last executing test programs: 23.641172377s ago: executing program 1 (id=166): creat(&(0x7f0000000280)='./file2\x00', 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) 23.572142997s ago: executing program 1 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0x7f, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 23.379519871s ago: executing program 1 (id=171): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/38) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x8, 0x0, 0x7fff, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @remote, @local}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x5f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1c}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r11, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getchain={0x2c, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xfff3}, {0x0, 0x10}, {0x1, 0x8}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040017}, 0x4041080) sendto$inet6(r0, &(0x7f0000000140)="80006455d3800000", 0x8, 0x0, &(0x7f0000000080)={0xa, 0x6f24, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40000001}, 0x1c) 23.110260288s ago: executing program 1 (id=176): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r1, &(0x7f0000001400)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r3, &(0x7f0000002500), 0x0) write(0xffffffffffffffff, &(0x7f0000003400)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r4, &(0x7f0000002700)='1\n', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x4000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 20.761255554s ago: executing program 1 (id=204): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x2, 0x0, 0x400, 0x4, 0xe9e5, 0x4}]}) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r5) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000040)={0x0, 0x1, r1}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc03064ca, &(0x7f0000000040)={&(0x7f0000000080)=[r8, r8], &(0x7f0000000200)=[0x1000000000003fd], 0x7fff, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r6, 0x0, 0x0, r8, r9], 0x5}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 20.052149736s ago: executing program 1 (id=205): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0x3ea4, 0x17, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) (fail_nth: 10) 20.024909344s ago: executing program 32 (id=205): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0x3ea4, 0x17, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) (fail_nth: 10) 3.890675017s ago: executing program 2 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xafb5, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 10) 3.520625187s ago: executing program 2 (id=376): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x6, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x10000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x80a0000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0x4b, 0x9, 0x3, 0x0, 0x4, 0x30}, {0x1000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0x9000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0xd, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x0, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x2, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x48, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0x1, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0x7, '\x00', 0x4}, {0x7, 0x6, 0x6, '\x00', 0x8}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) timer_create(0x0, &(0x7f00000000c0)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000340)={{r5, &(0x7f0000000080)='$\\\x00', 0x4000, &(0x7f00000001c0)={@align=0xb07, {0xc, 0x3, 0x7, 0x1}}, 0x1, &(0x7f0000000200), &(0x7f0000000240)}, {[0x800, 0x5, 0x6, 0x8]}, 0x5, 0x79, &(0x7f0000000280)=""/121}) ioctl$OCFS2_IOC_GROUP_EXTEND(r7, 0x40046f01, &(0x7f00000003c0)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)="a0ebe35aedc18fa1fc7c78452532284cd0a192d9", 0x14, r6}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, 0x0) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000300)=ANY=[], 0xc) 3.368922808s ago: executing program 0 (id=380): r0 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @ramp={0x7, 0x7fff, {0xa, 0x2, 0x0, 0x4}}}) 3.281532105s ago: executing program 2 (id=381): r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) sendfile(0xffffffffffffffff, r0, 0x0, 0x469) mount(0x0, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', &(0x7f0000000140)='esdfs\x00', 0x23110a8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x11, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="20000000410007012dbd7000fedbdf250300000000000000080009"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write(r1, &(0x7f0000001200)="0501", 0x2) 3.119515139s ago: executing program 2 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000700005040100000000000000070000", @ANYRES32=r1, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.071717091s ago: executing program 2 (id=385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x18, 0x0, 0x0, @sint={0x0, 0x800}}]}) 2.881676084s ago: executing program 2 (id=389): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000680)=""/161) 2.781225157s ago: executing program 0 (id=390): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x101900, 0x101) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x5, 0x6, 0xd16, 0x8, 0x4, 0x5}) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000080)) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x1}, 0x6) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = fsmount(r0, 0x1, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000002140), r0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000004200)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x192, 0x0, 0x0, 0x0, 0x1, &(0x7f00000041c0)='geneve1\x00', 0x2, 0x9, 0x5}) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000004280)=0xaf) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) pwritev2(r1, &(0x7f0000006380)=[{&(0x7f0000006300)="512834606c752ecd6bbc7838bdab244974fa1f967c5710dd7850d2d7c9804031fdafdc2dbe2968a38750feb1d8d2e198b7a94b7734b53b6b8900d87ac6ab2209edeb21565ac2e2f8cb94c01b65ade240ed290dfb27da12145d87531c01cfba7643fefa54f758f0e5387a9b3541de91bff7c53ef4", 0x74}], 0x1, 0x1, 0x1ff, 0xa) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000063c0)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000006400)={0x1c}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000064c0)={'ip6tnl0\x00', &(0x7f0000006440)={'ip6tnl0\x00', 0x0, 0x8c7b49c9911056b0, 0x8d, 0x34, 0x8, 0x27, @loopback, @remote, 0x20, 0x8, 0x354a5c02, 0x80000001}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000064c0)={'ip6tnl0\x00', &(0x7f0000006440)={'ip6tnl0\x00', 0x0, 0x8c7b49c9911056b0, 0x8d, 0x34, 0x8, 0x27, @loopback, @remote, 0x20, 0x8, 0x354a5c02, 0x80000001}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000006580)={'gretap0\x00', &(0x7f0000006500)={'gre0\x00', r2, 0x1, 0x700, 0x6, 0x3, {{0x13, 0x4, 0x0, 0x1, 0x4c, 0x68, 0x0, 0x42, 0x2f, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x1b, 0x3, [{0x0, 0x4, "152e"}, {0x5, 0x11, "76bb34034d8fb683be6c5a549843a9"}]}, @noop, @ssrr={0x89, 0x1b, 0xef, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, @multicast2]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000006600), r1) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000006600), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000006900)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000068c0)={&(0x7f0000006640)={0x244, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x10000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xb}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x6be}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000006940), 0x400003, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006980)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000006a40)={0x6, 0x0, &(0x7f0000006a00)=[r1, r6, r1, r1, r7, r1, r1, r1, r1, r1]}, 0xa) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000006a40)={0x6, 0x0, &(0x7f0000006a00)=[r1, r6, r1, r1, r7, r1, r1, r1, r1, r1]}, 0xa) recvmmsg$unix(r1, &(0x7f000000da80)=[{{&(0x7f0000006a80), 0x6e, &(0x7f0000007d80)=[{&(0x7f0000006b00)=""/19, 0x13}, {&(0x7f0000006b40)=""/4096, 0x1000}, {&(0x7f0000007b40)=""/89, 0x59}, {&(0x7f0000007bc0)=""/27, 0x1b}, {&(0x7f0000007c00)=""/6, 0x6}, {&(0x7f0000007c40)=""/82, 0x52}, {&(0x7f0000007cc0)=""/146, 0x92}], 0x7, &(0x7f0000007e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000007e80), 0x6e, &(0x7f0000008300)=[{&(0x7f0000007f00)=""/106, 0x6a}, {&(0x7f0000007f80)=""/255, 0xff}, {&(0x7f0000008080)=""/170, 0xaa}, {&(0x7f0000008140)=""/229, 0xe5}, {&(0x7f0000008240)=""/129, 0x81}], 0x5, &(0x7f0000008380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000008500)=@abs, 0x6e, &(0x7f0000008680)=[{&(0x7f0000008580)=""/225, 0xe1}], 0x1, &(0x7f00000086c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f000000aac0)=[{&(0x7f0000008780)=""/4096, 0x1000}, {&(0x7f0000009780)=""/73, 0x49}, {&(0x7f0000009800)=""/117, 0x75}, {&(0x7f0000009880)=""/241, 0xf1}, {&(0x7f0000009980)=""/4096, 0x1000}, {&(0x7f000000a980)}, {&(0x7f000000a9c0)=""/224, 0xe0}], 0x7, &(0x7f000000ab40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f000000ac00), 0x6e, &(0x7f000000c040)=[{&(0x7f000000ac80)=""/160, 0xa0}, {&(0x7f000000ad40)=""/8, 0x8}, {&(0x7f000000ad80)=""/4096, 0x1000}, {&(0x7f000000bd80)=""/233, 0xe9}, {&(0x7f000000be80)=""/176, 0xb0}, {&(0x7f000000bf40)}, {&(0x7f000000bf80)=""/182, 0xb6}], 0x7, &(0x7f000000c0c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f000000c140)=@abs, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c1c0)=""/30, 0x1e}, {&(0x7f000000c200)=""/251, 0xfb}, {&(0x7f000000c300)=""/162, 0xa2}], 0x3, &(0x7f000000c400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f000000c4c0), 0x6e, &(0x7f000000c640)=[{&(0x7f000000c540)=""/74, 0x4a}, {&(0x7f000000c5c0)=""/65, 0x41}], 0x2, &(0x7f000000c680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f000000c700)=@abs, 0x6e, &(0x7f000000d780)=[{&(0x7f000000c780)=""/4096, 0x1000}], 0x1, &(0x7f000000d7c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f000000d840)=@abs, 0x6e, &(0x7f000000d980)=[{&(0x7f000000d8c0)=""/129, 0x81}], 0x1, &(0x7f000000d9c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}], 0x9, 0x10000, 0x0) (async) recvmmsg$unix(r1, &(0x7f000000da80)=[{{&(0x7f0000006a80), 0x6e, &(0x7f0000007d80)=[{&(0x7f0000006b00)=""/19, 0x13}, {&(0x7f0000006b40)=""/4096, 0x1000}, {&(0x7f0000007b40)=""/89, 0x59}, {&(0x7f0000007bc0)=""/27, 0x1b}, {&(0x7f0000007c00)=""/6, 0x6}, {&(0x7f0000007c40)=""/82, 0x52}, {&(0x7f0000007cc0)=""/146, 0x92}], 0x7, &(0x7f0000007e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000007e80), 