last executing test programs: 1m31.892153251s ago: executing program 0 (id=91): unshare(0x40080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060008"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)="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", 0x124, r0}, 0x68) 1m31.821945185s ago: executing program 0 (id=93): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x70bd2d, 0x25dfdbfa}, 0x1e}}, 0x4084) 1m31.691619443s ago: executing program 0 (id=96): r0 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000280)={0x0, 0x43d9102d65573c3, @start={0x8}}) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 1m31.607810636s ago: executing program 0 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x4c, 0x10, 0x0, 0xfffffffffffffe84, 0x0, 0xffffffffffffffff, 0x41}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x806, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x1) close(0x3) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000bc0)) fcntl$getownex(r6, 0x10, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x5, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000400)={r7, 0x8000}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x800a, 0x5404, 0x4, 0x9, 0xc0000000, 0x1, 0x1, 0x0, r7}, 0xfffffffffffffe1a) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}]}) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r9, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m30.681447065s ago: executing program 0 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x1f000000, 0x0) 1m30.612965491s ago: executing program 0 (id=106): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48e, 0x0, 0xfff9fffe04006172}]}) (async) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000240)={0x10000000000000e0, 0x0, [{0x22c, 0x0, 0x8001}, {0xaa8, 0x0, 0x5}, {0x8e2, 0x0, 0x1200}, {0x97c, 0x0, 0x3}]}) 1m16.221290254s ago: executing program 3 (id=238): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) syz_ublk_setup_io_uring(0x3f2d, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x40004, 0xc0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000700)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002c00018014000180080001007f00001508000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c00028005000100ceaa9abebf9d0008000740000000000800000000"], 0x74}}, 0x8800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m16.09124432s ago: executing program 3 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55", 0x3f}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x17, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7d7, 0x0, 0x0, 0x0, 0xe61e}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa016}}, @jmp={0x5, 0x0, 0x4, 0x5, 0x1, 0x4, 0xfffffffffffffffc}, @generic={0x6, 0xa, 0x4, 0x5, 0xfffffff7}]}, &(0x7f0000000500)='GPL\x00', 0xffffff80, 0x86, &(0x7f0000000600)=""/134, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x8, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x2, 0x3, 0xf, 0x3}, {0x3, 0x1, 0xa, 0x3}, {0x3, 0x3, 0xb, 0x3}, {0x2, 0x3, 0x3, 0x9}], 0x10, 0x6}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a80)=@generic={&(0x7f0000000280)='./file0\x00', r4}, 0x18) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m15.306003483s ago: executing program 32 (id=106): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48e, 0x0, 0xfff9fffe04006172}]}) (async) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000240)={0x10000000000000e0, 0x0, [{0x22c, 0x0, 0x8001}, {0xaa8, 0x0, 0x5}, {0x8e2, 0x0, 0x1200}, {0x97c, 0x0, 0x3}]}) 1m15.121320931s ago: executing program 3 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x40, 0x107, 0x70ad2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) pread64(r2, 0x0, 0x0, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x23315}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1m14.647009513s ago: executing program 3 (id=249): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000080)={0xff, "b4badbd5eedf9c0596c2cdf5bf99ce1c3ba8020386993345ffd28b7b57da2bb4", 0x1, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) copy_file_range(r3, 0x0, r4, 0x0, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000004000ffdda47a0335746000006110280000000000d4f5c20000001000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1m14.588823295s ago: executing program 3 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x20000000, 0x0) 1m14.50149764s ago: executing program 3 (id=252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0xa, 0x1, 0x0, 0x9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom(r0, &(0x7f0000000440)=""/4070, 0x20, 0x101, 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000140)={0x6, 0x9}, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 59.414444389s ago: executing program 33 (id=252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0xa, 0x1, 0x0, 0x9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom(r0, &(0x7f0000000440)=""/4070, 0x20, 0x101, 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000140)={0x6, 0x9}, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 25.782793401s ago: executing program 1 (id=752): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x700, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 25.782072315s ago: executing program 1 (id=753): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, 0x0, &(0x7f0000000280)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) mlockall(0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2800}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 25.06220414s ago: executing program 1 (id=761): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000020000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) 25.059963054s ago: executing program 1 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0xa, 0x3, 0xff) r2 = syz_open_dev$evdev(&(0x7f0000000ac0), 0x4db, 0x800) ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00!\x00', @ANYRES16, @ANYBLOB="04002d0d0000fcdbdf25050000001800028014000100ac1e010100000000000000000000000020"], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000fedbdf2500000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000500000000000000ffffffffffffffff000000000000000000800000000000000000000000000000fdffffffffffff7ffeffffffff7f40000200000000000008000000000000000001000001000000004400050000000000000000000000000000000000000000002b"], 0xfc}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x28}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="07002504", @ANYRES16=r6, @ANYBLOB="100027bd7000ffdbdf255500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000700000011000000"], 0x28}}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x2, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) r7 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_pts(r7, 0x20402) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 24.772248294s ago: executing program 1 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x2f000000, 0x0) 24.771988141s ago: executing program 1 (id=766): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000111401fffc000000ffdb9f2508004a0000000000080001000000000008004b00130000000800030001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0xe8, 0x111, 0x4b4, 0x0, 0x700, 0x2b8, 0x278, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @private1, [], [0x0, 0x0, 0x0, 0xff], 'macvlan0\x00', 'team_slave_0\x00', {}, {0x1fe}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "f0b35f334454456b5a1bc219fb6b2168a1daee9330995069d01067dcc709"}}}, {{@ipv6={@private1, @private1, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffffff], 'ipvlan1\x00', 'wlan0\x00', {0x80f0adaf0a7b4ff8}, {0xff}, 0x1d, 0x81, 0x2, 0x30}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:dhcpd_state_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 9.762089335s ago: executing program 34 (id=766): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000111401fffc000000ffdb9f2508004a0000000000080001000000000008004b00130000000800030001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0xe8, 0x111, 0x4b4, 0x0, 0x700, 0x2b8, 0x278, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @private1, [], [0x0, 0x0, 0x0, 0xff], 'macvlan0\x00', 'team_slave_0\x00', {}, {0x1fe}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "f0b35f334454456b5a1bc219fb6b2168a1daee9330995069d01067dcc709"}}}, {{@ipv6={@private1, @private1, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffffff], 'ipvlan1\x00', 'wlan0\x00', {0x80f0adaf0a7b4ff8}, {0xff}, 0x1d, 0x81, 0x2, 0x30}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:dhcpd_state_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 1.500027924s ago: executing program 2 (id=1050): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x3000000, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.395621839s ago: executing program 2 (id=1053): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000180)=""/181, 0xb5}], 0x1, 0x7, 0x2) (async) preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000180)=""/181, 0xb5}], 0x1, 0x7, 0x2) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000000) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket(0x21, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES8=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) (async) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000300)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) pipe(&(0x7f0000000100)) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 962.244547ms ago: executing program 5 (id=1063): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)="3cb89a1d182dc611ac64297361626c65640a", 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r2 = socket$inet(0x2, 0x1, 0x100) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000080)={0x7, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]}) 902.12456ms ago: executing program 5 (id=1065): syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101b8, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x0, 0x89, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, {[@generic={0x88, 0x4, "c8fc"}, @rr={0x7, 0x1b, 0xd6, [@loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @empty]}, @timestamp={0x44, 0x18, 0x4f, 0x0, 0x6, [0x8, 0x0, 0xf00a, 0x0, 0x9]}, @generic={0x88, 0x2}]}}, "a815a23da43974ff"}}}}}, 0x0) 830.107494ms ago: executing program 4 (id=1066): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x8000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000002f0067ea25bd7000fcdbdf3e0b0000000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000540)={0x4b0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x48c, 0x8, 0x0, 0x1, [{0x410, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc0}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}, @WGPEER_A_ALLOWEDIPS={0x374, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "60eff167fc8a566c249b9b0d75c2feb8b5a0922cdd425ae6ef3c5c67250958c7"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x4040054}, 0x20000005) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 828.905611ms ago: executing program 6 (id=1067): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x3000000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 828.675049ms ago: executing program 5 (id=1068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d", 0xe5}], 0x1, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8", 0x75}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESDEC=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 750.819356ms ago: executing program 4 (id=1069): syz_emit_ethernet(0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2ffac210011223344550004424203"], 0x0) 750.520125ms ago: executing program 6 (id=1070): file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x100) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) 691.950463ms ago: executing program 4 (id=1071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df4", 0x9c}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 30) 691.745011ms ago: executing program 2 (id=1072): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000740)="706feaf0e5452b4b009af067d4a1ddcc395b7c2b06429653849741ac978d97ccb7948ad03349232cfd4722bc1768de35e4c3623857f1a43b104602d74f1a10feffef60179460a9c927676f63c666b05803f8278d31fadfe8080356978dd35bce849da32779ef4bf295daabb5b297b559b9f862ec98604326ae9529cc2de9b6ccc43982dcec525a07b4b4baca6d75bf1335a4b54102fe81328fc876cb5bcaf2dde83550f52ff0043a5cc5972aa45af7157fd2ef7c9026269fdc01c76462463d2e9d1145bae0788831d9f23422fa0e27e4a24808621df66682d7ae6014dea8953df540a049eb946b94a5c7127e8f420f7331e4dccde23763f7f428a7c9a8332d9e3e3540994accb0e05121468018bbc7eee43ee836b4e7978d6b5a2bf2b874763f0cdae2cda84b23325d69571202eab18693f88a4996820917e3865e80e260", 0x0}, 0x20) 690.923763ms ago: executing program 6 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='1', 0x1) open$dir(&(0x7f0000000000)='dev_mnt\x00', 0x40000, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)="0011", 0x2) 601.929636ms ago: executing program 5 (id=1074): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7f8452b536ad5db2784a6945a7a1c790a421ea2a089f6ab00ada4e5605b2e7262aed82ccf355b354ad5e321029cc4c48e609000cf5329cb7f1821ec7"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20040020) r1 = socket(0xb, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xd623, 0x0, 0x6}}) r2 = inotify_init() mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 600.991574ms ago: executing program 6 (id=1075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a0006"], 0x44}}, 0x28000) 600.788944ms ago: executing program 2 (id=1076): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000002c0)={r2, 0x3, 0x8, 0x0, 0x2, [], [0x0, 0x1, 0x1000002, 0x10000], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0x380000000000000]}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r4, 0x100, 0x4, 0x0, 0x3, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) 482.818384ms ago: executing program 6 (id=1077): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x8000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000002f0067ea25bd7000fcdbdf3e0b0000000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000540)={0x13c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x118, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc0}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "60eff167fc8a566c249b9b0d75c2feb8b5a0922cdd425ae6ef3c5c67250958c7"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4040054}, 0x20000005) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 422.922287ms ago: executing program 2 (id=1078): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101b8, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0xe, 0x4, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x0, 0x89, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, {[@generic={0x88, 0x4, "c8fc"}, @timestamp={0x44, 0x1c, 0x4f, 0x0, 0x6, [0x5dc, 0x8, 0x0, 0xf00a, 0x0, 0x9]}, @generic={0x88, 0x2}]}}, "a815a23da43974ff"}}}}}, 0x0) 422.656186ms ago: executing program 5 (id=1079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906", 0xa0}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 421.99073ms ago: executing program 6 (id=1080): syz_ublk_setup_io_uring(0x3dc3, &(0x7f0000000400)={0x0, 0xb404, 0x800, 0x0, 0x66}, &(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x38, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) syz_usb_connect(0x3, 0xcfb, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x6d, 0x5c, 0xf3, 0x40, 0x1da5, 0x4515, 0xdefe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce9, 0x4, 0x5, 0x6, 0x60, 0x6, "", [{{0x9, 0x4, 0x13, 0x1, 0x0, 0xe, 0x56, 0x88, 0xac, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ecad"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xe8a9, 0x101, 0x10}}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0xd7, 0x1, "9e81f3"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7, 0x9, "1c080c", "5bfc5d"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x4, 0x69, 0x9, "a403d928b568c57e"}]}]}}, {{0x9, 0x4, 0x3, 0x5, 0x7, 0xa7, 0xf5, 0x23, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x6ba, 0x28}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x6, 0x5, 0x1}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x3, 0x6, "91016b"}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0xc, "839be73585dc"}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x4, 0x9}, [@mdlm_detail={0x60, 0x24, 0x13, 0x81, "3f8054ec8eac333cb95ca4b3c7aee15858d95f8efe58823f470f1c20ecf04c2c72036f266b191ae640b25e58e78eeae29a5e948246d29505e57f3e394377fedd983d1d1cb2fc48a60197c31d945eae8f7b388c07380a93865d0035a1"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @ncm={0x6, 0x24, 0x1a, 0xcd7, 0x20}]}], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0xb, 0xff}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0xfd, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x5}, @generic={0xb3, 0x4, "f2524d91655ba22399bfd9c287f0b578f2fc24d212fe37b2b4e49246dfe782d3dd6e8442bdf0b6055482293d05c9cca814b13a9bef5543b6542dc4212b1085dbfbec101b48d886dbfb40cd4d682df171dee21fa085c81bba8145a72b251149d9d4d4f4e65cd1be20d103322e16d583e1c5e9badf8fcfc16f4fdbc39d7f625e94af3aae7c6cdc1031fd4199c8f24e34558bd0678dcaa32b4aa8a83af28b49e2146baa047b0abfe60bc89ec78dc6f11e1735"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x208, 0x4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x0, 0xf, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x9, 0x0, 0xc3, [@generic={0xac, 0x5, "fce4068760fb782057d21aad4b042d2133a93a5e959e08628a6d66a36c2df6ba095f9488b5fde87947ecd9bfd979838978430803acc857b822c7573fc47a08e9772ad67d31ebd43cfd6938411798ea117f5c2e49d885c4c11ca26353f2fdf299bcf2941b862a3baf12f1f21ccc676fb5237861e2c3723294f409bba50dfc06fb0e1c1783b93246a011c429d66a9a5826e36fd0d1c696ba5bcd678acc87f3a16520b0bfb92503c8686558"}, @generic={0xb5, 