742439][ T5857] dvb-usb: error while querying for an remote control event. [ 137.822515][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 137.904868][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 137.904888][ T5857] dvb-usb: error while querying for an remote control event. [ 137.941104][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 137.941516][ T8491] netlink: 'syz.3.830': attribute type 14 has an invalid length. [ 137.942480][ T8493] FAULT_INJECTION: forcing a failure. [ 137.942480][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 137.942496][ T8493] CPU: 1 UID: 0 PID: 8493 Comm: syz.2.829 Not tainted syzkaller #0 PREEMPT(full) [ 137.942507][ T8493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.942513][ T8493] Call Trace: [ 137.942517][ T8493] [ 137.942521][ T8493] dump_stack_lvl+0x100/0x190 [ 137.942543][ T8493] should_fail_ex.cold+0x5/0xa [ 137.942560][ T8493] should_failslab+0xc2/0x120 [ 137.942573][ T8493] __kmalloc_noprof+0xfc/0x840 [ 137.942583][ T8493] ? rcu_is_watching+0x13/0xc0 [ 137.942595][ T8493] ? tomoyo_realpath_from_path+0xb6/0x690 [ 137.942611][ T8493] tomoyo_realpath_from_path+0xb6/0x690 [ 137.942627][ T8493] tomoyo_path_number_perm+0x23c/0x580 [ 137.942643][ T8493] ? tomoyo_path_number_perm+0x22e/0x580 [ 137.942660][ T8493] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.942682][ T8493] ? __lock_acquire+0x5c0/0x1f40 [ 137.942703][ T8493] ? __fget_files+0x34/0x3d0 [ 137.942717][ T8493] ? find_held_lock+0x2b/0x80 [ 137.942728][ T8493] ? hook_file_ioctl_common+0x140/0x440 [ 137.942745][ T8493] ? __fget_files+0x21f/0x3d0 [ 137.942761][ T8493] security_file_ioctl+0xd3/0x230 [ 137.942772][ T8493] __x64_sys_ioctl+0xb7/0x210 [ 137.942785][ T8493] do_syscall_64+0x123/0x7b0 [ 137.942802][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.942813][ T8493] RIP: 0033:0x7f5811da94d9 [ 137.942822][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.942832][ T8493] RSP: 002b:00007f5812cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.942843][ T8493] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811da94d9 [ 137.942849][ T8493] RDX: 0000200000000200 RSI: 00000000a0044d07 RDI: 0000000000000003 [ 137.942855][ T8493] RBP: 00007f5812cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 137.942861][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.942867][ T8493] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 137.942880][ T8493] [ 137.942884][ T8493] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.062448][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 138.062471][ T5857] dvb-usb: error while querying for an remote control event. [ 138.232870][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 138.232893][ T5857] dvb-usb: error while querying for an remote control event. [ 138.392486][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 138.392507][ T5857] dvb-usb: error while querying for an remote control event. [ 138.552396][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 138.552417][ T5857] dvb-usb: error while querying for an remote control event. [ 138.602430][ T6532] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 138.642426][ T5486] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 138.712387][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 138.712414][ T5857] dvb-usb: error while querying for an remote control event. [ 138.752444][ T6532] usb 7-1: Using ep0 maxpacket: 32 [ 138.752988][ T6532] usb 7-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 138.753923][ T6532] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 138.753944][ T6532] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.753960][ T6532] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.753977][ T6532] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.755680][ T6532] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.755692][ T6532] usb 7-1: Product: syz [ 138.755698][ T6532] usb 7-1: Manufacturer: syz [ 138.755705][ T6532] usb 7-1: SerialNumber: syz [ 138.756964][ T6532] usb 7-1: config 0 descriptor?? [ 138.757447][ T8508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.763137][ T6532] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 138.773287][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 138.794097][ T5486] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 138.797662][ T5486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.797675][ T5486] usb 6-1: Product: syz [ 138.797682][ T5486] usb 6-1: Manufacturer: syz [ 138.797688][ T5486] usb 6-1: SerialNumber: syz [ 138.824341][ T5891] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 138.872796][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 138.872817][ T5857] dvb-usb: error while querying for an remote control event. [ 138.960428][ T6532] usb 7-1: USB disconnect, device number 15 [ 138.960503][ C1] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.972059][ T8508] tipc: Enabling of bearer rejected, failed to enable media [ 139.032407][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 139.032428][ T5857] dvb-usb: error while querying for an remote control event. [ 139.137793][ T6532] usb 5-1: USB disconnect, device number 10 [ 139.156671][ T44] kauditd_printk_skb: 19 callbacks suppressed [ 139.156738][ T44] audit: type=1400 audit(1700000026.361:16770): avc: denied { write } for pid=8511 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.157330][ T8512] net_ratelimit: 10 callbacks suppressed [ 139.157340][ T8512] openvswitch: netlink: IPv4 tunnel dst address is zero [ 139.164415][ T6532] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 139.191894][ T5785] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 139.198119][ T44] audit: type=1400 audit(1700000026.401:16771): avc: denied { mount } for pid=8517 comm="syz.3.840" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.201262][ T44] audit: type=1800 audit(1700000026.401:16772): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.840" name="bus" dev="sda1" ino=2039 res=0 errno=-22 [ 139.305028][ T44] audit: type=1400 audit(1700000026.511:16773): avc: denied { unmount } for pid=5784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.538435][ T8527] FAULT_INJECTION: forcing a failure. [ 139.538435][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 139.538453][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.2.842 Not tainted syzkaller #0 PREEMPT(full) [ 139.538465][ T8527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.538479][ T8527] Call Trace: [ 139.538482][ T8527] [ 139.538487][ T8527] dump_stack_lvl+0x100/0x190 [ 139.538509][ T8527] should_fail_ex.cold+0x5/0xa [ 139.538525][ T8527] should_failslab+0xc2/0x120 [ 139.538538][ T8527] __kmalloc_noprof+0xfc/0x840 [ 139.538549][ T8527] ? tomoyo_encode2+0xfb/0x3c0 [ 139.538564][ T8527] tomoyo_encode2+0xfb/0x3c0 [ 139.538577][ T8527] tomoyo_encode+0x29/0x50 [ 139.538589][ T8527] tomoyo_realpath_from_path+0x18c/0x690 [ 139.538604][ T8527] tomoyo_path_number_perm+0x23c/0x580 [ 139.538619][ T8527] ? tomoyo_path_number_perm+0x22e/0x580 [ 139.538636][ T8527] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.538657][ T8527] ? __lock_acquire+0x5c0/0x1f40 [ 139.538680][ T8527] ? __fget_files+0x34/0x3d0 [ 139.538693][ T8527] ? find_held_lock+0x2b/0x80 [ 139.538704][ T8527] ? hook_file_ioctl_common+0x140/0x440 [ 139.538721][ T8527] ? __fget_files+0x21f/0x3d0 [ 139.538736][ T8527] security_file_ioctl+0xd3/0x230 [ 139.538748][ T8527] __x64_sys_ioctl+0xb7/0x210 [ 139.538760][ T8527] do_syscall_64+0x123/0x7b0 [ 139.538776][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.538787][ T8527] RIP: 0033:0x7f5811da94d9 [ 139.538797][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.538807][ T8527] RSP: 002b:00007f5812cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.538817][ T8527] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811da94d9 [ 139.538824][ T8527] RDX: 0000200000000200 RSI: 00000000a0044d07 RDI: 0000000000000003 [ 139.538830][ T8527] RBP: 00007f5812cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 139.538836][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.538841][ T8527] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 139.538855][ T8527] [ 139.538864][ T8527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.584191][ T44] audit: type=1400 audit(1700000026.791:16774): avc: denied { accept } for pid=8529 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.584570][ T44] audit: type=1400 audit(1700000026.791:16775): avc: denied { write } for pid=8529 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.585349][ T44] audit: type=1400 audit(1700000026.791:16776): avc: denied { read } for pid=8529 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.586567][ T44] audit: type=1400 audit(1700000026.791:16777): avc: denied { validate_trans } for pid=8529 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.785714][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.786044][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.892621][ T5891] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 139.892775][ T5891] ath9k_htc: Failed to initialize the device [ 139.908738][ T5891] usb 6-1: ath9k_htc: USB layer deinitialized [ 139.915014][ T5486] usb 6-1: USB disconnect, device number 14 [ 140.012575][ T6532] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 140.162310][ T6532] usb 7-1: Using ep0 maxpacket: 16 [ 140.164951][ T6532] usb 7-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 140.165837][ T6532] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 140.165855][ T6532] usb 7-1: config 0 has no interface number 0 [ 140.165891][ T6532] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.165910][ T6532] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.167147][ T6532] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 140.167158][ T6532] usb 7-1: Product: syz [ 140.167165][ T6532] usb 7-1: SerialNumber: syz [ 140.171029][ T6532] usb 7-1: config 0 descriptor?? [ 140.172747][ T6532] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 140.175262][ T6532] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input20 [ 140.481429][ T5785] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 140.485857][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.849'. [ 140.569388][ T44] audit: type=1400 audit(1700000027.771:16778): avc: denied { write } for pid=8566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.638566][ T44] audit: type=1400 