0x6e, &(0x7f0000008300)=[{&(0x7f0000007f00)=""/106, 0x6a}, {&(0x7f0000007f80)=""/255, 0xff}, {&(0x7f0000008080)=""/170, 0xaa}, {&(0x7f0000008140)=""/229, 0xe5}, {&(0x7f0000008240)=""/129, 0x81}], 0x5, &(0x7f0000008380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000008500)=@abs, 0x6e, &(0x7f0000008680)=[{&(0x7f0000008580)=""/225, 0xe1}], 0x1, &(0x7f00000086c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f000000aac0)=[{&(0x7f0000008780)=""/4096, 0x1000}, {&(0x7f0000009780)=""/73, 0x49}, {&(0x7f0000009800)=""/117, 0x75}, {&(0x7f0000009880)=""/241, 0xf1}, {&(0x7f0000009980)=""/4096, 0x1000}, {&(0x7f000000a980)}, {&(0x7f000000a9c0)=""/224, 0xe0}], 0x7, &(0x7f000000ab40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f000000ac00), 0x6e, &(0x7f000000c040)=[{&(0x7f000000ac80)=""/160, 0xa0}, {&(0x7f000000ad40)=""/8, 0x8}, {&(0x7f000000ad80)=""/4096, 0x1000}, {&(0x7f000000bd80)=""/233, 0xe9}, {&(0x7f000000be80)=""/176, 0xb0}, {&(0x7f000000bf40)}, {&(0x7f000000bf80)=""/182, 0xb6}], 0x7, &(0x7f000000c0c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f000000c140)=@abs, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c1c0)=""/30, 0x1e}, {&(0x7f000000c200)=""/251, 0xfb}, {&(0x7f000000c300)=""/162, 0xa2}], 0x3, &(0x7f000000c400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f000000c4c0), 0x6e, &(0x7f000000c640)=[{&(0x7f000000c540)=""/74, 0x4a}, {&(0x7f000000c5c0)=""/65, 0x41}], 0x2, &(0x7f000000c680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f000000c700)=@abs, 0x6e, &(0x7f000000d780)=[{&(0x7f000000c780)=""/4096, 0x1000}], 0x1, &(0x7f000000d7c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f000000d840)=@abs, 0x6e, &(0x7f000000d980)=[{&(0x7f000000d8c0)=""/129, 0x81}], 0x1, &(0x7f000000d9c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}], 0x9, 0x10000, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f000000dcc0)={0x7, 0x7b, 0x2}, 0x7) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f000000dd40), r12) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f000000dd80), &(0x7f000000ddc0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f000000dd80)=0x0, &(0x7f000000ddc0)=0x4) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f000000de00)={@loopback, 0x0}, &(0x7f000000de40)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f000000df40)={'ip_vti0\x00', &(0x7f000000de80)={'syztnl0\x00', r3, 0x8, 0x8000, 0xfffffff9, 0x3b, {{0x24, 0x4, 0x1, 0x1b, 0x90, 0x64, 0x0, 0x1, 0x2f, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0xbf, [@private=0xa010102]}, @noop, @lsrr={0x83, 0x7, 0x7d, [@local]}, @timestamp_addr={0x44, 0x4c, 0x5e, 0x1, 0xd, [{@multicast1, 0x5}, {@remote}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@local, 0xbe63}, {@remote, 0x6}, {@multicast1, 0x1}, {@private=0xa010101, 0x9}]}, @ssrr={0x89, 0x13, 0x13, [@dev={0xac, 0x14, 0x14, 0xb}, @local, @private=0xa010101, @private=0xa010101]}, @generic={0x86, 0xc, "b4c601b566b63b5b2463"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f000000df40)={'ip_vti0\x00', &(0x7f000000de80)={'syztnl0\x00', r3, 0x8, 0x8000, 0xfffffff9, 0x3b, {{0x24, 0x4, 0x1, 0x1b, 0x90, 0x64, 0x0, 0x1, 0x2f, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0xbf, [@private=0xa010102]}, @noop, @lsrr={0x83, 0x7, 0x7d, [@local]}, @timestamp_addr={0x44, 0x4c, 0x5e, 0x1, 0xd, [{@multicast1, 0x5}, {@remote}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@local, 0xbe63}, {@remote, 0x6}, {@multicast1, 0x1}, {@private=0xa010101, 0x9}]}, @ssrr={0x89, 0x13, 0x13, [@dev={0xac, 0x14, 0x14, 0xb}, @local, @private=0xa010101, @private=0xa010101]}, @generic={0x86, 0xc, "b4c601b566b63b5b2463"}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f000000e640)={&(0x7f000000dd00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000e600)={&(0x7f000000dfc0)={0x60c, r13, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba1b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\x8c!*\x0f!]^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@]\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '-})#\xb2#)--]^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0xba, 0x5, "c8bd31de0ac85303005a6e8f3c50d3476fef5b28528eaf9589954160aa480b5f924e067cdffc5f1ee0c166fce06d541f9f97c4f7cea3369605d34effeba52833c6ea2dd3280252d1d2bfc2846cc399c04d46a820834dae456d61d816e4788bd70cd43371a01c14d3abe8c056bc442ddb16f8f99a6d5d57b4be260c9b4e189561050ba852ce69c1ebd85f91c67d4ed9903171dd46ab366e3062f4dd4cc96e895c7eee052c7c6fd62a7c3d482e7299a383c8bb6fdef83b"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "6098486fb0a8f92da2213fd0e58ab481e3764d692b16647608cdf0c1433f598442e3f5966cc132a72ffedcc036464c4163d1db09cce01a7a8c31c76ce67354cb3ff8f410932f78b262ba251b11795a910c92511e6106ae167b1bf2c6da2de6605f7a5095a382c6b877d89eabc98cc2c4bbdf2a8a3ff727f267a96651e0942620b45700ea7d4e5873e6856c63022d432389905dcf46f0c8fd0ae0abef8a018f8a6ebaa8b4bf0f0c0453fdab3c51fd0abf00a654b22997dab42ed58418640aa321bc2d37"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe2cb}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x90, 0x5, "c2b3231ff603ce006706a13aa16f08bea95b176c118cc94a4c28f0520a08971131734fd07b32520a1121d447d9234a39fd12b0cf7f71d7fd2163e6a63722c238f0b52fc96485cdfd172f2fd1e903ff800b5898fc6e5e59064284a6a47c3540046228c8704c3b440ed9631612ce19c5afbdf7e18d0bafc35f78ad7cc18a101cf151a5e918c2355d1cdae47119"}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "3c73a5f061c66dc8e33743abdf6eefc677de6d60c039217c4ef615f808299d16cdceac08f1aec87cfda96276e3e17416a4cb3a72128a0fa267bbfe15fdb793bcf11a08f69dd34ac829eb3baca15c73b3369737c7aca1bddc0ad2d4b9cc9a2e4e4d938a4062b44cfa0ff66d14b3ccfb9558934baf183e8923438b08b806663ab18340188f39491e6aeada1fe4f44dd1a20648dce407fecddb"}, @ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "8cd52573ca2ff953c077d810a3fe86992a558360a31ea6b3382b4f4f6ae5eb711da76dc8ae21957f19b4fd4df51c44bb1fdd03a6eaaed911596728eb3293e0a6a3d3e2dc3456f2d2884fa2f7d62eb10e1e6ea0dabaadd102"}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/+.-:{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '/selinux/checkreqprot\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}]}]}]}, 0x60c}}, 0xc045) 2.731571983s ago: executing program 0 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pnp/drivers/tpm_tis/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='00:00', 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x22, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xfffffffffdffffff, 0x4, 0x7f}, {0x0, 0xffffffffffffffff, 0x3}, {0xf6, 0x4, 0xa}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x16, 0x4000003}]}, 0x144}}, 0x804) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [0x0, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x8d, 0x0, 0x20}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xcd, 0x5, 0x2, 0x1}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb00557dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa, 0x0, {0x400000000000000}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000340)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newchain={0x78, 0x64, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x6cd4cdad53eadaca, 0xfff2}, {0x2, 0x3}, {0xc, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}]}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e20}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x20000000, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'gretap0\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(0xffffffffffffffff, 0xc0106446, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mount(&(0x7f0000000780)=@nullb, &(0x7f00000007c0)='./sys/bus/pnp/drivers/tpm_tis/bind\x00', &(0x7f0000000800)='anon_inodefs\x00', 0x119013, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) 1.01075363s ago: executing program 0 (id=398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0xffd, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) 1.010517527s ago: executing program 3 (id=399): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffbfe, 0x8, 0x5, 0x9, 0x6a3f7d58, 0x9, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffffc5e8ae7a, 0xfffffbfffffffffc, 0x6, 0x5, 0xfffffffffffffffd, 0xfffffffffffffe]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ecryptfs\x00', 0x2000, &(0x7f0000000300)='!/\x00') sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf253800000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X\x00'], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x400}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x80200, 0x80, 0x8}, 0x18) symlinkat(&(0x7f0000000340)='./file0\x00', r4, &(0x7f0000000400)='./file0\x00') gettid() 941.294901ms ago: executing program 3 (id=400): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r2, 0x8b32, &(0x7f0000000040)) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'pimreg1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xaf5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000012c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xba}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1) 940.848516ms ago: executing program 0 (id=401): open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001140)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x3, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0x8, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x6eb9, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x6, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x0, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x239d, 0x1, 0x100, 0x2, 0x633b, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x1, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x64b07000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x7ff, 0x4, 0x84, 0x0, 0x1, 0xfffffffffffffffc, 0x8003, 0x4, 0x8, 0x0, 0xfffffffffffffffc, 0x4, 0x4, 0x6, 0x8259, 0x200000000000002], 0x8000000, 0x4ff50}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) splice(r10, 0x0, r9, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r9, &(0x7f0000000100)=ANY=[], 0xe) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 830.293155ms ago: executing program 3 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000b, 0x32, r11, 0x91c6e000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r12 = getpgrp(0x0) sched_setaffinity(r12, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r13 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r13, 0xc1105517, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x4, 0x0, 0x4a, 0x9, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r13, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x9, 0x0, 0x200000400000, 0x5, 0x1, 0x40000000000, 0x2000007ff, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xbdfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xafb5, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 