0x21, "d1cf7b12c309aef9cd7d96ffb1dbd2a5e7302638c1ba28cc3c799f922875dc5d1a254d0a5fac73769ba6f388343bcea2c6cc9d825b5e5879629a5b5888af5d53526a98f9c56b8fc42ad104e6883268f3bd332c7af60c9d0a236a0e4c3ac33395166a2314bd7246d8ae0a83bb8419d553cb8e01670cef7167edda6315f6c626c0682611108c42f28e7ac3a7cbccd01ade9faa264688317aaab80db7b6762cbb89290e30e6d06682dc51ba15f4066f543c4de44f"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x9, 0x8}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x6, 0x1, 0xdc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4}]}}]}}, {{0x9, 0x4, 0x7, 0x5, 0x10, 0xba, 0x67, 0x2b, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "11e10178"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x3, 0x81}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x7a}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x8, [0x8001, 0x0]}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0xf0, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x3, 0x8001}, @obex={0x5, 0x24, 0x15, 0xff}]}, @generic={0xdb, 0x23, "4c970b24c93c9dfc0f6cfc3cab323eaa6aad5ae574829cd6ecad372bf362c480ad3dd6fb6fb01cff7311c2118a09a90628399c8a9dbe421639198e9be283588f925b66c6d85ef2c0b88cc834fdd6ba549febaafddaf17b50ccc3d96efdb11577d5c7399bfb271ed456517111161e127674570478ed0a9b50eea93b891914b65ab78fee37300ca0e6994ed9cb07ab6424f07df90187a74578abe237f0d554330c48678e4655ffd91ddf347f200245c06ff2c0d68a80b9e731209dc1b7e397ec71768ec406efad5f8e41e40b941eba014456778b03061db6ab5d"}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x3, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x94, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7f}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xf5, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xa000}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xf8, 0x3, 0xe3, [@generic={0xf, 0x11, "bd4c6baa628494433947f2807f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x10}]}}, {{0x9, 0x5, 0x4, 0x13, 0x400, 0xb5, 0xc, 0x5, [@generic={0xbd, 0x0, "32eda49e3b5c40deffb87318b25e3dbdae3c2996493abf28343e60dd50a97c31d9fc5accd3b43c8abbd2f2648cbd94988e4b3b33ccd9c9a520816c83c3861bc2b413469310da4938442f87b7694d53f5249030141dae9ba1934f39a9ec040c35e1acae675457d334988353de71ab51bfb83756b9c99fd1de025d0f8a1afa0c9a48eac4c040a6d672d43de13d46d281c18a93c3a9337df2331ab1dfb2a988fa9e4f1a40b772d70a03865091652f5bcc85dcdf0c1d127dc7eb6424e3"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x2, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x0, 0x80, 0x9, [@generic={0x97, 0xf, "f77459e47a94885736a24ea02b5863749fc889228531d1c40bddfa27409a637b1535512a842ed070b3320640a28454d50f16dd7aeaf66560d6e868eb91fcdf5422230aacbd6b3721b9890b443cba731f415002b95d5918ba270b1ba18ce910b3671778afa8baaf0ec3e8e567ba95d695cdc23010f18d84f07eab7071b55602b761757c8ee7fd2bad951530c25abfe6557c3c743f95"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x81}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x80, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x4c5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x5, 0xfd, 0xb2}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0x8, 0x7f, [@generic={0xc3, 0x21, "eb537dd0b50ed0fe21c00a73eba619740a0cfd5e7a6e934c02c6a515ccaac72bbfe9ad83afff316666e0b441d59bc23c800430c2650ac4339b213d6aa05e5b4d3a85aeb789b635096fe58a6736d90ced20ec15b0badde92aeeb31f8b916106f76cbcff127cb1f554ffc90c230e619b09b6c97a063c4569928c733467e11aa492c33be150638e34888b76fea9f8031b484c0661862709a631e117cde3fbfc0215501ff66e9daf91d53977a0c0518ab6b66a241ac0b6083135b9d4c5d04b7caf2cbc"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x8, 0x10}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x5, 0x1, 0x5, [@generic={0x6a, 0xd, "2ea91158e1c45b7f91ae3602c2a4eef6455cb8fe1ee38ffe127bcbbaad49418c7338f192c5d9696503fe1423f607d233b22fd69c435ff67d0260b104e807ae3ff3112e04f1633a87ea2b107b22e435e7b283dcd44fe3e219a9a9386eacec67abd1f8fee73cf05440"}, @generic={0xe3, 0x3, "77ab9fc23fb50105cb6416a7860d05c6fce09f3265983825beb5b07de0254d51c64b4c46268d1e0253cadc79b706511bd6705722021310195999f8907c8bb6ab10d839055d28328626a3fca7b0b2df0fa73416948c750c0ae9972f5154b748a75cc2d2df53ca1b88a7ea50b9b0ea808798e61ff61184a46b46710314e1528a04db14c352508881b16ac865a39e767763498e55efd56a3292503621b48a7a1835a288c2b331936190c2a5f3fee50d2f320f7450b380ebe1c4fa2338561ebb7705cb9d1a8f78ce5e144752e32fa7752d7784b980ee36804a963f30458a0c386ad173"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x1, 0x7f, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x0, 0x9, [@generic={0x76, 0x10, "976f5c6cc0e0f31a1e3f809a8c4bf904d0dcc22772395444af91123e3cc38507dce0fc3a080db88322de92ad18ccd74b820f1d8685f0af1fb5124de8c570ae1dd0d1df9f975ccb96336e5cda6b97a32243e2ffa4141de9f9b1b406c9d39f47a61d1b2ad64c5e3fe70fdd54a055fb0a31efff1957"}, @generic={0xb5, 0xe, "ce6da916a5dd9c684b25fcf1ff062944f15119330fd4e5cfa407174851e353c812718e086f435eb56cca72d61ec89c268a955bbfd69155d5f34353a7fdd57c4eba24da11be43953e3a88afbbc743e5987a85c4c89ba773bfab90c9cca2b7eceb358a041f8f185cc65d062462f49bdf7915a76fbc35ca1187a0564ddb40a428891bc8fe9c8268bde8c81eaf01602b61c452760503c5d1f74697d15b15ff5326331e681f49e7b2f66cd1aaa70030173de3373aaa"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x5, 0x8, [@generic={0xe7, 0x23, "f69e5447daacbc80c02326b8dec9af61e5536ef196a10003cfdc392bc14ab92e34846f45eebb73c58865798e00685a218540fae78919d7d437d461e502368cb1e885ff7b7750a948ad8606c3306dfe2a5c8cbaf4c0c733d16aebae31679f8d14aea52770df5329a8cc773a4de7ab475743c09d58e6f11e7438c6dd1013b07bf0d5e6755b3d3935e07888213d39f55cfd3836659f8eafdad2eafc60853e850a71dd57ea955c431e6ba0ab173036e88a93df58d98386f5506e1bac439bb7351ccdfffc190da8bb3acafcd530394c52f7f3ce500ea1cf250ba52bf8391f14a9a69b9431d78556"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x1, 0x7, [@generic={0x3, 0x1, 'X'}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x1, 0x8, 0xe, [@generic={0x8c, 0x3, "9fbf339e2ab6693d9128c9109a0673a13251d9837777a80b31aa063e2b25bdfd441002d3076c507fe2ca12aabf0623191da9e6734ffdce71a9a4ee727b399b3e8af5d785bbb7eafa036657ee307e482172457ed6ab61af2da2067ddc1a4ba207348726b88d1858210c714c3d405f246ad93a7148c941cddc3d7ce8e0922d9bfc6dee8eaec869264a215c"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5}]}}]}}, {{0x9, 0x4, 0x19, 0x81, 0xa, 0x52, 0xa1, 0x8, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x590f, 0x13}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0x8, 0x93, "cbd5"}]}], [{{0x9, 0x5, 0xa, 0x3, 0x400, 0x0, 0x3f, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x80, 0xb, 0x8, [@generic={0x32, 0x9, "8c6194a7c9e034f9046f8661e724b7dcfe0aa5c7bd76ce2b802949d1fc7396d434503d624045ee754b15d4694c3f91b4"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x6, 0xb, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0xde}]}}, {{0x9, 0x5, 0x6, 0xf, 0x3ff, 0x9, 0x2a, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xcf}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x8, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x101}, @generic={0xa9, 0x14, "d47edacc67ae59ff6906770aa959c9380f3ef5ceb5df5935179c5263b8a7dc54f1a8a1aea242ce8722c8c2af7d7d34c4bfc1f30df5989cdd3931f624ba602721a8c952b689ed29b5620b45cc98698daa19095d8cdc0097867801b857b4949dea6a481e2dcc810902bcd1275a151389f62551a13cd3541c6a4b7a6d4f6413ee09c51fbbf68123af2e81fca90703d5157cf76c4198772cbf70c0544d3ba33f065b4ad3ac7212b412"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x5, 0x81, 0xff}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x0, 0x37, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x8, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0xa, 0x8}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x8, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x2}, @generic={0x5, 0x1, "fd17c9"}]}}]}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x250, 0x0, 0xd, 0x6, 0x78, 0x63}, 0x5, &(0x7f0000001880)={0x5, 0xf, 0x5}}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000070601010000000000000000000000050900020073797a310000000008000640000000030500010007"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = semget$private(0x0, 0x7, 0x191) semtimedop(r7, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket(0x2b, 0x1, 0x1) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r9, 0x5) semop(r7, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) semctl$SETVAL(r7, 0x1, 0x10, &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0xaf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0x3, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1f, 0x0, 0xec}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xe4, 0x9, 0x0, 0x20, 0xd0}, 0xe7, &(0x7f0000000080)={0x5, 0xf, 0xe7, 0x1, [@generic={0xe2, 0x10, 0xa, "510d0d70b75af611e88c4f5f8c1927e6934a9c6b237c791e6fcb7ec2da0710eb6793473d7acb0eb5986ce16c71976275a02eae928c9c059197b9179a72f570041f4fe72f98b6199c6747ab448e22d2a8d0021bcd0c959e3f32fd4b3421fcfc91c0a8e3bd960b96d3ce1ca9476c3cc760708c66e98cef680823879fd439b037fb221145bed2588bc0106d9fd74b33a7dc71f724e892a5f372e429d6159411d28fcfc6ade8aa3e1e31143ba9095565edb8f5a0b46d2a27557e37e3825ff4dc2c291e6d132e26a861fc9abd9bbc9071f96c1c5cf2d7c4f23e53472767ede6df5d"}]}, 0x6, [{0x31, &(0x7f0000000180)=@string={0x31, 0x3, "f0e753a017b5bc9829814cc78a2e73c7590509ac79d2e37bb5b2449977e99e47151a31b0cebd918e76e46eb10f5dba"}}, {0xa9, &(0x7f00000001c0)=@string={0xa9, 0x3, "5528402ce82a52fb2a1a9f722b5bc3a87974c9c964ba1fe19c93ce743766f32f00611c4a81f0e45b70cb5ca4bea4f61ba4527a50036eef29f79a471208b89f3a002ff12028591e5aaa7d6dd67ef001427862430350b414f132917ef9bbfd567b9c9d24b6ee973a03c565d4cbfc28e2bc726e92d0c25005ba7f78f0218708445b90ffdec1fbd10bf9283affd172d45a4e6ce4ddaa43ddc69b10f9bbcdcbd7563e26578181cce1c8"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="0903d995ed69f616a0"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}]}) 351.674024ms ago: executing program 4 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x60, r2, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800fc}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 351.2405ms ago: executing program 2 (id=1082): ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000001c0)='veth1_vlan\x00') syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="78fdffff02060101000034e40000000005000000ba00e6acafa6bd9432fe9d86a0d9197b5f8bf3389c65a2cc34aca0d84f2c65bc303a6462b5c492a93ded663f2f5e5ade3d3f36c4b314cf86d815a1f3a8f56c04fdde12ca034995e3"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f0000000000000800030004"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x4e, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3c, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000001c0)='veth1_vlan\x00') (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="78fdffff02060101000034e40000000005000000ba00e6acafa6bd9432fe9d86a0d9197b5f8bf3389c65a2cc34aca0d84f2c65bc303a6462b5c492a93ded663f2f5e5ade3d3f36c4b314cf86d815a1f3a8f56c04fdde12ca034995e3"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f0000000000000800030004"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x4e, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3c, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) (async) 190.935433ms ago: executing program 4 (id=1083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000700)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000d4b000/0x18000)=nil, &(0x7f0000000bc0)=[@text32={0x20, 0x0}], 0x1, 0x60, &(0x7f0000000c00)=[@cr0={0x0, 0x10015}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x10) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000150001"], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 995.408µs ago: executing program 4 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x47c, &(0x7f0000000740)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "180142", 0x446, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}]}, @dstopts={0x2f, 0x9, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x9, [0x72, 0xea6, 0x1, 0xf46, 0x1, 0x7, 0x5, 0x5]}}, @pad1]}, @srh={0xc, 0x10, 0x4, 0x8, 0x7, 0x10, 0x9, [@loopback, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x3, 0x6, "c61a72", 0x8, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, [@srh={0x2e, 0x2, 0x4, 0x1, 0x7, 0x58, 0x4b, [@mcast1]}, @hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}, @srh={0x2b, 0x2, 0x4, 0x1, 0x6, 0x60, 0x6, [@remote]}, @hopopts={0x87, 0x25, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x48, {0x3, 0x10, 0x1, 0x0, [0xd, 0x6, 0x3, 0x8042, 0x9, 0x2, 0x1dfd, 0x3]}}, @enc_lim={0x4, 0x1, 0x9c}, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0xb, [0x8, 0xfffffffffffffff7, 0x8, 0x0]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x7d, 0x3, [0x8, 0x8, 0x9, 0x2, 0x5, 0x8, 0x7, 0x64, 0x7]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x65, 0x800, [0x3, 0x1ff, 0x4, 0x1, 0x4, 0x4]}}]}, @dstopts={0x84, 0x2, '\x00', [@hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x56}]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x7f, 0x70, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}, @dstopts={0x2f, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x0, 0x0, 0xf, 0x1, 0x0, 0x5, 0x64}, @srh={0xa7, 0xa, 0x4, 0x5, 0x3, 0x0, 0x6, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0xb}]}], "87a8783555ea9a32af586e8c42c0e88749e581c68e10cbd0b0cf0fa605cfd5fa2af1f2b92b412715f0b9aba93668afe355183aa68512abba74d0bdec6e8c1d642e535887dc12b20025b68288cd077581e2d85f4c3d2835b4a9c5e7dbd7278d3e0ee602572f09602889c7f79bb547b256e91a9557b3dd9b0c9641fb0e9deae482974eca7aa50dcc6ae9ad8478bf7141aee48ee85b0927f64a1a685493f708a9264808dd35bafb7530d5243c492e21e1f0b2e7a44a2818"}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 5 (id=1085): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000740)="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", 0x0}, 0x20) kernel console output (not intermixed with test programs): ice netdevsim0 [ 164.213058][ T7145] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.215836][ T42] audit: type=1400 audit(1785314867.379:595): avc: denied { unmount } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.233729][ T7145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.238602][ T7145] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.257151][ T7145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.262207][ T7145] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.276639][ T7145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.289300][ T42] audit: type=1400 audit(1785314867.449:596): avc: denied { write } for pid=7304 comm="syz.1.379" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 164.319005][ T42] audit: type=1400 audit(1785314867.459:597): avc: denied { write } for pid=7305 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.359194][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 164.446428][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.469614][ T7145] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.477645][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.480032][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.481172][ T7315] FAULT_INJECTION: forcing a failure. [ 164.481172][ T7315] name failslab, interval 1, probability 0, space 0, times 0 [ 164.494660][ T7315] CPU: 0 UID: 0 PID: 7315 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT(full) [ 164.494679][ T7315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.494686][ T7315] Call Trace: [ 164.494699][ T7315] [ 164.494704][ T7315] dump_stack_lvl+0x100/0x190 [ 164.494725][ T7315] should_fail_ex.cold+0x5/0xa [ 164.494741][ T7315] should_failslab+0xc2/0x120 [ 164.494757][ T7315] kmem_cache_alloc_noprof+0x91/0x6a0 [ 164.494779][ T7315] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 164.494801][ T7315] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 164.494819][ T7315] mmu_topup_memory_caches+0x25/0x170 [ 164.494846][ T7315] kvm_mmu_load+0xe2/0x2570 [ 164.494862][ T7315] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 164.494875][ T7315] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 164.494889][ T7315] ? __pfx_kvm_mmu_load+0x10/0x10 [ 164.494904][ T7315] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 164.494932][ T7315] ? kvm_check_and_inject_events+0x873/0x12a0 [ 164.494951][ T7315] ? record_steal_time+0x3a0/0xbb0 [ 164.494966][ T7315] vcpu_run+0x3aaa/0x5de0 [ 164.494989][ T7315] ? __pfx_vcpu_run+0x10/0x10 [ 164.495011][ T7315] ? rcu_is_watching+0x12/0xc0 [ 164.495037][ T7315] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 164.495054][ T7315] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 164.495075][ T7315] kvm_vcpu_ioctl+0x730/0x1700 [ 164.495090][ T7315] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.495103][ T7315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.495123][ T7315] ? do_vfs_ioctl+0x226/0x13e0 [ 164.495144][ T7315] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 164.495161][ T7315] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 164.495185][ T7315] ? __fget_files+0x215/0x3d0 [ 164.495197][ T7315] ? hook_file_ioctl_common+0x140/0x440 [ 164.495215][ T7315] ? selinux_file_ioctl+0x13b/0x290 [ 164.495232][ T7315] ? selinux_file_ioctl+0xb6/0x290 [ 164.495251][ T7315] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 164.495265][ T7315] __x64_sys_ioctl+0x18e/0x210 [ 164.495283][ T7315] do_syscall_64+0x115/0x870 [ 164.495296][ T7315] ? clear_bhb_loop+0x40/0x90 [ 164.495310][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.495322][ T7315] RIP: 0033:0x7f30f299de99 [ 164.495333][ T7315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.495348][ T7315] RSP: 002b:00007f30f3840028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.495366][ T7315] RAX: ffffffffffffffda RBX: 00007f30f2c25fa0 RCX: 00007f30f299de99 [ 164.495373][ T7315] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 164.495380][ T7315] RBP: 