last executing test programs: 4.366486545s ago: executing program 1 (id=811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) listen(0xffffffffffffffff, 0x3) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x70}}, 0x0) 3.689726798s ago: executing program 1 (id=814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe88000000000000000000000000000100000000000000000000000000000001000007144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000004000001fe000000000200009201000000000010a39b00000000000003000000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465"], 0x140}, 0x1, 0x0, 0x0, 0x20000011}, 0x844) 3.684499648s ago: executing program 1 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061112c0000000000c6000000000001019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=""/83, 0x53, 0x0, &(0x7f0000000100)=""/219, 0xdb}}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 3.609932667s ago: executing program 1 (id=816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'ipvlan1\x00', {0xb}, 0x81}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000240)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc00"/252, 0xfc}, {&(0x7f00000006c0)="1d4ac370cf8c47025bd7a6546c8bd229bbf8fa504cc3774c0f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f50aa794861c0296ca92cb6c2ef9", 0xffffff0a}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xa0}, {&(0x7f0000001040)="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", 0xd92}], 0x5) 3.609574406s ago: executing program 1 (id=817): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x4, 0x0, 0x3, 0x6, 0x0, 0xcc, 0x6, 0xce, 0xf, 0x20, 0x6, 0x4, 0x67db}, {0xf, 0xcacd, 0xff, 0xc, 0x6, 0x3f, 0x55, 0x4, 0x80, 0x7a, 0x2b, 0x8, 0x1}, {0xfffffff9, 0xfff9, 0x7, 0x3, 0xc3, 0xa, 0x30, 0x5, 0x7, 0x8, 0x0, 0x6, 0x17}], 0x7}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,cache=mmap']) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000001c00018006204def0200000008000300ac1414aa0800060003000000"], 0x30}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000300)={0x10001, 0xbb2, &(0x7f0000000100)="810894c99ebf8379c3230cb9d785ff459b72961d8f0d0d2148159c71abd47a24804195d19fe4f9fc3677efdb0bf6b558f5831761ed153ae29687131f47d2bea8b8ac1e8686e3d37460d1373f9d2f5e3c0c50fa8e9c1b6e734e4e7dafc1defbff37badbd4b39ec03c186e2e1f97f9ce4de1339790fe4c17a44e6d38e578aa4a888b3d79ea627985a3d5a2c74bbd1a8482b0b5be2e968c073ea2dfba03df61ab7e86b4742e47b33ca8ec67610238147ddf7182f6f1ee962903c7868cb3d81ae89110d2f962abdf644ad68aeec5f05f1bc86466e007abc425e278ce3e93", &(0x7f0000000200)="f77d3d411afc629e170645b9f7932747b674c50471e7f5ce561678c969a6c92324f99778384084c432bb542130d1ef7887beb00e3ec6a2c397048484ca0027e8b84b6c692d6163f92bb2fc4313bf7f2d077fed41d8aff49341bfa6853adee6c1111dd0eb621fe4722c4803a6025d68a8b3632ec5e5f67281740f789229384f1743a10edfbf41d54682c0cc1514fec842e1d4ff87e53f3646bf0c3171470da14a43b210743a36d42720312d0639d5b9011a3ae96bb822110fadb2c0de8fa6a31545c55ef271711cc08e8fbbb2b85360d009bd6c17b9132f893f00b98f23744492", 0xdc, 0xe0}) 3.120006358s ago: executing program 2 (id=825): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = mq_open(&(0x7f0000000100)='\x00', 0x1, 0x8, &(0x7f0000000140)={0x0, 0xffff, 0x32, 0x5}) read(r2, &(0x7f0000000180)=""/228, 0xe4) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x3c, 0x40000010, 0x15, 0x8, 0xb, 0x10, 0x6, 0x101, 0x1}) 2.980872882s ago: executing program 1 (id=826): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 2.189722677s ago: executing program 3 (id=830): r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0xa, 0x2, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x4000002}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x2000007, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) socket(0x28, 0xa, 0x1) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0xb, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) (async) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) recvmmsg(r0, &(0x7f0000004880)=[{{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/236, 0xec}, {&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000680)=""/108, 0x6c}], 0x6}, 0x9}, {{&(0x7f0000000780)=@caif=@rfm, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000dc0)=""/231, 0xe7}, 0x3}, {{&(0x7f0000000ec0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000f40)=""/225, 0xe1}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/223, 0xdf}, {&(0x7f0000003140)=""/233, 0xe9}, {&(0x7f0000003240)=""/251, 0xfb}, {&(0x7f0000003340)=""/117, 0x75}], 0x7}, 0x6}, {{&(0x7f0000003440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000004740)=[{&(0x7f00000034c0)=""/139, 0x8b}, {&(0x7f0000003580)=""/138, 0x8a}, {&(0x7f0000003640)=""/152, 0x98}, {&(0x7f0000003700)=""/31, 0x1f}, {&(0x7f0000003740)=""/4096, 0x1000}], 0x5, &(0x7f00000047c0)=""/178, 0xb2}, 0x4}], 0x4, 0x22000, &(0x7f0000004980)={0x77359400}) 1.986123391s ago: executing program 0 (id=833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$packet(r2, &(0x7f0000000280)="0f", 0x1, 0xc404, 0x0, 0xfffffffffffffdae) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x4b0, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x110, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x47e7175973762f95}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x316187bf6b0adf83}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c014) socket(0x200000000000011, 0x2, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@initdev, 0x0}, &(0x7f0000000100)=0x14) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f00000001c0)) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_SET_TIMEOUT(r10, 0x2201, &(0x7f00000000c0)) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x78, 0x54, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x1, 0x4, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x3, 0x1, {@in6_addr=@private2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x4, {@in6_addr=@private1, 0x10dba}}}]}, 0x78}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffeef, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.798486373s ago: executing program 0 (id=834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe88000000000000000000000000000100000000000000000000000000000001000007144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000004000001fe000000000200009201000000000010a39b00000000000003000000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465"], 0x140}, 0x1, 0x0, 0x0, 0x20000011}, 0x844) 1.797000044s ago: executing program 0 (id=835): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="ec", 0x1}], 0x1) (fail_nth: 1) 1.337087262s ago: executing program 3 (id=836): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x9, 0x9, 0x45, "ff000000000000000099fe0000000200"}) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000004) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[], 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) setsockopt$inet6_udp_int(r7, 0x88, 0x1, &(0x7f0000000080), 0x4) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x3}}) (async) r10 = dup3(r9, r9, 0x0) write$P9_RSYMLINK(r10, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x8, 0x4, 0x8}}, 0x14) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xa) 1.149711201s ago: executing program 3 (id=837): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff01c}, {0x6, 0xfc, 0x1, 0x8000}]}, 0x10) r1 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r5}, 0x10) io_uring_enter(r1, 0x2dbe, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x4a080) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0xd52, 0x8000, 0x45, 0x0, 0x1fc, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0x3, 0x1, 0x4, 0x9c, 0x3}) 1.007864564s ago: executing program 2 (id=838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x66}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000004c0)=[@out_dx={0x6a, 0x28, {0x48a1, 0x5, 0x7fff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xbe, 0x7, 0xbe14, 0x2}}, @nested_vmresume={0x130, 0x18}, @code={0xa, 0x5c, {"f637360f01c266ba400066ed26f701f4d82f76c4a335401da300000001460f0d15286ce80d3636450f0fc590b805000000b9d9fb0ac30f01c1c422793335098a1e91660f3881a70f000000"}}, @code={0xa, 0x4c, {"0f01cf470f9ff2f30f0764440f0fb30020000097c481956de2450f0f0de6c6eb12900f20d835080000000f22d8420f01c566b81d018ee0400f753b"}}, @in_dx={0x69, 0x20, {0x6793, 0x2}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x33, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x9}}, @wr_crn={0x67, 0x20, {0x8, 0x6}}, @cpuid={0x64, 0x18, {0x9, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x5b}}, @wr_drn={0x68, 0x20, {0x5, 0x14}}, @uexit={0x0, 0x18, 0xf}, @wrmsr={0x65, 0x20, {0x353, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x12, 0x1, 0xffffffffffffffcf, 0x5}}, @wr_drn={0x68, 0x20, {0x5, 0x39e}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x9c0}}], 0x2d8}) (rerun: 64) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000180)={0x2, 0x0, [{0xad7, 0x0, 0x3}, {0x17fd, 0x0, 0xd6}]}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x7, 0x7, 0xe5, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5c, 0xc, 0x0, 0x8, 0x40, 0x1, 0x6}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x954, 0x0, 0xfffffffffffffff8}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x4, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000020, 0x0, 0x0, 0x8000000002a2e, 0x0, 0x6, 0x0, 0x80000008001], 0x1, 0x3d0201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 939.584942ms ago: executing program 3 (id=839): r0 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz', r0) keyctl$read(0xb, r0, &(0x7f0000002e80)=""/4096, 0x1000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000b00000000030014"], 0x28}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x341001, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x68, r3, 0x8, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xb5bc6b81ed7d3dd5}, 0x10) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x84000, 0x0) sendto$packet(r4, &(0x7f0000000040)="e160984891deac2c825ad3850f901432264711c329f123db9c5a841fcb397c13fd740649ce2ca0589c5ec4074b02c19fd827f0924a3641d65ee6eaa87b49b97ea4ff0f1525c909cd2137a26681af414e49f10ceb4a730bc4bc07a27637ba7c11f23afafde3da6a79b864ef65cd9520876f2901beae781d22", 0x78, 0x20044890, &(0x7f0000000100)={0x11, 0x10, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000140)={@initdev, @multicast1}, &(0x7f0000000180)=0xc) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x274, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xffff}, {0x0, 0xa}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x244, 0x2, [@TCA_BASIC_EMATCHES={0x240, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x234, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xd0, 0x3, 0x0, 0x0, {{0x14, 0x9, 0x81}, [@TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "00ac361052b7e75c0d003ed29184"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x72, 0x5, "10a7187c8bdbab4c278d9442ea411bb19b4a1e4811a9361b00a03cb8ac995d6e4be7c98cc5c5a1b5a34e01ad4d12adcd377e5cbdaf2bf71102dba80fec45a036b68fede7ecc333f50a040e4c645b9ad1e83ba13d5ea19ed91b08fd55415a24fd9179665165e4d9fa817fc429c61f"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x1}, {0x2, 0x0, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x6}, {0xffffffffffffffff, 0x6}}}, @TCF_EM_CONTAINER={0x88, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x6}, "8a55887ed936c90eabbb2c0d4bc703547104097509ae9daa736e7326cbff6332e11e48cc47b94bbab769e6a3ddd85e95267e572b7781d178672322d0341049892a003be873584af618e8f3c78e6f413981177fee0752ededd83960c56f1d3d22468e8521ee20f624469c5cad40bba5a215201e06bb0c3485bc"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1ff, 0x8, 0x5}, {0x3, 0x1, 0x5}}}, @TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x7}}}, @TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x1ff, 0x0, 0x1ff}, "26d7073b3f272fde2adafc7d5ce9313fa6757c2f12d17dbb3c7c2708ae6f53a55fb1ab4df52f35dcbeb693bc900c3535159f018c46341958f8382731b99f4aa8faea455da26c2f331c7ff48a7c29435ac0d2a6810c2d669492753f0a9b84306477e64f13e8b14d0dda642bb55463fdfd5bf42f7bbe83aa76b0a3e3d6c65a9e31647fa239bb69c6155a6a2f220389"}}]}]}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r9, 0x29, 0xb, 0x3, 0x5, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x4, 0x6}}) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x14c}}, 0x4810) 839.81776ms ago: executing program 2 (id=840): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000000340)={0x80800000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) madvise(&(0x7f000070a000/0x2000)=nil, 0x2000, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4001000010000100000000000000000000000000000000000000000000000000fe8000000b00000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="fc020000000000000000000000000000000000006c00000064010100000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000008000000000000000000000000000000ffffff7f00000000000000002dbd7000ff340000020004000000000000000000480003006465666c61746500"], 0x140}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r0, @ANYBLOB="4cb01e5d443a761bc9dc7ce36854b01547fbc9bd9785e804fc37870924d36628d60bcede4d9701ce0c31887b10f00f2820c59df87346a4d48655cb6998107c4b0e6f0f447166d2b95ebd19152d332419bc32451abc765deadd5ef89edbc3b3b1ec5616879d98ba42c0da90a1d87560e671efa108e8d25f067f37cf9f4ff04a044e283591ae922fdb39e15c65083bb63451bf3398c30073b2a774b52f57c4a6dfb525950923f4e2e7a635b17406b09aa5e79363df29d9c716c3fff86ead4288ec64500a44f0f86f5fcc1ff840", @ANYRES8=r1, @ANYRESOCT=r2, @ANYRESDEC=r3], 0x50) 839.22565ms ago: executing program 3 (id=841): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008c62aebf5fd1d001e0000000000"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000400)="7f32104730bb0337eb46c38197b067881f1b24ea72386b08af88142d8bb17cfbb6f8ced5164b5e4ba3af5341216d070cad8cb8e1b0aec056b09278df0dbafe64739cb254e332decabe256b0fded30b3fb7473b38032ba9cebd390f38ce9d4245e2cc3f96bc3c29a9aebf5673ed76e6b1109e8a286a6f972320f0125afb446d4f1c0e54c98529aff631df10a3b2f8e37c12fc8e13e51e9d026b80acce2892d50e0c05bfc76890ce324f7157f2144cda73526b4358ae558e27471313ac4b3ec1bf72d31e1f06", 0xc5}, {&(0x7f0000000600)="084f25d5f32712f647986b309a2824e71bcc5e47095b8e2ca52221937eb1466554a9f02a12a43d3903ac73ae643ed4f285dacb59907cda0bb3f1ff6203c564be022a2f4831d89efb931225cc6d35fe84d84217318fead46a9945a1f7fa9ba477fa9df0ebcef67c68605f0da24fe869cf8f0d8cda649a2d817a339772c91af52fe298f0fc8530f8b5318dbf5ba1067ca3c559195c1ca043f30f145225ca79a58e9f0e5d8b23603a6a74a7842f04a6e6726c2b6df8aedfeb6b9067f7d624e47191e02b434a5158449286961dae610cfdd0458b2c988f97f242ef6bfbc705fb0c22900574ae2b072bdc7a", 0xe9}, {&(0x7f0000000180)="9a2e97908a8e749be758a7728c5cfe5cee402dd63598820d08e6504419850a6f48ab37c44ff553fd11ea920a79b9f77ce4fd6c3e", 0x34}, {&(0x7f0000001300)="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", 0xff1}, {&(0x7f0000000700)="ac315a98854cb561eb76b4cc5eb86a9bf86a3be0eada0e636a06642f017b8fd8faefdfe9aedcef594dc317ada96d71c909939038c643d9ff52b75c0b24712adaabcfda7132e5f4b2dfd7b97bfa6ec8212586d2ba6cb38001aa204391d9f4e9ea83cddc11cdec795723d67c3e4f2f497659b3b0c36feb3cace379d25ca4c1f7aec2b91a96abe8416c4724a75be04f63407f21946880e34692b3423c1ed7b0f6e9629be52c7c662ed77f33f21dade9fe10c6d4d9e0712be89764923e2b23c359a896e0c870266d67638ccd1fc82e2d8e7f87a6956b1ec19d246eb26e447f487103a91aa382ea8e1cca401bcff5ecf5b4d4b401535244", 0xf5}], 0x5) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) setresgid(0xee00, 0xee01, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x880, 0x2c, 0xd27, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x854, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3b43bca0, 0x1000, 0xc7, 0x5, 0xb8, 0x7, 0x9, 0x1, 0x400, 0xa, 0xc, 0x40, 0xeea, 0x0, 0x8, 0x1, 0x6d, 0x1ff, 0x1ac0, 0x1, 0x1, 0x6, 0x5, 0xb3, 0x0, 0x5, 0xe609, 0x7fffffff, 0x4057, 0x7, 0x6, 0x5fe3, 0x3, 0x3, 0xb, 0x7ff, 0x6, 0xfffffff7, 0x9, 0x7, 0x0, 0x7fff, 0x7, 0x7f6f, 0x7fffffff, 0x6, 0xe9, 0x162200, 0x101, 0x7f, 0xfffffff7, 0x1, 0x3, 0x9, 0x40, 0x1, 0x4, 0x7, 0x1, 0x8000, 0x8, 0x10, 0x6, 0x3, 0xfffffffa, 0xe, 0xe6b, 0x80, 0x94f5, 0x7, 0x6, 0x1, 0x0, 0xfff, 0x0, 0xa, 0x1ff, 0xff, 0x7, 0x1d, 0xbe8, 0x6, 0x7ff, 0x5, 0x6, 0x2f, 0x0, 0xe, 0x3, 0x0, 0x4, 0x3, 0x400, 0x6, 0x2, 0x101, 0xdd, 0x200, 0xffff, 0x1, 0xfffffff7, 0x0, 0x7fffffff, 0x7, 0xf4, 0x4, 0x2, 0x1, 0x1, 0x7ff, 0x2, 0x2c, 0x6, 0x2, 0x7e5, 0x8, 0x1, 0xaed5, 0xffff8000, 0x9, 0x3, 0x5, 0x4, 0x1, 0x0, 0xf, 0x274fb672, 0xa, 0x6, 0x2e, 0x3, 0x0, 0x7fff, 0x5, 0x7ff, 0x7fffffff, 0xc4, 0x5, 0x4, 0x5, 0x6, 0xe91, 0xe, 0x0, 0x6, 0xb, 0x0, 0x0, 0x90c, 0x3, 0x3ff, 0x6, 0x6f53, 0x20010, 0x9, 0x2, 0x8, 0x8, 0xfffffffc, 0x5, 0x81, 0x80000001, 0x3, 0x8, 0xe, 0x40, 0x2, 0x2, 0x8, 0x5, 0x3, 0xb3, 0x8, 0x1b8, 0x7, 0x4, 0x10000, 0x800, 0x4e9, 0x200, 0x6, 0x2, 0x3, 0xff80, 0xd7, 0x3, 0x4, 0x1, 0x5, 0xffffffff, 0xcb, 0x1, 0x5, 0x0, 0x6, 0x1, 0x4198, 0x800000, 0x4, 0x6, 0x0, 0x8, 0x6, 0x2, 0x9, 0x6, 0x3, 0x8, 0x7383, 0x80000000, 0x5, 0x9, 0x6, 0xc9, 0x9e, 0x9b, 0x0, 0xfffffffb, 0x6, 0x5, 0x1, 0x9, 0x5, 0x8, 0x10001, 0x5, 0xb, 0xfffff764, 0x81, 0x4, 