829.978014ms ago: executing program 4 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={'trans=virtio,', {[{@version_u}, {@mmap}, {@cachetag={'cachetag', 0x3d, '\\$Z]\\'}}, {@cache_fscache}, {@cache_mmap}]}}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) 720.403915ms ago: executing program 4 (id=404): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000005c0)={0x2, 0x0, 0xb, 0x19, 0xe6, 0x0}) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000005c0)={0x2, 0x0, 0xb, 0x19, 0xe6, 0x0}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0x0, 0x5, 0x2, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x34}, 0x60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0x1, 0x6, 0x2, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0x1, 0x6, 0x2, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000700)='\x00'/27, 0xfdef) close(r3) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r6, 0x100000000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'pimreg\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000005ef0c6058c9a020008000300", @ANYRES32=r7, @ANYBLOB='\b'], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000005ef0c6058c9a020008000300", @ANYRES32=r7, @ANYBLOB='\b'], 0x24}}, 0x0) gettid() r8 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000280)={0x9, {0x4, 0x10001, 0x5, 0x5}, {0xc06, 0x2, 0x7, 0x8000}, {0x9, 0x3}}) (async) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000280)={0x9, {0x4, 0x10001, 0x5, 0x5}, {0xc06, 0x2, 0x7, 0x8000}, {0x9, 0x3}}) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000240)=0x401) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0x3e, 0x48, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0xb, [{@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@broadcast, 0x5}]}, @generic={0x7, 0x3, "c0"}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0xffffffffffffffff, {0x1, 0x0, 0x4}, 0xfe}, 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0xffffffffffffffff, {0x1, 0x0, 0x4}, 0xfe}, 0x18) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000184100000200000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 570.896403ms ago: executing program 3 (id=405): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e", 0x3}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x8dff, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) 508.6108ms ago: executing program 3 (id=406): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, r2}) 441.258493ms ago: executing program 3 (id=407): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0x15a, 0x96}, "de284a7cb685b2a667f24db8d554f4c9e76242736f974ab1e9382cdd9de1a1ea2cae769a7431c988e5636eb6706d855e48c4638c2451f2b4c12fc1976765056965bda3908baa09ed6191f045ab0c9f5599b2633594acbda5f77da129d1bf65dddd7a0b5e85f5495a84dfca7e899e22d98e5b6250b6d416ec9534a95744090bfd2e500d9bb4d7ad5063f740b91f91e9a4e33f8b1de9a2"}, 0x9a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000002b80)={0x14, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) syz_emit_vhci(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x2, 0x33565348, 0x0, 0x0, 0x0, 0x3, 0xfeedcafc, 0x3, 0x2, 0x2, 0x4}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000a40)={0x14, &(0x7f0000000840)={0x40, 0x5, 0x2, {0x2, 0x21}}, &(0x7f0000000940)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "1459179b333abebac4184d08881f6323968489b777ac933d732f4a533065e01b087f6c0dfeb73ff5ab199eb68442a0ac986193ba4e7779c837f8306de26b14fa42baf33c9ed0d97a83da6ad04be534ba78b21403c3b8156638634f28ab9bd5634c6e568c44dc76f53d648a763c8c152ea211ef487f9dbd5663f994e997edf8b48c6ce22ee9b93f0d5e908b533bd8bc54b9faf6d2c44d4ca652edb0a1872cc076f37509a9be02e4b13dffc8b58e9705f7d88458c33305d1fc8c1161a98ae807847b67397aa3bef9b7299119084a20d2295a82"}}}, &(0x7f0000000d00)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="20097e0000006b262a0ddcf894a514c10fa97ecc911f0400008ec78a9bf359322de117a8120a40d0fa850ed6c841c6d9bd02f68860596b799697cbb28785e9cd31ce1ced7fca7e4dda1b02bb0ce4cb3c101e9ef5ad3368995fab814a79a8d6621e95843424ceb9004e0a42e20658deead4ca71c465abdf7d87050c33a4dcc5a3c7ffb572e48222a5bec76562bbef13216c4d9e558a4c0b7dafb465ee85d7c1d5e67471d43dcf4dbd44d70900000000000000a340474b1150529f5bb3a9ea91737fc6b17864d400"/211], &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000000c40)={0xc0, 0xa1, 0x4, 0xffff}, 0x0, &(0x7f0000000cc0)={0xc0, 0xa2, 0x2f, "8719922636837ae03625dcb9d21cb0b87e3038e39f192daf0d40cd0985fe35d742a96f9a8d5ed5024c33463346afb7"}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setpriority(0x1, 0x0, 0x6) 441.10785ms ago: executing program 4 (id=408): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e20, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 339.939094ms ago: executing program 4 (id=409): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 10) 81.618585ms ago: executing program 4 (id=410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000072c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0c00990001", @ANYRES32=0x0, @ANYBLOB="01002d080000000000000200000008000300", @ANYRESOCT, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRES16=r0, @ANYRESDEC], 0x28}}, 0x8000040) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_names\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x6000000d}) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x1) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='gadgetfs\x00', 0x10005, 0x0) socket$key(0xf, 0x3, 0x2) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r7, &(0x7f00000000c0)=""/70, 0x46, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x2, "0dc2"}, &(0x7f0000000280)=0xa) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000940)={0x4, 0xfffffffe, 0x10, 0x6, 0x11f, &(0x7f0000000440)="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"}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000080)=0x7, 0x4) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x1, &(0x7f00000002c0)=0x80000000, 0x4) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 225.924µs ago: executing program 0 (id=411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {{@in=@remote, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x97, 0x2, 0x0, 0xa0, 0x16}, {@in=@remote, 0x4d6, 0xff}, @in6=@loopback, {0x4, 0x9, 0x0, 0x1, 0x4d7, 0x7ff, 0x2, 0x10001}, {0x7f, 0x4, 0x10001, 0x1}, {0xffff, 0x9, 0xf}, 0x70bd2b, 0x3504, 0x2, 0x4, 0x10}}, 0xf0}}, 0x4040) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r10, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000280)=0xfffffffc) ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000240)=0xffff) ioctl$SYNC_IOC_FILE_INFO(r11, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x34, &(0x7f0000000040), 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x28) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r13) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20004845}, 0x0) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x109, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 0s ago: executing program 4 (id=412): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x46000) write$tun(r0, &(0x7f0000000600)=ANY=[], 0x42) (fail_nth: 4) kernel console output (not intermixed with test programs): 430285][ T6376] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.430307][ T6376] __x64_sys_ioctl+0x18e/0x210 [ 73.430337][ T6376] do_syscall_64+0x115/0x870 [ 73.430361][ T6376] ? clear_bhb_loop+0x70/0xc0 [ 73.430384][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.430403][ T6376] RIP: 0033:0x7f4053d9e0d9 [ 73.430418][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.430433][ T6376] RSP: 002b:00007f4054c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.430444][ T6376] RAX: ffffffffffffffda RBX: 00007f4054025fa0 RCX: 00007f4053d9e0d9 [ 73.430451][ T6376] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.430457][ T6376] RBP: 00007f4054c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 73.430464][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.430470][ T6376] R13: 00007f4054026038 R14: 00007f4054025fa0 R15: 00007ffd2c7cd0f8 [ 73.430483][ T6376] [ 73.430488][ T6376] Mem-Info: [ 73.451298][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 73.557416][ T6376] active_anon:21047 inactive_anon:0 isolated_anon:0 [ 73.557416][ T6376] active_file:0 inactive_file:62219 isolated_file:0 [ 73.557416][ T6376] unevictable:1000 dirty:1867 writeback:0 [ 73.557416][ T6376] slab_reclaimable:11821 slab_unreclaimable:75189 [ 73.557416][ T6376] mapped:27994 shmem:11810 pagetables:1204 [ 73.557416][ T6376] sec_pagetables:292 bounce:0 [ 73.557416][ T6376] kernel_misc_reclaimable:0 [ 73.557416][ T6376] free:430248 free_pcp:13498 free_cma:0 [ 73.561267][ T5814] usb 7-1: device descriptor read/64, error -71 [ 73.572510][ T6376] Node 0 active_anon:84188kB inactive_anon:0kB active_file:0kB inactive_file:248668kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:111976kB dirty:7464kB writeback:0kB shmem:45240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13568kB pagetables:4612kB sec_pagetables:1168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 73.586774][ T6376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 73.597684][ T6376] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.607661][ T6376] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 73.609668][ T6376] Node 0 DMA32 free:65172kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84188kB inactive_anon:0kB active_file:0kB inactive_file:248668kB unevictable:2000kB writepending:7464kB zspages:0kB present:2080628kB managed:1254792kB mlocked:0kB bounce:0kB free_pcp:52896kB local_pcp:11548kB free_cma:0kB [ 73.621383][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 73.621783][ T6376] lowmem_reserve[]: 0 0 0 0 0 [ 73.625171][ T9] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 73.626011][ T6376] Node 1 Normal free:1640460kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:1088kB local_pcp:208kB free_cma:0kB [ 73.631372][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.643027][ T6376] lowmem_reserve[]: 0 0 0 0 0 [ 73.643072][ T6376] Node 0 DMA: 0*4kB [ 73.647612][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.647640][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 73.647687][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.649917][ T6376] 0*8kB [ 73.657552][ T9] usb 8-1: config 0 descriptor?? [ 73.661391][ T6376] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 73.672709][ T6376] Node 0 DMA32: 117*4kB (UME) 180*8kB (UME) 124*16kB (UME) 106*32kB (UME) 31*64kB (UM) 8*128kB (UM) 10*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 4*2048kB (UME) 9*4096kB (M) = 65076kB [ 