00007f30f3840090 R08: 0000000000000000 R09: 0000000000000000 [ 164.495386][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.495393][ T7315] R13: 00007f30f2c26038 R14: 00007f30f2c25fa0 R15: 00007ffcb6632cd8 [ 164.495407][ T7315] [ 164.505007][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.582811][ T42] audit: type=1400 audit(1785314867.669:598): avc: denied { write } for pid=7319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.585023][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.587393][ T42] audit: type=1400 audit(1785314867.729:599): avc: denied { write } for pid=7324 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.604373][ T5900] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 164.651261][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 164.683532][ T7145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.772601][ T5900] usb 7-1: Using ep0 maxpacket: 8 [ 164.778647][ T5900] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.781287][ T5900] usb 7-1: config 0 has no interface number 0 [ 164.783396][ T5900] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.806282][ T5900] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.811728][ T5900] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.815860][ T5900] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.832204][ T5900] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.838065][ T7334] tipc: Enabling of bearer rejected, failed to enable media [ 164.849420][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.860503][ T5900] usb 7-1: config 0 descriptor?? [ 164.878951][ T5900] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 165.088843][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'. [ 165.119089][ T1010] usb 7-1: USB disconnect, device number 7 [ 165.122970][ T1010] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 165.152194][ T7353] tipc: Started in network mode [ 165.160663][ T7353] tipc: Node identity ac14142f, cluster identity 4711 [ 165.165840][ T7353] tipc: New replicast peer: 127.0.0.1 [ 165.169706][ T7353] tipc: Enabled bearer , priority 10 [ 165.195357][ T7353] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0005 [ 165.239930][ T7145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.495289][ T42] audit: type=1400 audit(1785314868.659:600): avc: denied { map } for pid=7374 comm="syz.2.394" path="socket:[21671]" dev="sockfs" ino=21671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.557671][ T7145] veth0_vlan: entered promiscuous mode [ 165.570436][ T7145] veth1_vlan: entered promiscuous mode [ 165.603743][ T7145] veth0_macvtap: entered promiscuous mode [ 165.611767][ T7145] veth1_macvtap: entered promiscuous mode [ 165.642026][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.660010][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.667855][ T7382] FAULT_INJECTION: forcing a failure. [ 165.667855][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 165.678496][ T5858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.678843][ T7382] CPU: 0 UID: 0 PID: 7382 Comm: syz.2.396 Not tainted syzkaller #0 PREEMPT(full) [ 165.678859][ T7382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.678867][ T7382] Call Trace: [ 165.678871][ T7382] [ 165.678875][ T7382] dump_stack_lvl+0x100/0x190 [ 165.678895][ T7382] should_fail_ex.cold+0x5/0xa [ 165.678911][ T7382] should_failslab+0xc2/0x120 [ 165.678927][ T7382] kmem_cache_alloc_noprof+0x91/0x6a0 [ 165.678942][ T7382] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.678959][ T7382] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.678977][ T7382] mmu_topup_memory_caches+0x25/0x170 [ 165.678995][ T7382] kvm_mmu_load+0xe2/0x2570 [ 165.679012][ T7382] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 165.679024][ T7382] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 165.679038][ T7382] ? __pfx_kvm_mmu_load+0x10/0x10 [ 165.679053][ T7382] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 165.679067][ T7382] ? kvm_check_and_inject_events+0x873/0x12a0 [ 165.679085][ T7382] ? record_steal_time+0x3a0/0xbb0 [ 165.679098][ T7382] vcpu_run+0x3aaa/0x5de0 [ 165.679123][ T7382] ? __pfx_vcpu_run+0x10/0x10 [ 165.679145][ T7382] ? rcu_is_watching+0x12/0xc0 [ 165.679165][ T7382] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 165.679183][ T7382] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 165.679204][ T7382] kvm_vcpu_ioctl+0x730/0x1700 [ 165.679218][ T7382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.679231][ T7382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.679247][ T7382] ? do_vfs_ioctl+0x226/0x13e0 [ 165.679264][ T7382] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.679280][ T7382] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.679304][ T7382] ? __fget_files+0x215/0x3d0 [ 165.679315][ T7382] ? hook_file_ioctl_common+0x140/0x440 [ 165.679332][ T7382] ? selinux_file_ioctl+0x13b/0x290 [ 165.679350][ T7382] ? selinux_file_ioctl+0xb6/0x290 [ 165.679368][ T7382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.679381][ T7382] __x64_sys_ioctl+0x18e/0x210 [ 165.679399][ T7382] do_syscall_64+0x115/0x870 [ 165.679411][ T7382] ? clear_bhb_loop+0x40/0x90 [ 165.679426][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.679437][ T7382] RIP: 0033:0x7f51eb99de99 [ 165.679485][ T7382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.679498][ T7382] RSP: 002b:00007f51ec882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.679510][ T7382] RAX: ffffffffffffffda RBX: 00007f51ebc25fa0 RCX: 00007f51eb99de99 [ 165.679517][ T7382] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 165.679523][ T7382] RBP: 00007f51ec882090 R08: 0000000000000000 R09: 0000000000000000 [ 165.679530][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.679537][ T7382] R13: 00007f51ebc26038 R14: 00007f51ebc25fa0 R15: 00007ffd05b40998 [ 165.679552][ T7382] [ 165.712916][ T1010] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 165.808923][ T5858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.814374][ T5858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.829185][ T5858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.883220][ T7385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.952437][ T1010] usb 9-1: Using ep0 maxpacket: 8 [ 165.956383][ T1010] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 165.959825][ T1010] usb 9-1: config 0 has no interface number 0 [ 165.963272][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.969077][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 165.991336][ T1010] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.009330][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.034475][ T6948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.037674][ T6948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.050838][ T1010] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 166.058684][ T1010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.081153][ T1010] usb 9-1: config 0 descriptor?? [ 166.088910][ T1010] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 166.101852][ T6357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.106409][ T6357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.133177][ T7392] SET target dimension over the limit! [ 166.175625][ T5900] tipc: Node number set to 2886997039 [ 166.187003][ T7395] syz_tun: entered allmulticast mode [ 166.190225][ T7394] syz_tun: left allmulticast mode [ 166.203296][ T5092] Bluetooth: hci0: command tx timeout [ 166.341599][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 166.356319][ T1010] usb 9-1: USB disconnect, device number 5 [ 166.371688][ T1010] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 166.590882][ T7427] syz_tun: entered allmulticast mode [ 166.601606][ T7426] syz_tun: left allmulticast mode [ 166.882981][ T5900] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 166.912695][ T5843] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 167.043973][ T5900] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 167.046572][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 167.049931][ T5900] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.055046][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 167.058614][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 167.063307][ T5900] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 167.065746][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 167.069010][ T5900] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.072673][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 167.074370][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 167.078166][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 167.082701][ T5843] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 167.085335][ T5900] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 167.087638][ T5843] usb 9-1: config 0 has no interface number 0 [ 167.089603][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 167.093084][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.096371][ T5900] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.100093][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 167.103742][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 167.107034][ T5843] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.110349][ T5900] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 167.112660][ T1010] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 167.113889][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.121558][ T5843] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 167.124594][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.130097][ T5900] usb 7-1: string descriptor 0 read error: -22 [ 167.132203][ T5900] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 167.135770][ T5843] usb 9-1: config 0 descriptor?? [ 167.137384][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.144324][ T5843] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 167.163728][ T5900] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 167.285465][ T1010] usb 10-1: Using ep0 maxpacket: 32 [ 167.290249][ T1010] usb 10-1: unable to get BOS descriptor or descriptor too short [ 167.293999][ T1010] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 54688, setting to 64 [ 167.299051][ T1010] usb 10-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 167.301979][ T1010] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.304823][ T1010] usb 10-1: Product: syz [ 167.306180][ T1010] usb 10-1: Manufacturer: syz [ 167.307724][ T1010] usb 10-1: SerialNumber: syz [ 167.355042][ T5899] usb 7-1: USB disconnect, device number 8 [ 167.375291][ T10] usb 9-1: USB disconnect, device number 6 [ 167.390438][ T10] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 167.543925][ T1010] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.609560][ T1010] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 167.613385][ T1010] usb 10-1: USB disconnect, device number 2 [ 167.622986][ T6329] udevd[6329]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.184501][ T5899] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 168.352585][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 168.358163][ T5899] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 168.361620][ T5899] usb 7-1: config 0 has no interface number 0 [ 168.365903][ T5899] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.370587][ T5899] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 168.377124][ T5899] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.386362][ T5899] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.391318][ T5899] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 168.395199][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.400487][ T5899] usb 7-1: config 0 descriptor?? [ 168.411303][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 168.412054][ T5899] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 168.418994][ T7487] hsr_slave_0: left promiscuous mode [ 168.425704][ T7487] hsr_slave_1: left promiscuous mode [ 168.572111][ T7492] netlink: 'syz.1.443': attribute type 63 has an invalid length. [ 168.576420][ T7492] netlink: 5 bytes leftover after parsing attributes in process `syz.1.443'. [ 168.636695][ T5843] usb 7-1: USB disconnect, device number 9 [ 168.659146][ T5843] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 168.703176][ T5899] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 168.834345][ T5899] usb 10-1: device descriptor read/64, error -71 [ 168.844996][ T7502] team0: Port device xfrm0 added [ 168.893193][ T10] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 168.966532][ T7506] team0: Port device xfrm0 removed [ 168.983367][ T7506] team0: Port device xfrm0 added [ 168.991396][ T7506] tipc: Started in network mode [ 168.993322][ T7506] tipc: Node identity b21490702ec9, cluster identity 4711 [ 168.995809][ T7506] tipc: Enabled bearer , priority 0 [ 169.043794][ T10] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 169.047423][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 169.051956][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 169.057031][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 169.072428][ T10] usb 9-1: Product: syz [ 169.074371][ T5899] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 169.077881][ T10] usb 9-1: Manufacturer: syz [ 169.080090][ T10] usb 9-1: SerialNumber: syz [ 169.084416][ T10] usb 9-1: config 0 descriptor?? [ 169.092072][ T7494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.105501][ T5843] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 169.108751][ T10] usb 9-1: selecting invalid altsetting 0 [ 169.213099][ T5899] usb 10-1: device descriptor read/64, error -71 [ 169.282434][ T5843] usb 7-1: Using ep0 maxpacket: 32 [ 169.288929][ T5843] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 169.293466][ T5843] usb 7-1: config 0 has no interface number 0 [ 169.297212][ T5843] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.306706][ T5843] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 169.310153][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 169.310180][ T42] audit: type=1400 audit(1785314872.469:604): avc: denied { read } for pid=7493 comm="syz.4.444" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.314250][ T5843] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 169.335615][ T5899] usb usb10-port1: attempt power cycle [ 169.338533][ T5843] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 169.352096][ T5843] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.356159][ T42] audit: type=1400 audit(1785314872.469:605): avc: denied { open } for pid=7493 comm="syz.4.444" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.360312][ T5843] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 169.370558][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.373483][ T5843] usb 7-1: Product: syz [ 169.375091][ T5843] usb 7-1: Manufacturer: syz [ 169.376949][ T5843] usb 7-1: SerialNumber: syz [ 169.391390][ T5843] usb 7-1: config 0 descriptor?? [ 169.398449][ T7496] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 169.416580][ T5843] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input8 [ 169.424340][ T42] audit: type=1400 audit(1785314872.589:606): avc: denied { read } for pid=5129 comm="acpid" name="mouse2" dev="devtmpfs" ino=3023 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.431770][ T1010] usb 9-1: USB disconnect, device number 7 [ 169.437863][ T7494] usb 9-1: cannot submit urb 0, error -19: no device [ 169.445660][ T42] audit: type=1400 audit(1785314872.589:607): avc: denied { open } for pid=5129 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3023 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.449485][ T7494] usb 9-1: cannot submit urb 0, error -19: no device [ 169.456521][ T42] audit: type=1400 audit(1785314872.589:608): avc: denied { ioctl } for pid=5129 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3023 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.462515][ T7494] usb 9-1: cannot submit urb 0, error -19: no device [ 169.641541][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.645511][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.649784][ T5843] usb 7-1: USB disconnect, device number 10 [ 169.682696][ T5899] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 169.704081][ T5899] usb 10-1: device descriptor read/8, error -71 [ 169.916448][ T1010] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 169.942520][ T5899] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 169.964988][ T5899] usb 10-1: device descriptor read/8, error -71 [ 170.012563][ T5843] tipc: Node number set to 2631766128 [ 170.072711][ T1010] usb 9-1: Using ep0 maxpacket: 8 [ 170.075228][ T5899] usb usb10-port1: unable to enumerate USB device [ 170.079791][ T1010] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 170.083715][ T1010] usb 9-1: config 0 has no interface number 0 [ 170.086354][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.090714][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 170.095691][ T1010] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.100600][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.106133][ T1010] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 170.109894][ T1010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.119022][ T1010] usb 9-1: config 0 descriptor?? [ 170.133645][ T1010] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 170.369298][ T42] audit: type=1400 audit(1785314873.529:609): avc: denied { map } for pid=7524 comm="syz.1.456" path="/dev/video4" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.376125][ T1010] usb 9-1: USB disconnect, device number 8 [ 170.389967][ T7525] SELinux: policydb string does not match my string SE Linux [ 170.397030][ T42] audit: type=1400 audit(1785314873.549:610): avc: denied { load_policy } for pid=7524 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 170.399929][ T1010] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 170.414410][ T7525] SELinux: failed to load policy [ 170.657559][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 170.869837][ T7536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.053722][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 171.804013][ T5899] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 171.952513][ T5899] usb 9-1: Using ep0 maxpacket: 8 [ 171.956866][ T5899] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 171.959514][ T5899] usb 9-1: config 0 has no interface number 0 [ 171.961455][ T5899] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 171.971063][ T5899] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 171.975735][ T5899] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.984298][ T5899] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.989274][ T5899] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 171.996329][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.003976][ T5899] usb 9-1: config 0 descriptor?? [ 172.018551][ T5899] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 172.083974][ T7576] FAULT_INJECTION: forcing a failure. [ 172.083974][ T7576] name failslab, interval 1, probability 0, space 0, times 0 [ 172.088092][ T7576] CPU: 0 UID: 0 PID: 7576 Comm: syz.5.