0x3, 0x5, 0xcc4, 0x1, 0x8, 0x1000002, 0x3, 0xfffffff7, 0x2, 0x7, 0x101, 0x0, 0x1, 0x7fffffff, 0xcac6, 0x1, 0x8, 0x5, 0x6, 0x7, 0xfffffffb, 0xfffffffd, 0x2, 0xffffffd0, 0x10000006]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x6, 0x7, 0x7ff, 0x5, 0xa, 0x0, 0x5, 0xdf, 0x3, 0x3ff, 0x15, 0x2, 0xfd62, 0x5, 0x5, 0x1, 0x1a, 0x0, 0x7, 0x16, 0x0, 0x8, 0x3, 0x7, 0x6, 0x9, 0x78d86cf7, 0xffffffff, 0x6, 0x7, 0x0, 0x1000, 0x80000, 0x3, 0x2, 0x0, 0x7f, 0x4, 0x71, 0x4, 0x52, 0x400, 0x5, 0xe, 0x4, 0x5, 0x3, 0x1ff, 0x3, 0xb7bd, 0x81, 0xfff, 0xffffffff, 0xffff56aa, 0x9, 0x5, 0x10000, 0x9, 0x0, 0x101, 0x8, 0x2bee, 0x7, 0x103, 0xe9, 0x0, 0x1000, 0x25, 0xfffffff7, 0x897c, 0x8, 0x7, 0x5, 0x6, 0x401000, 0x6, 0x0, 0x85bd, 0x28d4f656, 0x1b, 0x2, 0x3, 0xd, 0x2, 0x8, 0x6, 0x4000, 0x6, 0x5, 0x5, 0x27, 0x3, 0x6, 0x9, 0x1, 0x2, 0xf, 0x3ff, 0x19, 0xfffffffb, 0x80, 0x8, 0x0, 0x2, 0x3, 0x3, 0x5, 0x701, 0xf, 0xb57, 0x834, 0x6, 0x20, 0x3, 0x3, 0xe, 0x81, 0x8, 0x101, 0x32d676b1, 0x6, 0x0, 0x9, 0x80000001, 0x4, 0x9, 0x0, 0x0, 0x3, 0xff, 0x2, 0x5, 0x4, 0x8, 0x3, 0xff, 0x6, 0x7, 0x3, 0x9b7, 0x10001, 0xadc, 0x8, 0x2, 0x26, 0x8000, 0x7, 0x9, 0x40, 0x1, 0x48, 0x1000, 0xfd3, 0xffffffff, 0x1, 0x401, 0x2, 0xfffffff8, 0x0, 0x7, 0x88f, 0x2, 0x5, 0x2, 0x2, 0x73000000, 0x7, 0x5, 0x4, 0x2, 0xde16, 0x3, 0x6, 0x3ff, 0xffffffff, 0x7ff, 0x3, 0xffff, 0x2f4e, 0xa, 0xf, 0x2, 0x0, 0x1, 0x10001, 0x99c7, 0x9b47, 0x9, 0xe0, 0xbd7, 0x6, 0xd3, 0x7, 0x2, 0x5, 0xa46, 0x6, 0x497, 0xff, 0xe852, 0x9, 0x400, 0x3, 0x5, 0x10001, 0xba8, 0x2, 0x0, 0x8, 0x9, 0x13, 0x9, 0xa4eb, 0x1, 0xf, 0x1e, 0x6, 0x0, 0x10, 0x2, 0xa75, 0x6, 0x9, 0x0, 0x200, 0xe, 0x5, 0x5, 0x80000000, 0x4, 0xffff, 0x1, 0x9, 0x200, 0x0, 0x9, 0xfffffffa, 0xe2, 0x3, 0x200, 0x31f2, 0x7b5, 0xffff5d61, 0x3, 0x80000000, 0x8, 0x1a81, 0x6, 0x9, 0xfff, 0x2, 0x1, 0xfffffe01, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x8, 0x1ffc000, 0x7d3, 0x5d49, {0xc5, 0x2, 0x3, 0xaa, 0x8, 0x8}, {0x9, 0x0, 0x8, 0x4, 0x1ff, 0x3ff}, 0x0, 0x5, 0xfffffffe}}]}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x527, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xffff, 0x1f}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0xfffffffffffffd82}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 679.533277ms ago: executing program 3 (id=842): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket(0x2, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x6, 0xf0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28682, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bf1000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x1}], 0x18}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x7, 0xffffffff, 0x80}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) 679.121466ms ago: executing program 2 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) getuid() fstat(r0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r6, r5) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf255d00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x2000c800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$kcm(0x2, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000300c75263f373cc0180c2000003c7eaea49e4b6"]) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r9 = syz_io_uring_setup(0x98, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r12, &(0x7f0000000880)=[{&(0x7f0000000340)="64e5fa06", 0x4}, {0x0, 0x3f}], 0x2) io_uring_enter(r9, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x22, 0x3, 0x0, {0x2, 0x1, 0x0, '$'}}, 0x22) 389.315179ms ago: executing program 0 (id=844): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_adv_tx_power={{0x3}, {0x2, 0xfc}}}}, 0x8) 387.319202ms ago: executing program 0 (id=845): r0 = open(&(0x7f0000000300)='.\x00', 0x1500, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) vmsplice(r0, &(0x7f0000000900)=[{&(0x7f0000000640)="10a5dbb16d3384e111db967decd268caaf2c6389ebe1410a9df3eb4e2bc046f8e5607f15024b97478256538b4a2f45cd213945974e303ea25d7b57876884dc2d0c5724770c6ccb8a22a103be6fc791a8cb7a706a2be6dcec", 0x58}, {&(0x7f0000000800)="9958dad9e55d6395f8953a22f4cda1a94d96d6114b27f5b0835ef3434b8b4683cd76549c7ff6c82edce14d60027cae2c31351f83d429c4100d72a30040dc6a46fb11e48e0c22528c926385c7c00e934b33ca08db695515ffd7bd80afe506a575729f10bee13d796ed4b31532d3cc8946b4f52ab1b5915e434fc262137407b9fdb6f29dbf74bf3736b76be37754dc9f35003bfe0a1e1d0c97acd04ca42a62cd2df256c82fbb8eb8d101bd2550d318f81ea6dd6bc3924b74cee6c0db11d12d9795a49b651f", 0xc4}, {&(0x7f0000000700)="801f96921c85b290980975d543160ee384084de38bcb6c2c769707bf4b9723421cffc14a6c8f7c14cdfe82fb528463bb34b1d0370b7bc558308d271d7523feb220421a2930fd8cf2d729259ad2f033ee021c09efc12d126c4c94d35aa2c36756c5856340e2a6913aa5fc1bb2e611ac52488c9a6c7752e2fdc0", 0x79}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f00000005c0)}], 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x38, r1, 0x801, 0x400, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6e615216fe"}]}]}, 0x38}}, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, 0x0, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 317.264143ms ago: executing program 0 (id=846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 316.938774ms ago: executing program 2 (id=847): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0}) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000280)) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1fc}], 0x400000000000207, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r11, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 0s ago: executing program 2 (id=848): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getpid() gettid() (async) r3 = gettid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0xffffffffffffff90}, {0x0, 0xffc0}], 0x2, &(0x7f0000000280)=[{&(0x7f0000000080)=""/101, 0x5f}], 0x1, 0x0) (async) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0xffffffffffffff90}, {0x0, 0xffc0}], 0x2, &(0x7f0000000280)=[{&(0x7f0000000080)=""/101, 0x5f}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000202050000d39e450a00000003000008a08b3a466748cd8dcb25f7b5e49388f72c46e8dbd1cf91b4ddbfeed38b5d49506254367180c165bc327169205a0774f09d1a77062637acfed7bda3495099368e31804fdd8ef2461bef70ff8a9f0f5ff238ea8856b0e0faf2bc8d825cc29a"], 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x50) kernel console output (not intermixed with test programs): 10/0x10 [ 83.517861][ T6695] ? rw_verify_area+0xcf/0x6c0 [ 83.517873][ T6695] ? __pfx_pagemap_read+0x10/0x10 [ 83.517884][ T6695] vfs_read+0x1e4/0xcf0 [ 83.517898][ T6695] ? __pfx_vfs_read+0x10/0x10 [ 83.517910][ T6695] ? find_held_lock+0x2b/0x80 [ 83.517930][ T6695] ? __fget_files+0x204/0x3c0 [ 83.517946][ T6695] ? __fget_files+0x20e/0x3c0 [ 83.517959][ T6695] ? __fget_files+0x120/0x3c0 [ 83.517975][ T6695] __x64_sys_pread64+0x1eb/0x250 [ 83.517989][ T6695] ? __pfx___x64_sys_pread64+0x10/0x10 [ 83.518003][ T6695] ? fput+0x70/0xf0 [ 83.518013][ T6695] do_syscall_64+0xcd/0xf80 [ 83.518027][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.518038][ T6695] RIP: 0033:0x7f82e0b8f7c9 [ 83.518046][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.518056][ T6695] RSP: 002b:00007f82e19e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 83.518065][ T6695] RAX: ffffffffffffffda RBX: 00007f82e0de5fa0 RCX: 00007f82e0b8f7c9 [ 83.518075][ T6695] RDX: 0000000000019020 RSI: 0000200000000200 RDI: 0000000000000004 [ 83.518084][ T6695] RBP: 00007f82e19e4090 R08: 0000000000000000 R09: 0000000000000000 [ 83.518092][ T6695] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.518101][ T6695] R13: 00007f82e0de6038 R14: 00007f82e0de5fa0 R15: 00007ffc48050bf8 [ 83.518125][ T6695] [ 83.550862][ T6660] ceph: No mds server is up or the cluster is laggy [ 83.563459][ T6665] ceph: No mds server is up or the cluster is laggy [ 83.593675][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 83.595648][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 83.613752][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 83.615743][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 83.668585][ T6701] Bluetooth: MGMT ver 1.23 [ 83.678695][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 83.678705][ T40] audit: type=1400 audit(1768300352.628:304): avc: denied { map } for pid=6702 comm="syz.0.225" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.690988][ T40] audit: type=1400 audit(1768300352.638:305): avc: denied { read write } for pid=6702 comm="syz.0.225" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.703051][ T40] audit: type=1400 audit(1768300352.648:306): avc: denied { write } for pid=6702 comm="syz.0.225" path="socket:[12802]" dev="sockfs" ino=12802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.819824][ T40] audit: type=1400 audit(1768300352.768:307): avc: denied { getopt } for pid=6710 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.946941][ T982] usb 6-1: USB disconnect, device number 7 [ 83.950169][ T982] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 84.032675][ T6720] No source specified [ 84.096098][ T6728] FAULT_INJECTION: forcing a failure. [ 84.096098][ T6728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.102492][ T6728] CPU: 1 UID: 0 PID: 6728 Comm: syz.3.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.102509][ T6728] Tainted: [L]=SOFTLOCKUP [ 84.102513][ T6728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.102519][ T6728] Call Trace: [ 84.102523][ T6728] [ 84.102527][ T6728] dump_stack_lvl+0x16c/0x1f0 [ 84.102546][ T6728] should_fail_ex+0x512/0x640 [ 84.102566][ T6728] should_fail_alloc_page+0xe7/0x130 [ 84.102582][ T6728] prepare_alloc_pages+0x401/0x670 [ 84.102596][ T6728] ? rcu_is_watching+0x12/0xc0 [ 84.102609][ T6728] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 84.102621][ T6728] ? stack_depot_save_flags+0x29/0x9b0 [ 84.102640][ T6728] ? look_up_lock_class+0x59/0x130 [ 84.102657][ T6728] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.102673][ T6728] ? __lock_acquire+0x436/0x2890 [ 84.102687][ T6728] ? __lock_acquire+0x436/0x2890 [ 84.102699][ T6728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.102713][ T6728] ? policy_nodemask+0xea/0x4e0 [ 84.102728][ T6728] alloc_pages_mpol+0x1fb/0x550 [ 84.102743][ T6728] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.102761][ T6728] folio_alloc_mpol_noprof+0x36/0x2f0 [ 84.102778][ T6728] vma_alloc_folio_noprof+0xed/0x1e0 [ 84.102795][ T6728] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 84.102825][ T6728] do_anonymous_page+0xc81/0x2190 [ 84.102856][ T6728] __handle_mm_fault+0x1ecf/0x2bb0 [ 84.102884][ T6728] ? __pfx___handle_mm_fault+0x10/0x10 [ 84.102917][ T6728] ? find_vma+0xbf/0x140 [ 84.102932][ T6728] ? __pfx_find_vma+0x10/0x10 [ 84.102951][ T6728] handle_mm_fault+0x3fe/0xad0 [ 84.102983][ T6728] do_user_addr_fault+0x7a6/0x1370 [ 84.103004][ T6728] ? rcu_is_watching+0x12/0xc0 [ 84.103019][ T6728] exc_page_fault+0x64/0xc0 [ 84.103038][ T6728] asm_exc_page_fault+0x26/0x30 [ 84.103056][ T6728] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 84.103083][ T6728] Code: 89 ee 48 89 ef e8 4a f7 11 fd 4d 85 ff 75 a8 e8 30 fd 11 fd 89 de 4c 89 e7 e8 b6 dc 7b fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 84.103099][ T6728] RSP: 0018:ffffc9000730fbe0 EFLAGS: 00050246 [ 84.103111][ T6728] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000200 [ 84.103118][ T6728] RDX: 0000000000000000 RSI: ffff88805778ce00 RDI: 0000200000019000 [ 84.103124][ T6728] RBP: 0000200000018200 R08: 0000000000000000 R09: ffffed100aef19ff [ 84.103130][ T6728] R10: ffff88805778cfff R11: 0000000000000000 R12: ffff88805778c000 [ 84.103137][ T6728] R13: 0000200000019200 R14: 00007ffffffff000 R15: 0000000000000000 [ 84.103153][ T6728] pagemap_read+0x52c/0x890 [ 84.103168][ T6728] ? __pfx_pagemap_read+0x10/0x10 [ 84.103182][ T6728] ? rw_verify_area+0xcf/0x6c0 [ 84.103194][ T6728] ? __pfx_pagemap_read+0x10/0x10 [ 84.103205][ T6728] vfs_read+0x1e4/0xcf0 [ 84.103220][ T6728] ? __pfx_vfs_read+0x10/0x10 [ 84.103231][ T6728] ? find_held_lock+0x2b/0x80 [ 84.103246][ T6728] ? __fget_files+0x204/0x3c0 [ 84.103262][ T6728] ? __fget_files+0x20e/0x3c0 [ 84.103275][ T6728] ? __fget_files+0x120/0x3c0 [ 84.103307][ T6728] __x64_sys_pread64+0x1eb/0x250 [ 84.103321][ T6728] ? __pfx___x64_sys_pread64+0x10/0x10 [ 84.103348][ T6728] do_syscall_64+0xcd/0xf80 [ 84.103364][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.103374][ T6728] RIP: 0033:0x7f82e0b8f7c9 [ 84.103383][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.103392][ T6728] RSP: 002b:00007f82e19e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 84.103402][ T6728] RAX: ffffffffffffffda RBX: 00007f82e0de5fa0 RCX: 00007f82e0b8f7c9 [ 84.103408][ T6728] RDX: 0000000000019020 RSI: 0000200000000200 RDI: 0000000000000004 [ 84.103414][ T6728] RBP: 00007f82e19e4090 R08: 0000000000000000 R09: 0000000000000000 [ 84.103419][ T6728] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.103425][ T6728] R13: 00007f82e0de6038 R14: 00007f82e0de5fa0 R15: 00007ffc48050bf8 [ 84.103438][ T6728] [ 84.304055][ T6731] net_ratelimit: 55 callbacks suppressed [ 84.304071][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.309879][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.313200][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.316694][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.320023][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.323391][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.326665][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.330008][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.333374][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.336735][ T6731] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 84.343440][ T40] audit: type=1400 audit(1768300353.288:308): avc: denied { create } for pid=6732 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.360005][ T40] audit: type=1400 audit(1768300353.288:309): avc: denied { bind } for pid=6732 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.366131][ T40] audit: type=1400 audit(1768300353.288:310): avc: denied { listen } for pid=6732 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.372293][ T40] audit: type=1400 audit(1768300353.288:311): avc: denied { mount } for pid=6732 comm="syz.0.233" name="/" dev="hugetlbfs" ino=12858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 84.380044][ T40] audit: type=1400 audit(1768300353.308:312): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 84.416361][ T40] audit: type=1400 audit(1768300353.368:313): avc: denied { mount } for pid=6739 comm="syz.3.235" name="/" dev="ramfs" ino=13749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.658585][ T6762] FAULT_INJECTION: forcing a failure. [ 84.658585][ T6762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.662797][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.0.241 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.662814][ T6762] Tainted: [L]=SOFTLOCKUP [ 84.662817][ T6762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.662823][ T6762] Call Trace: [ 84.662827][ T6762] [ 84.662832][ T6762] dump_stack_lvl+0x16c/0x1f0 [ 84.662850][ T6762] should_fail_ex+0x512/0x640 [ 84.662868][ T6762] should_fail_alloc_page+0xe7/0x130 [ 84.662884][ T6762] prepare_alloc_pages+0x401/0x670 [ 84.662900][ T6762] ? rcu_is_watching+0x12/0xc0 [ 84.662914][ T6762] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 84.662927][ T6762] ? find_held_lock+0x2b/0x80 [ 84.662943][ T6762] ? free_unref_folios+0x1085/0x1610 [ 84.662956][ T6762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.662972][ T6762] ? __lock_acquire+0x436/0x2890 [ 84.662985][ T6762] ? __lock_acquire+0x436/0x2890 [ 84.662996][ T6762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.663009][ T6762] ? policy_nodemask+0xea/0x4e0 [ 84.663024][ T6762] alloc_pages_mpol+0x1fb/0x550 [ 84.663038][ T6762] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.663056][ T6762] folio_alloc_mpol_noprof+0x36/0x2f0 [ 84.663072][ T6762] vma_alloc_folio_noprof+0xed/0x1e0 [ 84.663087][ T6762] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 84.663106][ T6762] do_anonymous_page+0xc81/0x2190 [ 84.663127][ T6762] __handle_mm_fault+0x1ecf/0x2bb0 [ 84.663146][ T6762] ? __pfx___handle_mm_fault+0x10/0x10 [ 84.663169][ T6762] ? find_vma+0xbf/0x140 [ 84.663180][ T6762] ? __pfx_find_vma+0x10/0x10 [ 84.663194][ T6762] handle_mm_fault+0x3fe/0xad0 [ 84.663212][ T6762] do_user_addr_fault+0x7a6/0x1370 [ 84.663227][ T6762] ? rcu_is_watching+0x12/0xc0 [ 84.663238][ T6762] exc_page_fault+0x64/0xc0 [ 84.663252][ T6762] asm_exc_page_fault+0x26/0x30 [ 84.663262][ T6762] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 84.663288][ T6762] Code: 89 ee 48 89 ef e8 4a f7 11 fd 4d 85 ff 75 a8 e8 30 fd 11 fd 89 de 4c 89 e7 e8 b6 dc 7b fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 84.663300][ T6762] RSP: 0018:ffffc90007e27be0 EFLAGS: 00050246 [ 84.663309][ T6762] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000200 [ 84.663315][ T6762] RDX: 0000000000000000 RSI: ffff888023600e00 RDI: 0000200000019000 [ 84.663321][ T6762] RBP: 