73.680310][ T6376] Node 1 Normal: 5*4kB (UM) 3*8kB (U) 14*16kB (UM) 6*32kB (UM) 3*64kB (UM) 3*128kB (M) 2*256kB (U) 5*512kB (UM) 0*1024kB 1*2048kB (M) 399*4096kB (M) = 1640460kB [ 73.687161][ T6376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.691392][ T6376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.698149][ T6376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.702289][ T6376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.706139][ T6376] 74026 total pagecache pages [ 73.708179][ T6376] 0 pages in swap cache [ 73.709980][ T6376] Free swap = 124996kB [ 73.711829][ T6376] Total swap = 124996kB [ 73.713610][ T6376] 1048443 pages RAM [ 73.715268][ T6376] 0 pages HighMem/MovableOnly [ 73.717296][ T6376] 285434 pages reserved [ 73.719049][ T6376] 0 pages cma reserved [ 73.812376][ T5814] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.825508][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 73.829252][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 73.888977][ T6381] FAULT_INJECTION: forcing a failure. [ 73.888977][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 73.893998][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 73.894015][ T6381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.894023][ T6381] Call Trace: [ 73.894027][ T6381] [ 73.894032][ T6381] dump_stack_lvl+0x100/0x190 [ 73.894052][ T6381] should_fail_ex.cold+0x5/0xa [ 73.894081][ T6381] should_failslab+0xc2/0x120 [ 73.894099][ T6381] kmem_cache_alloc_noprof+0x91/0x6a0 [ 73.894114][ T6381] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 73.894132][ T6381] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 73.894150][ T6381] mmu_topup_memory_caches+0x25/0x170 [ 73.894170][ T6381] kvm_mmu_load+0xe2/0x2570 [ 73.894186][ T6381] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 73.894199][ T6381] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 73.894213][ T6381] ? __pfx_kvm_mmu_load+0x10/0x10 [ 73.894228][ T6381] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 73.894242][ T6381] ? kvm_check_and_inject_events+0x873/0x12a0 [ 73.894259][ T6381] ? record_steal_time+0x440/0xbb0 [ 73.894273][ T6381] vcpu_run+0x3aaa/0x5de0 [ 73.894295][ T6381] ? __pfx_vcpu_run+0x10/0x10 [ 73.894316][ T6381] ? rcu_is_watching+0x12/0xc0 [ 73.894337][ T6381] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 73.894354][ T6381] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 73.894374][ T6381] kvm_vcpu_ioctl+0x730/0x1700 [ 73.894388][ T6381] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.894402][ T6381] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.894417][ T6381] ? do_vfs_ioctl+0x226/0x13e0 [ 73.894435][ T6381] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.894451][ T6381] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.894477][ T6381] ? selinux_file_ioctl+0x13b/0x290 [ 73.894492][ T6381] ? selinux_file_ioctl+0xb6/0x290 [ 73.894508][ T6381] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.894520][ T6381] __x64_sys_ioctl+0x18e/0x210 [ 73.894538][ T6381] do_syscall_64+0x115/0x870 [ 73.894554][ T6381] ? clear_bhb_loop+0x70/0xc0 [ 73.894568][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.894579][ T6381] RIP: 0033:0x7f4053d9e0d9 [ 73.894588][ T6381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.894599][ T6381] RSP: 002b:00007f4054c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.894611][ T6381] RAX: ffffffffffffffda RBX: 00007f4054025fa0 RCX: 00007f4053d9e0d9 [ 73.894618][ T6381] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.894624][ T6381] RBP: 00007f4054c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 73.894630][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.894641][ T6381] R13: 00007f4054026038 R14: 00007f4054025fa0 R15: 00007ffd2c7cd0f8 [ 73.894654][ T6381] [ 73.952397][ T5814] usb 7-1: device descriptor read/64, error -71 [ 73.970360][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 73.970372][ T42] audit: type=1400 audit(1787070879.702:427): avc: denied { getopt } for pid=6344 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.084168][ T5814] usb usb7-port1: attempt power cycle [ 74.161112][ T42] audit: type=1400 audit(1787070879.892:428): avc: denied { create } for pid=6384 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.168101][ T42] audit: type=1400 audit(1787070879.902:429): avc: denied { write } for pid=6384 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.287529][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 74.289607][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 74.293972][ T9] usb 8-1: USB disconnect, device number 9 [ 74.431315][ T5814] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.455637][ T5814] usb 7-1: device descriptor read/8, error -71 [ 74.505481][ T6393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6393 comm=syz.1.162 [ 74.509675][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 74.522457][ T6393] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.162'. [ 74.558069][ T6395] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 74.592265][ T42] audit: type=1400 audit(1787070880.322:430): avc: denied { mount } for pid=6394 comm="syz.1.163" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.615676][ T42] audit: type=1400 audit(1787070880.352:431): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.669391][ T6399] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 74.673944][ T6399] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 74.679131][ T6399] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 74.691393][ T5814] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.711709][ T5814] usb 7-1: device descriptor read/8, error -71 [ 74.735329][ T42] audit: type=1400 audit(1787070880.472:432): avc: denied { setopt } for pid=6400 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.745501][ T42] audit: type=1400 audit(1787070880.482:433): avc: denied { unlink } for pid=6400 comm="syz.1.166" name="#1" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.823717][ T5814] usb usb7-port1: unable to enumerate USB device [ 74.996886][ T5814] usb 5-1: USB disconnect, device number 4 [ 75.006423][ T5814] idmouse 5-1:1.0: disconnected [ 75.022911][ T42] audit: type=1400 audit(1787070880.762:434): avc: denied { connect } for pid=6409 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.033779][ T42] audit: type=1400 audit(1787070880.772:435): avc: denied { accept } for pid=6412 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.060871][ T42] audit: type=1400 audit(1787070880.792:436): avc: denied { block_suspend } for pid=6416 comm="syz.3.173" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.215362][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 75.218626][ T6423] netlink: 1371 bytes leftover after parsing attributes in process `syz.0.174'. [ 75.345962][ T6438] null_blk: nullb1: using native zone append [ 75.388668][ T6438] null_blk: disk nullb1 created [ 75.419813][ T6438] null_blk: disk nullb2 created [ 75.475145][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.178'. [ 75.768890][ T6452] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 75.771598][ T6452] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 75.775651][ T6452] PKCS7: Unsupported data type 106 [ 75.779637][ T6452] netlink: 64 bytes leftover after parsing attributes in process `syz.0.180'. [ 76.027259][ T6461] binder: 6460:6461 ioctl c0306201 200000000080 returned -14 [ 76.031621][ T6461] binder: 6460:6461 ioctl c0306201 2000000003c0 returned -14 [ 76.165891][ T6472] FAULT_INJECTION: forcing a failure. [ 76.165891][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 76.171837][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT(full) [ 76.171853][ T6472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.171860][ T6472] Call Trace: [ 76.171871][ T6472] [ 76.171876][ T6472] dump_stack_lvl+0x100/0x190 [ 76.171908][ T6472] should_fail_ex.cold+0x5/0xa [ 76.171955][ T6472] should_failslab+0xc2/0x120 [ 76.171980][ T6472] __kmalloc_cache_noprof+0x91/0x6c0 [ 76.171998][ T6472] ? sctp_add_bind_addr+0xae/0x3e0 [ 76.172027][ T6472] sctp_add_bind_addr+0xae/0x3e0 [ 76.172044][ T6472] sctp_copy_local_addr_list+0x349/0x550 [ 76.172057][ T6472] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 76.172069][ T6472] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 76.172082][ T6472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.172103][ T6472] sctp_bind_addr_copy+0xe0/0x530 [ 76.172122][ T6472] sctp_connect_new_asoc+0x1c9/0x770 [ 76.172137][ T6472] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 76.172153][ T6472] ? selinux_sctp_bind_connect+0xe0/0x230 [ 76.172178][ T6472] sctp_sendmsg+0x1743/0x22e0 [ 76.172195][ T6472] ? __pfx_sctp_sendmsg+0x10/0x10 [ 76.172207][ T6472] ? sock_has_perm+0x25a/0x2f0 [ 76.172220][ T6472] ? __pfx_sock_has_perm+0x10/0x10 [ 76.172241][ T6472] ? __pfx_sctp_sendmsg+0x10/0x10 [ 76.172255][ T6472] inet_sendmsg+0x11c/0x140 [ 76.172273][ T6472] ____sys_sendmsg+0x9c9/0xbe0 [ 76.172297][ T6472] ? __pfx_inet_sendmsg+0x10/0x10 [ 76.172310][ T6472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.172329][ T6472] ___sys_sendmsg+0x190/0x1e0 [ 76.172344][ T6472] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.172357][ T6472] ? __lock_acquire+0x49f/0x1a40 [ 76.172377][ T6472] ? get_pid_task+0x106/0x250 [ 76.172408][ T6472] __sys_sendmsg+0x160/0x210 [ 76.172425][ T6472] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.172453][ T6472] do_syscall_64+0x115/0x870 [ 76.172483][ T6472] ? clear_bhb_loop+0x70/0xc0 [ 76.172497][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.172507][ T6472] RIP: 0033:0x7f2e4379e0d9 [ 76.172517][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.172528][ T6472] RSP: 002b:00007f2e44651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.172546][ T6472] RAX: ffffffffffffffda RBX: 00007f2e43a25fa0 RCX: 00007f2e4379e0d9 [ 76.172553][ T6472] RDX: 000000000000c050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 76.172560][ T6472] RBP: 00007f2e44651090 R08: 0000000000000000 R09: 0000000000000000 [ 76.172566][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.172572][ T6472] R13: 00007f2e43a26038 R14: 00007f2e43a25fa0 R15: 00007fff0bd4adb8 [ 76.172586][ T6472] [ 76.377835][ T6482] fuse: Bad value for 'rootmode' [ 76.477845][ T6488] fuse: Unknown parameter 'rot ||ñ׬000000100000' [ 76.537196][ T6490] Cannot find set identified by id 0 to match [ 76.553437][ T6490] input: syz1 as /devices/virtual/input/input10 [ 76.561306][ T5814] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 76.711491][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 76.713643][ T5814] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 76.717338][ T5814] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 76.720720][ T5814] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 76.724582][ T5814] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.728831][ T5814] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 76.740870][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.743842][ T5814] usb 8-1: Product: syz [ 76.745176][ T5814] usb 8-1: Manufacturer: syz [ 76.747776][ T5814] usb 8-1: SerialNumber: syz [ 76.758814][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 76.764105][ T5814] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input11 [ 76.841321][ T848] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.972605][ T5814] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 76.976221][ T5814] (id 0x00) [ 77.001355][ T848] usb 5-1: Using ep0 maxpacket: 8 [ 77.006069][ T848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.011026][ T848] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 77.014753][ T848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.018777][ T848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.023175][ T848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.027293][ T848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.032874][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.033493][ T5814] rc_core: IR keymap rc-imon-pad not found [ 77.039815][ T5814] Registered IR keymap rc-empty [ 77.042812][ T5814] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 77.049487][ T5814] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 77.223284][ T5814] imon:send_packet: packet tx failed (-71) [ 77.243671][ T5814] imon 8-1:155.0: remote input dev register failed [ 77.247425][ T5814] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 77.250629][ T848] usb 5-1: usb_control_msg returned -32 [ 77.255788][ T848] usbtmc 5-1:16.0: can't read capabilities [ 77.281988][ T908] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 77.288976][ T5814] imon 8-1:155.0: unable to initialize intf0, err 0 [ 77.289936][ T6501] capability: warning: `syz.3.199' uses 32-bit capabilities (legacy support in use) [ 77.292706][ T5814] imon:imon_probe: failed to initialize context! [ 77.297711][ T5814] imon 8-1:155.0: unable to register, err -19 [ 77.305893][ T5814] usb 8-1: USB disconnect, device number 10 [ 77.461256][ T908] usb 7-1: Using ep0 maxpacket: 8 [ 77.465784][ T908] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 77.471869][ T908] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 77.476017][ T908] usb 7-1: config 179 has no interface number 0 [ 77.477994][ T908] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 77.481906][ T908] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 77.485573][ T908] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.489085][ T908] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 77.493129][ T908] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.499562][ T908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.510496][ T6498] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 77.743857][ T1041] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input13 [ 77.881361][ T908] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 77.922323][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 77.922327][ T5881] usb 7-1: USB disconnect, device number 8 [ 77.958721][ T6515] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 78.042129][ T908] usb 8-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00 [ 78.051804][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.053371][ T908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.063068][ T908] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.068179][ T908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.073590][ T908] usb 8-1: config 0 descriptor?? [ 78.165279][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.268048][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.379947][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.432182][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.439052][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.444432][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.448801][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.457835][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.557091][ T6524] Sensor A: ================= START STATUS ================= [ 78.561634][ T6524] Sensor A: Test Pattern: 75% Colorbar [ 78.564580][ T6524] Sensor A: Show Information: All [ 78.567221][ T6524] Sensor A: Vertical Flip: false [ 78.568866][ T6524] Sensor A: Horizontal Flip: false [ 78.571843][ T6524] Sensor A: Brightness: 128 [ 78.572277][ T13] bridge_slave_1: left allmulticast mode [ 78.578395][ T6524] [ 78.579365][ T6524] Sensor A: Contrast: 128 [ 78.579524][ T13] bridge_slave_1: left promiscuous mode [ 78.584510][ T6524] Sensor A: Hue: 0 [ 78.584548][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.586717][ T6524] Sensor A: Saturation: 128 [ 78.590931][ T6524] Sensor A: Pixel Rate: 160000000 [ 78.593617][ T6524] Sensor A: Horizontal Blanking: 800 [ 78.598501][ T6524] Sensor A: Vertical Blanking: 3223 [ 78.602271][ T6524] Sensor A: ================== END STATUS ================== [ 78.606816][ T13] bridge_slave_0: left allmulticast mode [ 78.609183][ T13] bridge_slave_0: left promiscuous mode [ 78.613029][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.695187][ T6514] ubi: mtd0 is already attached to ubi0 [ 78.698986][ T908] usbhid 8-1:0.0: can't add hid device: -71 [ 78.700888][ T908] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 78.709726][ T908] usb 8-1: USB disconnect, device number 11 [ 78.798143][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.805810][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.813217][ T13] bond0 (unregistering): Released all slaves [ 78.821749][ T6533] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 78.828278][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 78.996034][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 79.087809][ T42] kauditd_printk_skb: 239 callbacks suppressed [ 79.087823][ T42] audit: type=1400 audit(1787070884.822:676): avc: denied { write } for pid=6552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.111266][ T5491] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 79.150905][ T42] audit: type=1400 audit(1787070884.882:677): avc: denied { write } for pid=6556 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.181128][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.184723][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.187119][ T6517] bridge_slave_0: entered allmulticast mode [ 79.189999][ T6517] bridge_slave_0: entered promiscuous mode [ 79.194446][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.198440][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.200930][ T6517] bridge_slave_1: entered allmulticast mode [ 79.203808][ T6517] bridge_slave_1: entered promiscuous mode [ 79.208650][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 79.234342][ T13] hsr_slave_0: left promiscuous mode [ 79.237194][ T13] hsr_slave_1: left promiscuous mode [ 79.239400][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.242740][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.251002][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.255649][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.261705][ T5491] usb 7-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00 [ 79.265831][ T5491] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.269529][ T5491] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.276802][ T13] veth1_macvtap: left promiscuous mode [ 79.277214][ T5491] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.279266][ T13] veth0_macvtap: left promiscuous mode [ 79.284283][ T13] veth1_vlan: left promiscuous mode [ 79.285764][ T5491] usb 7-1: config 0 descriptor?? [ 79.286038][ T13] veth0_vlan: left promiscuous mode [ 79.468849][ T13] team0 (unregistering): Port device team_slave_1 removed [ 79.495652][ T13] team0 (unregistering): Port device team_slave_0 removed [ 79.560253][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.568488][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.585650][ T6517] team0: Port device team_slave_0 added [ 79.588950][ T6517] team0: Port device team_slave_1 added [ 79.604221][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.606561][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.615484][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.619834][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.622159][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.626032][ T34] usb 5-1: USB disconnect, device number 5 [ 79.629933][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.678126][ T42] audit: type=1400 audit(1787070885.412:678): avc: denied { write } for pid=6569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.705912][ T6517] hsr_slave_0: entered promiscuous mode [ 79.715508][ T6517] hsr_slave_1: entered promiscuous mode [ 79.755467][ T42] audit: type=1400 audit(1787070885.492:679): avc: denied { write } for pid=6574 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.825714][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.870579][ T6517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.875362][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.879759][ T6517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.886495][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.891380][ T6517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.897166][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.901771][ T6517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.906663][ T42] audit: type=1400 audit(1787070885.642:680): avc: denied { write } for pid=6538 comm="syz.2.209" name="nullb" dev="configfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.908466][ T6540] ubi: mtd0 is already attached to ubi0 [ 79.913737][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.934786][ T5491] usbhid 7-1:0.0: can't add hid device: -71 [ 79.937250][ T5491] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 79.940292][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.944433][ T6517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.947748][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.948609][ T5491] usb 7-1: USB disconnect, device number 9 [ 79.950079][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.959003][ T13] IPVS: stop unused estimator thread 0... [ 