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.088112][ T7576] Tainted: [L]=SOFTLOCKUP [ 172.088116][ T7576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.088123][ T7576] Call Trace: [ 172.088128][ T7576] [ 172.088133][ T7576] dump_stack_lvl+0x100/0x190 [ 172.088170][ T7576] should_fail_ex.cold+0x5/0xa [ 172.088190][ T7576] should_failslab+0xc2/0x120 [ 172.088215][ T7576] kmem_cache_alloc_noprof+0x91/0x6a0 [ 172.088234][ T7576] ? trace_kmem_cache_alloc+0xdd/0x100 [ 172.088250][ T7576] ? security_file_alloc+0x34/0x2c0 [ 172.088267][ T7576] security_file_alloc+0x34/0x2c0 [ 172.088278][ T7576] init_file+0x95/0x480 [ 172.088298][ T7576] alloc_empty_file+0x79/0x1c0 [ 172.088314][ T7576] alloc_file_pseudo+0x183/0x290 [ 172.088330][ T7576] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 172.088346][ T7576] ? _raw_spin_unlock+0x28/0x50 [ 172.088378][ T7576] ? alloc_fd+0x471/0x7a0 [ 172.088391][ T7576] __anon_inode_getfile+0xe8/0x280 [ 172.088410][ T7576] __anon_inode_getfd+0x5c/0xe0 [ 172.088429][ T7576] __sys_bpf+0x3ac6/0x4e80 [ 172.088450][ T7576] ? __pfx___sys_bpf+0x10/0x10 [ 172.088461][ T7576] ? find_held_lock+0x2b/0x80 [ 172.088486][ T7576] ? get_pid_task+0xfc/0x250 [ 172.088510][ T7576] ? get_pid_task+0xfc/0x250 [ 172.088533][ T7576] ? find_held_lock+0x2b/0x80 [ 172.088553][ T7576] ? rcu_read_lock_any_held+0x6a/0xa0 [ 172.088570][ T7576] ? find_held_lock+0x2b/0x80 [ 172.088587][ T7576] ? ksys_write+0x190/0x250 [ 172.088604][ T7576] ? ksys_write+0x190/0x250 [ 172.088632][ T7576] ? fput+0x79/0x100 [ 172.088647][ T7576] ? __x64_sys_bpf+0xce/0x140 [ 172.088658][ T7576] __x64_sys_bpf+0xce/0x140 [ 172.088670][ T7576] ? do_syscall_64+0x90/0x870 [ 172.088689][ T7576] do_syscall_64+0x115/0x870 [ 172.088701][ T7576] ? clear_bhb_loop+0x40/0x90 [ 172.088716][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.088727][ T7576] RIP: 0033:0x7f2c4fd9de99 [ 172.088738][ T7576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.088749][ T7576] RSP: 002b:00007f2c50cbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.088767][ T7576] RAX: ffffffffffffffda RBX: 00007f2c50025fa0 RCX: 00007f2c4fd9de99 [ 172.088774][ T7576] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 000000000000001e [ 172.088781][ T7576] RBP: 00007f2c50cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 172.088787][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.088794][ T7576] R13: 00007f2c50026038 R14: 00007f2c50025fa0 R15: 00007ffeda71e6b8 [ 172.088808][ T7576] [ 172.224070][ T10] usb 9-1: USB disconnect, device number 9 [ 172.230399][ T10] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 172.440754][ T7587] Bluetooth: MGMT ver 1.23 [ 172.446869][ T7587] Bluetooth: hci0: unsupported parameter 255 [ 172.450371][ T7587] Bluetooth: hci0: unsupported parameter 255 [ 172.458084][ T7588] Bluetooth: hci0: unsupported parameter 255 [ 172.464529][ T7588] Bluetooth: hci0: unsupported parameter 255 [ 172.486436][ T7591] team0: Port device xfrm0 removed [ 172.501019][ T74] tipc: Resetting bearer [ 172.531851][ T7591] team0: Port device xfrm0 added [ 172.542975][ T7591] tipc: Enabling of bearer rejected, already enabled [ 172.692412][ T42] audit: type=1400 audit(1785314875.849:611): avc: denied { map } for pid=7600 comm="syz.5.482" path="socket:[23930]" dev="sockfs" ino=23930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 172.864208][ T42] audit: type=1400 audit(1785314876.029:612): avc: denied { connect } for pid=7610 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 172.878639][ T42] audit: type=1400 audit(1785314876.029:613): avc: denied { write } for pid=7610 comm="syz.1.485" path="socket:[24015]" dev="sockfs" ino=24015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 173.042764][ T5899] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 173.192636][ T5899] usb 10-1: Using ep0 maxpacket: 8 [ 173.198452][ T5899] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.210070][ T5899] usb 10-1: config 0 has no interface number 0 [ 173.225881][ T5899] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.233114][ T5899] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 173.238366][ T5899] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.243023][ T5899] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.249202][ T5899] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 173.252131][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.262026][ T5899] usb 10-1: config 0 descriptor?? [ 173.277089][ T5899] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 173.333148][ T7625] syzkaller1: entered promiscuous mode [ 173.342507][ T7625] syzkaller1: entered allmulticast mode [ 173.491470][ T5900] usb 10-1: USB disconnect, device number 7 [ 173.505463][ T5900] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 173.922507][ T5900] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 174.092788][ T5900] usb 10-1: Using ep0 maxpacket: 32 [ 174.100843][ T5900] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 174.111959][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.126610][ T5900] usb 10-1: config 0 descriptor?? [ 174.172224][ T5900] as10x_usb: device has been detected [ 174.178560][ T5900] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 174.214456][ T5900] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 174.234575][ T5900] as10x_usb: error during firmware upload part1 [ 174.248423][ T5900] Registered device nBox DVB-T Dongle [ 174.315199][ T1010] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 174.349779][ T5900] usb 10-1: USB disconnect, device number 8 [ 174.396971][ T5900] Unregistered device nBox DVB-T Dongle [ 174.399847][ T5900] as10x_usb: device has been disconnected [ 174.404576][ T7665] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 174.492528][ T1010] usb 6-1: Using ep0 maxpacket: 8 [ 174.498672][ T1010] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.505707][ T1010] usb 6-1: config 0 has no interface number 0 [ 174.509459][ T1010] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.520540][ T1010] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.533057][ T1010] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.543705][ T1010] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.551173][ T1010] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.555369][ T1010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.561239][ T1010] usb 6-1: config 0 descriptor?? [ 174.571576][ T1010] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 174.828918][ T1010] usb 6-1: USB disconnect, device number 11 [ 174.846273][ T1010] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 174.909668][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 174.909697][ T42] audit: type=1400 audit(1785314878.069:617): avc: denied { mount } for pid=7672 comm="syz.4.512" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 174.988481][ T42] audit: type=1400 audit(1785314878.149:618): avc: denied { unmount } for pid=6743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 175.304766][ T7691] netlink: 'syz.5.518': attribute type 1 has an invalid length. [ 175.605237][ T42] audit: type=1400 audit(1785314878.769:619): avc: denied { write } for pid=7699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.632426][ T5900] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 175.663548][ T42] audit: type=1400 audit(1785314878.829:620): avc: denied { open } for pid=7704 comm="syz.4.524" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.775297][ T42] audit: type=1400 audit(1785314878.939:621): avc: denied { write } for pid=7710 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.792397][ T5900] usb 10-1: Using ep0 maxpacket: 8 [ 175.798592][ T5900] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 175.817617][ T5900] usb 10-1: config 0 has no interface number 0 [ 175.826811][ T5900] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.838677][ T5900] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 175.845014][ T5900] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.851925][ T5900] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.856412][ T5900] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.861425][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.871488][ T5900] usb 10-1: config 0 descriptor?? [ 175.881068][ T5900] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 176.021060][ T42] audit: type=1400 audit(1785314879.179:622): avc: denied { write } for pid=7718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.102013][ T5900] usb 10-1: USB disconnect, device number 9 [ 176.119681][ T5900] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 176.154225][ T42] audit: type=1400 audit(1785314879.309:623): avc: denied { write } for pid=7723 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.337418][ T7727] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 176.382851][ T42] audit: type=1400 audit(1785314879.539:624): avc: denied { write } for pid=7733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.394434][ T7727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.421823][ T42] audit: type=1400 audit(1785314879.579:625): avc: denied { mounton } for pid=7734 comm="syz.2.532" path="/proc/448/task" dev="proc" ino=23347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 176.433478][ T7727] macvlan2: entered promiscuous mode [ 176.435854][ T7727] macvlan2: entered allmulticast mode [ 176.441558][ T7727] bond1: entered promiscuous mode [ 176.450006][ T7727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.476032][ T7727] bond1: left promiscuous mode [ 176.499881][ T42] audit: type=1400 audit(1785314879.659:626): avc: denied { write } for pid=7742 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.524649][ T7743] warning: `syz.1.529' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.239127][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 177.251901][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 177.470058][ T7783] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 177.622526][ T1010] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 177.712444][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 177.783230][ T1010] usb 9-1: Using ep0 maxpacket: 8 [ 177.791726][ T1010] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 177.795635][ T1010] usb 9-1: config 0 has no interface number 0 [ 177.798336][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.803188][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 177.809079][ T1010] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.814183][ T1010] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.819871][ T1010] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 177.823782][ T1010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.831337][ T1010] usb 9-1: config 0 descriptor?? [ 177.841650][ T1010] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 177.862407][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 177.866271][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 177.873274][ T10] usb 7-1: config 0 has no interface number 0 [ 177.876527][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.880942][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 177.886720][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.891340][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.897117][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 177.900967][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.915005][ T10] usb 7-1: config 0 descriptor?? [ 177.925655][ T10] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 178.048508][ T5843] usb 9-1: USB disconnect, device number 10 [ 178.070163][ T5843] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 178.107800][ T7809] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 178.114366][ T7809] exFAT-fs (nullb0): invalid boot record signature [ 178.116925][ T7809] exFAT-fs (nullb0): failed to read boot sector [ 178.118842][ T7809] exFAT-fs (nullb0): failed to recognize exfat type [ 178.130057][ T10] usb 7-1: USB disconnect, device number 11 [ 178.146028][ T10] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 178.191460][ T7812] block2mtd: error: cannot open device /dev/loop0 [ 178.302037][ T7824] binder: 7823:7824 ioctl c0306201 2000000001c0 returned -14 [ 178.533880][ T7839] program syz.4.565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.653212][ T5900] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 178.812443][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 178.817618][ T5900] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 178.821000][ T5900] usb 6-1: config 0 has no interface number 0 [ 178.824306][ T5900] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.828259][ T5900] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 178.833249][ T5900] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.842372][ T5900] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.856886][ T5900] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 178.870618][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.893850][ T5900] usb 6-1: config 0 descriptor?? [ 178.914754][ T5900] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 178.919471][ T7853] mac80211_hwsim hwsim11 »»»»»»: renamed from wlan0 (while UP) [ 178.921019][ T7855] program syz.2.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.934716][ T7855] binder_alloc: 7854: binder_alloc_buf, no vma [ 178.938446][ T7855] binder: 7854:7855 ioctl 40182103 2000000002c0 returned -22 [ 178.941250][ T7855] binder: 7854:7855 ioctl 80045518 200000000240 returned -22 [ 178.972195][ T7853] syzkaller0: entered promiscuous mode [ 178.974256][ T7853] syzkaller0: entered allmulticast mode [ 179.113880][ T1010] usb 6-1: USB disconnect, device number 12 [ 179.118403][ T1010] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 179.627950][ T7867] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 179.627950][ T7867] The task syz.1.574 (7867) triggered the difference, watch for misbehavior. [ 180.833200][ T5836] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 180.983678][ T5836] usb 9-1: Using ep0 maxpacket: 32 [ 180.986943][ T5836] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 180.992550][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.001635][ T5836] usb 9-1: config 0 descriptor?? [ 181.015469][ T5836] as10x_usb: device has been detected [ 181.019072][ T5836] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 181.030360][ T5836] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 181.034484][ T1010] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 181.040642][ T5836] as10x_usb: error during firmware upload part1 [ 181.045496][ T5836] Registered device nBox DVB-T Dongle [ 181.192896][ T1010] usb 7-1: Using ep0 maxpacket: 8 [ 181.197723][ T1010] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 181.200459][ T1010] usb 7-1: config 0 has no interface number 0 [ 181.203593][ T1010] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.207763][ T1010] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 181.211437][ T1010] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.215044][ T1010] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.218784][ T5900] usb 9-1: USB disconnect, device number 11 [ 181.220054][ T1010] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 181.224957][ T1010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.235794][ T1010] usb 7-1: config 0 descriptor?? [ 181.247243][ T1010] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 181.255503][ T5900] Unregistered device nBox DVB-T Dongle [ 181.261620][ T5900] as10x_usb: device has been disconnected [ 181.462077][ T5900] usb 7-1: USB disconnect, device number 12 [ 181.474868][ T5900] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 181.541504][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 181.541632][ T42] audit: type=1400 audit(1785314884.699:636): avc: denied { bind } for pid=7901 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.553858][ T7902] vcan0: tx address claim with dest, not broadcast [ 181.991088][ T7910] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.042777][ T7917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7917 comm=syz.1.593 [ 182.050781][ T7917] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 182.081893][ T6329] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 182.114819][ T7923] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 182.126506][ T7923] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.130807][ T7922] bond2: (slave bridge1): making interface the new active one [ 182.135339][ T7923] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 182.139522][ T7923] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 182.142526][ T7922] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 182.172012][ T7923] syzkaller0: entered promiscuous mode [ 182.174303][ T7923] syzkaller0: entered allmulticast mode [ 182.296385][ T6329] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 182.330612][ T5092] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 182.337438][ T5843] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 182.403824][ T7939] tipc: New replicast peer: 127.0.0.1 [ 182.407710][ T7939] tipc: Enabled bearer , priority 10 [ 182.439728][ T7941] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 182.476349][ T7944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7944 comm=syz.1.604 [ 182.482658][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 182.487094][ T5843] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.493136][ T5843] usb 9-1: config 0 has no interface number 0 [ 182.498783][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.508866][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 182.513242][ T5843] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.518395][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.522914][ T5843] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.525791][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.534528][ T5843] usb 9-1: config 0 descriptor?? [ 182.540436][ T5843] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 182.786952][ T5836] usb 9-1: USB disconnect, device number 12 [ 182.810433][ T5836] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 183.109132][ T7969] Dead loop on virtual device ip6_vti0 (net 32), fix it urgently! [ 183.156936][ T42] audit: type=1400 audit(1785314886.319:637): avc: denied { mounton } for pid=7970 comm="syz.2.616" path="/202/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 183.302799][ T5836] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 183.452360][ T5836] usb 9-1: Using ep0 maxpacket: 8 [ 183.455721][ T5836] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 183.458388][ T5836] usb 9-1: config 0 has no interface number 0 [ 183.460367][ T5836] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.463987][ T5836] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 183.467595][ T5836] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.470978][ T5836] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.475249][ T5836] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 183.478046][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.482723][ T5836] usb 9-1: config 0 descriptor?? [ 183.487198][ T5836] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 183.502730][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 183.662387][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 183.667073][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 183.669729][ T10] usb 7-1: config 0 has no interface number 0 [ 183.671809][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.675705][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 183.679365][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.683509][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.687625][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 183.690531][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.694191][ T5843] usb 9-1: USB disconnect, device number 13 [ 183.694455][ T10] usb 7-1: config 0 descriptor?? [ 183.703169][ T10] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 183.707658][ T5843] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 183.872497][ T5900] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 183.908269][ T5843] usb 7-1: USB disconnect, device number 13 [ 183.918662][ T5843] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 184.023879][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.027517][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.030618][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.035790][ T5900] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.038701][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.044021][ T5900] usb 6-1: config 0 descriptor?? [ 184.330132][ T42] audit: type=1400 audit(1785314887.489:638): avc: denied { write } for pid=7997 comm="syz.4.628" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.330240][ T7998] random: crng reseeded on system resumption [ 184.339676][ T5843] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 184.354239][ T42] audit: type=1400 audit(1785314887.519:639): avc: denied { ioctl } for pid=7997 comm="syz.4.628" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.473874][ T5900] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 184.494021][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 184.510432][ T5843] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 184.515073][ T5843] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 184.519985][ T5843] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 184.535583][ T5843] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 184.548379][ T5843] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 184.557641][ T5843] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.573529][ T5843] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.577867][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.798064][ T5843] usb 7-1: GET_CAPABILITIES returned 0 [ 184.800025][ T5843] usbtmc 7-1:16.0: can't read capabilities [ 184.862495][ T5900] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 185.013831][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 185.018541][ T5900] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 185.023718][ T5900] usb 9-1: config 0 has no interface number 0 [ 185.027204][ T8028] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 185.027445][ T5900] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.031157][ T8028] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 185.035244][ T5900] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 185.040955][ T5900] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.045819][ T5900] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 185.054974][ T5900] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 185.057220][ T8028] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 185.061841][ T8028] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 185.065551][ T8028] overlayfs: d_ino too big (33, ino=9223372036854775990, xinobits=3) [ 185.068661][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.068935][ T8028] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 185.075724][ T8028] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 185.080184][ T8028] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 185.084211][ T5900] usb 9-1: config 0 descriptor?? [ 185.085320][ T8028] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 185.089976][ T8028] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 185.095219][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.638'. [ 185.106250][ T8028] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 185.116923][ T8028] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 185.143287][ T42] audit: type=1400 audit(1785314888.309:640): avc: denied { bind } for pid=8026 comm="syz.5.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.764558][ C0] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 185.839619][ T1050] usb 7-1: USB disconnect, device number 14 [ 185.847812][ T5900] ldusb 9-1:0.55: LD USB Device #2 now attached to major 180 minor 2 [ 185.900018][ T7991] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 185.925840][ T5836] usb 9-1: USB disconnect, device number 14 [ 185.949433][ T5836] ldusb 9-1:0.55: LD USB Device #2 now disconnected [ 186.071503][ T42] audit: type=1400 audit(1785314889.229:641): avc: denied { map } for pid=8042 comm="syz.4.643" path="socket:[26919]" dev="sockfs" ino=26919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.084465][ T42] audit: type=1400 audit(1785314889.229:642): avc: denied { ioctl } for pid=8042 comm="syz.4.643" path="socket:[26920]" dev="sockfs" ino=26920 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.210577][ T42] audit: type=1400 audit(1785314889.369:643): avc: denied { lock } for pid=8045 comm="syz.5.645" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 186.396901][ T8067] netlink: 112 bytes leftover after parsing attributes in process `syz.1.650'. [ 186.471416][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 186.478498][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 186.547630][ T5843] usb 6-1: USB disconnect, device number 13 [ 186.595484][ T5836] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 186.742474][ T5836] usb 10-1: Using ep0 maxpacket: 8 [ 186.746424][ T5836] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 186.749851][ T5836] usb 10-1: config 0 has no interface number 0 [ 186.758457][ T5836] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.771900][ T5836] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 186.779395][ T5836] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.796504][ T5836] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.808206][ T5836] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 186.824393][ T5836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.836646][ T5836] usb 10-1: config 0 descriptor?? [ 186.854751][ T5836] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 186.964164][ T8103] tipc: Enabling of bearer rejected, already enabled [ 187.070634][ T1010] usb 10-1: USB disconnect, device number 10 [ 187.084289][ T1010] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 187.205294][ T8120] FAULT_INJECTION: forcing a failure. [ 187.205294][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 187.219711][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.5.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.219732][ T8120] Tainted: [L]=SOFTLOCKUP [ 187.219736][ T8120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.219750][ T8120] Call Trace: [ 187.219763][ T8120] [ 187.219768][ T8120] dump_stack_lvl+0x100/0x190 [ 187.219808][ T8120] should_fail_ex.cold+0x5/0xa [ 187.219828][ T8120] should_failslab+0xc2/0x120 [ 187.219862][ T8120] __kmalloc_cache_noprof+0x91/0x6c0 [ 187.219890][ T8120] ? rtnl_newlink+0x126/0x2380 [ 187.219913][ T8120] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.219929][ T8120] rtnl_newlink+0x126/0x2380 [ 187.219949][ T8120] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.219963][ T8120] ? find_held_lock+0x2b/0x80 [ 187.219987][ T8120] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 187.220005][ T8120] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 187.220020][ T8120] ? avc_has_perm_noaudit+0x145/0x3b0 [ 187.220038][ T8120] ? __lock_acquire+0x49f/0x1a40 [ 187.220059][ T8120] ? find_held_lock+0x2b/0x80 [ 187.220076][ T8120] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 187.220091][ T8120] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 187.220107][ T8120] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.220122][ T8120] rtnetlink_rcv_msg+0x95e/0xe90 [ 187.220139][ T8120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.220164][ T8120] ? ref_tracker_free+0x37e/0x6c0 [ 187.220183][ T8120] netlink_rcv_skb+0x159/0x420 [ 187.220201][ T8120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.220218][ T8120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.220234][ T8120] ? netlink_deliver_tap+0x1ae/0xcc0 [ 187.220255][ T8120] netlink_unicast+0x585/0x850 [ 187.220268][ T8120] ? __pfx_netlink_unicast+0x10/0x10 [ 187.220284][ T8120] netlink_sendmsg+0x8b0/0xda0 [ 187.220298][ T8120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.220311][ T8120] ? selinux_socket_sendmsg+0x198/0x2f0 [ 187.220331][ T8120] ____sys_sendmsg+0xa4d/0xbe0 [ 187.220352][ T8120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.220365][ T8120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.220389][ T8120] ___sys_sendmsg+0x190/0x1e0 [ 187.220408][ T8120] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.220426][ T8120] ? __lock_acquire+0x49f/0x1a40 [ 187.220440][ T8120] ? get_pid_task+0x106/0x250 [ 187.220478][ T8120] __sys_sendmsg+0x160/0x210 [ 187.220493][ T8120] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.220515][ T8120] do_syscall_64+0x115/0x870 [ 187.220534][ T8120] ? clear_bhb_loop+0x40/0x90 [ 187.220549][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.220561][ T8120] RIP: 0033:0x7f2c4fd9de99 [ 187.220571][ T8120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.220582][ T8120] RSP: 002b:00007f2c50cbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.220609][ T8120] RAX: ffffffffffffffda RBX: 00007f2c50025fa0 RCX: 00007f2c4fd9de99 [ 187.220616][ T8120] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 187.220623][ T8120] RBP: 00007f2c50cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 187.220630][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.220636][ T8120] R13: 00007f2c50026038 R14: 00007f2c50025fa0 R15: 00007ffeda71e6b8 [ 187.220651][ T8120] [ 187.425039][ T42] audit: type=1400 audit(1785314890.579:644): avc: denied { nlmsg_read } for pid=8121 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.478900][ T8128] netlink: 'syz.4.671': attribute type 16 has an invalid length. [ 187.491681][ T8128] netlink: 'syz.4.671': attribute type 3 has an invalid length. [ 187.499063][ T8128] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 187.502738][ T8128] netlink: 112 bytes leftover after parsing attributes in process `syz.4.671'. [ 187.525787][ T8134] x_tables: ip_tables: sctp.0 match: invalid size 296 (kernel) != (user) 344 [ 187.708320][ T8148] bridge_slave_0: left allmulticast mode [ 187.717555][ T8148] bridge_slave_0: left promiscuous mode [ 187.724990][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.731332][ T8148] bridge_slave_1: left allmulticast mode [ 187.733832][ T8148] bridge_slave_1: left promiscuous mode [ 187.737206][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.762576][ T8148] bond0: (slave bond_slave_0): Releasing backup interface [ 187.771819][ T42] audit: type=1400 audit(1785314890.929:645): avc: denied { connect } for pid=8151 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.806407][ T8148] bond0: (slave bond_slave_1): Releasing backup interface [ 187.856521][ T8148] team0: Port device team_slave_0 removed [ 187.861877][ T8156] xt_HMARK: spi-set and port-set can't be combined [ 187.864419][ T8148] team0: Port device team_slave_1 removed [ 187.866772][ T8156] netlink: 'syz.1.683': attribute type 23 has an invalid length. [ 187.867016][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.881913][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.887885][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.890262][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.893644][ T8154] xt_l2tp: missing protocol rule (udp|l2tpip) [ 187.897169][ T8148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.090514][ T8161] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 188.098435][ T8161] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 188.104053][ T8161] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 188.114203][ T8161] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.160359][ T8161] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 188.217543][ T8169] x_tables: ip_tables: sctp.0 match: invalid size 296 (kernel) != (user) 344 [ 188.265926][ T6365] smbdirect: ib_dev[syz2] removed [ 188.355854][ T8176] xt_hashlimit: size too large, truncated to 1048576 [ 188.460551][ T8183] syzkaller1: entered promiscuous mode [ 188.468230][ T8183] syzkaller1: entered allmulticast mode [ 188.486052][ T8186] netlink: 48 bytes leftover after parsing attributes in process `syz.1.694'. [ 188.495268][ T8183] block2mtd: error: cannot open device /dev/loop0 [ 188.756020][ T8197] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 188.771173][ T8197] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 188.781779][ T8197] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 188.808572][ T8197] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 188.897791][ T8201] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 188.901703][ T8201] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 188.911888][ T8201] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 189.087577][ T8218] syzkaller1: entered promiscuous mode [ 189.092707][ T8218] syzkaller1: entered allmulticast mode [ 189.131053][ T8218] block2mtd: error: cannot open device /dev/loop0 [ 189.146930][ T8229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.315921][ T42] audit: type=1400 audit(1785314892.479:646): avc: denied { write } for pid=8234 comm="syz.5.714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 189.384352][ T8247] futex_wake_op: syz.4.719 tries to shift op by -1; fix this program [ 189.400421][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 189.411464][ T8249] nbd: must specify a device to reconfigure [ 189.416297][ T8235] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 189.450086][ T42] audit: type=1400 audit(1785314892.609:647): avc: denied { shutdown } for pid=8250 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.561766][ T42] audit: type=1400 audit(1785314892.719:648): avc: denied { setopt } for pid=8250 comm="syz.4.721" lport=51964 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 189.589678][ T42] audit: type=1400 audit(1785314892.749:649): avc: denied { block_suspend } for pid=8256 comm="syz.1.725" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.738794][ T42] audit: type=1400 audit(1785314892.899:650): avc: denied { write } for pid=8264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.834437][ T42] audit: type=1400 audit(1785314892.999:651): avc: denied { write } for pid=8271 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.938988][ T42] audit: type=1400 audit(1785314893.099:652): avc: denied { write } for pid=8273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.988405][ T42] audit: type=1400 audit(1785314893.149:653): avc: denied { write } for pid=8278 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.169117][ T8286] ip6tnl1: entered allmulticast mode [ 190.216542][ T8288] FAULT_INJECTION: forcing a failure. [ 190.216542][ T8288] name failslab, interval 1, probability 0, space 0, times 0 [ 190.220644][ T8288] CPU: 0 UID: 0 PID: 8288 Comm: syz.5.