0000200000018200 R08: 0000000000000000 R09: ffffed10046c01ff [ 84.663328][ T6762] R10: ffff888023600fff R11: 0000000000000000 R12: ffff888023600000 [ 84.663333][ T6762] R13: 0000200000019200 R14: 00007ffffffff000 R15: 0000000000000000 [ 84.663349][ T6762] pagemap_read+0x52c/0x890 [ 84.663374][ T6762] ? __pfx_pagemap_read+0x10/0x10 [ 84.663390][ T6762] ? rw_verify_area+0xcf/0x6c0 [ 84.663401][ T6762] ? __pfx_pagemap_read+0x10/0x10 [ 84.663412][ T6762] vfs_read+0x1e4/0xcf0 [ 84.663428][ T6762] ? __pfx_vfs_read+0x10/0x10 [ 84.663439][ T6762] ? find_held_lock+0x2b/0x80 [ 84.663454][ T6762] ? __fget_files+0x204/0x3c0 [ 84.663470][ T6762] ? __fget_files+0x20e/0x3c0 [ 84.663483][ T6762] ? __fget_files+0x120/0x3c0 [ 84.663501][ T6762] __x64_sys_pread64+0x1eb/0x250 [ 84.663514][ T6762] ? __pfx___x64_sys_pread64+0x10/0x10 [ 84.663532][ T6762] do_syscall_64+0xcd/0xf80 [ 84.663546][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.663556][ T6762] RIP: 0033:0x7fb2bbb8f7c9 [ 84.663564][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.663573][ T6762] RSP: 002b:00007fb2bcb0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 84.663582][ T6762] RAX: ffffffffffffffda RBX: 00007fb2bbde5fa0 RCX: 00007fb2bbb8f7c9 [ 84.663588][ T6762] RDX: 0000000000019020 RSI: 0000200000000200 RDI: 0000000000000004 [ 84.663594][ T6762] RBP: 00007fb2bcb0f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.663600][ T6762] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.663606][ T6762] R13: 00007fb2bbde6038 R14: 00007fb2bbde5fa0 R15: 00007fff2b562778 [ 84.663619][ T6762] [ 84.919067][ T6771] geneve2: entered promiscuous mode [ 84.944843][ T6774] netlink: 'syz.0.246': attribute type 39 has an invalid length. [ 84.946271][ T6776] binder: Unknown parameter 'm00000000000000000000' [ 85.067806][ T6787] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 85.101240][ T6791] selinux_netlink_send: 59 callbacks suppressed [ 85.101257][ T6791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6791 comm=syz.3.251 [ 85.106020][ T6787] bond0: entered promiscuous mode [ 85.109885][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.114494][ T6787] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 85.153719][ T6796] FAULT_INJECTION: forcing a failure. [ 85.153719][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.160692][ T6796] CPU: 2 UID: 0 PID: 6796 Comm: syz.1.252 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.160708][ T6796] Tainted: [L]=SOFTLOCKUP [ 85.160711][ T6796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.160717][ T6796] Call Trace: [ 85.160721][ T6796] [ 85.160725][ T6796] dump_stack_lvl+0x16c/0x1f0 [ 85.160744][ T6796] should_fail_ex+0x512/0x640 [ 85.160769][ T6796] _copy_to_user+0x32/0xd0 [ 85.160791][ T6796] pagemap_read+0x52c/0x890 [ 85.160814][ T6796] ? __pfx_pagemap_read+0x10/0x10 [ 85.160835][ T6796] ? rw_verify_area+0xcf/0x6c0 [ 85.160852][ T6796] ? __pfx_pagemap_read+0x10/0x10 [ 85.160871][ T6796] vfs_read+0x1e4/0xcf0 [ 85.160896][ T6796] ? __pfx_vfs_read+0x10/0x10 [ 85.160915][ T6796] ? find_held_lock+0x2b/0x80 [ 85.160941][ T6796] ? __fget_files+0x204/0x3c0 [ 85.160965][ T6796] ? __fget_files+0x20e/0x3c0 [ 85.160983][ T6796] ? __fget_files+0x120/0x3c0 [ 85.161011][ T6796] __x64_sys_pread64+0x1eb/0x250 [ 85.161031][ T6796] ? __pfx___x64_sys_pread64+0x10/0x10 [ 85.161059][ T6796] do_syscall_64+0xcd/0xf80 [ 85.161081][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.161094][ T6796] RIP: 0033:0x7fe3c878f7c9 [ 85.161105][ T6796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.161121][ T6796] RSP: 002b:00007fe3c96b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 85.161137][ T6796] RAX: ffffffffffffffda RBX: 00007fe3c89e5fa0 RCX: 00007fe3c878f7c9 [ 85.161148][ T6796] RDX: 0000000000019020 RSI: 0000200000000200 RDI: 0000000000000004 [ 85.161158][ T6796] RBP: 00007fe3c96b2090 R08: 0000000000000000 R09: 0000000000000000 [ 85.161165][ T6796] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.161173][ T6796] R13: 00007fe3c89e6038 R14: 00007fe3c89e5fa0 R15: 00007fff52798d38 [ 85.161196][ T6796] [ 85.628109][ T6820] warning: `syz.0.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.843381][ T5978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 85.950863][ T6829] syzkaller1: entered promiscuous mode [ 85.952701][ T6829] syzkaller1: entered allmulticast mode [ 85.980644][ T6829] team0 (unregistering): Port device team_slave_0 removed [ 85.987472][ T6829] team0 (unregistering): Port device team_slave_1 removed [ 85.994424][ T6829] team0 (unregistering): Port device vlan0 removed [ 85.995185][ T5978] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 86.001523][ T5978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.005195][ T5978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.008258][ T5978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 86.013064][ T5978] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 86.016505][ T5978] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 86.019026][ T5978] usb 6-1: Manufacturer: syz [ 86.019884][ T6832] FAULT_INJECTION: forcing a failure. [ 86.019884][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.022455][ T5978] usb 6-1: config 0 descriptor?? [ 86.028317][ T6832] CPU: 3 UID: 0 PID: 6832 Comm: syz.3.262 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.028342][ T6832] Tainted: [L]=SOFTLOCKUP [ 86.028349][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.028360][ T6832] Call Trace: [ 86.028366][ T6832] [ 86.028374][ T6832] dump_stack_lvl+0x16c/0x1f0 [ 86.028402][ T6832] should_fail_ex+0x512/0x640 [ 86.028431][ T6832] _copy_from_user+0x2e/0xd0 [ 86.028459][ T6832] kstrtouint_from_user+0xd6/0x1d0 [ 86.028479][ T6832] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 86.028498][ T6832] ? __lock_acquire+0x436/0x2890 [ 86.028522][ T6832] ? lock_acquire+0x179/0x330 [ 86.028549][ T6832] proc_fail_nth_write+0x83/0x220 [ 86.028566][ T6832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.028584][ T6832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.028594][ T6832] vfs_write+0x2a0/0x11d0 [ 86.028608][ T6832] ? __pfx___mutex_lock+0x10/0x10 [ 86.028636][ T6832] ? __pfx_vfs_write+0x10/0x10 [ 86.028654][ T6832] ? __fget_files+0x20e/0x3c0 [ 86.028672][ T6832] ksys_write+0x12a/0x250 [ 86.028689][ T6832] ? __pfx_ksys_write+0x10/0x10 [ 86.028705][ T6832] do_syscall_64+0xcd/0xf80 [ 86.028720][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.028731][ T6832] RIP: 0033:0x7f82e0b8e27f [ 86.028739][ T6832] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 86.028750][ T6832] RSP: 002b:00007f82e19e4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 86.028760][ T6832] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82e0b8e27f [ 86.028766][ T6832] RDX: 0000000000000001 RSI: 00007f82e19e40a0 RDI: 0000000000000005 [ 86.028772][ T6832] RBP: 00007f82e19e4090 R08: 0000000000000000 R09: 0000000000000000 [ 86.028778][ T6832] R10: 0000001000000000 R11: 0000000000000293 R12: 0000000000000002 [ 86.028784][ T6832] R13: 00007f82e0de6038 R14: 00007f82e0de5fa0 R15: 00007ffc48050bf8 [ 86.028797][ T6832] [ 86.045375][ T937] usb 7-1: USB disconnect, device number 8 [ 86.272825][ T6844] kvm: kvm [6843]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 86.448544][ T5978] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 86.458984][ T5978] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 86.539385][ T6858] __nla_validate_parse: 72 callbacks suppressed [ 86.539394][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 86.539397][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 86.539418][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 86.541401][ T6858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 86.544287][ T6858] geneve2: entered promiscuous mode [ 86.544298][ T6858] geneve2: entered allmulticast mode [ 86.605417][ T9] cfg80211: failed to load regulatory.db [ 86.723671][ T60] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 86.773039][ T53] usb 6-1: USB disconnect, device number 8 [ 86.904755][ T60] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.908144][ T60] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.914512][ T60] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 86.917725][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.920209][ T60] usb 5-1: Product: syz [ 86.921402][ T6871] netlink: 'syz.3.275': attribute type 12 has an invalid length. [ 86.921513][ T60] usb 5-1: Manufacturer: syz [ 86.921523][ T60] usb 5-1: SerialNumber: syz [ 86.925232][ T6871] netlink: 'syz.3.275': attribute type 29 has an invalid length. [ 86.925247][ T6871] netlink: 148 bytes leftover after parsing attributes in process `syz.3.275'. [ 86.925264][ T6871] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 86.925278][ T6871] netlink: 15 bytes leftover after parsing attributes in process `syz.3.275'. [ 87.344530][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 87.660683][ T6919] netlink: 56 bytes leftover after parsing attributes in process `syz.3.286'. [ 87.921656][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 87.943517][ T835] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 87.976169][ T5946] Bluetooth: hci0: unexpected event for opcode 0x080c [ 88.095277][ T835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.098680][ T835] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.101499][ T835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.107658][ T835] usb 8-1: config 0 descriptor?? [ 88.303444][ T6033] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 88.315763][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.323933][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.453489][ T6033] usb 6-1: Using ep0 maxpacket: 16 [ 88.457027][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 22742, setting to 1024 [ 88.461107][ T6033] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 88.464934][ T6033] usb 6-1: New USB device found, idVendor=074c, idProduct=0000, bcdDevice= 0.03 [ 88.468295][ T6033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.473549][ T6033] usb 6-1: config 0 descriptor?? [ 88.476200][ T6947] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 88.480908][ T6033] hub 6-1:0.0: bad descriptor, ignoring hub [ 88.483135][ T6033] hub 6-1:0.0: probe with driver hub failed with error -5 [ 88.530491][ T835] usbhid 8-1:0.0: can't add hid device: -71 [ 88.533092][ T835] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 88.539686][ T835] usb 8-1: USB disconnect, device number 6 [ 88.688275][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 88.688287][ T40] audit: type=1400 audit(1768300357.638:357): avc: denied { write } for pid=6946 comm="syz.1.293" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.863700][ T982] usb 6-1: USB disconnect, device number 9 [ 89.063676][ T40] audit: type=1400 audit(1768300358.018:358): avc: denied { create } for pid=6948 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 89.070538][ T40] audit: type=1400 audit(1768300358.018:359): avc: denied { sys_admin } for pid=6948 comm="syz.3.294" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 89.079596][ T40] audit: type=1400 audit(1768300358.028:360): avc: denied { map_read map_write } for pid=6948 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.162049][ T6952] netlink: 'syz.3.295': attribute type 11 has an invalid length. [ 89.261495][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 89.293493][ T40] audit: type=1400 audit(1768300358.248:361): avc: denied { write } for pid=6957 comm="syz.3.297" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.301219][ T6961] bridge: RTM_NEWNEIGH with invalid ether address [ 89.303722][ T6962] program syz.3.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.322694][ T6962] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 89.328122][ T6966] FAULT_INJECTION: forcing a failure. [ 89.328122][ T6966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.336051][ T6966] CPU: 2 UID: 0 PID: 6966 Comm: syz.2.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.336068][ T6966] Tainted: [L]=SOFTLOCKUP [ 89.336071][ T6966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.336077][ T6966] Call Trace: [ 89.336081][ T6966] [ 89.336085][ T6966] dump_stack_lvl+0x16c/0x1f0 [ 89.336103][ T6966] should_fail_ex+0x512/0x640 [ 89.336123][ T6966] _copy_to_user+0x32/0xd0 [ 89.336139][ T6966] simple_read_from_buffer+0xcb/0x170 [ 89.336155][ T6966] proc_fail_nth_read+0x197/0x240 [ 89.336166][ T6966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.336178][ T6966] ? rw_verify_area+0xcf/0x6c0 [ 89.336189][ T6966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.336199][ T6966] vfs_read+0x1e4/0xcf0 [ 89.336212][ T6966] ? __pfx___mutex_lock+0x10/0x10 [ 89.336229][ T6966] ? __pfx_vfs_read+0x10/0x10 [ 89.336245][ T6966] ? __fget_files+0x20e/0x3c0 [ 89.336263][ T6966] ksys_read+0x12a/0x250 [ 89.336275][ T6966] ? __pfx_ksys_read+0x10/0x10 [ 89.336291][ T6966] do_syscall_64+0xcd/0xf80 [ 89.336306][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.336318][ T6966] RIP: 0033:0x7f8e8b78e1dc [ 89.336326][ T6966] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.336336][ T6966] RSP: 002b:00007f8e8c57a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.336346][ T6966] RAX: ffffffffffffffda RBX: 00007f8e8b9e5fa0 RCX: 00007f8e8b78e1dc [ 89.336352][ T6966] RDX: 000000000000000f RSI: 00007f8e8c57a0a0 RDI: 0000000000000005 [ 89.336358][ T6966] RBP: 00007f8e8c57a090 R08: 0000000000000000 R09: 0000000000000014 [ 89.336364][ T6966] R10: 0000000000000094 R11: 0000000000000246 R12: 0000000000000001 [ 89.336370][ T6966] R13: 00007f8e8b9e6038 R14: 00007f8e8b9e5fa0 R15: 00007ffe5cf95238 [ 89.336383][ T6966] [ 89.433366][ T6968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 89.435511][ T6968] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.450254][ T6968] vhci_hcd vhci_hcd.0: Device attached [ 89.452665][ T6970] vhci_hcd: cannot find the pending unlink 1023 [ 89.483910][ T6033] usb 5-1: USB disconnect, device number 10 [ 89.497731][ T40] audit: type=1400 audit(1768300358.438:362): avc: denied { read } for pid=6969 comm="syz.2.301" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.511397][ T40] audit: type=1400 audit(1768300358.438:363): avc: denied { open } for pid=6969 comm="syz.2.301" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.520657][ T40] audit: type=1400 audit(1768300358.438:364): avc: denied { ioctl } for pid=6969 comm="syz.2.301" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.556080][ T40] audit: type=1400 audit(1768300358.508:365): avc: denied { getopt } for pid=6978 comm="syz.0.303" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.662665][ T6970] vhci_hcd: connection closed [ 89.664332][ T838] vhci_hcd vhci_hcd.3: stop threads [ 89.669656][ T838] vhci_hcd vhci_hcd.3: release socket [ 89.673688][ T838] vhci_hcd vhci_hcd.3: disconnect device [ 89.693563][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 89.713411][ T5978] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 89.715911][ T5978] usb 43-1: enqueue for inactive port 0 [ 89.797086][ T5978] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 89.836250][ T40] audit: type=1400 audit(1768300358.788:366): avc: denied { ioctl } for pid=6997 comm="syz.0.309" path="socket:[14163]" dev="sockfs" ino=14163 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.855204][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.859568][ T60] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.863032][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.868197][ T7000] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 89.871845][ T60] usb 6-1: config 0 descriptor?? [ 90.077826][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.081816][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.140516][ T7013] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 90.143924][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 90.148318][ T7013] bond1 (unregistering): Released all slaves [ 90.295223][ T9] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.298642][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 90.299242][ T9] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.301448][ T60] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 90.309144][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 90.313074][ T60] usb 6-1: USB disconnect, device number 10 [ 90.315949][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.320527][ T9] usb 7-1: Product: syz [ 90.322219][ T9] usb 7-1: Manufacturer: syz [ 90.324583][ T9] usb 7-1: SerialNumber: syz [ 90.376700][ T7028] overlayfs: failed to resolve './bus': -2 [ 90.504086][ T7034] capability: warning: `syz.0.319' uses 32-bit capabilities (legacy support in use) [ 90.739248][ T7041] lo: entered promiscuous mode [ 91.157718][ T7067] sit0: entered promiscuous mode [ 91.163607][ T7067] validate_nla: 2 callbacks suppressed [ 91.163619][ T7067] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 91.275430][ T7078] netlink: 