79.965917][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.972890][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.019074][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.032258][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.035562][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.043996][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.046536][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.055442][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.058040][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.203068][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 80.206272][ T34] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.211225][ T34] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 80.213923][ T34] usb 5-1: config 179 has no interface number 0 [ 80.216178][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 80.220678][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 80.230606][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.239269][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 80.244348][ T34] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 80.249758][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.256079][ T6572] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 80.320575][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.475110][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input14 [ 80.480051][ T6517] veth0_vlan: entered promiscuous mode [ 80.488452][ T6517] veth1_vlan: entered promiscuous mode [ 80.515064][ T6517] veth0_macvtap: entered promiscuous mode [ 80.521294][ T5090] Bluetooth: hci2: command tx timeout [ 80.522365][ T6517] veth1_macvtap: entered promiscuous mode [ 80.531663][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 80.535491][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.546434][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.572934][ T5779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.608515][ T5779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.611613][ T5779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.643025][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.646006][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.669522][ T5844] usb 5-1: USB disconnect, device number 6 [ 80.669569][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 80.675140][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.679274][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.683183][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.684120][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 80.695337][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 80.703773][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.708714][ T42] audit: type=1400 audit(1787070886.442:681): avc: denied { bind } for pid=6620 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.715980][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.717486][ T42] audit: type=1400 audit(1787070886.452:682): avc: denied { mounton } for pid=6517 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.717547][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.717568][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.723538][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.739423][ T9] usb 8-1: Product: syz [ 80.742334][ T9] usb 8-1: Manufacturer: syz [ 80.743847][ T9] usb 8-1: SerialNumber: syz [ 80.746951][ T9] usb 8-1: config 0 descriptor?? [ 80.757749][ T6623] PKCS7: Unsupported SignedData version [ 80.904662][ T42] audit: type=1400 audit(1787070886.642:683): avc: denied { sqpoll } for pid=6632 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.956463][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 80.958967][ T9] imon 8-1:0.0: unable to initialize intf0, err -90 [ 80.961021][ T9] imon:imon_probe: failed to initialize context! [ 80.963223][ T9] imon 8-1:0.0: unable to register, err -19 [ 80.969012][ T9] usb 8-1: USB disconnect, device number 12 [ 81.391288][ T34] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 81.541844][ T34] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 81.545532][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 81.549046][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.552413][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.556130][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.558778][ T34] usb 8-1: Product: syz [ 81.560119][ T34] usb 8-1: Manufacturer: syz [ 81.561803][ T34] usb 8-1: SerialNumber: syz [ 81.566353][ T34] usb 8-1: config 0 descriptor?? [ 81.681987][ T42] audit: type=1400 audit(1787070887.422:684): avc: denied { append } for pid=6640 comm="syz.2.228" name="uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 81.731024][ T57] cfg80211: failed to load regulatory.db [ 81.734308][ T42] audit: type=1400 audit(1787070887.472:685): avc: denied { append } for pid=6642 comm="syz.2.229" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.734805][ T6643] binder: 6642:6643 ioctl 80404508 200000000000 returned -22 [ 81.752090][ T6643] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 81.773412][ T34] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 81.778063][ T34] imon 8-1:0.0: unable to initialize intf0, err -90 [ 81.785645][ T34] imon:imon_probe: failed to initialize context! [ 81.787671][ T34] imon 8-1:0.0: unable to register, err -19 [ 82.111644][ T5827] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 82.262464][ T5827] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 82.266135][ T5827] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 82.269098][ T5827] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 82.274154][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.276629][ T5827] usb 7-1: Product: syz [ 82.277872][ T5827] usb 7-1: Manufacturer: syz [ 82.279315][ T5827] usb 7-1: SerialNumber: syz [ 82.283650][ T6649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.286959][ T6649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.291401][ T5827] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 82.294742][ T5827] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 82.297665][ T5827] usbserial_generic 7-1:1.0: generic converter detected [ 82.308858][ T5827] usb 7-1: generic converter now attached to ttyUSB0 [ 82.331296][ T57] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 82.471401][ T5807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.471794][ T57] usb 5-1: device descriptor read/64, error -71 [ 82.498527][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 82.501654][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 82.504939][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 82.514285][ T5827] usb 7-1: USB disconnect, device number 10 [ 82.522866][ T5827] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 82.526280][ T5827] usbserial_generic 7-1:1.0: device disconnected [ 82.626589][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.632832][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.637565][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.643589][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.646846][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.721255][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.871334][ T57] usb 5-1: device descriptor read/64, error -71 [ 82.992992][ T57] usb usb5-port1: attempt power cycle [ 83.085247][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.087581][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.089942][ T6654] bridge_slave_0: entered allmulticast mode [ 83.093087][ T6654] bridge_slave_0: entered promiscuous mode [ 83.096509][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.098867][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.101377][ T6654] bridge_slave_1: entered allmulticast mode [ 83.105239][ T6654] bridge_slave_1: entered promiscuous mode [ 83.129658][ T6654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.135392][ T6654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.154337][ T6654] team0: Port device team_slave_0 added [ 83.158801][ T6654] team0: Port device team_slave_1 added [ 83.177626][ T6654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.179895][ T6654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.188223][ T6654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.192917][ T6654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.195157][ T6654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.203334][ T6654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.228340][ T6654] hsr_slave_0: entered promiscuous mode [ 83.230710][ T6654] hsr_slave_1: entered promiscuous mode [ 83.233239][ T6654] debugfs: 'hsr0' already exists in 'hsr' [ 83.235059][ T6654] Cannot create hsr debugfs directory [ 83.291301][ T5491] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 83.331274][ T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.352083][ T57] usb 5-1: device descriptor read/8, error -71 [ 83.461422][ T5491] usb 7-1: Using ep0 maxpacket: 8 [ 83.463479][ T5491] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.466977][ T5491] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.469511][ T5491] usb 7-1: config 179 has no interface number 0 [ 83.471500][ T5491] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 83.474755][ T5491] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 83.477860][ T5491] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.480858][ T5491] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 83.484006][ T5491] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.488299][ T5491] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.493207][ T6672] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 83.611301][ T57] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.642205][ T57] usb 5-1: device descriptor read/8, error -71 [ 83.700929][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 83.703400][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 83.706098][ T5491] usb 7-1: USB disconnect, device number 11 [ 83.751609][ T57] usb usb5-port1: unable to enumerate USB device [ 83.897880][ T5807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.965277][ T5807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.032947][ T5807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.060869][ T908] usb 8-1: USB disconnect, device number 13 [ 84.109496][ T42] audit: type=1400 audit(1787070889.842:686): avc: denied { read } for pid=6677 comm="syz.3.237" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.116990][ T42] audit: type=1400 audit(1787070889.842:687): avc: denied { open } for pid=6677 comm="syz.3.237" path="/dev/rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.167743][ T5807] bridge_slave_1: left allmulticast mode [ 84.169669][ T5807] bridge_slave_1: left promiscuous mode [ 84.172732][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.176645][ T42] audit: type=1400 audit(1787070889.912:688): avc: denied { ioctl } for pid=6677 comm="syz.3.237" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.185187][ T5807] bridge_slave_0: left allmulticast mode [ 84.187001][ T5807] bridge_slave_0: left promiscuous mode [ 84.190915][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.326406][ T6687] FAULT_INJECTION: forcing a failure. [ 84.326406][ T6687] name failslab, interval 1, probability 0, space 0, times 0 [ 84.331685][ T6687] CPU: 3 UID: 0 PID: 6687 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(full) [ 84.331712][ T6687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.331722][ T6687] Call Trace: [ 84.331729][ T6687] [ 84.331736][ T6687] dump_stack_lvl+0x100/0x190 [ 84.331764][ T6687] should_fail_ex.cold+0x5/0xa [ 84.331786][ T6687] should_failslab+0xc2/0x120 [ 84.331811][ T6687] __kmalloc_cache_noprof+0x91/0x6c0 [ 84.331829][ T6687] ? pkcs7_parse_message+0x98/0x870 [ 84.331869][ T6687] pkcs7_parse_message+0x98/0x870 [ 84.331886][ T6687] ? down_read+0x13b/0x4c0 [ 84.331928][ T6687] verify_pkcs7_signature+0x30/0xa0 [ 84.331959][ T6687] pkcs7_preparse+0x88/0xc0 [ 84.331976][ T6687] ? __pfx_pkcs7_view_content+0x10/0x10 [ 84.331994][ T6687] ? __pfx_pkcs7_preparse+0x10/0x10 [ 84.332011][ T6687] __key_create_or_update+0x463/0xe30 [ 84.332050][ T6687] ? __pfx___key_create_or_update+0x10/0x10 [ 84.332076][ T6687] ? lookup_user_key+0x3f3/0x1300 [ 84.332108][ T6687] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 84.332136][ T6687] key_create_or_update+0x42/0x60 [ 84.332164][ T6687] __do_sys_add_key+0x2e8/0x460 [ 84.332184][ T6687] ? __pfx___do_sys_add_key+0x10/0x10 [ 84.332202][ T6687] ? ksys_write+0x1ac/0x250 [ 84.332233][ T6687] do_syscall_64+0x115/0x870 [ 84.332256][ T6687] ? clear_bhb_loop+0x70/0xc0 [ 84.332276][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.332293][ T6687] RIP: 0033:0x7f2e4379e0d9 [ 84.332309][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.332324][ T6687] RSP: 002b:00007f2e44651028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 84.332341][ T6687] RAX: ffffffffffffffda RBX: 00007f2e43a25fa0 RCX: 00007f2e4379e0d9 [ 84.332352][ T6687] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 84.332361][ T6687] RBP: 00007f2e44651090 R08: ffffffffffffffff R09: 0000000000000000 [ 84.332371][ T6687] R10: 0000000000000073 R11: 0000000000000246 R12: 0000000000000002 [ 84.332381][ T6687] R13: 00007f2e43a26038 R14: 00007f2e43a25fa0 R15: 00007fff0bd4adb8 [ 84.332403][ T6687] [ 84.361408][ T6685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6685 comm=syz.2.239 [ 84.415721][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.421930][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.425775][ T5807] bond0 (unregistering): Released all slaves [ 84.517032][ T42] audit: type=1400 audit(1787070890.252:689): avc: denied { kexec_image_load } for pid=6695 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 84.556586][ T6689] TC_ACT_REPEAT abuse ? [ 84.568356][ T42] audit: type=1400 audit(1787070890.302:690): avc: denied { write } for pid=6698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.606166][ T6689] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 84.608634][ T42] audit: type=1400 audit(1787070890.342:691): avc: denied { ioctl } for pid=6701 comm="syz.2.243" path="socket:[16503]" dev="sockfs" ino=16503 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.618431][ T6689] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 84.620407][ T6689] PKCS7: Unsupported data type 106 [ 84.626709][ T42] audit: type=1400 audit(1787070890.362:692): avc: denied { write } for pid=6703 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.638413][ T42] audit: type=1400 audit(1787070890.362:693): avc: denied { bind } for pid=6688 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.681305][ T64] Bluetooth: hci2: command tx timeout [ 84.708569][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6 [ 84.782366][ T6710] netlink: 'syz.3.245': attribute type 3 has an invalid length. [ 84.828121][ T5807] hsr_slave_0: left promiscuous mode [ 84.829189][ T6710] device-mapper: table: 248:0: thin-poolonnlimit: unknown target type [ 84.834567][ T5807] hsr_slave_1: left promiscuous mode [ 84.834579][ T6710] device-mapper: ioctl: error adding target to table [ 84.836827][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.842893][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.853143][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.855760][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.865878][ T5807] veth1_macvtap: left promiscuous mode [ 84.870598][ T5807] veth0_macvtap: left promiscuous mode [ 84.874251][ T5807] veth1_vlan: left promiscuous mode [ 84.876433][ T5807] veth0_vlan: left promiscuous mode [ 85.048041][ T42] audit: type=1400 audit(1787070890.782:694): avc: denied { write } for pid=6720 comm="syz.3.248" name="/" dev="9p" ino=77617115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.067192][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 85.080197][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 85.123460][ T42] audit: type=1400 audit(1787070890.862:695): avc: denied { write } for pid=6726 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.168674][ T6729] FAULT_INJECTION: forcing a failure. [ 85.168674][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 85.175423][ T6729] CPU: 2 UID: 0 PID: 6729 Comm: syz.0.251 Not tainted syzkaller #0 PREEMPT(full) [ 85.175449][ T6729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.175461][ T6729] Call Trace: [ 85.175469][ T6729] [ 85.175476][ T6729] dump_stack_lvl+0x100/0x190 [ 85.175508][ T6729] should_fail_ex.cold+0x5/0xa [ 85.175529][ T6729] should_failslab+0xc2/0x120 [ 85.175550][ T6729] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.175569][ T6729] ? __alloc_skb+0x140/0x710 [ 85.175599][ T6729] __alloc_skb+0x140/0x710 [ 85.175622][ T6729] ? __alloc_skb+0x5b7/0x710 [ 85.175647][ T6729] ? __pfx___alloc_skb+0x10/0x10 [ 85.175678][ T6729] pfkey_send_migrate+0x2fd/0x1540 [ 85.175712][ T6729] ? __pfx_pfkey_send_migrate+0x10/0x10 [ 85.175724][ T6729] km_migrate+0x102/0x2b0 [ 85.175750][ T6729] xfrm_migrate+0xe0a/0x1ba0 [ 85.175770][ T6729] ? __pfx_xfrm_migrate+0x10/0x10 [ 85.175783][ T6729] ? kernel_text_address+0x8d/0x100 [ 85.175796][ T6729] ? __kernel_text_address+0xd/0x30 [ 85.175813][ T6729] xfrm_do_migrate+0xb9c/0xf00 [ 85.175836][ T6729] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 85.175869][ T6729] ? lock_acquire+0x1b9/0x370 [ 85.175939][ T6729] ? rcu_is_watching+0x12/0xc0 [ 85.175966][ T6729] ? cap_capable+0x107/0x430 [ 85.175983][ T6729] ? __nla_parse+0x40/0x60 [ 85.176003][ T6729] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 85.176020][ T6729] ? xfrm_user_rcv_msg+0x483/0xd80 [ 85.176035][ T6729] xfrm_user_rcv_msg+0x483/0xd80 [ 85.176054][ T6729] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 85.176069][ T6729] ? kfree_skbmem+0x19f/0x210 [ 85.176083][ T6729] ? consume_skb+0xd6/0x110 [ 85.176109][ T6729] ? rcu_is_watching+0x12/0xc0 [ 85.176125][ T6729] ? trace_contention_end+0x126/0x160 [ 85.176140][ T6729] ? __mutex_lock+0x26d/0x1bd0 [ 85.176159][ T6729] netlink_rcv_skb+0x159/0x420 [ 85.176182][ T6729] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 85.176199][ T6729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.176222][ T6729] xfrm_netlink_rcv+0x71/0x90 [ 85.176243][ T6729] netlink_unicast+0x585/0x850 [ 85.176259][ T6729] ? __pfx_netlink_unicast+0x10/0x10 [ 85.176279][ T6729] netlink_sendmsg+0x8b0/0xda0 [ 85.176296][ T6729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.176312][ T6729] ? selinux_socket_sendmsg+0x198/0x2f0 [ 85.176330][ T6729] ____sys_sendmsg+0xa4d/0xbe0 [ 85.176344][ T6729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.176359][ T6729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.176379][ T6729] ___sys_sendmsg+0x190/0x1e0 [ 85.176394][ T6729] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.176410][ T6729] ? __lock_acquire+0x49f/0x1a40 [ 85.176429][ T6729] ? get_pid_task+0x106/0x250 [ 85.176474][ T6729] __sys_sendmsg+0x160/0x210 [ 85.176492][ T6729] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.176511][ T6729] do_syscall_64+0x115/0x870 [ 85.176526][ T6729] ? clear_bhb_loop+0x70/0xc0 [ 85.176539][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.176550][ T6729] RIP: 0033:0x7f5632b9e0d9 [ 85.176561][ T6729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.176571][ T6729] RSP: 002b:00007f5633a6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.176583][ T6729] RAX: ffffffffffffffda RBX: 00007f5632e25fa0 RCX: 00007f5632b9e0d9 [ 85.176590][ T6729] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 85.176596][ T6729] RBP: 00007f5633a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 85.176602][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.176608][ T6729] R13: 00007f5632e26038 R14: 00007f5632e25fa0 R15: 00007ffc2318d578 [ 85.176622][ T6729] [ 85.317975][ T6719] syz_tun: entered allmulticast mode [ 85.336945][ T6725] dvmrp8: entered allmulticast mode [ 85.428408][ T6714] syz_tun: left allmulticast mode [ 85.455188][ T6737] kvm: kvm [6735]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 85.459276][ T6737] kvm: kvm [6735]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 85.543180][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 85.699237][ T6762] FAULT_INJECTION: forcing a failure. [ 85.699237][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 85.706229][ T6762] CPU: 2 UID: 0 PID: 6762 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) [ 85.706253][ T6762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.706264][ T6762] Call Trace: [ 85.706270][ T6762] [ 85.706277][ T6762] dump_stack_lvl+0x100/0x190 [ 85.706303][ T6762] should_fail_ex.cold+0x5/0xa [ 85.706325][ T6762] should_failslab+0xc2/0x120 [ 85.706347][ T6762] __kmalloc_noprof+0xfc/0x820 [ 85.706366][ T6762] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.706388][ T6762] ? ioctl_standard_iw_point+0x3e9/0xc90 [ 85.706445][ T6762] ioctl_standard_iw_point+0x3e9/0xc90 [ 85.706470][ T6762] ? __pfx_cfg80211_wext_siwgenie+0x10/0x10 [ 85.706493][ T6762] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 85.706520][ T6762] ? dev_load+0x8e/0x240 [ 85.706552][ T6762] ? full_name_hash+0xbc/0x100 [ 85.706576][ T6762] ? __pfx_cfg80211_wext_siwgenie+0x10/0x10 [ 85.706597][ T6762] ioctl_standard_call+0x167/0x1d0 [ 85.706619][ T6762] ? __pfx_ioctl_standard_call+0x10/0x10 [ 85.706640][ T6762] ? __pfx_cfg80211_wext_siwgenie+0x10/0x10 [ 85.706660][ T6762] wext_ioctl_dispatch.constprop.0+0x312/0x3e0 [ 85.706695][ T6762] wext_handle_ioctl+0x105/0x1b0 [ 85.706717][ T6762] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 