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.220664][ T8288] Tainted: [L]=SOFTLOCKUP [ 190.220668][ T8288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.220685][ T8288] Call Trace: [ 190.220690][ T8288] [ 190.220695][ T8288] dump_stack_lvl+0x100/0x190 [ 190.220732][ T8288] should_fail_ex.cold+0x5/0xa [ 190.220759][ T8288] should_failslab+0xc2/0x120 [ 190.220786][ T8288] kmem_cache_alloc_noprof+0x91/0x6a0 [ 190.220806][ T8288] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 190.220829][ T8288] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 190.220847][ T8288] mmu_topup_memory_caches+0x25/0x170 [ 190.220874][ T8288] kvm_mmu_load+0xe2/0x2570 [ 190.220891][ T8288] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 190.220903][ T8288] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 190.220917][ T8288] ? __pfx_kvm_mmu_load+0x10/0x10 [ 190.220932][ T8288] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 190.220946][ T8288] ? kvm_check_and_inject_events+0x873/0x12a0 [ 190.220964][ T8288] ? record_steal_time+0x3a0/0xbb0 [ 190.220978][ T8288] vcpu_run+0x3aaa/0x5de0 [ 190.221001][ T8288] ? __pfx_vcpu_run+0x10/0x10 [ 190.221023][ T8288] ? rcu_is_watching+0x12/0xc0 [ 190.221048][ T8288] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 190.221065][ T8288] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 190.221087][ T8288] kvm_vcpu_ioctl+0x730/0x1700 [ 190.221101][ T8288] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 190.221114][ T8288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.221138][ T8288] ? do_vfs_ioctl+0x226/0x13e0 [ 190.221160][ T8288] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 190.221177][ T8288] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 190.221206][ T8288] ? __fget_files+0x215/0x3d0 [ 190.221216][ T8288] ? hook_file_ioctl_common+0x140/0x440 [ 190.221234][ T8288] ? selinux_file_ioctl+0x13b/0x290 [ 190.221251][ T8288] ? selinux_file_ioctl+0xb6/0x290 [ 190.221269][ T8288] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 190.221283][ T8288] __x64_sys_ioctl+0x18e/0x210 [ 190.221301][ T8288] do_syscall_64+0x115/0x870 [ 190.221334][ T8288] ? clear_bhb_loop+0x40/0x90 [ 190.221351][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.221363][ T8288] RIP: 0033:0x7f2c4fd9de99 [ 190.221374][ T8288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.221385][ T8288] RSP: 002b:00007f2c50cbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.221403][ T8288] RAX: ffffffffffffffda RBX: 00007f2c50025fa0 RCX: 00007f2c4fd9de99 [ 190.221411][ T8288] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 190.221417][ T8288] RBP: 00007f2c50cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 190.221424][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.221430][ T8288] R13: 00007f2c50026038 R14: 00007f2c50025fa0 R15: 00007ffeda71e6b8 [ 190.221445][ T8288] [ 190.226166][ T8289] team0: No ports can be present during mode change [ 190.366717][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.733'. [ 190.492678][ T8298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 190.497355][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 190.545779][ T8305] tipc: Started in network mode [ 190.554530][ T8305] tipc: Node identity ac14142f, cluster identity 4711 [ 190.563522][ T8305] tipc: New replicast peer: 127.0.0.1 [ 190.570084][ T8305] tipc: Enabled bearer , priority 10 [ 190.580926][ T8305] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0006 [ 190.734159][ T8312] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 190.997776][ T8331] FAULT_INJECTION: forcing a failure. [ 190.997776][ T8331] name failslab, interval 1, probability 0, space 0, times 0 [ 191.002006][ T8331] CPU: 0 UID: 0 PID: 8331 Comm: syz.1.748 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.002026][ T8331] Tainted: [L]=SOFTLOCKUP [ 191.002030][ T8331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.002036][ T8331] Call Trace: [ 191.002042][ T8331] [ 191.002047][ T8331] dump_stack_lvl+0x100/0x190 [ 191.002067][ T8331] should_fail_ex.cold+0x5/0xa [ 191.002082][ T8331] should_failslab+0xc2/0x120 [ 191.002099][ T8331] kmem_cache_alloc_noprof+0x91/0x6a0 [ 191.002114][ T8331] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 191.002132][ T8331] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 191.002150][ T8331] mmu_topup_memory_caches+0x25/0x170 [ 191.002169][ T8331] kvm_mmu_load+0xe2/0x2570 [ 191.002185][ T8331] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 191.002198][ T8331] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 191.002212][ T8331] ? __pfx_kvm_mmu_load+0x10/0x10 [ 191.002227][ T8331] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 191.002241][ T8331] ? kvm_check_and_inject_events+0x873/0x12a0 [ 191.002273][ T8331] ? record_steal_time+0x3a0/0xbb0 [ 191.002289][ T8331] vcpu_run+0x3aaa/0x5de0 [ 191.002311][ T8331] ? __pfx_vcpu_run+0x10/0x10 [ 191.002333][ T8331] ? rcu_is_watching+0x12/0xc0 [ 191.002354][ T8331] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 191.002371][ T8331] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 191.002392][ T8331] kvm_vcpu_ioctl+0x730/0x1700 [ 191.002407][ T8331] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.002420][ T8331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.002435][ T8331] ? do_vfs_ioctl+0x226/0x13e0 [ 191.002464][ T8331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.002483][ T8331] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.002506][ T8331] ? __fget_files+0x215/0x3d0 [ 191.002517][ T8331] ? hook_file_ioctl_common+0x140/0x440 [ 191.002534][ T8331] ? selinux_file_ioctl+0x13b/0x290 [ 191.002551][ T8331] ? selinux_file_ioctl+0xb6/0x290 [ 191.002570][ T8331] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.002583][ T8331] __x64_sys_ioctl+0x18e/0x210 [ 191.002601][ T8331] do_syscall_64+0x115/0x870 [ 191.002614][ T8331] ? clear_bhb_loop+0x40/0x90 [ 191.002628][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.002640][ T8331] RIP: 0033:0x7f30f299de99 [ 191.002651][ T8331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.002663][ T8331] RSP: 002b:00007f30f3840028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.002679][ T8331] RAX: ffffffffffffffda RBX: 00007f30f2c25fa0 RCX: 00007f30f299de99 [ 191.002686][ T8331] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 191.002693][ T8331] RBP: 00007f30f3840090 R08: 0000000000000000 R09: 0000000000000000 [ 191.002700][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.002706][ T8331] R13: 00007f30f2c26038 R14: 00007f30f2c25fa0 R15: 00007ffcb6632cd8 [ 191.002721][ T8331] [ 191.032381][ T8335] 9p: Unknown uid 00000000004294967295 [ 191.286280][ T8341] SET target dimension over the limit! [ 191.592632][ T5900] tipc: Node number set to 2886997039 [ 191.732156][ T8349] syz_tun: entered allmulticast mode [ 191.744222][ T8348] syz_tun: left allmulticast mode [ 192.076953][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 192.509964][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 192.510019][ T42] audit: type=1400 audit(1785314895.669:660): avc: denied { lock } for pid=8378 comm="syz.4.769" path="socket:[28301]" dev="sockfs" ino=28301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.645326][ T42] audit: type=1400 audit(1785314895.809:661): avc: denied { mount } for pid=8378 comm="syz.4.769" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 192.654902][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 192.945590][ T8392] syz_tun: entered allmulticast mode [ 192.948831][ T8391] syz_tun: left allmulticast mode [ 193.070098][ T8394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.474771][ T42] audit: type=1400 audit(1785314896.629:662): avc: denied { create } for pid=8408 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.495950][ T42] audit: type=1400 audit(1785314896.649:663): avc: denied { bind } for pid=8408 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.624055][ T8415] netlink: 'syz.5.784': attribute type 5 has an invalid length. [ 194.221359][ T42] audit: type=1400 audit(1785314897.379:664): avc: denied { shutdown } for pid=8438 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.249527][ T42] audit: type=1400 audit(1785314897.409:665): avc: denied { write } for pid=8438 comm="syz.2.794" name="functions" dev="configfs" ino=8939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.263006][ T8440] file system registered [ 194.315524][ T42] audit: type=1400 audit(1785314897.469:666): avc: denied { mount } for pid=8438 comm="syz.2.794" name="/" dev="functionfs" ino=28560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 194.384509][ T42] audit: type=1400 audit(1785314897.549:667): avc: denied { unmount } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 194.415381][ T5748] ffs_data_put(): freeing [ 194.457509][ T8446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8446 comm=syz.4.798 [ 194.650714][ T8457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.803'. [ 194.717765][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 195.016641][ T8471] xt_hashlimit: size too large, truncated to 1048576 [ 195.209848][ T8475] team0: Port device xfrm0 removed [ 195.228986][ T7753] tipc: Resetting bearer [ 195.266368][ T8475] team0: Port device xfrm0 added [ 195.274939][ T8475] FAULT_INJECTION: forcing a failure. [ 195.274939][ T8475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.292518][ T8475] CPU: 2 UID: 0 PID: 8475 Comm: syz.2.809 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.292540][ T8475] Tainted: [L]=SOFTLOCKUP [ 195.292544][ T8475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.292557][ T8475] Call Trace: [ 195.292562][ T8475] [ 195.292567][ T8475] dump_stack_lvl+0x100/0x190 [ 195.292593][ T8475] should_fail_ex.cold+0x5/0xa [ 195.292627][ T8475] _copy_from_iter+0x1f4/0x1690 [ 195.292650][ T8475] ? __asan_memset+0x23/0x50 [ 195.292668][ T8475] ? __pfx__copy_from_iter+0x10/0x10 [ 195.292692][ T8475] ? __pfx___alloc_skb+0x10/0x10 [ 195.292720][ T8475] netlink_sendmsg+0x808/0xda0 [ 195.292741][ T8475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.292754][ T8475] ? selinux_socket_sendmsg+0x198/0x2f0 [ 195.292774][ T8475] ____sys_sendmsg+0xa4d/0xbe0 [ 195.292797][ T8475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.292809][ T8475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.292833][ T8475] ___sys_sendmsg+0x190/0x1e0 [ 195.292852][ T8475] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.292872][ T8475] ? __lock_acquire+0x49f/0x1a40 [ 195.292892][ T8475] ? get_pid_task+0x106/0x250 [ 195.292932][ T8475] __sys_sendmsg+0x160/0x210 [ 195.292947][ T8475] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.292969][ T8475] do_syscall_64+0x115/0x870 [ 195.292988][ T8475] ? clear_bhb_loop+0x40/0x90 [ 195.293002][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.293014][ T8475] RIP: 0033:0x7f51eb99de99 [ 195.293025][ T8475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.293036][ T8475] RSP: 002b:00007f51ec882028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.293055][ T8475] RAX: ffffffffffffffda RBX: 00007f51ebc25fa0 RCX: 00007f51eb99de99 [ 195.293062][ T8475] RDX: 0000000020042000 RSI: 0000200000000440 RDI: 0000000000000004 [ 195.293069][ T8475] RBP: 00007f51ec882090 R08: 0000000000000000 R09: 0000000000000000 [ 195.293076][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.293082][ T8475] R13: 00007f51ebc26038 R14: 00007f51ebc25fa0 R15: 00007ffd05b40998 [ 195.293097][ T8475] [ 195.325674][ T8479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.392078][ T8479] team0: Port device xfrm0 added [ 195.398320][ T8479] tipc: Enabled bearer , priority 0 [ 195.755554][ T8491] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 195.758937][ T8492] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 195.759928][ T8493] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 195.767783][ T8492] netlink: 224 bytes leftover after parsing attributes in process `syz.2.815'. [ 195.796882][ T8491] bond2: entered promiscuous mode [ 195.802116][ T8491] bond2: entered allmulticast mode [ 195.809351][ T8491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.840367][ T8489] xt_hl: Unknown Hop Limit match mode: 206 [ 195.882049][ T8496] erspan1: entered allmulticast mode [ 195.909000][ T8496] bond2: (slave erspan1): making interface the new active one [ 195.916798][ T8496] erspan1: entered promiscuous mode [ 195.926013][ T8496] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 196.120969][ T42] audit: type=1400 audit(1785314899.279:668): avc: denied { create } for pid=8503 comm="syz.2.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 196.247941][ T42] audit: type=1400 audit(1785314899.409:669): avc: denied { getopt } for pid=8513 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.543797][ T8533] FAULT_INJECTION: forcing a failure. [ 196.543797][ T8533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.555170][ T8533] CPU: 0 UID: 0 PID: 8533 Comm: syz.5.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.555203][ T8533] Tainted: [L]=SOFTLOCKUP [ 196.555209][ T8533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.555219][ T8533] Call Trace: [ 196.555236][ T8533] [ 196.555243][ T8533] dump_stack_lvl+0x100/0x190 [ 196.555271][ T8533] should_fail_ex.cold+0x5/0xa [ 196.555293][ T8533] _copy_to_user+0x32/0xd0 [ 196.555319][ T8533] simple_read_from_buffer+0xcb/0x170 [ 196.555369][ T8533] proc_fail_nth_read+0x1af/0x230 [ 196.555396][ T8533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.555425][ T8533] ? rw_verify_area+0xce/0x6d0 [ 196.555460][ T8533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.555488][ T8533] vfs_read+0x1e4/0xb40 [ 196.555516][ T8533] ? __pfx_vfs_read+0x10/0x10 [ 196.555546][ T8533] ? __fget_files+0x215/0x3d0 [ 196.555572][ T8533] ? __fget_files+0x21f/0x3d0 [ 196.555612][ T8533] ksys_read+0x12a/0x250 [ 196.555639][ T8533] ? __pfx_ksys_read+0x10/0x10 [ 196.555672][ T8533] do_syscall_64+0x115/0x870 [ 196.555691][ T8533] ? clear_bhb_loop+0x40/0x90 [ 196.555712][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.555729][ T8533] RIP: 0033:0x7f2c4fd5e6ce [ 196.555745][ T8533] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.555760][ T8533] RSP: 002b:00007f2c50cbcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.555786][ T8533] RAX: ffffffffffffffda RBX: 00007f2c50cbd6c0 RCX: 00007f2c4fd5e6ce [ 196.555796][ T8533] RDX: 000000000000000f RSI: 00007f2c50cbd0a0 RDI: 0000000000000005 [ 196.555808][ T8533] RBP: 00007f2c50cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 196.555820][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.555830][ T8533] R13: 00007f2c50026038 R14: 00007f2c50025fa0 R15: 00007ffeda71e6b8 [ 196.555853][ T8533] [ 196.992835][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.834'. [ 197.196953][ T8551] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 197.262529][ T8551] team0: Port device xfrm0 removed [ 197.267266][ T8551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.283765][ T6365] tipc: Resetting bearer [ 197.290775][ T8554] team0: Port device xfrm0 added [ 197.320518][ T8551] tipc: Enabling of bearer rejected, already enabled [ 197.580670][ T8566] syzkaller0: entered promiscuous mode [ 197.593075][ T8566] syzkaller0: entered allmulticast mode [ 198.250717][ T8591] coredump: 388(syz.4.853): Core dump to core aborted: cannot preserve file permissions [ 200.188167][ T8613] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 200.742442][ T1050] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 200.848588][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 200.902422][ T1050] usb 10-1: Using ep0 maxpacket: 32 [ 200.907724][ T1050] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 200.914175][ T1050] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.925864][ T1050] usb 10-1: config 0 descriptor?? [ 200.936302][ T1050] as10x_usb: device has been detected [ 200.940223][ T1050] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 200.955868][ T1050] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 200.966591][ T1050] as10x_usb: error during firmware upload part1 [ 200.972975][ T1050] Registered device nBox DVB-T Dongle [ 201.133738][ T1050] usb 10-1: USB disconnect, device number 11 [ 201.180000][ T1050] Unregistered device nBox DVB-T Dongle [ 201.185121][ T1050] as10x_usb: device has been disconnected [ 201.541522][ T8671] /dev/sg0: Can't lookup blockdev [ 201.572242][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 201.579039][ T42] audit: type=1400 audit(1785314904.729:671): avc: denied { unmount } for pid=6743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 201.729642][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.887'. [ 201.734157][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.887'. [ 204.748154][ T8682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.877767][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'. [ 204.928632][ T42] audit: type=1400 audit(1785314908.089:672): avc: denied { relabelfrom } for pid=8700 comm="syz.4.