audit(1700000027.841:16779): avc: denied { write } for pid=8569 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.904969][ T8582] loop5: detected capacity change from 0 to 4095 [ 140.932992][ T7408] Buffer I/O error on dev loop5, logical block 511, async page read [ 141.311113][ T8605] SELinux: Context system_u:object_r:locale_t:s0 is not valid (left unmapped). [ 141.410303][ T8611] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 141.410319][ T8611] netlink: 'syz.3.865': attribute type 2 has an invalid length. [ 141.602206][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.752820][ T10] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 141.755653][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.755666][ T10] usb 5-1: Product: syz [ 141.755673][ T10] usb 5-1: Manufacturer: syz [ 141.755680][ T10] usb 5-1: SerialNumber: syz [ 141.773877][ T11] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.782272][ T6532] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 141.933422][ T6532] usb 6-1: New USB device found: idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 141.934436][ T6532] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 141.934457][ T6532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.934469][ T6532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.934480][ T6532] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 141.935570][ T6532] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 141.935581][ T6532] usb 6-1: Manufacturer: syz [ 141.938042][ T6532] usb 6-1: config 0 descriptor?? [ 142.236816][ T5785] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 142.348348][ T6532] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 142.354567][ T6532] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 142.733103][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.733318][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.791437][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.791621][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.792110][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.792344][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.792612][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.792788][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.792975][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.793208][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.793286][ T5486] usb 7-1: USB disconnect, device number 16 [ 142.793401][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 142.793411][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 142.806081][ T5486] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 142.862771][ T11] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 142.862863][ T11] ath9k_htc: Failed to initialize the device [ 142.879197][ T8628] veth0_to_hsr: entered allmulticast mode [ 142.890056][ T11] usb 5-1: ath9k_htc: USB layer deinitialized [ 142.895946][ T6532] usb 5-1: USB disconnect, device number 11 [ 143.002906][ T7990] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 143.051795][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 143.116047][ T43] usb 6-1: USB disconnect, device number 15 [ 143.165192][ T7990] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 143.166003][ T7990] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 143.166031][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.166043][ T7990] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.166055][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.166066][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.166863][ T7990] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 143.166888][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.166900][ T7990] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.166911][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.166923][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.167696][ T7990] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 143.167716][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.167728][ T7990] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.167738][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.167750][ T7990] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.170032][ T7990] usb 8-1: string descriptor 0 read error: -22 [ 143.170088][ T7990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.177444][ T7990] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 143.429046][ T5891] usb 8-1: USB disconnect, device number 13 [ 143.892035][ T5857] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 143.968032][ T8658] FAULT_INJECTION: forcing a failure. [ 143.968032][ T8658] name failslab, interval 1, probability 0, space 0, times 0 [ 143.968051][ T8658] CPU: 1 UID: 0 PID: 8658 Comm: syz.3.880 Not tainted syzkaller #0 PREEMPT(full) [ 143.968063][ T8658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.968069][ T8658] Call Trace: [ 143.968073][ T8658] [ 143.968078][ T8658] dump_stack_lvl+0x100/0x190 [ 143.968100][ T8658] should_fail_ex.cold+0x5/0xa [ 143.968117][ T8658] should_failslab+0xc2/0x120 [ 143.968130][ T8658] __kmalloc_cache_noprof+0x91/0x6d0 [ 143.968145][ T8658] ? snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0x137/0x580 [ 143.968179][ T8658] snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0x137/0x580 [ 143.968195][ T8658] snd_mixer_oss_get_volume1+0x236/0x610 [ 143.968209][ T8658] snd_mixer_oss_ioctl1+0x290/0x1bb0 [ 143.968220][ T8658] ? __pfx_snd_mixer_oss_get_volume1+0x10/0x10 [ 143.968234][ T8658] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 143.968244][ T8658] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 143.968260][ T8658] ? __fget_files+0x34/0x3d0 [ 143.968279][ T8658] ? selinux_file_ioctl+0x1e0/0x290 [ 143.968292][ T8658] snd_mixer_oss_ioctl+0x3e/0x50 [ 143.968302][ T8658] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 143.968337][ T8658] __x64_sys_ioctl+0x18e/0x210 [ 143.968358][ T8658] do_syscall_64+0x123/0x7b0 [ 143.968374][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.968386][ T8658] RIP: 0033:0x7f680bda94d9 [ 143.968395][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.968404][ T8658] RSP: 002b:00007f680ccd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.968416][ T8658] RAX: ffffffffffffffda RBX: 00007f680c025fa0 RCX: 00007f680bda94d9 [ 143.968422][ T8658] RDX: 0000200000000200 RSI: 00000000a0044d07 RDI: 0000000000000003 [ 143.968428][ T8658] RBP: 00007f680ccd3090 R08: 0000000000000000 R09: 0000000000000000 [ 143.968435][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.968440][ T8658] R13: 00007f680c026038 R14: 00007f680c025fa0 R15: 00007ffd1774c298 [ 143.968454][ T8658] [ 144.073125][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 144.074043][ T5857] usb 6-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 144.075275][ T5857] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 144.075287][ T5857] usb 6-1: config 0 has no interface number 0 [ 144.075304][ T5857] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.075316][ T5857] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 144.076933][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 144.076946][ T5857] usb 6-1: Product: syz [ 144.076953][ T5857] usb 6-1: SerialNumber: syz [ 144.078146][ T5857] usb 6-1: config 0 descriptor?? [ 144.081874][ T5857] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 144.114005][ T5857] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input22 [ 144.212581][ T5785] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 144.367311][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'. [ 144.542239][ T5134] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 144.714317][ T5134] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 144.715859][ T5134] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 144.715949][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.715970][ T5134] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.715989][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.716008][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 144.717490][ T5134] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 144.720490][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.720514][ T5134] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.720533][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.720601][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 144.763141][ T5134] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 144.763226][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.763247][ T5134] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.763265][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.763285][ T5134] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 144.795903][ T5134] usb 7-1: string descriptor 0 read error: -22 [ 144.796063][ T5134] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.815570][ T5134] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 144.880446][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 144.890563][ T44] kauditd_printk_skb: 11 callbacks suppressed [ 144.890628][ T44] audit: type=1400 audit(1700000032.091:16791): avc: denied { append } for pid=8785 comm="syz.3.894" name="pfkey" dev="proc" ino=4026533201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 145.064947][ T5891] usb 7-1: USB disconnect, device number 17 [ 145.099834][ T5785] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 145.132055][ T1046] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.302602][ T1046] usb 5-1: New USB device found: idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.303582][ T1046] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.303603][ T1046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.303615][ T1046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.303625][ T1046] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.304427][ T1046] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.304438][ T1046] usb 5-1: Manufacturer: syz [ 145.306081][ T1046] usb 5-1: config 0 descriptor?? [ 145.603975][ T8802] FAULT_INJECTION: forcing a failure. [ 145.603975][ T8802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.604014][ T8802] CPU: 2 UID: 0 PID: 8802 Comm: syz.2.899 Not tainted syzkaller #0 PREEMPT(full) [ 145.604033][ T8802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.604052][ T8802] Call Trace: [ 145.604063][ T8802] [ 145.604070][ T8802] dump_stack_lvl+0x100/0x190 [ 