'syz.1.336': attribute type 1 has an invalid length. [ 91.453425][ T5978] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 91.614703][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.618238][ T5978] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.621008][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.624997][ T5978] usb 8-1: config 0 descriptor?? [ 91.675387][ T7092] netlink: 'syz.1.339': attribute type 5 has an invalid length. [ 91.830326][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.836924][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.042989][ T5978] usbhid 8-1:0.0: can't add hid device: -71 [ 92.048520][ T5978] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 92.056480][ T5978] usb 8-1: USB disconnect, device number 7 [ 92.217829][ T7101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7101 comm=syz.0.342 [ 92.638725][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47285 sclass=netlink_route_socket pid=7106 comm=syz.3.344 [ 92.907689][ T53] usb 7-1: USB disconnect, device number 9 [ 93.016922][ T7129] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 93.108396][ T7129] bond1: entered promiscuous mode [ 93.110635][ T7129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.135314][ T7131] bond1: (slave bridge1): making interface the new active one [ 93.138177][ T7131] bridge1: entered promiscuous mode [ 93.142639][ T7131] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 93.183405][ T5978] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 93.335617][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.342940][ T5978] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.347868][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.358570][ T5978] usb 8-1: config 0 descriptor?? [ 93.530359][ T7159] capability: warning: `syz.1.360' uses deprecated v2 capabilities in a way that may be insecure [ 93.566245][ T5978] usbhid 8-1:0.0: can't add hid device: -71 [ 93.568818][ T5978] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 93.579549][ T5978] usb 8-1: USB disconnect, device number 8 [ 93.623393][ T6534] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.722894][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 93.722911][ T40] audit: type=1400 audit(1768300362.668:376): avc: denied { append } for pid=7165 comm="syz.1.362" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.744502][ T40] audit: type=1400 audit(1768300362.698:377): avc: denied { watch } for pid=7165 comm="syz.1.362" path="/87/file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.755364][ T40] audit: type=1400 audit(1768300362.698:378): avc: denied { watch_sb watch_reads } for pid=7165 comm="syz.1.362" path="/87/file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.784677][ T6534] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.788508][ T6534] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.791912][ T6534] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.799493][ T6534] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 93.802827][ T6534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.806081][ T6534] usb 5-1: Product: syz [ 93.807716][ T6534] usb 5-1: Manufacturer: syz [ 93.809248][ T6534] usb 5-1: SerialNumber: syz [ 93.815464][ T6534] usblp0: Disabling reads from problematic bidirectional printer [ 94.013498][ T5978] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 94.025022][ T6534] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 94.033626][ T6534] usb 5-1: USB disconnect, device number 11 [ 94.039511][ T6534] usblp0: removed [ 94.173435][ T5978] usb 8-1: Using ep0 maxpacket: 32 [ 94.177935][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.182382][ T5978] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 94.186178][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.196746][ T5978] usb 8-1: config 0 descriptor?? [ 94.201432][ T5978] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 94.206792][ T5978] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.655913][ T60] usb 8-1: USB disconnect, device number 9 [ 94.663903][ T7176] __nla_validate_parse: 8 callbacks suppressed [ 94.663916][ T7176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 94.671880][ T60] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 95.026266][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.367'. [ 95.191013][ T7199] netlink: 'syz.3.371': attribute type 12 has an invalid length. [ 96.056752][ T40] audit: type=1326 audit(1768300365.008:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.373" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82e0b8f7c9 code=0x0 [ 96.823506][ T5518] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 96.912736][ T7230] 9pnet_virtio: no channels available for device syz [ 96.915998][ T7230] 9pnet_virtio: no channels available for device syz [ 96.919071][ T7230] 9pnet_virtio: no channels available for device syz [ 96.921850][ T7230] 9pnet_virtio: no channels available for device syz [ 96.976863][ T5518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.981312][ T5518] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.984294][ T7233] bond0: entered allmulticast mode [ 96.985417][ T5518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.986915][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 96.992614][ T5518] usb 5-1: config 0 descriptor?? [ 96.992829][ T7233] net_ratelimit: 47 callbacks suppressed [ 96.992837][ T7233] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 97.094410][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 97.136116][ T40] audit: type=1400 audit(1768300366.088:380): avc: denied { write } for pid=7246 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.199582][ T5518] usbhid 5-1:0.0: can't add hid device: -71 [ 97.201764][ T5518] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.206066][ T5518] usb 5-1: USB disconnect, device number 12 [ 97.313463][ T5978] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 97.425418][ T40] audit: type=1400 audit(1768300366.378:381): avc: denied { append } for pid=7252 comm="syz.1.387" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.486275][ T5978] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.490437][ T5978] usb 8-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.495610][ T5978] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.503897][ T5978] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 97.508215][ T5978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.511771][ T5978] usb 8-1: Product: syz [ 97.513838][ T5978] usb 8-1: Manufacturer: syz [ 97.515760][ T5978] usb 8-1: SerialNumber: syz [ 97.522642][ T5978] usblp0: Disabling reads from problematic bidirectional printer [ 97.617046][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 97.633419][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 97.666925][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'. [ 97.707327][ T40] audit: type=1400 audit(1768300366.658:382): avc: denied { getopt } for pid=7269 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.727231][ T5978] usblp 8-1:4.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 97.732096][ T5978] usb 8-1: USB disconnect, device number 10 [ 97.736472][ T5978] usblp0: removed [ 97.803511][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 97.807242][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.811711][ T60] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 97.815975][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.822578][ T60] usb 5-1: config 0 descriptor?? [ 97.827416][ T60] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 97.833252][ T60] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 97.844043][ T40] audit: type=1400 audit(1768300366.798:383): avc: denied { setopt } for pid=7271 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.864774][ T7277] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 98.093947][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 98.228917][ T40] audit: type=1400 audit(1768300367.178:384): avc: denied { setattr } for pid=7286 comm="syz.1.395" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 98.273987][ T7289] netlink: 80 bytes leftover after parsing attributes in process `syz.3.396'. [ 98.281287][ T60] usb 5-1: USB disconnect, device number 13 [ 98.287675][ T60] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 98.320547][ T40] audit: type=1400 audit(1768300367.268:385): avc: denied { open } for pid=7292 comm="syz.3.397" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 98.671742][ T7313] vlan2: entered promiscuous mode [ 98.674112][ T7313] bridge0: entered promiscuous mode [ 98.705094][ T7316] overlayfs: overlapping lowerdir path [ 98.711049][ T7316] overlayfs: overlapping lowerdir path [ 98.863428][ T6534] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 98.901021][ T7327] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 98.908611][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 98.908621][ T40] audit: type=1400 audit(1768300367.858:392): avc: denied { map } for pid=7324 comm="syz.3.403" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.920945][ T40] audit: type=1400 audit(1768300367.858:393): avc: denied { execute } for pid=7324 comm="syz.3.403" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.013454][ T6534] usb 7-1: Using ep0 maxpacket: 16 [ 99.016357][ T6534] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.019915][ T6534] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.021002][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 99.023609][ T6534] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.031226][ T6534] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 99.035075][ T6534] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.043121][ T6534] usb 7-1: config 0 descriptor?? [ 99.261072][ T7334] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 99.261782][ T6534] usbhid 7-1:0.0: can't add hid device: -71 [ 99.263873][ T7334] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.264651][ T7334] vhci_hcd vhci_hcd.0: Device attached [ 99.267438][ T6024] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 99.273202][ T6534] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 99.279164][ T7334] vhci_hcd vhci_hcd.0: port 0 already used [ 99.279405][ T6534] usb 7-1: USB disconnect, device number 10 [ 99.284136][ T7335] vhci_hcd: connection closed [ 99.284329][ T6885] vhci_hcd vhci_hcd.3: stop threads [ 99.287471][ T6885] vhci_hcd vhci_hcd.3: release socket [ 99.289160][ T6885] vhci_hcd vhci_hcd.3: disconnect device [ 99.343404][ T5978] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 99.404263][ T6024] usb 5-1: device descriptor read/64, error -71 [ 99.448415][ T40] audit: type=1400 audit(1768300368.398:394): avc: denied { ioctl } for pid=7348 comm="syz.2.410" path="socket:[15678]" dev="sockfs" ino=15678 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.458851][ T40] audit: type=1326 audit(1768300368.408:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7348 comm="syz.2.410" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e8b78f7c9 code=0x0 [ 99.504595][ T5978] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.507663][ T5978] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.510772][ T5978] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.517457][ T5978] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 99.521350][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.524780][ T5978] usb 6-1: Product: syz [ 99.526547][ T5978] usb 6-1: Manufacturer: syz [ 99.528498][ T5978] usb 6-1: SerialNumber: syz [ 99.535583][ T5978] usblp0: Disabling reads from problematic bidirectional printer [ 99.643480][ T6024] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 99.740370][ T5978] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 99.745987][ T5978] usb 6-1: USB disconnect, device number 11 [ 99.749704][ T5978] usblp0: removed [ 99.773452][ T6024] usb 5-1: device descriptor read/64, error -71 [ 99.825779][ T7356] netlink: 80 bytes leftover after parsing attributes in process `syz.3.413'. [ 99.863916][ T40] audit: type=1400 audit(1768300368.818:396): avc: denied { sqpoll } for pid=7357 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.884672][ T6024] usb usb5-port1: attempt power cycle [ 100.023413][ T5999] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 100.173411][ T5999] usb 7-1: Using ep0 maxpacket: 32 [ 100.175687][ T5999] usb 7-1: no configurations [ 100.177168][ T5999] usb 7-1: can't read configurations, error -22 [ 100.233451][ T6024] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 100.254075][ T6024] usb 5-1: device descriptor read/8, error -71 [ 100.304282][ T5999] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 100.383120][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 100.463442][ T5999] usb 7-1: Using ep0 maxpacket: 32 [ 100.465808][ T5999] usb 7-1: no configurations [ 100.467476][ T5999] usb 7-1: can't read configurations, error -22 [ 100.469784][ T5999] usb usb7-port1: attempt power cycle [ 100.503495][ T6024] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 100.523940][ T6024] usb 5-1: device descriptor read/8, error -71 [ 100.634267][ T6024] usb usb5-port1: unable to enumerate USB device [ 100.726845][ T40] audit: type=1400 audit(1768300369.678:397): avc: denied { read } for pid=7368 comm="syz.3.417" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.743462][ T40] audit: type=1400 audit(1768300369.678:398): avc: denied { open } for pid=7368 comm="syz.3.417" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.751558][ T40] audit: type=1400 audit(1768300369.678:399): avc: denied { ioctl } for pid=7368 comm="syz.3.417" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.803429][ T5999] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 100.826467][ T5999] usb 7-1: Using ep0 maxpacket: 32 [ 100.829121][ T5999] usb 7-1: no configurations [ 100.830599][ T5999] usb 7-1: can't read configurations, error -22 [ 100.901368][ T7376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.907592][ T40] audit: type=1400 audit(1768300369.858:400): avc: denied { read } for pid=7375 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.917927][ T7376] netlink: 'syz.3.419': attribute type 12 has an invalid length. [ 100.973504][ T5999] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 100.991029][ T40] audit: type=1400 audit(1768300369.938:401): avc: denied { connect } for pid=7377 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.007040][ T5999] usb 7-1: Using ep0 maxpacket: 32 [ 101.011439][ T5999] usb 7-1: no configurations [ 101.013646][ T5999] usb 7-1: can't read configurations, error -22 [ 101.017444][ T5999] usb usb7-port1: unable to enumerate USB device [ 101.343496][ T5999] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 101.413159][ T7393] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 101.418114][ T7393] netlink: 44 bytes leftover after parsing attributes in process `syz.1.423'. [ 101.422838][ T7393] netlink: 'syz.1.423': attribute type 64 has an invalid length. [ 101.426603][ T7393] netlink: 'syz.1.423': attribute type 4 has an invalid length. [ 101.428944][ T7393] netlink: 152 bytes leftover after parsing attributes in process `syz.1.423'. [ 101.496272][ T5999] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.499169][ T5999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.501722][ T5999] usb 8-1: Product: syz [ 101.503047][ T5999] usb 8-1: Manufacturer: syz [ 101.504663][ T5999] usb 8-1: SerialNumber: syz [ 101.510427][ T5999] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.529277][ T6033] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.734964][ T5978] usb 8-1: USB disconnect, device number 11 [ 101.786755][ T7406] /dev/sg0: Can't lookup blockdev [ 101.901570][ T7413] sctp: [Deprecated]: syz.0.429 (pid 7413) Use of int in max_burst socket option deprecated. [ 101.901570][ T7413] Use struct sctp_assoc_value instead [ 101.921816][ T7413] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.429'. [ 101.927035][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 101.989417][ C2] sd 0:0:0:0: [sda] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 101.993377][ C2] sd 0:0:0:0: [sda] tag#13 CDB: Test Unit Ready [ 102.052595][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.433'. [ 102.145753][ T7433] veth1_vlan: Device is already in use. [ 102.594858][ T6033] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 102.599692][ T6033] ath9k_htc: Failed to initialize the device [ 102.603962][ T5978] usb 8-1: ath9k_htc: USB layer deinitialized [ 102.741657][ T7456] netlink: 104 bytes leftover after parsing attributes in process `syz.2.443'. [ 102.746263][ T7456] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 102.778815][ T7456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.808053][ T7456] veth5: entered promiscuous mode [ 102.818386][ T7456] bond1: (slave veth5): Enslaving as an active interface with a down link [ 102.828930][ T7456] vlan2: entered allmulticast mode [ 102.830743][ T7456] bond1: entered allmulticast mode [ 102.833176][ T7456] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 103.315435][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 103.421139][ T7491] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 103.426984][ T7491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.453'. [ 103.454258][ T29] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 103.593446][ T5978] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 103.613379][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 103.619742][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.624407][ T29] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 103.628655][ T29] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 103.634953][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.638931][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.642197][ T29] usb 8-1: Product: ꘨浵⧶尿峥嵶癗ᓈ䰣㰩⾠ê•錌林欋榙ꎟ륿賗⥱gқ拔ꕦՅغ苉泓킳尉췎昞ê•ᕶࠩ㈱暸헚盢藕탷楒矉異嚳뚚匱劢ì¶ë½§åž¨ë‚¯ë‘¼ì‘¡ê…µæ¥¶á£¡åŠèºî±žï¥’惯臃淿࿥ç¾â¿‘쎺쿒詵䰉衲묾訩헫啧뀻ᆴ银栜嚂èšè²–殓âší„ƒà±ƒî¯ŠÖ¦Å½ç±«â¢í˜²îˆ—綌欿ွαꞣ給éºäŒ•âž»ë¦æµ‰ç€é†£æ¦–Ý› [ 103.653727][ T29] usb 8-1: Manufacturer: Ь [ 103.655711][ T29] usb 8-1: SerialNumber: И [ 103.743391][ T5978] usb 6-1: Using ep0 maxpacket: 32 [ 103.746200][ T5978] usb 6-1: no configurations [ 103.748006][ T5978] usb 6-1: can't read configurations, error -22 [ 103.871515][ T29] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 103.875689][ T29] cdc_ncm 8-1:1.0: bind() failure [ 103.884632][ T5978] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 103.886797][ T29] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 103.890600][ T29] cdc_ncm 8-1:1.1: bind() failure [ 103.896955][ T29] usb 8-1: USB disconnect, device number 12 [ 104.043399][ T5978] usb 6-1: Using ep0 maxpacket: 32 [ 104.045531][ T5978] usb 6-1: no configurations [ 104.046962][ T5978] usb 6-1: can't read configurations, error -22 [ 104.048999][ T5978] usb usb6-port1: attempt power cycle [ 104.084348][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 104.084364][ T40] audit: type=1400 audit(1768300373.038:417): avc: denied { transfer } for pid=7510 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 104.295031][ T40] audit: type=1400 audit(1768300373.248:418): avc: denied { bind } for pid=7524 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.366215][ T40] audit: type=1400 audit(1768300373.318:419): avc: denied { bind } for pid=7531 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.374770][ T40] audit: type=1400 audit(1768300373.318:420): avc: denied { name_bind } for pid=7531 comm="syz.0.468" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.393365][ T5978] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 104.413815][ T5978] usb 6-1: Using ep0 maxpacket: 32 [ 104.416558][ T5978] usb 6-1: no configurations [ 104.418154][ T5978] usb 6-1: can't read configurations, error -22 [ 104.423422][ T6534] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 104.543432][ T5978] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 104.563810][ T5978] usb 6-1: Using ep0 maxpacket: 32 [ 104.565969][ T5978] usb 6-1: no configurations [ 104.567472][ T5978] usb 6-1: can't read configurations, error -22 [ 104.569753][ T5978] usb usb6-port1: unable to enumerate USB device [ 104.585863][ T6534] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 104.589333][ T6534] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.594643][ T6534] usb 7-1: config 0 interface 0 has no altsetting 0 [ 104.599520][ T6534] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.603362][ T6534] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.606767][ T6534] usb 7-1: Product: syz [ 104.608693][ T6534] usb 7-1: Manufacturer: syz [ 104.610633][ T6534] usb 7-1: SerialNumber: syz [ 104.615780][ T6534] usb 7-1: config 0 descriptor?? [ 104.620132][ T6534] hub 7-1:0.0: bad descriptor, ignoring hub [ 104.622669][ T6534] hub 7-1:0.0: probe with driver hub failed with error -5 [ 104.630280][ T6534] usb 7-1: selecting invalid altsetting 0 [ 104.867560][ T7540] __nla_validate_parse: 10 callbacks suppressed [ 104.867578][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 104.911122][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 104.967848][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.971502][ T7545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.982855][ T7545] ceph: No source [ 105.116042][ T7550] fuse: Bad value for 'fd' [ 105.180393][ T40] audit: type=1400 audit(1768300374.128:421): avc: denied { connect } for pid=7554 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.192568][ T7555] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 105.195905][ T7555] netlink: 'syz.3.476': attribute type 3 has an invalid length. [ 105.198375][ T7555] netlink: 224 bytes leftover after parsing attributes in process `syz.3.476'. [ 105.205727][ T40] audit: type=1400 audit(1768300374.158:422): avc: denied { write } for pid=7554 comm="syz.3.476" path="socket:[18010]" dev="sockfs" ino=18010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.233380][ T5999] usb 7-1: USB disconnect, device number 15 [ 105.379967][ T40] audit: type=1400 audit(1768300374.328:423): avc: denied { append } for pid=7561 comm="syz.3.479" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.386036][ T7564] random: crng reseeded on system resumption [ 105.390447][ T40] audit: type=1400 audit(1768300374.328:424): avc: denied { open } for pid=7561 comm="syz.3.479" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.394186][ T5999] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 105.420266][ T40] audit: type=1400 audit(1768300374.368:425): avc: denied { ioctl } for pid=7561 comm="syz.3.479" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 105.560309][ T5999] usb 7-1: unable to get BOS descriptor or descriptor too short [ 105.564403][ T5999] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 105.566241][ T7574] input: syz1 as /devices/virtual/input/input9 [ 105.567722][ T5999] usb 7-1: can't read configurations, error -71 [ 105.573241][ T40] audit: type=1400 audit(1768300374.518:426): avc: denied { read } for pid=5324 comm="acpid" name="event4" dev="devtmpfs" ino=3123 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.673470][ T6016] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 105.834814][ T6016] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.838144][ T6016] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.842125][ T6016] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.849557][ T6016] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 105.853425][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.857123][ T6016] usb 5-1: Product: syz [ 105.858945][ T6016] usb 5-1: Manufacturer: syz [ 105.860885][ T6016] usb 5-1: SerialNumber: syz [ 105.868200][ T6016] usblp0: Disabling reads from problematic bidirectional printer [ 106.072360][ T6016] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 106.120986][ T7579] tmpfs: Bad value for 'mpol' [ 106.275367][ T6016] usb 5-1: USB disconnect, device number 18 [ 106.284483][ T6016] usblp0: removed [ 106.440243][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 106.592204][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 106.633923][ T7607] veth1_macvtap: left promiscuous mode [ 106.635995][ T7607] macsec0: entered promiscuous mode [ 106.637776][ T7607] macsec0: entered allmulticast mode [ 106.899914][ T7617] 9pnet_virtio: no channels available for device syz [ 107.047198][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.500'. [ 107.050727][ T7625] netem: invalid attributes len -22 [ 107.052923][ T7625] netem: change failed [ 107.153379][ T5999] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 107.264278][ T53] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 107.298868][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 107.335066][ T5999] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.339583][ T5999] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.343593][ T5999] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.347668][ T5999] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.350497][ T5999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.354878][ T5999] usb 8-1: config 0 descriptor?? [ 107.373217][ T7649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.504'. [ 107.433799][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 107.437214][ T53] usb 6-1: no configurations [ 107.439209][ T53] usb 6-1: can't read configurations, error -22 [ 107.568304][ T7657] nbd: must specify an index to disconnect [ 107.573563][ T53] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 107.609327][ T7659] trusted_key: encrypted_key: keylen parameter is missing [ 107.616224][ T7660] trusted_key: encrypted_key: keylen parameter is missing [ 107.663399][ T6534] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 107.723436][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 107.726511][ T53] usb 6-1: no configurations [ 107.728391][ T53] usb 6-1: can't read configurations, error -22 [ 107.731122][ T53] usb usb6-port1: attempt power cycle [ 107.763332][ T5999] usbhid 8-1:0.0: can't add hid device: -71 [ 107.767660][ T5999] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 107.771630][ T5999] usb 8-1: USB disconnect, device number 13 [ 107.814956][ T6534] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.817978][ T6534] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.820936][ T6534] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.826959][ T6534] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 107.829772][ T6534] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.832262][ T6534] usb 7-1: Product: syz [ 107.833840][ T6534] usb 7-1: Manufacturer: syz [ 107.835321][ T6534] usb 7-1: SerialNumber: syz [ 107.841827][ T6534] usblp0: Disabling reads from problematic bidirectional printer [ 107.843881][ T7668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.849400][ T7668] fuse: Bad value for 'user_id' [ 107.851480][ T7668] fuse: Bad value for 'user_id' [ 107.899441][ T6024] hid-generic 0005:0006:5508.0004: item fetching failed at offset 0/1 [ 107.902901][ T6024] hid-generic 0005:0006:5508.0004: probe with driver hid-generic failed with error -22 [ 107.923762][ T7674] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.513'. [ 107.960230][ T7676] netlink: 68 bytes leftover after parsing attributes in process `syz.0.514'. [ 108.045954][ T6534] usblp 7-1:4.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 108.073485][ T53] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 108.104061][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 108.106420][ T53] usb 6-1: no configurations [ 108.107922][ T53] usb 6-1: can't read configurations, error -22 [ 108.233407][ T53] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 108.243478][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 108.245675][ T6534] usb 7-1: USB disconnect, device number 18 [ 108.249487][ T6534] usblp0: removed [ 108.254050][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 108.256190][ T53] usb 6-1: no configurations [ 108.257778][ T53] usb 6-1: can't read configurations, error -22 [ 108.259920][ T53] usb usb6-port1: unable to enumerate USB device [ 108.413892][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 108.414617][ T5946] Bluetooth: hci3: hardware error 0x07 [ 108.416532][ T7685] sctp: [Deprecated]: syz.3.517 (pid 7685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.416532][ T7685] Use struct sctp_sack_info instead [ 108.421250][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 108.426197][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.428815][ T9] usb 5-1: Product: syz [ 108.430181][ T9] usb 5-1: Manufacturer: syz [ 108.431677][ T9] usb 5-1: SerialNumber: syz [ 108.435579][ T9] usb 5-1: config 0 descriptor?? [ 108.439073][ T9] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 108.440474][ T7686] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 108.643372][ T9] pwc: send_video_command error -71 [ 108.645120][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 108.650636][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 108.657753][ T9] usb 5-1: USB disconnect, device number 19 [ 108.934271][ T7701] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 109.189798][ T7704] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 109.189798][ T7704] program syz.0.523 not setting count and/or reply_len properly [ 109.309067][ T7715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.434070][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 109.434087][ T40] audit: type=1400 audit(1768300378.388:441): avc: denied { getopt } for pid=7720 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.733431][ T6534] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 109.883360][ T40] audit: type=1326 audit(1768300378.828:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.890923][ T6534] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.892764][ T40] audit: type=1326 audit(1768300378.828:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.896320][ T6534] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.909666][ T6534] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.910146][ T40] audit: type=1326 audit(1768300378.828:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.919519][ T6534] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 109.924186][ T40] audit: type=1326 audit(1768300378.828:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.924224][ T40] audit: type=1326 audit(1768300378.828:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.927510][ T6534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.940249][ T40] audit: type=1326 audit(1768300378.838:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.946251][ T6534] usb 5-1: Product: syz [ 109.950945][ T40] audit: type=1326 audit(1768300378.838:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.958524][ T6534] usb 5-1: Manufacturer: syz [ 109.960278][ T40] audit: type=1326 audit(1768300378.838:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.969512][ T6534] usb 5-1: SerialNumber: syz [ 109.976568][ T5945] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 109.985868][ T40] audit: type=1326 audit(1768300378.838:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.1.530" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3c878f7c9 code=0x7ffc0000 [ 109.985942][ T6534] usblp0: Disabling reads from problematic bidirectional printer [ 110.188341][ T6534] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 110.326721][ T7754] syzkaller1: entered promiscuous mode [ 110.328558][ T7754] syzkaller1: entered allmulticast mode [ 110.393921][ T6534] usb 5-1: USB disconnect, device number 20 [ 110.405629][ T6534] usblp0: removed [ 110.593430][ T5946] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 111.031411][ T7761] __nla_validate_parse: 2 callbacks suppressed [ 111.031423][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 111.173483][ T5999] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 111.269119][ T7768] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.334813][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.339528][ T5999] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.343677][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.350190][ T7773] FAULT_INJECTION: forcing a failure. [ 111.350190][ T7773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.350784][ T5999] usb 5-1: config 0 descriptor?? [ 111.355915][ T7773] CPU: 2 UID: 0 PID: 7773 Comm: syz.2.