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 204.942929][ T42] audit: type=1400 audit(1785314908.089:673): avc: denied { relabelto } for pid=8700 comm="syz.4.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 205.252135][ T8718] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8718 comm=syz.2.900 [ 205.284576][ T8718] block2mtd: error: cannot open device /dev/loop0 [ 205.301395][ T8720] bond2: left promiscuous mode [ 205.315788][ T8720] erspan1: left promiscuous mode [ 205.380093][ T8723] FAULT_INJECTION: forcing a failure. [ 205.380093][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.416361][ T8723] CPU: 2 UID: 0 PID: 8723 Comm: syz.5.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.416397][ T8723] Tainted: [L]=SOFTLOCKUP [ 205.416401][ T8723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.416409][ T8723] Call Trace: [ 205.416424][ T8723] [ 205.416429][ T8723] dump_stack_lvl+0x100/0x190 [ 205.416451][ T8723] should_fail_ex.cold+0x5/0xa [ 205.416468][ T8723] _copy_from_iter+0x1f4/0x1690 [ 205.416486][ T8723] ? ieee802154_header_create+0x3bf/0x5e0 [ 205.416517][ T8723] ? __pfx__copy_from_iter+0x10/0x10 [ 205.416540][ T8723] dgram_sendmsg+0x97e/0xf50 [ 205.416556][ T8723] ? __pfx_dgram_sendmsg+0x10/0x10 [ 205.416579][ T8723] ? selinux_socket_sendmsg+0x198/0x2f0 [ 205.416600][ T8723] __sys_sendto+0x48b/0x4e0 [ 205.416613][ T8723] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 205.416627][ T8723] ? __pfx___sys_sendto+0x10/0x10 [ 205.416645][ T8723] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 205.416678][ T8723] __x64_sys_sendto+0xe0/0x1c0 [ 205.416691][ T8723] ? do_syscall_64+0x90/0x870 [ 205.416705][ T8723] ? lockdep_hardirqs_on+0x78/0x100 [ 205.416723][ T8723] do_syscall_64+0x115/0x870 [ 205.416736][ T8723] ? clear_bhb_loop+0x40/0x90 [ 205.416751][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.416764][ T8723] RIP: 0033:0x7f2c4fd5e6ce [ 205.416775][ T8723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.416787][ T8723] RSP: 002b:00007f2c50cbbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 205.416805][ T8723] RAX: ffffffffffffffda RBX: 00007f2c50cbd6c0 RCX: 00007f2c4fd5e6ce [ 205.416813][ T8723] RDX: 0000000000000020 RSI: 00007f2c50cbc000 RDI: 0000000000000004 [ 205.416820][ T8723] RBP: 0000000000000000 R08: 00007f2c50cbbf04 R09: 000000000000000c [ 205.416827][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 205.416834][ T8723] R13: 00007f2c50cbbf58 R14: 00007f2c50cbc000 R15: 0000000000000000 [ 205.416849][ T8723] [ 205.549095][ T8727] team0: Device vlan2 is of different type [ 205.576602][ T8730] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 205.589264][ T8733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8733 comm=syz.4.904 [ 205.632699][ T8727] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 205.850320][ T8742] gfs2: not a GFS2 filesystem [ 205.961709][ T8748] openvswitch: netlink: Missing valid actions attribute. [ 205.965580][ T8748] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.078874][ T8753] usb usb8: usbfs: process 8753 (syz.4.915) did not claim interface 0 before use [ 206.174329][ T8755] No such timeout policy "syz1" [ 206.284178][ T8757] syzkaller0: entered promiscuous mode [ 206.291944][ T8757] syzkaller0: entered allmulticast mode [ 206.526955][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.528975][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.580961][ T42] audit: type=1400 audit(1785314909.739:674): avc: denied { watch } for pid=8764 comm="syz.2.921" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 206.619950][ T42] audit: type=1400 audit(1785314909.739:675): avc: denied { watch_sb watch_reads } for pid=8764 comm="syz.2.921" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 206.640038][ T42] audit: type=1400 audit(1785314909.779:676): avc: denied { bind } for pid=8764 comm="syz.2.921" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.663756][ T42] audit: type=1400 audit(1785314909.779:677): avc: denied { name_bind } for pid=8764 comm="syz.2.921" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 206.674642][ T42] audit: type=1400 audit(1785314909.779:678): avc: denied { node_bind } for pid=8764 comm="syz.2.921" saddr=fc02:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 207.745785][ T8798] binder: 8797:8798 ioctl c018620c 200000000040 returned -22 [ 207.774605][ T8781] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.780809][ T8781] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.786848][ T8781] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 207.810075][ T8781] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 207.830512][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.935'. [ 207.866491][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.879470][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.883981][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.891034][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.896919][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.133132][ T8811] tipc: New replicast peer: 127.0.0.1 [ 208.137464][ T8811] tipc: Enabled bearer , priority 10 [ 208.370836][ T8829] binder_alloc: 8828: binder_alloc_buf size -16 failed, no address space [ 208.376185][ T8829] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 208.435306][ T8831] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 208.844092][ T8854] cdrom: dropping to single frame dma [ 208.871726][ T8858] Dead loop on virtual device ip6_vti0 (net 32), fix it urgently! [ 208.977736][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.987944][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.999767][ T8791] bridge_slave_0: entered allmulticast mode [ 209.011751][ T8791] bridge_slave_0: entered promiscuous mode [ 209.032582][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.034946][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.038307][ T8791] bridge_slave_1: entered allmulticast mode [ 209.041903][ T8791] bridge_slave_1: entered promiscuous mode [ 209.065814][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.082981][ T8854] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 209.098584][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.162775][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.189225][ T8791] team0: Port device team_slave_0 added [ 209.198671][ T8791] team0: Port device team_slave_1 added [ 209.241453][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.249329][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.261780][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.271707][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.275185][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.283541][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.378754][ T8791] hsr_slave_0: entered promiscuous mode [ 209.388485][ T8791] hsr_slave_1: entered promiscuous mode [ 209.394420][ T8791] debugfs: 'hsr0' already exists in 'hsr' [ 209.396663][ T8791] Cannot create hsr debugfs directory [ 209.485550][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.960'. [ 209.504048][ T10] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 209.507892][ T8886] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 209.631037][ T8791] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.649115][ T8791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.653271][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 209.657287][ T8791] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.678207][ T8791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.685938][ T8791] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.698446][ T8791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.701434][ T8791] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.708940][ T8791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.784066][ T10] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 209.802584][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.811549][ T42] audit: type=1400 audit(1785314912.969:679): avc: denied { mmap_zero } for pid=8902 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 209.826238][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.828731][ T42] audit: type=1400 audit(1785314912.969:680): avc: denied { setattr } for pid=8902 comm="syz.4.965" name="sequencer" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 209.849623][ T8791] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.863568][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.865869][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.881184][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.883561][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.912122][ T8791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.915729][ T5899] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 209.943139][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 209.946039][ T10] usb usb7-port1: attempt power cycle [ 209.948772][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 209.955283][ T8908] hsr_slave_0: left promiscuous mode [ 209.958206][ T8908] hsr_slave_1: left promiscuous mode [ 209.962758][ T65] Bluetooth: hci1: command tx timeout [ 210.065246][ T5899] usb 10-1: Using ep0 maxpacket: 8 [ 210.069717][ T5899] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 210.077408][ T5899] usb 10-1: config 0 has no interface number 0 [ 210.080161][ T5899] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.090314][ T5899] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 210.100444][ T5899] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.108510][ T5899] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.135609][ T5899] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 210.140941][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.155846][ T5899] usb 10-1: config 0 descriptor?? [ 210.178344][ T5899] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 210.198903][ T8918] bond0: entered promiscuous mode [ 210.204072][ T8918] batadv0: entered promiscuous mode [ 210.207014][ T8918] debugfs: 'hsr0' already exists in 'hsr' [ 210.209254][ T8918] Cannot create hsr debugfs directory [ 210.211791][ T8918] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 210.221605][ T8918] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 210.293797][ T10] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 210.314007][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 210.327075][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.393847][ T8892] ldusb 10-1:0.55: Write buffer overflow, 2147479232 bytes dropped [ 210.408437][ T5899] usb 10-1: USB disconnect, device number 12 [ 210.419519][ T5899] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 210.452456][ T10] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 210.474817][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 210.480367][ T10] usb usb7-port1: unable to enumerate USB device [ 210.565138][ T8791] veth0_vlan: entered promiscuous mode [ 210.579287][ T8791] veth1_vlan: entered promiscuous mode [ 210.620139][ T8791] veth0_macvtap: entered promiscuous mode [ 210.626186][ T8791] veth1_macvtap: entered promiscuous mode [ 210.639256][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.648623][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.670294][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.674759][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.679074][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.681898][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.852924][ T6948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.863971][ T6948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.899748][ T6365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.903852][ T6365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.958797][ T42] audit: type=1400 audit(1785314914.119:681): avc: denied { mounton } for pid=8791 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 211.106519][ T42] audit: type=1400 audit(1785314914.269:682): avc: denied { write } for pid=8949 comm="syz.4.977" name="functions" dev="configfs" ino=8939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.136922][ T42] audit: type=1800 audit(1785314914.289:683): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.977" name="c_srate" dev="configfs" ino=31651 res=0 errno=0 [ 211.496264][ T5900] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 211.554029][ T8973] block nbd0: Receive control failed (result -32) [ 211.559472][ T66] block nbd0: Receive control failed (result -32) [ 211.665219][ T5900] usb 10-1: Using ep0 maxpacket: 8 [ 211.671484][ T5900] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 211.675897][ T5900] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.679808][ T5900] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.683797][ T5900] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.687902][ T5900] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.701338][ T5900] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.706758][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.822901][ T8984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8984 comm=syz.6.986 [ 211.884963][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.932550][ T5900] usb 10-1: usb_control_msg returned -32 [ 211.937375][ T5900] usbtmc 10-1:16.0: can't read capabilities [ 212.021201][ T8996] netlink: 84 bytes leftover after parsing attributes in process `syz.6.991'. [ 212.028263][ T8996] netlink: 84 bytes leftover after parsing attributes in process `syz.6.991'. [ 212.031233][ T8996] netlink: 84 bytes leftover after parsing attributes in process `syz.6.991'. [ 212.035045][ T8996] netlink: 84 bytes leftover after parsing attributes in process `syz.6.991'. [ 212.038009][ T8996] netlink: 84 bytes leftover after parsing attributes in process `syz.6.991'. [ 212.040922][ T8996] netlink: 84 bytes leftover after parsing attributes in process `syz.6.991'. [ 212.048088][ T8996] netlink: 84 bytes leftover after parsing attributes in process `syz.6.991'. [ 212.262015][ T9009] dummy_hcd dummy_hcd.0: remove, state 1 [ 212.264669][ T9009] usb usb5: USB disconnect, device number 1 [ 212.268688][ T9009] usb 5-1: USB disconnect, device number 2 [ 212.285053][ T9009] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 212.400672][ T42] audit: type=1400 audit(1785314915.559:684): avc: denied { write } for pid=9012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.549585][ T42] audit: type=1400 audit(1785314915.709:685): avc: denied { write } for pid=9024 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.591113][ T9009] dummy_hcd dummy_hcd.0: stopped [ 212.596318][ T9023] syzkaller0: entered promiscuous mode [ 212.598565][ T9023] syzkaller0: entered allmulticast mode [ 212.602775][ T9009] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 212.625476][ T9014] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 212.674006][ T9031] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 212.677706][ T9014] dummy_hcd dummy_hcd.0: Dummy host controller [ 212.687407][ T9014] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 212.692033][ T9014] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 212.701302][ T9014] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 212.712552][ T9014] usb usb5: Product: Dummy host controller [ 212.724128][ T9014] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 212.735158][ T9014] usb usb5: SerialNumber: dummy_hcd.0 [ 212.749455][ T42] audit: type=1400 audit(1785314915.909:686): avc: denied { write } for pid=9030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.779731][ T9014] hub 5-0:1.0: USB hub found [ 212.784929][ T9014] hub 5-0:1.0: 1 port detected [ 212.810544][ T42] audit: type=1400 audit(1785314915.969:687): avc: denied { write } for pid=9038 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.873548][ T5836] usb 10-1: USB disconnect, device number 13 [ 212.985726][ T42] audit: type=1400 audit(1785314916.149:688): avc: denied { write } for pid=9047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.060939][ T42] audit: type=1400 audit(1785314916.219:689): avc: denied { write } for pid=9051 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.072521][ T1050] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 213.157484][ T42] audit: type=1400 audit(1785314916.319:690): avc: denied { write } for pid=9057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.166110][ T65] Bluetooth: hci1: command tx timeout [ 213.182660][ T5899] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 213.232708][ T42] audit: type=1400 audit(1785314916.389:691): avc: denied { write } for pid=9064 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.241841][ T1050] usb 5-1: Dual-Role OTG device on HNP port [ 213.246664][ T1050] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 213.249557][ T1050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.295022][ T1050] rndis_host 5-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 2a:ae:a7:d8:3c:10 [ 213.333009][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 213.336153][ T5899] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 213.341978][ T5899] usb 7-1: config 0 has no interface number 0 [ 213.349365][ T5899] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.353315][ T5899] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 213.357407][ T5899] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.361071][ T5899] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.365660][ T5899] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 