145.604149][ T8802] should_fail_ex.cold+0x5/0xa [ 145.604176][ T8802] _copy_to_user+0x32/0xd0 [ 145.604196][ T8802] simple_read_from_buffer+0xcb/0x170 [ 145.604212][ T8802] proc_fail_nth_read+0x1af/0x230 [ 145.604228][ T8802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.604251][ T8802] ? rw_verify_area+0xce/0x6d0 [ 145.604275][ T8802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.604295][ T8802] vfs_read+0x1e4/0xb30 [ 145.604313][ T8802] ? lock_acquire+0x1d1/0x380 [ 145.604352][ T8802] ? __fget_files+0x34/0x3d0 [ 145.604372][ T8802] ? __pfx_vfs_read+0x10/0x10 [ 145.604408][ T8802] ? find_held_lock+0x2b/0x80 [ 145.604426][ T8802] ? __fget_files+0x215/0x3d0 [ 145.604449][ T8802] ? __fget_files+0x21f/0x3d0 [ 145.604474][ T8802] ksys_read+0x12a/0x250 [ 145.604492][ T8802] ? __pfx_ksys_read+0x10/0x10 [ 145.604515][ T8802] do_syscall_64+0x123/0x7b0 [ 145.604545][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.604563][ T8802] RIP: 0033:0x7f5811d69d0e [ 145.604591][ T8802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.604607][ T8802] RSP: 002b:00007f5812cf0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.604624][ T8802] RAX: ffffffffffffffda RBX: 00007f5812cf16c0 RCX: 00007f5811d69d0e [ 145.604634][ T8802] RDX: 000000000000000f RSI: 00007f5812cf10a0 RDI: 0000000000000004 [ 145.604645][ T8802] RBP: 00007f5812cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 145.604654][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.604663][ T8802] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 145.604689][ T8802] [ 145.690757][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 145.718544][ T1046] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 145.722927][ T1046] appleir 0003:05AC:8243.000B: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 145.752430][ T7990] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 145.781540][ T44] audit: type=1400 audit(1700000032.982:16792): avc: denied { write } for pid=8809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.843914][ T44] audit: type=1400 audit(1700000033.052:16793): avc: denied { write } for pid=8815 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.855448][ T8813] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 145.884779][ T8813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.897748][ T8813] bond3: (slave bond4): making interface the new active one [ 145.901367][ T8813] bond3: (slave bond4): Enslaving as an active interface with an up link [ 145.923653][ T8813] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 145.925815][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.902'. [ 145.929487][ T44] audit: type=1400 audit(1700000033.132:16794): avc: denied { ioctl } for pid=8812 comm="syz.3.902" path="socket:[20433]" dev="sockfs" ino=20433 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.955514][ T44] audit: type=1400 audit(1700000033.162:16795): avc: denied { write } for pid=8821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.031275][ T8828] block device autoloading is deprecated and will be removed. [ 146.051562][ T44] audit: type=1400 audit(1700000033.252:16796): avc: denied { write } for pid=8832 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.160681][ T44] audit: type=1400 audit(1700000033.362:16797): avc: denied { write } for pid=8838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.203276][ T44] audit: type=1400 audit(1700000033.412:16798): avc: denied { write } for pid=8841 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.348683][ T8849] netlink: 'syz.3.906': attribute type 3 has an invalid length. [ 146.438111][ T8853] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 146.452488][ T8853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.456593][ T8853] bond5: entered promiscuous mode [ 146.456615][ T8853] bond5: entered allmulticast mode [ 146.463717][ T8853] macvlan2: entered promiscuous mode [ 146.463729][ T8853] macvlan2: entered allmulticast mode [ 146.464293][ T8853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.635502][ T5486] usb 5-1: USB disconnect, device number 12 [ 146.663720][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.664142][ T7990] usb 6-1: USB disconnect, device number 16 [ 146.664276][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 146.674710][ T7990] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 146.841877][ T1046] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 146.992445][ T1046] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 146.993359][ T1046] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 146.993382][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 146.993395][ T1046] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.993406][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.993418][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 146.994235][ T1046] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 146.994263][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 146.994282][ T1046] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.994299][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.994317][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 146.995104][ T1046] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 146.995135][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 146.995153][ T1046] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.995168][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.995179][ T1046] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 146.997681][ T1046] usb 8-1: string descriptor 0 read error: -22 [ 146.997793][ T1046] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.002683][ T1046] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 147.255308][ T5857] usb 8-1: USB disconnect, device number 14 [ 150.248611][ T44] audit: type=1400 audit(1700000037.452:16799): avc: denied { write } for pid=8869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.298219][ T44] audit: type=1400 audit(1700000037.502:16800): avc: denied { write } for pid=8872 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.893573][ C2] bridge0: port 1(veth0_to_bridge) entered learning state [ 153.086141][ T44] audit: type=1400 audit(1700000040.292:16801): avc: denied { write } for pid=8874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.142385][ T44] audit: type=1400 audit(1700000040.352:16802): avc: denied { write } for pid=8877 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.171559][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 159.620159][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 159.629103][ T44] audit: type=1400 audit(1700000046.832:16803): avc: denied { write } for pid=8885 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.633696][ T44] audit: type=1400 audit(1700000046.842:16804): avc: denied { write } for pid=8895 comm="syz.3.914" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 159.634975][ T8897] xt_NFQUEUE: number of queues (32769) out of range (got 98303) [ 159.712727][ T8913] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 159.723493][ T8913] 8021q: adding VLAN 0 to HW filter on device bond9 [ 159.729339][ T8913] bond9: entered promiscuous mode [ 159.729353][ T8913] bond9: entered allmulticast mode [ 159.736602][ T8913] macvlan2: entered promiscuous mode [ 159.736614][ T8913] macvlan2: entered allmulticast mode [ 159.737331][ T8913] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.881030][ T6532] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 159.985439][ T5785] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 160.041863][ T6532] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 160.042821][ T6532] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.042858][ T6532] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 160.042877][ T6532] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.044452][ T6532] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 160.044471][ T6532] usb 7-1: Product: syz [ 160.044489][ T6532] usb 7-1: Manufacturer: syz [ 160.050383][ T8903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.054621][ T6532] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 160.067471][ T6532] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 160.263751][ T6532] usb 7-1: USB disconnect, device number 18 [ 160.272271][ T68] block nbd2: Receive control failed (result -32) [ 160.283079][ T8906] block nbd2: shutting down sockets [ 160.285888][ T6532] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 160.286196][ T6532] garmin_gps 7-1:1.0: device disconnected [ 161.070998][ T5891] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 161.222172][ T5891] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.223010][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 161.223033][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.223046][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.223057][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.223068][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.223792][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 161.223811][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.223822][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.223833][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.223844][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.224551][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 161.224569][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.224580][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.224591][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.224602][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.226989][ T5891] usb 7-1: string descriptor 0 read error: -22 [ 161.227045][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.231592][ T5891] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 161.487088][ T7990] usb 7-1: USB disconnect, device number 19 [ 162.270878][ T5857] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 162.420982][ T5857] usb 7-1: Using ep0 maxpacket: 16 [ 162.421767][ T5857] usb 7-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 162.422609][ T5857] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 162.422621][ T5857] usb 7-1: config 0 has no interface number 0 [ 162.422638][ T5857] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.422650][ T5857] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.423763][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 162.423774][ T5857] usb 7-1: Product: syz [ 162.423781][ T5857] usb 7-1: SerialNumber: syz [ 162.425469][ T5857] usb 7-1: config 0 descriptor?? [ 162.427307][ T5857] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 162.428264][ T5857] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input23 [ 162.603635][ T8908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.650064][ T8939] zram0: detected capacity change from 0 to 8 [ 162.657276][ T44] audit: type=1400 audit(1700000049.863:16805): avc: denied { write } for pid=8940 comm="syz.3.922" name="/" dev="9p" ino=71827659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.671464][ T44] audit: type=1400 audit(1700000049.883:16806): avc: denied { map } for pid=8940 comm="syz.3.922" path="/269/file0/blkio.bfq.time" dev="9p" ino=71827843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.671563][ T44] audit: type=1400 audit(1700000049.883:16807): avc: denied { write } for pid=8940 comm="syz.3.922" path="/269/file0/blkio.bfq.time" dev="9p" ino=71827843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.702726][ T44] audit: type=1400 audit(1700000049.913:16808): avc: denied { setopt } for pid=8938 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.702909][ T44] audit: type=1400 audit(1700000049.913:16809): avc: denied { getopt } for pid=8938 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.703094][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 162.703104][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 162.705636][ T8947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'. [ 162.709464][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 162.709475][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 162.718061][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 162.718085][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 162.720533][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 162.720543][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 162.749573][ T44] audit: type=1400 audit(1700000049.953:16810): avc: denied { bind } for pid=8949 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.890805][ T7990] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 163.041733][ T7990] usb 5-1: New USB device found: idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 163.042652][ T7990] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 163.042679][ T7990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.042690][ T7990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.042701][ T7990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 163.043488][ T7990] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 163.043500][ T7990] usb 5-1: Manufacturer: syz [ 163.044720][ T7990] usb 5-1: config 0 descriptor?? [ 163.100836][ T43] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 163.251274][ T43] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 163.252096][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 163.252118][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 163.252131][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.252141][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.252153][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 163.252936][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 163.252955][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 163.252966][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.252977][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.252988][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 163.253774][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 163.253793][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 163.253804][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.253815][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.253827][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 163.256329][ T43] usb 6-1: string descriptor 0 read error: -22 [ 163.256386][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.262915][ T43] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 163.450075][ T7990] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 163.452807][ T7990] appleir 0003:05AC:8243.000C: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 163.513876][ T5134] usb 6-1: USB disconnect, device number 17 [ 163.658810][ T5793] Bluetooth: hci2: unexpected cc 0x041a length: 8 > 7 [ 163.658830][ T5793] Bluetooth: hci2: unexpected event for opcode 0x041a [ 163.664632][ T8969] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 163.664655][ T8969] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 163.664987][ T8969] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 163.666047][ T8969] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 164.047016][ T8972] ./dev: Can't lookup blockdev [ 164.266924][ T8984] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 164.295444][ T8984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.303576][ T8984] bond6: entered promiscuous mode [ 164.303654][ T8984] bond6: entered allmulticast mode [ 164.312844][ T8984] macvlan2: entered promiscuous mode [ 164.312862][ T8984] macvlan2: entered allmulticast mode [ 164.314260][ T8984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.409231][ T44] audit: type=1400 audit(1700000051.613:16811): avc: denied { getopt } for pid=8988 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.040994][ C3] cm109_urb_ctl_callback: 3 callbacks suppressed [ 165.041011][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 165.041224][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 165.041335][ T5134] usb 7-1: USB disconnect, device number 20 [ 165.041411][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 165.041420][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 165.046074][ T5134] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 165.653349][ T5857] usb 5-1: USB disconnect, device number 13 [ 165.719804][ T44] audit: type=1400 audit(1700000052.923:16812): avc: denied { setopt } for pid=9008 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.720094][ T44] audit: type=1400 audit(1700000052.923:16813): avc: denied { ioctl } for pid=9008 comm="syz.0.941" path="socket:[24781]" dev="sockfs" ino=24781 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.761815][ T44] audit: type=1400 audit(1700000052.973:16814): avc: denied { write } for pid=9008 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.870623][ T5486] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 165.876135][ T9017] __nla_validate_parse: 9 callbacks suppressed [ 165.876147][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 165.876837][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 165.877017][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 165.877335][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 165.877837][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 166.041103][ T5486] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 166.041945][ T5486] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 166.041989][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.042002][ T5486] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.042013][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.042025][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.042765][ T5486] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 166.042784][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.042795][ T5486] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.042806][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.042817][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.043545][ T5486] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 166.043563][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.043575][ T5486] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.043585][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.043597][ T5486] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.045775][ T5486] usb 7-1: string descriptor 0 read error: -22 [ 166.045836][ T5486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.049359][ T5486] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 166.302488][ T6532] usb 7-1: USB disconnect, device number 21 [ 167.079650][ T8981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.180939][ T9035] FAULT_INJECTION: forcing a failure. [ 167.180939][ T9035] name failslab, interval 1, probability 0, space 0, times 0 [ 167.180962][ T9035] CPU: 0 UID: 0 PID: 9035 Comm: syz.2.946 Not tainted syzkaller #0 PREEMPT(full) [ 167.180976][ T9035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.180984][ T9035] Call Trace: [ 167.180988][ T9035] [ 167.180993][ T9035] dump_stack_lvl+0x100/0x190 [ 167.181019][ T9035] should_fail_ex.cold+0x5/0xa [ 167.181038][ T9035] should_failslab+0xc2/0x120 [ 167.181053][ T9035] kmem_cache_alloc_noprof+0x92/0x6a0 [ 167.181085][ T9035] ? __pfx_map_id_range_down+0x10/0x10 [ 167.181104][ T9035] ? security_inode_alloc+0x3b/0x2c0 [ 167.181127][ T9035] security_inode_alloc+0x3b/0x2c0 [ 167.181145][ T9035] inode_init_always_gfp+0xc75/0xfb0 [ 167.181162][ T9035] alloc_inode+0x8e/0x250 [ 167.181173][ T9035] new_inode+0x22/0x1c0 [ 167.181184][ T9035] devpts_pty_new+0xd0/0x770 [ 167.181201][ T9035] ? __pfx_devpts_pty_new+0x10/0x10 [ 167.181216][ T9035] ? ptmx_open+0x1ad/0x360 [ 167.181231][ T9035] ptmx_open+0x1d9/0x360 [ 167.181241][ T9035] ? __pfx_ptmx_open+0x10/0x10 [ 167.181250][ T9035] chrdev_open+0x234/0x6a0 [ 167.181265][ T9035] ? __pfx_chrdev_open+0x10/0x10 [ 167.181278][ T9035] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 167.181298][ T9035] do_dentry_open+0x674/0x1470 [ 167.181310][ T9035] ? __pfx_chrdev_open+0x10/0x10 [ 167.181331][ T9035] vfs_open_consume+0xcc/0x460 [ 167.181348][ T9035] path_openat+0x1547/0x23f0 [ 167.181366][ T9035] ? __pfx_path_openat+0x10/0x10 [ 167.181383][ T9035] do_file_open+0x20e/0x430 [ 167.181398][ T9035] ? __pfx_do_file_open+0x10/0x10 [ 167.181424][ T9035] ? _raw_spin_unlock+0x28/0x50 [ 167.181438][ T9035] ? alloc_fd+0x471/0x7a0 [ 167.181456][ T9035] do_sys_openat2+0x163/0x1d0 [ 167.181471][ T9035] ? __pfx_do_sys_openat2+0x10/0x10 [ 167.181486][ T9035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.181505][ T9035] __x64_sys_openat+0x12d/0x210 [ 167.181520][ T9035] ? __pfx___x64_sys_openat+0x10/0x10 [ 167.181542][ T9035] do_syscall_64+0x123/0x7b0 [ 167.181558][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.181569][ T9035] RIP: 0033:0x7f5811da94d9 [ 167.181579][ T9035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.181589][ T9035] RSP: 002b:00007f5812cd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.181600][ T9035] RAX: ffffffffffffffda RBX: 00007f5812026090 RCX: 00007f5811da94d9 [ 167.181607][ T9035] RDX: 0000000000028100 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 167.181614][ T9035] RBP: 00007f5811e3804e R08: 0000000000000000 R09: 0000000000000000 [ 167.181620][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.181626][ T9035] R13: 00007f5812026128 R14: 00007f5812026090 R15: 00007ffdf879b958 [ 167.181641][ T9035] [ 167.209931][ T9039] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 167.219456][ T9039] 8021q: adding VLAN 0 to HW filter on device bond9 [ 167.222721][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 167.224819][ T9039] bond9: entered promiscuous mode [ 167.224831][ T9039] bond9: entered allmulticast mode [ 167.229394][ T9039] macvlan2: entered promiscuous mode [ 167.229405][ T9039] macvlan2: entered allmulticast mode [ 167.230284][ T9039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.260689][ C1] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 167.260710][ C1] bridge0: topology change detected, propagating [ 167.305076][ T9049] bpf: Bad value for 'uid' [ 167.369040][ T44] audit: type=1400 audit(1700000054.573:16815): avc: denied { mount } for pid=9060 comm="syz.2.957" name="/" dev="ecryptfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 167.705946][ T9068] FAULT_INJECTION: forcing a failure. [ 167.705946][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 167.705964][ T9068] CPU: 2 UID: 0 PID: 9068 Comm: syz.1.959 Not tainted syzkaller #0 PREEMPT(full) [ 167.705976][ T9068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.705982][ T9068] Call Trace: [ 167.705985][ T9068] [ 167.705990][ T9068] dump_stack_lvl+0x100/0x190 [ 167.706011][ T9068] should_fail_ex.cold+0x5/0xa [ 167.706027][ T9068] should_failslab+0xc2/0x120 [ 167.706039][ T9068] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 167.706051][ T9068] ? __d_alloc+0x34/0xad0 [ 167.706067][ T9068] __d_alloc+0x34/0xad0 [ 167.706082][ T9068] d_alloc_pseudo+0x1c/0xc0 [ 167.706093][ T9068] alloc_file_pseudo+0x118/0x290 [ 167.706109][ T9068] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 167.706123][ T9068] ? alloc_fd+0x471/0x7a0 [ 167.706139][ T9068] sock_alloc_file+0x50/0x210 [ 167.706163][ T9068] __sys_socket+0x1c0/0x260 [ 167.706172][ T9068] ? fput+0x7c/0x100 [ 167.706185][ T9068] ? __pfx___sys_socket+0x10/0x10 [ 167.706195][ T9068] ? ksys_write+0x1ac/0x250 [ 167.706205][ T9068] ? __pfx_ksys_write+0x10/0x10 [ 167.706219][ T9068] __x64_sys_socket+0x72/0xb0 [ 167.706234][ T9068] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.706249][ T9068] do_syscall_64+0x123/0x7b0 [ 167.706263][ T9068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.706274][ T9068] RIP: 0033:0x7fcce69a94d9 [ 167.706283][ T9068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.706292][ T9068] RSP: 002b:00007fcce7820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 167.706303][ T9068] RAX: ffffffffffffffda RBX: 00007fcce6c25fa0 RCX: 00007fcce69a94d9 [ 167.706310][ T9068] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 167.706316][ T9068] RBP: 00007fcce6a3804e R08: 0000000000000000 R09: 0000000000000000 [ 167.706321][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.706327][ T9068] R13: 00007fcce6c26038 R14: 00007fcce6c25fa0 R15: 00007ffc21154568 [ 167.706340][ T9068] [ 167.890341][ T44] audit: type=1400 audit(1700000055.093:16816): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 167.982483][ T9084] dlm: no locking on control device [ 167.985362][ T44] audit: type=1400 audit(1700000055.193:16817): avc: denied { setopt } for pid=9070 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.891531][ T237] rpcbind: server 127.0.0.1 not responding, timed out [ 170.252803][ T9096] netlink: 'syz.3.965': attribute type 1 has an invalid length. [ 170.266944][ T9096] 8021q: adding VLAN 0 to HW filter on device bond7 [ 170.269597][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.965'. [ 170.272699][ T9096] bond7: entered promiscuous mode [ 170.272713][ T9096] bond7: entered allmulticast mode [ 170.276251][ T9096] macvlan2: entered promiscuous mode [ 170.276262][ T9096] macvlan2: entered allmulticast mode [ 170.276827][ T9096] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.339847][ T9062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.450500][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 170.610318][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 170.760327][ T42] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 170.850315][ T5891] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 170.880326][ T43] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 170.920419][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 170.921110][ T42] usb 7-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 170.924575][ T42] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 170.924593][ T42] usb 7-1: config 0 has no interface number 0 [ 170.924621][ T42] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 170.924639][ T42] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 170.926005][ T42] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 170.926018][ T42] usb 7-1: Product: syz [ 170.926025][ T42] usb 7-1: SerialNumber: syz [ 170.926912][ T44] audit: type=1400 audit(1700000058.133:16818): avc: denied { ioctl } for pid=9120 comm="syz.3.974" path="/macvtap0" dev="tmpfs" ino=13 ioctlcmd=0x401054d5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.927515][ T42] usb 7-1: config 0 descriptor?? [ 170.930063][ T42] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 170.935967][ T42] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input24 [ 171.020764][ T5891] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 171.023282][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.023295][ T5891] usb 5-1: Product: syz [ 171.023302][ T5891] usb 5-1: Manufacturer: syz [ 171.023309][ T5891] usb 5-1: SerialNumber: syz [ 171.032479][ T43] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 171.035500][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 171.035910][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.035933][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.035951][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.035967][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.036939][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 171.036970][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.036986][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.037002][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.037019][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.037923][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 171.037953][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.037972][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.037991][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.038008][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.039511][ T5891] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 171.041628][ T43] usb 6-1: string descriptor 0 read error: -22 [ 171.041734][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.055683][ T43] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 171.144622][ T9124] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 171.154840][ T9124] 8021q: adding VLAN 0 to HW filter on device bond8 [ 171.157899][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 171.159173][ T9124] bond8: entered promiscuous mode [ 171.159186][ T9124] bond8: entered allmulticast mode [ 171.167835][ T9124] macvlan2: entered promiscuous mode [ 171.167854][ T9124] macvlan2: entered allmulticast mode [ 171.168809][ T9124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.196716][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.972'. [ 171.273212][ T9128] netlink: 'syz.3.976': attribute type 34 has an invalid length. [ 171.273286][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 171.303547][ T11] usb 6-1: USB disconnect, device number 18 [ 171.798490][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.798779][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.050248][ T5891] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 172.050420][ T5891] ath9k_htc: Failed to initialize the device [ 172.070456][ T5891] usb 5-1: ath9k_htc: USB layer deinitialized [ 172.075829][ T7990] usb 5-1: USB disconnect, device number 14 [ 172.688183][ T44] audit: type=1400 audit(1700000059.893:16819): avc: denied { ioctl } for pid=9144 comm="syz.0.980" path="socket:[23139]" dev="sockfs" ino=23139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.688597][ T44] audit: type=1400 audit(1700000059.893:16820): avc: denied { bind } for pid=9144 comm="syz.0.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.689682][ T44] audit: type=1400 audit(1700000059.893:16821): avc: denied { ioctl } for pid=9144 comm="syz.0.980" path="/dev/vhost-net" dev="devtmpfs" ino=1307 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.533558][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.533740][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.533912][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.534078][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.534244][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.534410][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.534575][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.534762][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.534930][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.535060][ T43] usb 7-1: USB disconnect, device number 22 [ 173.535097][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 173.535107][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 173.574264][ T43] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 174.147258][ T44] audit: type=1400 audit(1700000061.353:16822): avc: denied { setopt } for pid=9154 comm="syz.2.984" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.147561][ T9155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.265641][ T9134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.295117][ T9160] netlink: 'syz.1.986': attribute type 1 has an invalid length. [ 174.304363][ T9160] 8021q: adding VLAN 0 to HW filter on device bond10 [ 174.306910][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 