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.355941][ T7773] Tainted: [L]=SOFTLOCKUP [ 111.355948][ T7773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.355958][ T7773] Call Trace: [ 111.355964][ T7773] [ 111.355971][ T7773] dump_stack_lvl+0x16c/0x1f0 [ 111.356037][ T7773] should_fail_ex+0x512/0x640 [ 111.356075][ T7773] _copy_from_iter+0x2a4/0x16c0 [ 111.356106][ T7773] ? __pfx__copy_from_iter+0x10/0x10 [ 111.356130][ T7773] ? __lock_acquire+0x436/0x2890 [ 111.356150][ T7773] ? _parse_integer_limit+0x17f/0x1d0 [ 111.356176][ T7773] ? _kstrtoull+0x145/0x200 [ 111.356198][ T7773] tun_get_user+0x3c7/0x3cc0 [ 111.356228][ T7773] ? __lock_acquire+0x436/0x2890 [ 111.356252][ T7773] ? __pfx_tun_get_user+0x10/0x10 [ 111.356278][ T7773] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.356302][ T7773] ? find_held_lock+0x2b/0x80 [ 111.356327][ T7773] ? tun_get+0x191/0x370 [ 111.356355][ T7773] tun_chr_write_iter+0xdc/0x210 [ 111.356383][ T7773] vfs_write+0x7d3/0x11d0 [ 111.356405][ T7773] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 111.356432][ T7773] ? __pfx_vfs_write+0x10/0x10 [ 111.356451][ T7773] ? find_held_lock+0x2b/0x80 [ 111.356489][ T7773] ksys_write+0x12a/0x250 [ 111.356509][ T7773] ? __pfx_ksys_write+0x10/0x10 [ 111.356537][ T7773] do_syscall_64+0xcd/0xf80 [ 111.356561][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.356577][ T7773] RIP: 0033:0x7f8e8b78f7c9 [ 111.356590][ T7773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.356607][ T7773] RSP: 002b:00007f8e8c57a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.356625][ T7773] RAX: ffffffffffffffda RBX: 00007f8e8b9e5fa0 RCX: 00007f8e8b78f7c9 [ 111.356637][ T7773] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 111.356647][ T7773] RBP: 00007f8e8c57a090 R08: 0000000000000000 R09: 0000000000000000 [ 111.356657][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.356667][ T7773] R13: 00007f8e8b9e6038 R14: 00007f8e8b9e5fa0 R15: 00007ffe5cf95238 [ 111.356692][ T7773] [ 111.636052][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 111.651001][ T5999] usbhid 5-1:0.0: can't add hid device: -71 [ 111.653627][ T5999] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.659333][ T5999] usb 5-1: USB disconnect, device number 21 [ 111.749107][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 111.804613][ T7806] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 111.810700][ T7806] exFAT-fs (nullb0): invalid boot record signature [ 111.814313][ T7806] exFAT-fs (nullb0): failed to read boot sector [ 111.817111][ T7806] exFAT-fs (nullb0): failed to recognize exfat type [ 111.823536][ T29] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 111.859644][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.862202][ T7807] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 111.866705][ T7807] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 111.974793][ T29] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.977982][ T29] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.980954][ T29] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.986744][ T29] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 111.989612][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.992088][ T29] usb 7-1: Product: syz [ 111.993761][ T29] usb 7-1: Manufacturer: syz [ 111.999313][ T29] usb 7-1: SerialNumber: syz [ 112.004364][ T29] usblp0: Disabling reads from problematic bidirectional printer [ 112.060695][ T7818] devpts: Bad value for 'max' [ 112.069909][ T7818] bridge_slave_0: left allmulticast mode [ 112.071760][ T7818] bridge_slave_0: left promiscuous mode [ 112.073887][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.083872][ T5999] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 112.085276][ T7818] bridge_slave_1: left allmulticast mode [ 112.089148][ T7818] bridge_slave_1: left promiscuous mode [ 112.091761][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.098829][ T7818] bond0: (slave bond_slave_0): Releasing backup interface [ 112.135454][ T7818] bond0: (slave bond_slave_1): Releasing backup interface [ 112.168319][ T7818] team0: Port device team_slave_0 removed [ 112.173208][ T7818] team0: Port device team_slave_1 removed [ 112.175879][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.178730][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.182354][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.185028][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.189795][ T7818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.207577][ T29] usblp 7-1:4.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 112.217296][ T7823] team0: Mode changed to "random" [ 112.230659][ T7818] vlan0: entered promiscuous mode [ 112.243347][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 112.243674][ T7818] team0: Port device vlan0 added [ 112.246232][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.250669][ T5999] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 112.255894][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.259928][ T5999] usb 5-1: config 0 descriptor?? [ 112.264324][ T5999] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 112.268619][ T5999] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 112.296818][ T7830] mmap: syz.3.551 (7830) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.411789][ T5518] usb 7-1: USB disconnect, device number 19 [ 112.421887][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 112.425575][ T5518] usblp0: removed [ 112.526830][ T7842] wireguard0: entered promiscuous mode [ 112.606713][ T5999] IPVS: starting estimator thread 0... [ 112.663841][ T5999] usb 5-1: USB disconnect, device number 22 [ 112.672258][ T5999] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 112.703453][ T7846] IPVS: using max 46 ests per chain, 110400 per kthread [ 113.314279][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 113.370674][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 113.410283][ T7860] macvlan2: entered promiscuous mode [ 113.461637][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 113.491873][ T7867] team0 (unregistering): Port device team_slave_0 removed [ 113.499487][ T7867] team0 (unregistering): Port device team_slave_1 removed [ 113.518517][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 113.592468][ T7882] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 113.595242][ T7882] [U] J"—e:ÀÆ" [ 113.646698][ T7886] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 113.649799][ T7886] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 113.653876][ T7886] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 113.689437][ T7891] FAULT_INJECTION: forcing a failure. [ 113.689437][ T7891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.696695][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.696718][ T7891] Tainted: [L]=SOFTLOCKUP [ 113.696723][ T7891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.696732][ T7891] Call Trace: [ 113.696737][ T7891] [ 113.696742][ T7891] dump_stack_lvl+0x16c/0x1f0 [ 113.696765][ T7891] should_fail_ex+0x512/0x640 [ 113.696791][ T7891] _copy_from_iter+0x2a4/0x16c0 [ 113.696819][ T7891] ? __pfx__copy_from_iter+0x10/0x10 [ 113.696841][ T7891] ? _copy_from_iter+0x161/0x16c0 [ 113.696870][ T7891] skb_copy_datagram_from_iter+0x124/0x740 [ 113.696894][ T7891] ? iov_iter_advance+0x7d/0x6c0 [ 113.696915][ T7891] tun_get_user+0x1850/0x3cc0 [ 113.696945][ T7891] ? __pfx_tun_get_user+0x10/0x10 [ 113.696966][ T7891] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 113.696986][ T7891] ? find_held_lock+0x2b/0x80 [ 113.697008][ T7891] ? tun_get+0x191/0x370 [ 113.697030][ T7891] tun_chr_write_iter+0xdc/0x210 [ 113.697051][ T7891] vfs_write+0x7d3/0x11d0 [ 113.697069][ T7891] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 113.697092][ T7891] ? __pfx_vfs_write+0x10/0x10 [ 113.697106][ T7891] ? find_held_lock+0x2b/0x80 [ 113.697138][ T7891] ksys_write+0x12a/0x250 [ 113.697156][ T7891] ? __pfx_ksys_write+0x10/0x10 [ 113.697179][ T7891] do_syscall_64+0xcd/0xf80 [ 113.697198][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.697212][ T7891] RIP: 0033:0x7f8e8b78f7c9 [ 113.697238][ T7891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.697251][ T7891] RSP: 002b:00007f8e8c57a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.697265][ T7891] RAX: ffffffffffffffda RBX: 00007f8e8b9e5fa0 RCX: 00007f8e8b78f7c9 [ 113.697275][ T7891] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 113.697283][ T7891] RBP: 00007f8e8c57a090 R08: 0000000000000000 R09: 0000000000000000 [ 113.697291][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.697299][ T7891] R13: 00007f8e8b9e6038 R14: 00007f8e8b9e5fa0 R15: 00007ffe5cf95238 [ 113.697319][ T7891] [ 113.893667][ T5518] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 114.044816][ T5946] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 114.046979][ T5518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.047629][ T5946] Bluetooth: hci2: Injecting HCI hardware error event [ 114.052113][ T5518] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.052135][ T5518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.055635][ T5945] Bluetooth: hci2: hardware error 0x00 [ 114.060569][ T5518] usb 5-1: config 0 descriptor?? [ 114.272009][ T5518] usbhid 5-1:0.0: can't add hid device: -71 [ 114.274309][ T5518] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 114.277957][ T5518] usb 5-1: USB disconnect, device number 23 [ 114.320146][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 114.322241][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 114.365482][ T7908] ceph: No mds server is up or the cluster is laggy [ 114.451614][ T7912] infiniband syz2: set down [ 114.453853][ T7912] infiniband syz2: added bond0 [ 114.457972][ T7912] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 114.459840][ T7912] infiniband syz2: Couldn't open port 1 [ 114.468052][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 114.468061][ T40] audit: type=1400 audit(1768300383.418:523): avc: denied { write } for pid=7924 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.482136][ T7912] RDS/IB: syz2: added [ 114.483731][ T7912] smc: adding ib device syz2 with port count 1 [ 114.486116][ T7912] smc: ib device syz2 port 1 has no pnetid [ 114.713556][ T835] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 114.783415][ T6024] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 114.863378][ T835] usb 5-1: Using ep0 maxpacket: 32 [ 114.867192][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.871388][ T835] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 114.876160][ T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.882015][ T835] usb 5-1: config 0 descriptor?? [ 114.886849][ T835] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.891785][ T835] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.933441][ T6024] usb 8-1: Using ep0 maxpacket: 32 [ 114.943193][ T6024] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 114.947771][ T6024] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 114.952779][ T6024] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.958548][ T6024] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 114.965913][ T6024] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 114.969624][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.972931][ T6024] usb 8-1: Product: syz [ 114.976774][ T6024] usb 8-1: Manufacturer: syz [ 114.978371][ T6024] usb 8-1: SerialNumber: syz [ 114.985406][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 114.994543][ T6024] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input10 [ 115.203486][ T6024] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 115.213452][ T6024] (id 0x00) [ 115.263417][ T6024] rc_core: IR keymap rc-imon-pad not found [ 115.265945][ T6024] Registered IR keymap rc-empty [ 115.268101][ T6024] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 115.272326][ T6024] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 115.341671][ T982] usb 5-1: USB disconnect, device number 24 [ 115.347197][ T982] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 115.364824][ T7954] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.587'. [ 115.405211][ T6024] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 115.409330][ T40] audit: type=1400 audit(1768300384.358:524): avc: denied { write } for pid=7953 comm="syz.1.587" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.412412][ T6024] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input11 [ 115.425118][ T6024] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:14> initialized [ 115.586090][ T982] usb 8-1: USB disconnect, device number 14 [ 115.657728][ T7960] 9p: Bad value for 'rfdno' [ 115.896647][ T7975] input: syz1 as /devices/virtual/input/input12 [ 115.898701][ T7975] input: failed to attach handler leds to device input12, error: -6 [ 115.904522][ T7974] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 115.974375][ T7980] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.597'. [ 116.145706][ T7991] ref_ctr increment failed for inode: 0x34e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802f159880 [ 116.193446][ T5945] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 116.406386][ T8002] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 116.571159][ T40] audit: type=1400 audit(1768300385.518:525): avc: denied { create } for pid=8014 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.583051][ T40] audit: type=1400 audit(1768300385.528:526): avc: denied { setopt } for pid=8014 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.591441][ T40] audit: type=1400 audit(1768300385.538:527): avc: denied { connect } for pid=8014 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.667222][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 116.718611][ T6016] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 116.723006][ T40] audit: type=1400 audit(1768300385.668:528): avc: denied { add_name } for pid=8012 comm="syz.1.608" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.730737][ T40] audit: type=1400 audit(1768300385.668:529): avc: denied { create } for pid=8012 comm="syz.1.608" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.738176][ T40] audit: type=1400 audit(1768300385.678:530): avc: denied { associate } for pid=8012 comm="syz.1.608" name="blkio.bfq.io_merged_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 116.747196][ T40] audit: type=1400 audit(1768300385.678:531): avc: denied { read append open } for pid=8012 comm="syz.1.608" path="/150/file0/blkio.bfq.io_merged_recursive" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.755610][ T40] audit: type=1400 audit(1768300385.678:532): avc: denied { setopt } for pid=8012 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.873592][ T6016] usb 5-1: Using ep0 maxpacket: 32 [ 116.879193][ T6016] usb 5-1: no configurations [ 116.881208][ T6016] usb 5-1: can't read configurations, error -22 [ 116.949612][ T8026] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.612'. [ 117.023437][ T6016] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 117.185732][ T6016] usb 5-1: Using ep0 maxpacket: 32 [ 117.188881][ T6016] usb 5-1: no configurations [ 117.191145][ T6016] usb 5-1: can't read configurations, error -22 [ 117.197832][ T6016] usb usb5-port1: attempt power cycle [ 117.533648][ T6016] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 117.554138][ T6016] usb 5-1: Using ep0 maxpacket: 32 [ 117.563932][ T6016] usb 5-1: no configurations [ 117.565456][ T6016] usb 5-1: can't read configurations, error -22 [ 117.591416][ T8060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.693417][ T6016] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 117.715623][ T6016] usb 5-1: Using ep0 maxpacket: 32 [ 117.720881][ T6016] usb 5-1: no configurations [ 117.722460][ T6016] usb 5-1: can't read configurations, error -22 [ 117.725259][ T6016] usb usb5-port1: unable to enumerate USB device [ 117.798494][ T8072] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.803973][ T8072] block device autoloading is deprecated and will be removed. [ 117.913424][ T5518] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 118.088556][ T5518] usb 6-1: Using ep0 maxpacket: 8 [ 118.094617][ T5518] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.098845][ T5518] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.113048][ T5518] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.117972][ T5518] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.122869][ T5518] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.127593][ T5518] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.228266][ T8086] tmpfs: Bad value for 'mpol' [ 118.336734][ T5518] usb 6-1: GET_CAPABILITIES returned 0 [ 118.338433][ T5518] usbtmc 6-1:16.0: can't read capabilities [ 118.505667][ T8091] lo speed is unknown, defaulting to 1000 [ 118.510575][ T8091] lo speed is unknown, defaulting to 1000 [ 118.514347][ T8091] lo speed is unknown, defaulting to 1000 [ 118.543255][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 118.546492][ T8069] usbtmc 6-1:16.0: Unable to send data, error -71 [ 118.551216][ T6024] usb 6-1: USB disconnect, device number 20 [ 118.558596][ T8092] ªªªªªª: renamed from lo (while UP) [ 118.621266][ T8091] infiniband sz1: set active [ 118.623010][ T982] ªªªªªª speed is unknown, defaulting to 1000 [ 118.623390][ T8091] infiniband sz1: added ªªªªªª [ 118.647369][ T8091] RDS/IB: sz1: added [ 118.649753][ T8091] smc: adding ib device sz1 with port count 1 [ 118.651925][ T8091] smc: ib device sz1 port 1 has no pnetid [ 118.654184][ T982] ªªªªªª speed is unknown, defaulting to 1000 [ 118.657099][ T8091] ªªªªªª speed is unknown, defaulting to 1000 [ 118.748366][ T8091] ªªªªªª speed is unknown, defaulting to 1000 [ 118.836119][ T8091] ªªªªªª speed is unknown, defaulting to 1000 [ 118.919902][ T8091] ªªªªªª speed is unknown, defaulting to 1000 [ 119.295467][ T8126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8126 comm=syz.0.641 [ 119.303737][ T8127] netlink: 80 bytes leftover after parsing attributes in process `syz.2.642'. [ 119.349307][ T8131] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.367450][ T8133] IPv6: syztnl0: Disabled Multicast RS [ 119.370802][ T8133] fuse: Bad value for 'fd' [ 119.573160][ T8153] netlink: 80 bytes leftover after parsing attributes in process `syz.1.652'. [ 119.595411][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 119.595422][ T40] audit: type=1400 audit(1768300388.548:546): avc: denied { name_connect } for pid=8146 comm="syz.2.647" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 119.674363][ T8161] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 119.686033][ T40] audit: type=1400 audit(1768300388.638:547): avc: denied { setopt } for pid=8163 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.704122][ T8161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.708249][ T8161] bond2: (slave bond3): making interface the new active one [ 119.711199][ T8161] bond2: (slave bond3): Enslaving as an active interface with an up link [ 119.720769][ T8161] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 119.724888][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'. [ 119.728529][ T8161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.886078][ T40] audit: type=1400 audit(1768300388.838:548): avc: denied { write } for pid=8185 comm="syz.3.661" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.023476][ T982] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 120.028959][ T40] audit: type=1400 audit(1768300388.978:549): avc: denied { create } for pid=8191 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.145693][ T40] audit: type=1400 audit(1768300389.098:550): avc: denied { setopt } for pid=8191 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.158011][ T8197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 120.160325][ T8197] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 120.163477][ T8197] vhci_hcd vhci_hcd.0: Device attached [ 120.168788][ T40] audit: type=1400 audit(1768300389.118:551): avc: denied { getopt } for pid=8196 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.174215][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 120.176136][ T40] audit: type=1400 audit(1768300389.128:552): avc: denied { name_bind } for pid=8196 comm="syz.3.664" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 120.178894][ T982] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 120.186852][ T40] audit: type=1400 audit(1768300389.148:553): avc: denied { relabelfrom } for pid=8196 comm="syz.3.664" name="SCTP" dev="sockfs" ino=22077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.187534][ T8198] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 120.198733][ T982] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 120.202565][ T982] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 45, changing to 9 [ 120.204473][ T40] audit: type=1400 audit(1768300389.158:554): avc: denied { relabelto } for pid=8196 comm="syz.3.664" name="SCTP" dev="sockfs" ino=22077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:dhcpc_state_t:s0" [ 120.206223][ T982] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid maxpacket 33733, setting to 1024 [ 120.219017][ T982] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.219234][ T40] audit: type=1400 audit(1768300389.178:555): avc: denied { ioctl } for pid=8196 comm="syz.3.664" path="socket:[21357]" dev="sockfs" ino=21357 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.232026][ T982] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 120.235795][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.238653][ T982] usb 6-1: Product: syz [ 120.240095][ T982] usb 6-1: Manufacturer: syz [ 120.252052][ T982] usb 6-1: SerialNumber: syz [ 120.253830][ T8199] vhci_hcd: connection closed [ 120.254275][ T7784] vhci_hcd vhci_hcd.3: stop threads [ 120.256318][ T982] usb 6-1: config 0 descriptor?? [ 120.257601][ T7784] vhci_hcd vhci_hcd.3: release socket [ 120.262194][ T7784] vhci_hcd vhci_hcd.3: disconnect device [ 120.467592][ T982] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input13 [ 120.488797][ T8208] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 120.512782][ T8208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.530115][ T8208] bond2: (slave geneve2): making interface the new active one [ 120.533571][ T8208] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 120.820298][ T982] usb 6-1: USB disconnect, device number 21 [ 120.820464][ C3] synaptics_usb 6-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 121.063780][ T835] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 121.222170][ T8236] netlink: 'syz.0.678': attribute type 15 has an invalid length. [ 121.223597][ T835] usb 8-1: Invalid ep0 maxpacket: 64 [ 121.353420][ T835] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 121.503601][ T835] usb 8-1: Invalid ep0 maxpacket: 64 [ 121.506333][ T835] usb usb8-port1: attempt power cycle [ 121.768344][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 121.771596][ C0] vcan0: j1939_session_tx_dat: 0xffff888055805c00: queue data error: -100 [ 121.843392][ T835] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 121.864061][ T835] usb 8-1: Invalid ep0 maxpacket: 64 [ 121.994010][ T835] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 122.015180][ T835] usb 8-1: Invalid ep0 maxpacket: 64 [ 122.017926][ T835] usb usb8-port1: unable to enumerate USB device [ 122.059033][ T8275] ubi8: attaching mtd0 [ 122.061816][ T8275] ubi8: scanning is finished [ 122.063372][ T8275] ubi8: empty MTD device detected [ 122.065749][ T8275] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 122.134779][ T8275] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 122.339119][ T8291] netlink: 'syz.1.698': attribute type 3 has an invalid length. [ 122.341442][ T8291] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 122.346196][ T8291] netlink: 224 bytes leftover after parsing attributes in process `syz.1.698'. [ 122.349733][ T8291] NCSI netlink: No device for ifindex 0 [ 122.384279][ T8294] netlink: 68 bytes leftover after parsing attributes in process `syz.1.699'. [ 123.163432][ T982] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 123.315475][ T8321] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 123.319995][ T8321] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 123.325680][ T982] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.329693][ T982] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.334103][ T982] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.341762][ T982] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 123.345495][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.348717][ T982] usb 6-1: Product: syz [ 123.350604][ T982] usb 6-1: Manufacturer: syz [ 123.352573][ T982] usb 6-1: SerialNumber: syz [ 123.362107][ T982] usblp0: Disabling reads from problematic bidirectional printer [ 123.375692][ T8323] kernel read not supported for file /policy (pid: 8323 comm: syz.2.709) [ 123.561129][ T982] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 123.763578][ T982] usb 6-1: USB disconnect, device number 22 [ 123.769998][ T982] usblp0: removed [ 123.849082][ T8336] netlink: 152 bytes leftover after parsing attributes in process `syz.3.714'. [ 123.860873][ T8336] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 124.228046][ T8355] netlink: 80 bytes leftover after parsing attributes in process `syz.0.720'. [ 124.244311][ T6033] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 124.393541][ T6033] usb 7-1: Using ep0 maxpacket: 32 [ 124.396220][ T6033] usb 7-1: no configurations [ 124.402756][ T6033] usb 7-1: can't read configurations, error -22 [ 124.418378][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'. [ 124.430172][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 124.464423][ T8385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.730'. [ 124.476759][ T8387] netlink: 80 bytes leftover after parsing attributes in process `syz.0.731'. [ 124.534783][ T6033] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 124.614087][ T8396] syzkaller0: entered promiscuous mode [ 124.616402][ T8396] syzkaller0: entered allmulticast mode [ 124.620451][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 124.620462][ T40] audit: type=1400 audit(1768300393.568:593): avc: denied { getopt } for pid=8398 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.624492][ T8396] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 124.640956][ T8399] x_tables: duplicate underflow at hook 2 [ 124.683385][ T6033] usb 7-1: Using ep0 maxpacket: 32 [ 124.685610][ T6033] usb 7-1: no configurations [ 124.687098][ T6033] usb 7-1: can't read configurations, error -22 [ 124.690478][ T6033] usb usb7-port1: attempt power cycle [ 124.863416][ T5978] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 124.871181][ T40] audit: type=1400 audit(1768300393.818:594): avc: denied { mount } for pid=8410 comm="syz.3.741" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 124.885548][ T40] audit: type=1400 audit(1768300393.838:595): avc: denied { remount } for pid=8410 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 124.966017][ T40] audit: type=1400 audit(1768300393.918:596): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 125.033388][ T6033] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 125.035892][ T5978] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.039563][ T5978] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.042626][ T5978] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.051995][ T5978] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 125.053852][ T6033] usb 7-1: Using ep0 maxpacket: 32 [ 125.054926][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.057348][ T6033] usb 7-1: no configurations [ 125.059245][ T5978] usb 5-1: Product: syz [ 125.061110][ T6033] usb 7-1: can't read configurations, error -22 [ 125.062389][ T5978] usb 5-1: Manufacturer: syz [ 125.066486][ T5978] usb 5-1: SerialNumber: syz [ 125.068306][ T40] audit: type=1400 audit(1768300394.018:597): avc: denied { read write } for pid=8416 comm="syz.1.744" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.068320][ T8422] random: crng reseeded on system resumption [ 125.085196][ T5978] usblp0: Disabling reads from problematic bidirectional printer [ 125.127203][ T8426] loop4: detected capacity change from 0 to 7 [ 125.137428][ T8426] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 125.140145][ T8426] loop4: partition table partially beyond EOD, truncated [ 125.143273][ T8426] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 125.179513][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 125.204216][ T6033] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 125.224430][ T6033] usb 7-1: Using ep0 maxpacket: 32 [ 125.226539][ T6033] usb 7-1: no configurations [ 125.228008][ T6033] usb 7-1: can't read configurations, error -22 [ 125.238957][ T6033] usb usb7-port1: unable to enumerate USB device [ 125.271739][ T8432] syzkaller0: entered promiscuous mode [ 125.273640][ T8432] syzkaller0: entered allmulticast mode [ 125.284567][ T5978] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 125.469347][ T8441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.751'. [ 125.479228][ T40] audit: type=1400 audit(1768300394.428:598): avc: denied { append } for pid=8439 comm="syz.1.751" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.487411][ T6024] usb 5-1: USB disconnect, device number 29 [ 125.493102][ T6024] usblp0: removed [ 125.700933][ T8450] bridge: RTM_NEWNEIGH with invalid ether address [ 125.704733][ T8450] bridge: RTM_NEWNEIGH with invalid ether address [ 125.711441][ T982] libceph: connect (1)[c::]:6789 error -101 [ 125.713366][ T982] libceph: mon0 (1)[c::]:6789 connect error [ 125.815795][ T40] audit: type=1400 audit(1768300394.768:599): avc: denied { module_request } for pid=8449 comm="syz.1.754" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 125.973733][ T982] libceph: connect (1)[c::]:6789 error -101 [ 125.976177][ T982] libceph: mon0 (1)[c::]:6789 connect error [ 126.129812][ T8459] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 126.132531][ T8459] netlink: 'syz.3.756': attribute type 3 has an invalid length. [ 126.255913][ T8470] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 126.258214][ T8470] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 126.262222][ T8470] netlink: 'syz.0.759': attribute type 10 has an invalid length. [ 126.331819][ T8470] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 126.337016][ T8470] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.483837][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 126.485980][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 126.525745][ T8450] ceph: No mds server is up or the cluster is laggy [ 126.540374][ T40] audit: type=1400 audit(1768300395.488:600): avc: denied { map } for pid=8487 comm="syz.3.766" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.555796][ T40] audit: type=1400 audit(1768300395.488:601): avc: denied { execute } for pid=8487 comm="syz.3.766" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.588795][ T8490] bpf: Bad value for 'gid' [ 126.590797][ T40] audit: type=1400 audit(1768300395.538:602): avc: denied { write } for pid=8489 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.590890][ T8490] bpf: Bad value for 'gid' [ 126.603062][ T8490] bpf: Bad value for 'gid' [ 126.604967][ T8490] bpf: Bad value for 'gid' [ 126.606627][ T8490] bpf: Bad value for 'gid' [ 126.608213][ T8490] bpf: Bad value for 'gid' [ 126.609769][ T8490] bpf: Bad value for 'gid' [ 126.611676][ T8490] bpf: Bad value for 'gid' [ 126.614590][ T8490] bpf: Bad value for 'gid' [ 126.616791][ T8490] bpf: Bad value for 'gid' [ 126.618901][ T8490] bpf: Bad value for 'gid' [ 126.621915][ T8490] bpf: Bad value for 'gid' [ 126.624228][ T8490] bpf: Bad value for 'gid' [ 126.626298][ T8490] bpf: Bad value for 'gid' [ 126.628225][ T8490] bpf: Bad value for 'gid' [ 126.630257][ T8490] bpf: Bad value for 'gid' [ 126.632277][ T8490] bpf: Bad value for 'gid' [ 126.635495][ T8490] bpf: Bad value for 'gid' [ 126.637096][ T8490] bpf: Bad value for 'gid' [ 126.638616][ T8490] bpf: Bad value for 'gid' [ 126.640143][ T8490] bpf: Bad value for 'gid' [ 126.641661][ T8490] bpf: Bad value for 'gid' [ 126.643249][ T8490] bpf: Bad value for 'gid' [ 126.645066][ T8490] bpf: Bad value for 'gid' [ 126.646605][ T8490] bpf: Bad value for 'gid' [ 126.648072][ T8490] bpf: Bad value for 'gid' [ 126.649894][ T8490] bpf: Bad value for 'gid' [ 126.651411][ T8490] bpf: Bad value for 'gid' [ 126.652919][ T8490] bpf: Bad value for 'gid' [ 126.655797][ T8490] bpf: Bad value for 'gid' [ 126.657338][ T8490] bpf: Bad value for 'gid' [ 126.659252][ T8490] bpf: Bad value for 'gid' [ 126.783422][ T6024] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 126.809748][ T8503] __nla_validate_parse: 2 callbacks suppressed [ 126.809759][ T8503] netlink: 80 bytes leftover after parsing attributes in process `syz.1.771'. [ 126.924661][ T8513] random: crng reseeded on system resumption [ 126.935317][ T6024] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.938369][ T6024] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.941527][ T6024] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.947469][ T6024] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 126.951552][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.954685][ T6024] usb 5-1: Product: syz [ 126.956093][ T6024] usb 5-1: Manufacturer: syz [ 126.957621][ T6024] usb 5-1: SerialNumber: syz [ 126.962518][ T6024] usblp0: Disabling reads from problematic bidirectional printer [ 127.052408][ T8517] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 127.057171][ T8517] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 127.061326][ T8517] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 127.065841][ T8517] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 127.131866][ T8526] netlink: 56 bytes leftover after parsing attributes in process `syz.3.780'. [ 127.167895][ T6024] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 127.237467][ T8531] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.240506][ T8531] overlayfs: failed to set xattr on upper [ 127.242650][ T8531] overlayfs: ...falling back to redirect_dir=nofollow. [ 127.245535][ T8531] overlayfs: ...falling back to index=off. [ 127.248263][ T8531] overlayfs: ...falling back to uuid=null. [ 127.356046][ T8530] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000007„£€hQ ' [ 127.366943][ T5518] usb 5-1: USB disconnect, device number 30 [ 127.373486][ T5518] usblp0: removed [ 127.424515][ T6024] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 127.553659][ T6024] usb 8-1: device descriptor read/64, error -71 [ 127.803431][ T6024] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 127.943441][ T6024] usb 8-1: device descriptor read/64, error -71 [ 128.003825][ T8553] loop7: detected capacity change from 0 to 16384 [ 128.054990][ T6024] usb usb8-port1: attempt power cycle [ 128.073767][ T8553] loop7: detected capacity change from 16384 to 16383 [ 128.170618][ T8555] ªªªªªª speed is unknown, defaulting to 1000 [ 128.413408][ T6024] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 128.434164][ T6024] usb 8-1: device descriptor read/8, error -71 [ 128.527939][ T8571] macvlan0: entered allmulticast mode [ 128.530250][ T8571] veth1_vlan: entered allmulticast mode [ 128.538583][ T8571] pim6reg: entered allmulticast mode [ 128.548953][ T8571] veth1_vlan: left allmulticast mode [ 128.565216][ T8571] macvlan0 (unregistering): left allmulticast mode [ 128.704125][ T6024] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 128.714121][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 128.718527][ T8580] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 128.721933][ T8580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.797'. [ 128.728092][ T6024] usb 8-1: device descriptor read/8, error -71 [ 128.836687][ T6024] usb usb8-port1: unable to enumerate USB device [ 129.035494][ T8592] random: crng reseeded on system resumption [ 129.041676][ T8592] Restarting kernel threads ... [ 129.053493][ T8592] Done restarting kernel threads. [ 129.093113][ T8596] netlink: 80 bytes leftover after parsing attributes in process `syz.0.803'. [ 129.290706][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.807'. [ 129.403389][ T6016] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 129.418806][ T8614] vlan0: entered promiscuous mode [ 129.421198][ T8614] vlan0: entered allmulticast mode [ 129.424172][ T8614] hsr_slave_1: entered allmulticast mode [ 129.554985][ T6016] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.557640][ T6016] usb 7-1: config 0 has no interface number 0 [ 129.559769][ T6016] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 129.563222][ T6016] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x83 has invalid maxpacket 159, setting to 8 [ 129.567130][ T6016] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.570290][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.575183][ T6016] usb 7-1: config 0 descriptor?? [ 129.577555][ T8602] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 129.583546][ T6016] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 129.689251][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 129.689264][ T40] audit: type=1400 audit(1768300398.638:611): avc: denied { setopt } for pid=8618 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.698869][ T8619] loop2: detected capacity change from 0 to 7 [ 129.705683][ T5940] Dev loop2: unable to read RDB block 7 [ 129.708023][ T5940] loop2: unable to read partition table [ 129.710525][ T5940] loop2: partition table beyond EOD, truncated [ 129.720076][ T8619] Dev loop2: unable to read RDB block 7 [ 129.722522][ T8619] loop2: unable to read partition table [ 129.725799][ T8619] loop2: partition table beyond EOD, truncated [ 129.728316][ T8619] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 129.802210][ T5978] usb 7-1: USB disconnect, device number 24 [ 130.056314][ T8626] netlink: 80 bytes leftover after parsing attributes in process `syz.1.814'. [ 130.199439][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.817'. [ 130.203229][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.817'. [ 130.226766][ T40] audit: type=1400 audit(1768300399.178:612): avc: denied { relabelfrom } for pid=8633 comm="syz.3.818" name="IEEE-802.15.4-MAC" dev="sockfs" ino=26646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.226784][ T8634] SELinux: Context system_u:object_r:auditd_exec_t:s0 is not valid (left unmapped). [ 130.243180][ T40] audit: type=1400 audit(1768300399.188:613): avc: denied { relabelto } for pid=8633 comm="syz.3.818" name="IEEE-802.15.4-MAC" dev="sockfs" ino=26646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=ieee802154_socket permissive=1 trawcon="system_u:object_r:auditd_exec_t:s0" [ 130.262780][ T40] audit: type=1400 audit(1768300399.208:614): avc: denied { setopt } for pid=8633 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.354963][ T8639] syzkaller1: entered promiscuous mode [ 130.363456][ T8639] syzkaller1: entered allmulticast mode [ 130.437414][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 130.505152][ T8652] veth1_to_batadv: entered promiscuous mode [ 130.559704][ T8654] vlan3: entered allmulticast mode [ 130.561425][ T8654] bond0: entered allmulticast mode [ 130.585101][ T8654] bond0 (unregistering): Released all slaves [ 131.033396][ T60] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 131.163353][ T60] usb 6-1: device descriptor read/64, error -71 [ 131.413381][ T60] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 131.488123][ T8667] random: crng reseeded on system resumption [ 131.553451][ T60] usb 6-1: device descriptor read/64, error -71 [ 131.554897][ T40] audit: type=1326 audit(1768300400.508:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.3.830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e0b8f7c9 code=0x7ffc0000 [ 131.573100][ T40] audit: type=1326 audit(1768300400.508:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.3.830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e0b8f7c9 code=0x7ffc0000 [ 131.581339][ T40] audit: type=1326 audit(1768300400.508:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.3.830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e0b8f7c9 code=0x7ffc0000 [ 131.589351][ T40] audit: type=1326 audit(1768300400.508:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.3.830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e0b8f7c9 code=0x7ffc0000 [ 131.596783][ T40] audit: type=1326 audit(1768300400.508:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.3.830" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e0b8f7c9 code=0x7ffc0000 [ 131.604924][ T40] audit: type=1326 audit(1768300400.508:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8671 comm="syz.3.830" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82e0b8f7c9 code=0x7ffc0000 [ 131.673573][ T60] usb usb6-port1: attempt power cycle [ 131.831609][ T8683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8683 comm=syz.0.833 [ 131.946440][ T8685] __nla_validate_parse: 5 callbacks suppressed [ 131.946452][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 132.023693][ T60] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 132.054557][ T60] usb 6-1: device descriptor read/8, error -71 [ 132.223479][ T5999] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 132.293431][ T60] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 132.314310][ T60] usb 6-1: device descriptor read/8, error -71 [ 132.374779][ T5999] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.377962][ T5999] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.381412][ T5999] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.388728][ T5999] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 132.392425][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.395929][ T5999] usb 5-1: Product: syz [ 132.397720][ T5999] usb 5-1: Manufacturer: syz [ 132.399685][ T5999] usb 5-1: SerialNumber: syz [ 132.412725][ T5999] usblp0: Disabling reads from problematic bidirectional printer [ 132.433624][ T60] usb usb6-port1: unable to enumerate USB device [ 132.479575][ T8690] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 132.614348][ T5999] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 132.683725][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 132.685485][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.814708][ T8687] FAULT_INJECTION: forcing a failure. [ 132.814708][ T8687] name failslab, interval 1, probability 0, space 0, times 0 [ 132.818722][ T8687] CPU: 2 UID: 0 PID: 8687 Comm: syz.0.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.818743][ T8687] Tainted: [L]=SOFTLOCKUP [ 132.818748][ T8687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.818757][ T8687] Call Trace: [ 132.818763][ T8687] [ 132.818769][ T8687] dump_stack_lvl+0x16c/0x1f0 [ 132.818806][ T8687] should_fail_ex+0x512/0x640 [ 132.818828][ T8687] ? __kmalloc_noprof+0xca/0x910 [ 132.818845][ T8687] ? __pfx_usblp_write+0x10/0x10 [ 132.818859][ T8687] should_failslab+0xc2/0x120 [ 132.818873][ T8687] __kmalloc_noprof+0xeb/0x910 [ 132.818889][ T8687] ? import_ubuf+0x1b6/0x220 [ 132.818903][ T8687] ? usblp_write+0x2f6/0x8f0 [ 132.818918][ T8687] ? __pfx_usblp_write+0x10/0x10 [ 132.818932][ T8687] ? usblp_write+0x2f6/0x8f0 [ 132.818944][ T8687] ? __pfx_usblp_write+0x10/0x10 [ 132.818957][ T8687] usblp_write+0x2f6/0x8f0 [ 132.818976][ T8687] ? __pfx_usblp_write+0x10/0x10 [ 132.818989][ T8687] vfs_writev+0x5df/0xde0 [ 132.819005][ T8687] ? __pfx_vfs_writev+0x10/0x10 [ 132.819026][ T8687] ? __fget_files+0x20e/0x3c0 [ 132.819040][ T8687] ? __fget_files+0x120/0x3c0 [ 132.819057][ T8687] ? do_writev+0x132/0x340 [ 132.819067][ T8687] do_writev+0x132/0x340 [ 132.819079][ T8687] ? __pfx_do_writev+0x10/0x10 [ 132.819094][ T8687] do_syscall_64+0xcd/0xf80 [ 132.819110][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.819120][ T8687] RIP: 0033:0x7fb2bbb8f7c9 [ 132.819129][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.819139][ T8687] RSP: 002b:00007fb2bcb0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 132.819149][ T8687] RAX: ffffffffffffffda RBX: 00007fb2bbde5fa0 RCX: 00007fb2bbb8f7c9 [ 132.819155][ T8687] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 132.819161][ T8687] RBP: 00007fb2bcb0f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.819167][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.819172][ T8687] R13: 00007fb2bbde6038 R14: 00007fb2bbde5fa0 R15: 00007fff2b562778 [ 132.819186][ T8687] [ 132.820353][ T6024] usb 5-1: USB disconnect, device number 31 [ 132.852407][ T8702] netlink: 92 bytes leftover after parsing attributes in process `syz.3.839'. [ 132.863939][ T6024] usblp0: removed [ 132.929355][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 133.012584][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 133.352636][ T8720] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 133.803654][ C1] ------------[ cut here ]------------ [ 133.805663][ C1] WARNING: net/ipv4/af_inet.c:157 at inet_sock_destruct+0x68c/0x830, CPU#1: swapper/1/0 [ 133.808821][ C1] Modules linked in: [ 133.810357][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.814546][ C1] Tainted: [L]=SOFTLOCKUP [ 133.816282][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.820144][ C1] RIP: 0010:inet_sock_destruct+0x68c/0x830 [ 133.822011][ C1] Code: 0f 0b 90 e9 0a fe ff ff e8 e1 4d cf f7 90 0f 0b 90 e9 56 fe ff ff e8 d3 4d cf f7 90 0f 0b 90 e9 8c fe ff ff e8 c5 4d cf f7 90 <0f> 0b 90 e9 cb fe ff ff e8 47 25 39 f8 e9 cf fc ff ff 4c 89 ff e8 [ 133.828036][ C1] RSP: 0018:ffffc900006a0d90 EFLAGS: 00010246 [ 133.829999][ C1] RAX: 0000000000000000 RBX: ffff88802e525ac0 RCX: ffffffff89ef9c47 [ 133.832547][ C1] RDX: ffff88801dad24c0 RSI: ffffffff89ef9d7b RDI: 0000000000000005 [ 133.835047][ C1] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 133.837530][ C1] R10: 0000000000000f70 R11: 0000000000005e38 R12: ffff88802e525ac0 [ 133.840190][ C1] R13: ffff88802e525b50 R14: ffffc900006a0e90 R15: 0000000000000000 [ 133.842548][ C1] FS: 0000000000000000(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 133.845413][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.847468][ C1] CR2: 00007f8e8c559d58 CR3: 000000005fdcf000 CR4: 0000000000352ef0 [ 133.849993][ C1] Call Trace: [ 133.851309][ C1] [ 133.852226][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 133.854027][ C1] __sk_destruct+0x85/0xbc0 [ 133.855448][ C1] ? rcu_core+0x797/0x15f0 [ 133.856840][ C1] rcu_core+0x79c/0x15f0 [ 133.858206][ C1] ? __pfx_rcu_core+0x10/0x10 [ 133.859690][ C1] ? read_tsc+0x9/0x20 [ 133.861118][ C1] handle_softirqs+0x219/0x950 [ 133.862634][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 133.864752][ C1] __irq_exit_rcu+0x109/0x170 [ 133.866736][ C1] irq_exit_rcu+0x9/0x30 [ 133.868510][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 133.870880][ C1] [ 133.872121][ C1] [ 133.873444][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.875953][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 133.878314][ C1] Code: 96 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 09 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 133.885724][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 00000286 [ 133.888064][ C1] RAX: 0000000000121fcb RBX: 0000000000000001 RCX: ffffffff8b7856d9 [ 133.891144][ C1] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 133.893908][ C1] RBP: ffffed1003b5a498 R08: 0000000000000001 R09: ffffed100d4a673d [ 133.896423][ C1] R10: ffff88806a5339eb R11: ffff88801dad2ff0 R12: 0000000000000001 [ 133.899175][ C1] R13: ffff88801dad24c0 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 133.902533][ C1] ? ct_kernel_exit+0x139/0x190 [ 133.904637][ C1] default_idle+0x13/0x20 [ 133.906450][ C1] default_idle_call+0x6c/0xb0 [ 133.908449][ C1] do_idle+0x38d/0x510 [ 133.910195][ C1] ? __pfx_do_idle+0x10/0x10 [ 133.912114][ C1] ? rcu_is_watching+0x12/0xc0 [ 133.913689][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.915935][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.918151][ C1] cpu_startup_entry+0x4f/0x60 [ 133.920178][ C1] start_secondary+0x21d/0x2d0 [ 133.922205][ C1] ? __pfx_start_secondary+0x10/0x10 [ 133.924455][ C1] common_startup_64+0x13e/0x148 [ 133.926537][ C1] [ 133.927815][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.930826][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.935000][ C1] Tainted: [L]=SOFTLOCKUP [ 133.936763][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.940133][ C1] Call Trace: [ 133.941297][ C1] [ 133.942215][ C1] dump_stack_lvl+0x3d/0x1f0 [ 133.943676][ C1] vpanic+0x640/0x6f0 [ 133.944948][ C1] ? inet_sock_destruct+0x68c/0x830 [ 133.946773][ C1] panic+0xca/0xd0 [ 133.948186][ C1] ? __pfx_panic+0x10/0x10 [ 133.949613][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 133.951212][ C1] check_panic_on_warn+0xab/0xb0 [ 133.952761][ C1] __warn+0x108/0x3c0 [ 133.953982][ C1] __report_bug+0x2a0/0x520 [ 133.955432][ C1] ? inet_sock_destruct+0x68c/0x830 [ 133.957173][ C1] ? __pfx___report_bug+0x10/0x10 [ 133.958953][ C1] ? inet_sock_destruct+0x68c/0x830 [ 133.960580][ C1] report_bug+0xb2/0x220 [ 133.961870][ C1] ? inet_sock_destruct+0x68c/0x830 [ 133.963489][ C1] handle_bug+0x127/0x260 [ 133.964884][ C1] exc_invalid_op+0x17/0x50 [ 133.966336][ C1] asm_exc_invalid_op+0x1a/0x20 [ 133.967979][ C1] RIP: 0010:inet_sock_destruct+0x68c/0x830 [ 133.969910][ C1] Code: 0f 0b 90 e9 0a fe ff ff e8 e1 4d cf f7 90 0f 0b 90 e9 56 fe ff ff e8 d3 4d cf f7 90 0f 0b 90 e9 8c fe ff ff e8 c5 4d cf f7 90 <0f> 0b 90 e9 cb fe ff ff e8 47 25 39 f8 e9 cf fc ff ff 4c 89 ff e8 [ 133.975830][ C1] RSP: 0018:ffffc900006a0d90 EFLAGS: 00010246 [ 133.978402][ C1] RAX: 0000000000000000 RBX: ffff88802e525ac0 RCX: ffffffff89ef9c47 [ 133.981074][ C1] RDX: ffff88801dad24c0 RSI: ffffffff89ef9d7b RDI: 0000000000000005 [ 133.983513][ C1] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 133.985983][ C1] R10: 0000000000000f70 R11: 0000000000005e38 R12: ffff88802e525ac0 [ 133.988337][ C1] R13: ffff88802e525b50 R14: ffffc900006a0e90 R15: 0000000000000000 [ 133.990765][ C1] ? inet_sock_destruct+0x557/0x830 [ 133.992334][ C1] ? inet_sock_destruct+0x68b/0x830 [ 133.993931][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 133.995647][ C1] __sk_destruct+0x85/0xbc0 [ 133.997082][ C1] ? rcu_core+0x797/0x15f0 [ 133.998446][ C1] rcu_core+0x79c/0x15f0 [ 133.999823][ C1] ? __pfx_rcu_core+0x10/0x10 [ 134.001266][ C1] ? read_tsc+0x9/0x20 [ 134.002544][ C1] handle_softirqs+0x219/0x950 [ 134.004032][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 134.005695][ C1] __irq_exit_rcu+0x109/0x170 [ 134.007118][ C1] irq_exit_rcu+0x9/0x30 [ 134.008430][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 134.010176][ C1] [ 134.011161][ C1] [ 134.012062][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.013865][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 134.015572][ C1] Code: 96 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 09 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 134.021399][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 00000286 [ 134.023242][ C1] RAX: 0000000000121fcb RBX: 0000000000000001 RCX: ffffffff8b7856d9 [ 134.025677][ C1] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 134.027987][ C1] RBP: ffffed1003b5a498 R08: 0000000000000001 R09: ffffed100d4a673d [ 134.030378][ C1] R10: ffff88806a5339eb R11: ffff88801dad2ff0 R12: 0000000000000001 [ 134.032779][ C1] R13: ffff88801dad24c0 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 134.035152][ C1] ? ct_kernel_exit+0x139/0x190 [ 134.036627][ C1] default_idle+0x13/0x20 [ 134.037932][ C1] default_idle_call+0x6c/0xb0 [ 134.039409][ C1] do_idle+0x38d/0x510 [ 134.040651][ C1] ? __pfx_do_idle+0x10/0x10 [ 134.042067][ C1] ? rcu_is_watching+0x12/0xc0 [ 134.043566][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.045319][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.046875][ C1] cpu_startup_entry+0x4f/0x60 [ 134.048334][ C1] start_secondary+0x21d/0x2d0 [ 134.049789][ C1] ? __pfx_start_secondary+0x10/0x10 [ 134.051488][ C1] common_startup_64+0x13e/0x148 [ 134.053578][ C1] [ 134.055600][ C1] Kernel Offset: disabled [ 134.057458][ C1] Rebooting in 86400 seconds..