213.368645][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.368698][ T42] audit: type=1400 audit(1785314916.529:692): avc: denied { write } for pid=9068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.379051][ T5899] usb 7-1: config 0 descriptor?? [ 213.414962][ T5899] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 213.443459][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 213.462118][ T42] audit: type=1400 audit(1785314916.619:693): avc: denied { bpf } for pid=9075 comm="syz.5.1011" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.535116][ T9077] netlink: 'syz.5.1011': attribute type 10 has an invalid length. [ 213.564148][ T5836] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 213.602362][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 213.608798][ T10] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 213.614311][ T10] usb 11-1: config 0 has no interface number 0 [ 213.621991][ T10] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.627368][ T10] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 213.631197][ T10] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.640002][ T10] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.646559][ T1050] usb 7-1: USB disconnect, device number 19 [ 213.648273][ T1050] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 213.670930][ T10] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 213.686353][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.698668][ T10] usb 11-1: config 0 descriptor?? [ 213.708398][ T10] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 213.715339][ T5836] usb 9-1: Using ep0 maxpacket: 8 [ 213.720749][ T5836] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 213.731155][ T5836] usb 9-1: config 0 has no interface number 0 [ 213.738307][ T5836] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.750839][ T5836] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 213.763193][ T5836] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.774160][ T9088] bridge_slave_0: left allmulticast mode [ 213.774220][ T5836] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.780286][ T9088] bridge_slave_0: left promiscuous mode [ 213.783234][ T5836] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 213.784143][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.790581][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.800214][ T9088] bridge_slave_1: left allmulticast mode [ 213.803913][ T5836] usb 9-1: config 0 descriptor?? [ 213.806568][ T9088] bridge_slave_1: left promiscuous mode [ 213.810250][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.811053][ T5836] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 213.826295][ T9088] bond0: (slave bond_slave_0): Releasing backup interface [ 213.840130][ T9088] bond0: (slave bond_slave_1): Releasing backup interface [ 213.871124][ T9088] team0: Port device team_slave_0 removed [ 213.882014][ T9088] team0: Port device team_slave_1 removed [ 213.884951][ T9088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.887319][ T9088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.890506][ T9088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.893797][ T9088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.897688][ T9088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.925333][ T5836] usb 11-1: USB disconnect, device number 2 [ 213.944790][ T5836] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 213.972668][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 214.010025][ T65] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 214.131130][ T5836] usb 9-1: USB disconnect, device number 15 [ 214.177069][ T9110] dummy_hcd dummy_hcd.0: remove, state 1 [ 214.185493][ T9110] usb usb5: USB disconnect, device number 1 [ 214.188065][ T5836] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 214.198759][ T9110] usb 5-1: USB disconnect, device number 2 [ 214.249499][ T9110] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 214.372150][ T9130] xt_HMARK: spi-set and port-set can't be combined [ 214.385897][ T9130] netlink: 'syz.4.1025': attribute type 23 has an invalid length. [ 214.395119][ T10] hid_parser_main: 28 callbacks suppressed [ 214.395133][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 214.401533][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 214.431951][ T10] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 214.434779][ T9129] __nla_validate_parse: 26 callbacks suppressed [ 214.434798][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1023'. [ 214.495281][ T9110] dummy_hcd dummy_hcd.0: stopped [ 214.514764][ T9110] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 214.545884][ T9097] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 214.557548][ T9097] dummy_hcd dummy_hcd.0: Dummy host controller [ 214.581474][ T9097] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 214.599852][ T9097] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 214.608986][ T9097] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 214.611707][ T9097] usb usb5: Product: Dummy host controller [ 214.614688][ T9097] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 214.618343][ T9097] usb usb5: SerialNumber: dummy_hcd.0 [ 214.631226][ T9139] overlay: ./file0 is not a directory [ 214.643979][ T5836] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 214.649494][ T9097] hub 5-0:1.0: USB hub found [ 214.651338][ T9097] hub 5-0:1.0: 1 port detected [ 214.710312][ T9143] xt_hashlimit: size too large, truncated to 1048576 [ 214.802756][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 214.819800][ T5836] usb 7-1: config 0 has no interfaces? [ 214.822688][ T5836] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.834285][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.847468][ T5836] usb 7-1: config 0 descriptor?? [ 215.024404][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 215.122801][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.137062][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.185162][ T5899] usb 5-1: Dual-Role OTG device on HNP port [ 215.190249][ T5899] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 215.195798][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.252628][ T65] Bluetooth: hci1: command tx timeout [ 215.255540][ T5899] rndis_host 5-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 2a:ae:a7:d8:3c:10 [ 215.319749][ T6806] usb 7-1: USB disconnect, device number 20 [ 215.547488][ T9195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.658676][ T9198] dummy_hcd dummy_hcd.0: remove, state 1 [ 215.661088][ T9198] usb usb5: USB disconnect, device number 1 [ 215.664051][ T9198] usb 5-1: USB disconnect, device number 2 [ 215.695495][ T9198] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 215.713820][ T65] Bluetooth: hci2: unexpected event for opcode 0x202d [ 215.925807][ T9198] dummy_hcd dummy_hcd.0: stopped [ 215.936613][ T9198] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 215.949897][ T9212] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 215.977916][ T9212] dummy_hcd dummy_hcd.0: Dummy host controller [ 215.994118][ T9212] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 216.002140][ T9212] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 216.008125][ T9212] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 216.011566][ T9212] usb usb5: Product: Dummy host controller [ 216.015455][ T9212] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 216.017632][ T9212] usb usb5: SerialNumber: dummy_hcd.0 [ 216.050836][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'. [ 216.054331][ T9238] nbd: couldn't find a device at index 158 [ 216.090401][ T9212] hub 5-0:1.0: USB hub found [ 216.101304][ T9212] hub 5-0:1.0: 1 port detected [ 216.366848][ T5843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 216.471436][ T9268] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1074'. [ 216.508410][ T9270] FAULT_INJECTION: forcing a failure. [ 216.508410][ T9270] name failslab, interval 1, probability 0, space 0, times 0 [ 216.518065][ T9270] CPU: 2 UID: 0 PID: 9270 Comm: syz.4.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.518093][ T9270] Tainted: [L]=SOFTLOCKUP [ 216.518099][ T9270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.518116][ T9270] Call Trace: [ 216.518123][ T9270] [ 216.518129][ T9270] dump_stack_lvl+0x100/0x190 [ 216.518168][ T9270] should_fail_ex.cold+0x5/0xa [ 216.518189][ T9270] should_failslab+0xc2/0x120 [ 216.518210][ T9270] kmem_cache_alloc_noprof+0x91/0x6a0 [ 216.518229][ T9270] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 216.518252][ T9270] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 216.518271][ T9270] mmu_topup_memory_caches+0x25/0x170 [ 216.518298][ T9270] kvm_mmu_load+0xe2/0x2570 [ 216.518314][ T9270] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 216.518327][ T9270] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 216.518340][ T9270] ? __pfx_kvm_mmu_load+0x10/0x10 [ 216.518355][ T9270] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 216.518370][ T9270] ? kvm_check_and_inject_events+0x873/0x12a0 [ 216.518387][ T9270] ? record_steal_time+0x3a0/0xbb0 [ 216.518401][ T9270] vcpu_run+0x3aaa/0x5de0 [ 216.518424][ T9270] ? __pfx_vcpu_run+0x10/0x10 [ 216.518445][ T9270] ? rcu_is_watching+0x12/0xc0 [ 216.518470][ T9270] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 216.518487][ T9270] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 216.518509][ T9270] kvm_vcpu_ioctl+0x730/0x1700 [ 216.518523][ T9270] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 216.518536][ T9270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.518560][ T9270] ? do_vfs_ioctl+0x226/0x13e0 [ 216.518581][ T9270] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 216.518598][ T9270] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 216.518627][ T9270] ? __fget_files+0x215/0x3d0 [ 216.518639][ T9270] ? hook_file_ioctl_common+0x140/0x440 [ 216.518663][ T9270] ? selinux_file_ioctl+0x13b/0x290 [ 216.518684][ T9270] ? selinux_file_ioctl+0xb6/0x290 [ 216.518710][ T9270] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 216.518724][ T9270] __x64_sys_ioctl+0x18e/0x210 [ 216.518759][ T9270] do_syscall_64+0x115/0x870 [ 216.518781][ T9270] ? clear_bhb_loop+0x40/0x90 [ 216.518795][ T9270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.518807][ T9270] RIP: 0033:0x7f8f8b99de99 [ 216.518818][ T9270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.518830][ T9270] RSP: 002b:00007f8f8c8e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.518849][ T9270] RAX: ffffffffffffffda RBX: 00007f8f8bc26090 RCX: 00007f8f8b99de99 [ 216.518856][ T9270] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 216.518862][ T9270] RBP: 00007f8f8c8e4090 R08: 0000000000000000 R09: 0000000000000000 [ 216.518869][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.518875][ T9270] R13: 00007f8f8bc26128 R14: 00007f8f8bc26090 R15: 00007fffbb67ee68 [ 216.518890][ T9270] [ 216.530540][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1075'. [ 216.544358][ T5843] usb 5-1: Dual-Role OTG device on HNP port [ 216.634814][ T5843] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 216.637693][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.722269][ T5843] rndis_host 5-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 2a:ae:a7:d8:3c:10 [ 216.799414][ T9288] tipc: Enabling of bearer rejected, already enabled [ 216.835875][ T9284] dummy_hcd dummy_hcd.0: remove, state 1 [ 216.841088][ T9284] usb usb5: USB disconnect, device number 1 [ 216.852379][ T9284] usb 5-1: USB disconnect, device number 2 [ 216.858674][ T9284] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 216.977585][ T9284] dummy_hcd dummy_hcd.0: stopped [ 216.986470][ T9284] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 217.003256][ T5836] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 217.014483][ T5899] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 217.175036][ T6806] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 217.176162][ T5836] usb 11-1: config 5 has an invalid interface number: 19 but max is 3 [ 217.180126][ T6806] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 217.180156][ T6806] CPU: 2 UID: 0 PID: 6806 Comm: kworker/2:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.180182][ T6806] Tainted: [L]=SOFTLOCKUP [ 217.180192][ T6806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.180214][ T6806] Workqueue: mld mld_ifc_work [ 217.183138][ T5899] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.186336][ T6806] [ 217.186348][ T6806] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 217.186391][ T6806] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 217.190733][ T5899] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 217.192300][ T6806] RSP: 0018:ffffc90004557330 EFLAGS: 00010206 [ 217.192323][ T6806] RAX: dffffc0000000000 RBX: ffff88803222fc10 RCX: ffffffff87d1359f [ 217.192335][ T6806] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060 [ 217.192344][ T6806] RBP: ffff88802b5840e0 R08: 0000000000000005 R09: 0000000000000005 [ 217.192355][ T6806] R10: 0000000000000003 R11: 000000000000758b R12: ffff88802b584c00 [ 217.192367][ T6806] R13: ffff88803222fc00 R14: ffff88802b5840d8 R15: 0000000000000000 [ 217.192381][ T6806] FS: 0000000000000000(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 217.192413][ T6806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.192425][ T6806] CR2: 00007f09fcf734ac CR3: 00000000395e9000 CR4: 0000000000352ef0 [ 217.192436][ T6806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.192446][ T6806] DR3: 00000000fda3b69a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 217.192459][ T6806] Call Trace: [ 217.192466][ T6806] [ 217.192477][ T6806] usb_ep_queue+0xfa/0x3c0 [ 217.192504][ T6806] eth_start_xmit+0x684/0x1390 [ 217.192540][ T6806] dev_hard_start_xmit+0x121/0x760 [ 217.192569][ T6806] sch_direct_xmit+0x1b2/0xc70 [ 217.192626][ T6806] ? lock_acquire+0x1b9/0x370 [ 217.196777][ T5836] usb 11-1: config 5 has an invalid interface number: 242 but max is 3 [ 217.197884][ T6806] ? __pfx_sch_direct_xmit+0x10/0x10 [ 217.205295][ T5899] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 217.212490][ T6806] ? do_raw_spin_lock+0x200/0x260 [ 217.212530][ T6806] __dev_queue_xmit+0x27ac/0x4970 [ 217.212552][ T6806] ? ip6mr_fib_lookup+0x133/0x1a0 [ 217.212576][ T6806] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.212594][ T6806] ? __lock_acquire+0x49f/0x1a40 [ 217.212620][ T6806] ? find_held_lock+0x2b/0x80 [ 217.212652][ T6806] ip6_finish_output2+0xfd4/0x1ce0 [ 217.215989][ T5836] usb 11-1: config 5 has an invalid interface number: 7 but max is 3 [ 217.218117][ T6806] __ip6_finish_output+0x357/0xdf0 [ 217.218147][ T6806] ip6_output+0x2aa/0xa60 [ 217.220795][ T5836] usb 11-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 217.224028][ T6806] ? __pfx_ip6_output+0x10/0x10 [ 217.224056][ T6806] ? __pfx_ip6_finish_output+0x10/0x10 [ 217.224079][ T6806] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 217.224104][ T6806] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 217.224128][ T6806] ? __pfx_ip6_output+0x10/0x10 [ 217.224146][ T6806] NF_HOOK.constprop.0+0x115/0x5a0 [ 217.224171][ T6806] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 217.224195][ T6806] ? __pfx_dst_output+0x10/0x10 [ 217.224218][ T6806] mld_sendpack+0x8f7/0xec0 [ 217.224241][ T6806] ? __pfx_mld_sendpack+0x10/0x10 [ 217.224269][ T6806] mld_ifc_work+0x75a/0xc10 [ 217.224296][ T6806] ? rcu_is_watching+0x12/0xc0 [ 217.224327][ T6806] process_one_work+0xa23/0x1940 [ 217.224364][ T6806] ? __pfx_process_one_work+0x10/0x10 [ 217.224387][ T6806] ? __pfx_mld_ifc_work+0x10/0x10 [ 217.329854][ T6806] worker_thread+0x5ef/0xe50 [ 217.331845][ T6806] ? __pfx_worker_thread+0x10/0x10 [ 217.334009][ T6806] ? kthread+0x13a/0x450 [ 217.335803][ T6806] ? __pfx_worker_thread+0x10/0x10 [ 217.337954][ T6806] kthread+0x370/0x450 [ 217.339741][ T6806] ? __pfx_kthread+0x10/0x10 [ 217.341721][ T6806] ret_from_fork+0x72b/0xd50 [ 217.343681][ T6806] ? __pfx_ret_from_fork+0x10/0x10 [ 217.345818][ T6806] ? rcu_is_watching+0x12/0xc0 [ 217.347756][ T6806] ? __switch_to+0x800/0x10f0 [ 217.349733][ T6806] ? __pfx_kthread+0x10/0x10 [ 217.351685][ T6806] ret_from_fork_asm+0x1a/0x30 [ 217.353683][ T6806] [ 217.354973][ T6806] Modules linked in: [ 217.356936][ T6806] ---[ end trace 0000000000000000 ]--- [ 217.357448][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.359167][ T6806] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 217.361694][ T5836] usb 11-1: config 5 has an invalid interface number: 25 but max is 3 [ 217.363846][ T6806] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 217.366762][ T5836] usb 11-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 217.372527][ T6806] RSP: 0018:ffffc90004557330 EFLAGS: 00010206 [ 217.372545][ T6806] RAX: dffffc0000000000 RBX: ffff88803222fc10 RCX: ffffffff87d1359f [ 217.372554][ T6806] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060 [ 217.372561][ T6806] RBP: ffff88802b5840e0 R08: 0000000000000005 R09: 0000000000000005 [ 217.372568][ T6806] R10: 0000000000000003 R11: 000000000000758b R12: ffff88802b584c00 [ 217.372576][ T6806] R13: ffff88803222fc00 R14: ffff88802b5840d8 R15: 0000000000000000 [ 217.372583][ T6806] FS: 0000000000000000(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 217.372606][ T6806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.372616][ T6806] CR2: 00007f09fcf734ac CR3: 00000000395e9000 CR4: 0000000000352ef0 [ 217.372623][ T6806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.372630][ T6806] DR3: 00000000fda3b69a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 217.372640][ T6806] Kernel panic - not syncing: Fatal exception in interrupt [ 217.373181][ T6806] Kernel Offset: disabled