174.308507][ T9160] bond10: entered promiscuous mode [ 174.308518][ T9160] bond10: entered allmulticast mode [ 174.313424][ T9160] macvlan2: entered promiscuous mode [ 174.313434][ T9160] macvlan2: entered allmulticast mode [ 174.314039][ T9160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.480069][ T5891] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 174.482898][ T5785] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 174.630743][ T5891] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 174.631563][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 174.631585][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 174.631598][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.631609][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 174.631621][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 174.632372][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 174.632392][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 174.632404][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.632415][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 174.632426][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 174.633143][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 174.633162][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 174.633173][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.633184][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 174.633196][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 174.635425][ T5891] usb 7-1: string descriptor 0 read error: -22 [ 174.635519][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.642850][ T5891] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 174.821880][ T11] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 174.894948][ T5891] usb 7-1: USB disconnect, device number 23 [ 174.980020][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 174.980474][ T11] usb 5-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 174.981276][ T11] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 174.981288][ T11] usb 5-1: config 0 has no interface number 0 [ 174.981305][ T11] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.981317][ T11] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 174.982456][ T11] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 174.982467][ T11] usb 5-1: Product: syz [ 174.982474][ T11] usb 5-1: SerialNumber: syz [ 174.983768][ T11] usb 5-1: config 0 descriptor?? [ 174.985839][ T11] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 174.987028][ T11] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input25 [ 175.206800][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 175.208410][ T7990] usb 5-1: USB disconnect, device number 15 [ 175.208584][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 175.214808][ T7990] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 175.433503][ T9173] FAULT_INJECTION: forcing a failure. [ 175.433503][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 175.433522][ T9173] CPU: 3 UID: 0 PID: 9173 Comm: syz.2.991 Not tainted syzkaller #0 PREEMPT(full) [ 175.433534][ T9173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.433540][ T9173] Call Trace: [ 175.433544][ T9173] [ 175.433548][ T9173] dump_stack_lvl+0x100/0x190 [ 175.433571][ T9173] should_fail_ex.cold+0x5/0xa [ 175.433589][ T9173] should_failslab+0xc2/0x120 [ 175.433603][ T9173] kmem_cache_alloc_noprof+0x92/0x6a0 [ 175.433621][ T9173] ? security_file_alloc+0x34/0x2c0 [ 175.433652][ T9173] security_file_alloc+0x34/0x2c0 [ 175.433667][ T9173] init_file+0x95/0x480 [ 175.433682][ T9173] alloc_empty_file+0x79/0x1c0 [ 175.433698][ T9173] path_openat+0xd6/0x23f0 [ 175.433715][ T9173] ? __pfx_path_openat+0x10/0x10 [ 175.433733][ T9173] do_file_open+0x20e/0x430 [ 175.433748][ T9173] ? __pfx_do_file_open+0x10/0x10 [ 175.433772][ T9173] ? _raw_spin_unlock+0x28/0x50 [ 175.433783][ T9173] ? alloc_fd+0x471/0x7a0 [ 175.433800][ T9173] do_sys_openat2+0x163/0x1d0 [ 175.433816][ T9173] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.433835][ T9173] __x64_sys_openat+0x12d/0x210 [ 175.433849][ T9173] ? __pfx___x64_sys_openat+0x10/0x10 [ 175.433863][ T9173] ? ksys_write+0x1ac/0x250 [ 175.433884][ T9173] do_syscall_64+0x123/0x7b0 [ 175.433900][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.433912][ T9173] RIP: 0033:0x7f5811da94d9 [ 175.433922][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.433933][ T9173] RSP: 002b:00007f5812cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.433946][ T9173] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811da94d9 [ 175.433953][ T9173] RDX: 00000000000a0480 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 175.433960][ T9173] RBP: 00007f5811e3804e R08: 0000000000000000 R09: 0000000000000000 [ 175.433966][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.433973][ T9173] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 175.433987][ T9173] [ 175.771367][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 175.846425][ T9188] netlink: 'syz.1.996': attribute type 34 has an invalid length. [ 175.846445][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 176.150245][ T5891] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 176.280044][ T7990] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 176.300833][ T5891] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 176.301940][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 176.301978][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.301999][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.302020][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.302041][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.303038][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 176.303072][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.303090][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.303130][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.303151][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.304176][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 176.304209][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.304229][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.304248][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.304267][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.307495][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 176.307593][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.323026][ T5891] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 176.450245][ T7990] usb 7-1: Using ep0 maxpacket: 16 [ 176.451184][ T7990] usb 7-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 176.451939][ T7990] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 176.451952][ T7990] usb 7-1: config 0 has no interface number 0 [ 176.451969][ T7990] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 176.451980][ T7990] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 176.453079][ T7990] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 176.453091][ T7990] usb 7-1: Product: syz [ 176.453097][ T7990] usb 7-1: SerialNumber: syz [ 176.454432][ T7990] usb 7-1: config 0 descriptor?? [ 176.456175][ T7990] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 176.456960][ T7990] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input26 [ 176.571661][ T11] usb 5-1: USB disconnect, device number 16 [ 176.675241][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'. [ 176.677402][ T5857] usb 7-1: USB disconnect, device number 24 [ 176.677493][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 176.686671][ T5857] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 178.589302][ T9224] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1007'. [ 178.844773][ T9197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.895305][ T44] audit: type=1400 audit(1700000066.104:16823): avc: denied { read write } for pid=9228 comm="syz.3.1009" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 178.895811][ T44] audit: type=1400 audit(1700000066.104:16824): avc: denied { open } for pid=9228 comm="syz.3.1009" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 178.896242][ T44] audit: type=1400 audit(1700000066.104:16825): avc: denied { ioctl } for pid=9228 comm="syz.3.1009" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 178.912357][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 178.928859][ T44] audit: type=1400 audit(1700000066.134:16826): avc: denied { connect } for pid=9228 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.930473][ T44] audit: type=1400 audit(1700000066.144:16827): avc: denied { read } for pid=9228 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.130060][ T1046] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 179.199909][ T11] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 179.280424][ T1046] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 179.281330][ T1046] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 179.281374][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 179.281405][ T1046] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.281417][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 179.281428][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 179.282717][ T1046] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 179.282751][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 179.282772][ T1046] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.282792][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 179.282812][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 179.283713][ T1046] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 179.283747][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 179.283766][ T1046] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.283787][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 179.283806][ T1046] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 179.286371][ T1046] usb 7-1: string descriptor 0 read error: -22 [ 179.286471][ T1046] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.294482][ T1046] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 179.306811][ T9248] overlay: Unknown parameter 'smackfsdef' [ 179.349903][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 179.350398][ T11] usb 6-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 179.351309][ T11] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 179.351326][ T11] usb 6-1: config 0 has no interface number 0 [ 179.351356][ T11] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.351371][ T11] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 179.356194][ T11] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 179.356208][ T11] usb 6-1: Product: syz [ 179.356215][ T11] usb 6-1: SerialNumber: syz [ 179.358731][ T11] usb 6-1: config 0 descriptor?? [ 179.365764][ T11] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 179.367243][ T11] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input27 [ 179.547123][ T5891] usb 7-1: USB disconnect, device number 25 [ 179.584424][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1012'. [ 179.587164][ C0] cm109_urb_ctl_callback: 7 callbacks suppressed [ 179.587179][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.587454][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.587515][ T1046] usb 6-1: USB disconnect, device number 19 [ 179.587642][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.587652][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 179.595302][ T1046] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 179.666129][ T44] audit: type=1400 audit(1700000066.874:16828): avc: denied { watch_reads } for pid=9251 comm="syz.0.1018" path="/244" dev="tmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.789368][ T9257] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 179.831044][ T9257] kvm [9256]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 179.831780][ T9257] kvm [9256]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 180.007521][ T9260] netlink: 'syz.0.1020': attribute type 34 has an invalid length. [ 180.007538][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 180.091775][ T9267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1021'. [ 180.389165][ T44] audit: type=1400 audit(1700000067.594:16829): avc: denied { bind } for pid=9277 comm="syz.1.1025" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.397492][ T44] audit: type=1400 audit(1700000067.604:16830): avc: denied { name_bind } for pid=9277 comm="syz.1.1025" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 180.629840][ T1046] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 180.791167][ T1046] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 180.792261][ T1046] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.792283][ T1046] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.792302][ T1046] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.794372][ T1046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.794391][ T1046] usb 6-1: Product: syz [ 180.794402][ T1046] usb 6-1: Manufacturer: syz [ 180.794413][ T1046] usb 6-1: SerialNumber: syz [ 180.799005][ T1046] hub 6-1:1.0: bad descriptor, ignoring hub [ 180.799024][ T1046] hub 6-1:1.0: probe with driver hub failed with error -5 [ 180.899676][ T5857] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 181.000674][ T1046] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.060513][ T5857] usb 7-1: New USB device found: idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.061338][ T5857] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.061359][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.061370][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.061380][ T5857] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.062145][ T5857] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.062156][ T5857] usb 7-1: Manufacturer: syz [ 181.063334][ T5857] usb 7-1: config 0 descriptor?? [ 181.304148][ T50] usb 6-1: USB disconnect, device number 20 [ 181.306501][ T50] usblp0: removed [ 181.523476][ T5857] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 181.527975][ T5857] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 181.891181][ T9285] evm: overlay not supported [ 182.014558][ T44] audit: type=1400 audit(1700000069.224:16831): avc: denied { connect } for pid=9291 comm="syz.3.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.054608][ T9297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'. [ 182.083312][ T9303] TC_ACT_REPEAT abuse ? [ 182.124998][ T9299] can0: slcan on ptm55. [ 182.274892][ T43] usb 7-1: USB disconnect, device number 26 [ 182.711779][ T9298] can0 (unregistered): slcan off ptm55. [ 182.979741][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 183.005008][ T9265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.069249][ T44] audit: type=1400 audit(1700000070.274:16832): avc: denied { write } for pid=9314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.135059][ T9322] netlink: 'syz.0.1043': attribute type 34 has an invalid length. [ 183.135073][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 183.147300][ T10] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 183.147788][ T10] usb 6-1: config 0 has no interfaces? [ 183.155586][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.155605][ T10] usb 6-1: Product: syz [ 183.155616][ T10] usb 6-1: Manufacturer: syz [ 183.165030][ T10] usb 6-1: config 0 descriptor?? [ 183.249586][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.569776][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.570187][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.574849][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.575656][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.578530][ T42] usb 6-1: USB disconnect, device number 21 [ 184.130996][ T9342] device-mapper: ioctl: Unable to rename non-existent device, to syzb2 [ 184.411556][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 184.417685][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 184.426873][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 184.579961][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 184.580309][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 184.580553][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 184.580822][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 184.581066][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 186.133425][ T9331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.223284][ T9393] program syz.3.1041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.406317][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 186.406330][ T44] audit: type=1400 audit(1700000073.614:16837): avc: denied { shutdown } for pid=9409 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.433360][ T9410] can0: slcan on ttynull. [ 186.552998][ T44] audit: type=1400 audit(1700000073.764:16838): avc: denied { write } for pid=9420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.589345][ T5486] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 186.628687][ T44] audit: type=1400 audit(1700000073.834:16839): avc: denied { write } for pid=9426 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.644766][ T9425] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.15.33), cmd(9) [ 186.651418][ T9409] can0 (unregistered): slcan off ttynull. [ 186.719173][ T44] audit: type=1400 audit(1700000073.924:16840): avc: denied { write } for pid=9429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.760860][ T5486] usb 5-1: New USB device found: idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 186.761617][ T9433] xt_hashlimit: size too large, truncated to 1048576 [ 186.761697][ T5486] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 186.761717][ T5486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.761729][ T5486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.761739][ T5486] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 186.762574][ T5486] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 186.762586][ T5486] usb 5-1: Manufacturer: syz [ 186.763860][ T5486] usb 5-1: config 0 descriptor?? [ 186.796920][ T44] audit: type=1400 audit(1700000074.004:16841): avc: denied { write } for pid=9434 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.830717][ T44] audit: type=1400 audit(1700000074.044:16842): avc: denied { connect } for pid=9432 comm="syz.3.1051" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.832953][ T44] audit: type=1400 audit(1700000074.044:16843): avc: denied { write } for pid=9432 comm="syz.3.1051" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.018753][ T9443] FAULT_INJECTION: forcing a failure. [ 187.018753][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 187.018772][ T9443] CPU: 0 UID: 0 PID: 9443 Comm: syz.2.1053 Not tainted syzkaller #0 PREEMPT(full) [ 187.018785][ T9443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.018793][ T9443] Call Trace: [ 187.018796][ T9443] [ 187.018801][ T9443] dump_stack_lvl+0x100/0x190 [ 187.018823][ T9443] should_fail_ex.cold+0x5/0xa [ 187.018839][ T9443] ? __pfx_batadv_gw_tvlv_ogm_handler_v1+0x10/0x10 [ 187.018856][ T9443] should_failslab+0xc2/0x120 [ 187.018869][ T9443] __kmalloc_cache_noprof+0x91/0x6d0 [ 187.018884][ T9443] ? batadv_tvlv_handler_register+0x10d/0x530 [ 187.018901][ T9443] ? __pfx_batadv_gw_tvlv_ogm_handler_v1+0x10/0x10 [ 187.018916][ T9443] batadv_tvlv_handler_register+0x10d/0x530 [ 187.018931][ T9443] ? __pfx_batadv_iv_init_sel_class+0x10/0x10 [ 187.018945][ T9443] batadv_gw_init+0x92/0x100 [ 187.018958][ T9443] batadv_mesh_init+0x5b6/0x8f0 [ 187.018973][ T9443] batadv_meshif_init_late+0xb26/0xe60 [ 187.018989][ T9443] ? __kasan_kmalloc+0xaa/0xb0 [ 187.019000][ T9443] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 187.019015][ T9443] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 187.019029][ T9443] ? register_netdevice+0x507/0x26b0 [ 187.019046][ T9443] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 187.019061][ T9443] register_netdevice+0x680/0x26b0 [ 187.019077][ T9443] ? alloc_netdev_mqs+0x11a7/0x1540 [ 187.019091][ T9443] ? __pfx_register_netdevice+0x10/0x10 [ 187.019109][ T9443] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 187.019125][ T9443] batadv_meshif_newlink+0x8f/0xc0 [ 187.019147][ T9443] rtnl_newlink+0x1697/0x2620 [ 187.019170][ T9443] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.019206][ T9443] ? avc_has_perm_noaudit+0x56/0x470 [ 187.019222][ T9443] ? find_held_lock+0x2b/0x80 [ 187.019235][ T9443] ? avc_has_perm_noaudit+0x11e/0x470 [ 187.019249][ T9443] ? avc_has_perm_noaudit+0x11e/0x470 [ 187.019290][ T9443] ? lock_acquire+0x1d1/0x380 [ 187.019306][ T9443] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 187.019321][ T9443] ? find_held_lock+0x2b/0x80 [ 187.019332][ T9443] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 187.019347][ T9443] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 187.019363][ T9443] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.019378][ T9443] rtnetlink_rcv_msg+0x95e/0xe90 [ 187.019395][ T9443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.019418][ T9443] netlink_rcv_skb+0x159/0x420 [ 187.019435][ T9443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.019452][ T9443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.019471][ T9443] ? rcu_is_watching+0x13/0xc0 [ 187.019487][ T9443] netlink_unicast+0x668/0x950 [ 187.019504][ T9443] ? __pfx_netlink_unicast+0x10/0x10 [ 187.019522][ T9443] netlink_sendmsg+0x9ac/0x10c0 [ 187.019539][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.019556][ T9443] ? selinux_socket_sendmsg+0x198/0x2f0 [ 187.019574][ T9443] ? ____sys_sendmsg+0xa13/0xb90 [ 187.019584][ T9443] ____sys_sendmsg+0xa13/0xb90 [ 187.019594][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.019610][ T9443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.019622][ T9443] ? plist_check_list+0x1b8/0x280 [ 187.019634][ T9443] ? plist_del+0x308/0x510 [ 187.019647][ T9443] ___sys_sendmsg+0x208/0x270 [ 187.019658][ T9443] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.019668][ T9443] ? futex_wake+0x220/0x5e0 [ 187.019688][ T9443] ? find_held_lock+0x2b/0x80 [ 187.019707][ T9443] __sys_sendmsg+0x160/0x210 [ 187.019721][ T9443] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.019742][ T9443] do_syscall_64+0x123/0x7b0 [ 187.019757][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.019768][ T9443] RIP: 0033:0x7f5811da94d9 [ 187.019778][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.019787][ T9443] RSP: 002b:00007f5812cf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.019798][ T9443] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811da94d9 [ 187.019805][ T9443] RDX: 0000000020000840 RSI: 0000200000000240 RDI: 0000000000000008 [ 187.019811][ T9443] RBP: 00007f5811e3804e R08: 0000000000000000 R09: 0000000000000000 [ 187.019818][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.019824][ T9443] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 187.019838][ T9443] [ 187.033567][ T9443] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.177247][ T44] audit: type=1400 audit(1700000074.384:16844): avc: denied { read } for pid=9404 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.205414][ T5486] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 187.212583][ T5486] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 187.321988][ T9370] syz.1.1039 (9370) used greatest stack depth: 18904 bytes left [ 187.361031][ T9372] syz.1.1039 (9372) used greatest stack depth: 16840 bytes left [ 187.444709][ T9459] tmpfs: Unknown parameter 'mp' [ 187.758300][ T9462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.758497][ T9462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.786823][ T9464] __nla_validate_parse: 57 callbacks suppressed [ 187.786837][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1060'. [ 187.786881][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1060'. [ 187.817631][ T9455] syz.3.1056 (9455): drop_caches: 1 [ 187.836685][ T44] audit: type=1400 audit(1700000075.044:16845): avc: denied { remount } for pid=9466 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 187.860408][ T9467] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 187.879847][ T9467] 8021q: adding VLAN 0 to HW filter on device bond12 [ 187.883557][ T9467] bond12: entered promiscuous mode [ 187.883570][ T9467] bond12: entered allmulticast mode [ 187.887677][ T9467] macvlan2: entered promiscuous mode [ 187.887689][ T9467] macvlan2: entered allmulticast mode [ 187.888253][ T9467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.900554][ T9471] ip_tables: iptables: counters copy to user failed while replacing table [ 187.902316][ T9471] ip_tables: iptables: counters copy to user failed while replacing table [ 187.964005][ T5857] usb 5-1: USB disconnect, device number 17 [ 188.057777][ T9483] ip_tables: iptables: counters copy to user failed while replacing table [ 188.092533][ T9487] ------------[ cut here ]------------ [ 188.092542][ T9487] !(flags & __GFP_NOWARN) [ 188.092547][ T9487] WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x646/0x9b0, CPU#2: syz.2.1068/9487 [ 188.099414][ T9487] Modules linked in: [ 188.101482][ T9487] CPU: 2 UID: 0 PID: 9487 Comm: syz.2.1068 Not tainted syzkaller #0 PREEMPT(full) [ 188.104582][ T9487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.108255][ T9487] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 188.110862][ T9487] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 188.118012][ T9487] RSP: 0018:ffffc900036efb78 EFLAGS: 00010246 [ 188.120213][ T9487] RAX: 0000000000000001 RBX: 0000008000818018 RCX: 0000010000000000 [ 188.122568][ T9487] RDX: 0000000000000000 RSI: ffffffff8c835200 RDI: ffffffff8e8fa930 [ 188.124926][ T9487] RBP: 0000000008000818 R08: 00000000000028c0 R09: 00000000ffffffff [ 188.127306][ T9487] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 188.129896][ T9487] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 188.132375][ T9487] FS: 00007f5812cf16c0(0000) GS:ffff8880d466e000(0000) knlGS:0000000000000000 [ 188.135011][ T9487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.137036][ T9487] CR2: 00007f5812cf0ff8 CR3: 00000000370ce000 CR4: 0000000000352ef0 [ 188.139652][ T9487] Call Trace: [ 188.140682][ T9487] [ 188.141593][ T9487] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 188.143280][ T9487] ? udmabuf_create+0x2e5/0x10c0 [ 188.144834][ T9487] udmabuf_create+0x2e5/0x10c0 [ 188.146348][ T9487] ? lock_acquire+0x1d1/0x380 [ 188.147975][ T9487] ? __might_fault+0xc5/0x140 [ 188.149662][ T9487] ? __pfx_udmabuf_create+0x10/0x10 [ 188.151261][ T9487] ? __might_fault+0xc5/0x140 [ 188.152702][ T9487] ? __might_fault+0xc5/0x140 [ 188.154484][ T9487] ? _copy_from_user+0x59/0xd0 [ 188.156251][ T9487] udmabuf_ioctl+0x2b2/0x300 [ 188.157728][ T9487] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 188.159632][ T9487] ? selinux_file_ioctl+0x1e0/0x290 [ 188.161199][ T9487] ? selinux_file_ioctl+0x1e7/0x290 [ 188.162772][ T9487] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 188.164288][ T9487] __x64_sys_ioctl+0x18e/0x210 [ 188.165733][ T9487] do_syscall_64+0x123/0x7b0 [ 188.167162][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.168952][ T9487] RIP: 0033:0x7f5811da94d9 [ 188.170693][ T9487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.176673][ T9487] RSP: 002b:00007f5812cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.179553][ T9487] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811da94d9 [ 188.181908][ T9487] RDX: 00002000000002c0 RSI: 0000000040087543 RDI: 0000000000000004 [ 188.184321][ T9487] RBP: 00007f5811e3804e R08: 0000000000000000 R09: 0000000000000000 [ 188.186687][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.189088][ T9487] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 188.191587][ T9487] [ 188.192559][ T9487] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.194788][ T9487] CPU: 2 UID: 0 PID: 9487 Comm: syz.2.1068 Not tainted syzkaller #0 PREEMPT(full) [ 188.197815][ T9487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.200854][ T9487] Call Trace: [ 188.201878][ T9487] [ 188.202756][ T9487] dump_stack_lvl+0x100/0x190 [ 188.204171][ T9487] vpanic+0x2dc/0x6f8 [ 188.205379][ T9487] panic+0xd1/0xe0 [ 188.206562][ T9487] ? __pfx_panic+0x10/0x10 [ 188.207930][ T9487] check_panic_on_warn.cold+0x19/0x34 [ 188.209571][ T9487] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 188.211245][ T9487] __warn.cold+0x191/0x321 [ 188.212611][ T9487] __report_bug+0x30f/0x440 [ 188.214003][ T9487] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 188.215643][ T9487] ? __pfx___report_bug+0x10/0x10 [ 188.217161][ T9487] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 188.218822][ T9487] report_bug+0xb3/0x220 [ 188.220124][ T9487] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 188.221788][ T9487] handle_bug+0x16a/0x2a0 [ 188.223129][ T9487] exc_invalid_op+0x17/0x50 [ 188.224538][ T9487] asm_exc_invalid_op+0x1a/0x20 [ 188.226012][ T9487] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 188.227873][ T9487] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 188.233602][ T9487] RSP: 0018:ffffc900036efb78 EFLAGS: 00010246 [ 188.235411][ T9487] RAX: 0000000000000001 RBX: 0000008000818018 RCX: 0000010000000000 [ 188.237848][ T9487] RDX: 0000000000000000 RSI: ffffffff8c835200 RDI: ffffffff8e8fa930 [ 188.240202][ T9487] RBP: 0000000008000818 R08: 00000000000028c0 R09: 00000000ffffffff [ 188.242567][ T9487] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 188.244924][ T9487] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 188.247357][ T9487] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 188.249005][ T9487] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 188.250684][ T9487] ? udmabuf_create+0x2e5/0x10c0 [ 188.252152][ T9487] udmabuf_create+0x2e5/0x10c0 [ 188.253621][ T9487] ? lock_acquire+0x1d1/0x380 [ 188.255034][ T9487] ? __might_fault+0xc5/0x140 [ 188.256464][ T9487] ? __pfx_udmabuf_create+0x10/0x10 [ 188.258078][ T9487] ? __might_fault+0xc5/0x140 [ 188.259509][ T9487] ? __might_fault+0xc5/0x140 [ 188.260938][ T9487] ? _copy_from_user+0x59/0xd0 [ 188.262420][ T9487] udmabuf_ioctl+0x2b2/0x300 [ 188.263822][ T9487] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 188.265351][ T9487] ? selinux_file_ioctl+0x1e0/0x290 [ 188.266962][ T9487] ? selinux_file_ioctl+0x1e7/0x290 [ 188.268518][ T9487] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 188.270068][ T9487] __x64_sys_ioctl+0x18e/0x210 [ 188.271530][ T9487] do_syscall_64+0x123/0x7b0 [ 188.272928][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.274765][ T9487] RIP: 0033:0x7f5811da94d9 [ 188.276131][ T9487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.281863][ T9487] RSP: 002b:00007f5812cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.284358][ T9487] RAX: ffffffffffffffda RBX: 00007f5812025fa0 RCX: 00007f5811da94d9 [ 188.286720][ T9487] RDX: 00002000000002c0 RSI: 0000000040087543 RDI: 0000000000000004 [ 188.289090][ T9487] RBP: 00007f5811e3804e R08: 0000000000000000 R09: 0000000000000000 [ 188.291415][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.293786][ T9487] R13: 00007f5812026038 R14: 00007f5812025fa0 R15: 00007ffdf879b958 [ 188.296189][ T9487] [ 188.297977][ T9487] Kernel Offset: disabled [ 188.299298][ T9487] Rebooting in 86400 seconds..