85.706743][ T6762] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 85.706778][ T6762] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 85.706807][ T6762] sock_ioctl+0x2d4/0x6b0 [ 85.706830][ T6762] ? __pfx_sock_ioctl+0x10/0x10 [ 85.706848][ T6762] ? hook_file_ioctl_common+0x140/0x440 [ 85.706881][ T6762] ? selinux_file_ioctl+0x13b/0x290 [ 85.706903][ T6762] ? selinux_file_ioctl+0xb6/0x290 [ 85.706927][ T6762] ? __pfx_sock_ioctl+0x10/0x10 [ 85.706949][ T6762] __x64_sys_ioctl+0x18e/0x210 [ 85.706975][ T6762] do_syscall_64+0x115/0x870 [ 85.706997][ T6762] ? clear_bhb_loop+0x70/0xc0 [ 85.707017][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.707034][ T6762] RIP: 0033:0x7fc9e939e0d9 [ 85.707054][ T6762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.707069][ T6762] RSP: 002b:00007fc9ea238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.707087][ T6762] RAX: ffffffffffffffda RBX: 00007fc9e9625fa0 RCX: 00007fc9e939e0d9 [ 85.707098][ T6762] RDX: 0000200000000040 RSI: 0000000000008b30 RDI: 0000000000000004 [ 85.707107][ T6762] RBP: 00007fc9ea238090 R08: 0000000000000000 R09: 0000000000000000 [ 85.707117][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.707126][ T6762] R13: 00007fc9e9626038 R14: 00007fc9e9625fa0 R15: 00007ffe21823dd8 [ 85.707149][ T6762] [ 85.874972][ T6654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.887843][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.891990][ T6654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.898810][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.915551][ T6654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.923776][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.928366][ T6654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.932882][ T6654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.004322][ T6654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.014973][ T6654] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.021724][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.025397][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.035867][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.038792][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.255992][ T6797] syz.2.264 (6797) used greatest stack depth: 19280 bytes left [ 86.306920][ T6654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.381302][ T5491] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 86.455711][ T6654] veth0_vlan: entered promiscuous mode [ 86.461052][ T6654] veth1_vlan: entered promiscuous mode [ 86.485889][ T6654] veth0_macvtap: entered promiscuous mode [ 86.490765][ T6654] veth1_macvtap: entered promiscuous mode [ 86.500360][ T6654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.518186][ T6654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.532294][ T5491] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.537479][ T5491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.542357][ T5491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.546224][ T5491] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.552219][ T5491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.558556][ T5491] usb 5-1: config 0 descriptor?? [ 86.577372][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.591339][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.633129][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.639327][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.654980][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.658170][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.671486][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.676339][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.708355][ T6824] loop5: detected capacity change from 0 to 7 [ 86.714951][ T6824] Dev loop5: unable to read RDB block 7 [ 86.716835][ T6824] loop5: AHDI p1 p3 p4 [ 86.718209][ T6824] loop5: partition table partially beyond EOD, truncated [ 86.720512][ T6824] loop5: p1 size 100663296 extends beyond EOD, truncated [ 86.725598][ T6824] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 86.751601][ T64] Bluetooth: hci2: command tx timeout [ 86.812867][ T6824] FAULT_INJECTION: forcing a failure. [ 86.812867][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 86.835303][ T6824] CPU: 1 UID: 0 PID: 6824 Comm: syz.4.234 Not tainted syzkaller #0 PREEMPT(full) [ 86.835322][ T6824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.835329][ T6824] Call Trace: [ 86.835333][ T6824] [ 86.835339][ T6824] dump_stack_lvl+0x100/0x190 [ 86.835358][ T6824] should_fail_ex.cold+0x5/0xa [ 86.835391][ T6824] should_failslab+0xc2/0x120 [ 86.835407][ T6824] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.835422][ T6824] ? __alloc_skb+0x140/0x710 [ 86.835441][ T6824] __alloc_skb+0x140/0x710 [ 86.835456][ T6824] ? __alloc_skb+0x5b7/0x710 [ 86.835472][ T6824] ? __pfx___alloc_skb+0x10/0x10 [ 86.835488][ T6824] ? netlink_has_listeners+0x21b/0x430 [ 86.835502][ T6824] ? netlink_has_listeners+0x21b/0x430 [ 86.835518][ T6824] alloc_uevent_skb+0x7d/0x210 [ 86.835534][ T6824] kobject_uevent_env+0xd2d/0x18b0 [ 86.835549][ T6824] ? bus_to_subsys+0x114/0x150 [ 86.835580][ T6824] device_del+0x605/0x9b0 [ 86.835598][ T6824] ? __pfx_device_del+0x10/0x10 [ 86.835615][ T6824] ? kobject_put+0xb9/0x640 [ 86.835627][ T6824] drop_partition+0x109/0x1c0 [ 86.835651][ T6824] bdev_disk_changed+0x25b/0x1260 [ 86.835672][ T6824] ? __pfx_bdev_disk_changed+0x10/0x10 [ 86.835689][ T6824] ? lo_ioctl+0x15ed/0x1bc0 [ 86.835725][ T6824] loop_reread_partitions+0x68/0xe0 [ 86.835739][ T6824] lo_ioctl+0x1745/0x1bc0 [ 86.835756][ T6824] ? __pfx_lo_ioctl+0x10/0x10 [ 86.835770][ T6824] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 86.835785][ T6824] ? kasan_quarantine_put+0x104/0x240 [ 86.835797][ T6824] ? blk_get_meta_cap+0xd4/0x6c0 [ 86.835815][ T6824] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 86.835829][ T6824] ? blkdev_common_ioctl+0x515/0x2b80 [ 86.835842][ T6824] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 86.835857][ T6824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.835871][ T6824] ? do_vfs_ioctl+0x226/0x13e0 [ 86.835911][ T6824] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 86.835929][ T6824] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 86.835950][ T6824] ? __fget_files+0x215/0x3d0 [ 86.835965][ T6824] ? __pfx_lo_ioctl+0x10/0x10 [ 86.835979][ T6824] blkdev_ioctl+0x5ad/0x6f0 [ 86.835990][ T6824] ? __pfx_blkdev_ioctl+0x10/0x10 [ 86.836000][ T6824] ? selinux_file_ioctl+0x13b/0x290 [ 86.836014][ T6824] ? selinux_file_ioctl+0xb6/0x290 [ 86.836030][ T6824] ? __pfx_blkdev_ioctl+0x10/0x10 [ 86.836042][ T6824] __x64_sys_ioctl+0x18e/0x210 [ 86.836060][ T6824] do_syscall_64+0x115/0x870 [ 86.836079][ T6824] ? clear_bhb_loop+0x70/0xc0 [ 86.836093][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.836104][ T6824] RIP: 0033:0x7f9b98f9e0d9 [ 86.836114][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.836125][ T6824] RSP: 002b:00007f9b99ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.836136][ T6824] RAX: ffffffffffffffda RBX: 00007f9b99225fa0 RCX: 00007f9b98f9e0d9 [ 86.836142][ T6824] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 86.836149][ T6824] RBP: 00007f9b99ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 86.836155][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.836161][ T6824] R13: 00007f9b99226038 R14: 00007f9b99225fa0 R15: 00007fffc4c6ebb8 [ 86.836175][ T6824] [ 86.839364][ T6824] Dev loop5: unable to read RDB block 7 [ 86.868460][ T6822] ftl_cs: FTL header not found. [ 86.945879][ T6824] loop5: AHDI p1 p3 p4 [ 86.947249][ T6824] loop5: partition table partially beyond EOD, truncated [ 86.950522][ T6824] loop5: p1 size 100663296 extends beyond EOD, truncated [ 86.956357][ T6824] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 86.987537][ T6822] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 87.028657][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 87.038392][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 87.043201][ T5491] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 87.076880][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 87.081826][ T6097] udevd[6097]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 87.547969][ T6849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'. [ 87.698524][ T6855] netlink: 'syz.2.278': attribute type 12 has an invalid length. [ 87.701840][ T6855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.278'. [ 87.992760][ T6861] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 88.001635][ T6863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6863 comm=syz.4.282 [ 88.009256][ T6863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.282'. [ 88.194489][ T6881] openvswitch: netlink: Missing valid actions attribute. [ 88.197934][ T6881] openvswitch: netlink: Actions may not be safe on all matching packets [ 88.216564][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 88.257708][ T6872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.284'. [ 88.323733][ T6890] kvm: pic: non byte read [ 88.325710][ T6893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6893 comm=syz.2.292 [ 88.326182][ T6890] kvm: pic: non byte read [ 88.330418][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.292'. [ 88.333096][ T6890] kvm: pic: non byte read [ 88.336685][ T6890] kvm: pic: non byte read [ 88.339416][ T6890] kvm: pic: non byte read [ 88.343043][ T6890] kvm: pic: non byte read [ 88.345896][ T6890] kvm: pic: non byte read [ 88.348272][ T6890] kvm: pic: non byte read [ 88.350677][ T6890] kvm: pic: non byte read [ 88.353649][ T6890] kvm: pic: non byte read [ 88.361713][ T5491] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 88.465564][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 88.468885][ T6900] FAULT_INJECTION: forcing a failure. [ 88.468885][ T6900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.474364][ T6900] CPU: 2 UID: 0 PID: 6900 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(full) [ 88.474381][ T6900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.474389][ T6900] Call Trace: [ 88.474394][ T6900] [ 88.474399][ T6900] dump_stack_lvl+0x100/0x190 [ 88.474436][ T6900] should_fail_ex.cold+0x5/0xa [ 88.474457][ T6900] _copy_to_user+0x32/0xd0 [ 88.474488][ T6900] simple_read_from_buffer+0xcb/0x170 [ 88.474509][ T6900] proc_fail_nth_read+0x1af/0x230 [ 88.474529][ T6900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.474542][ T6900] ? rw_verify_area+0xce/0x6d0 [ 88.474564][ T6900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.474576][ T6900] vfs_read+0x1e4/0xb40 [ 88.474588][ T6900] ? __pfx_vfs_read+0x10/0x10 [ 88.474597][ T6900] ? __fget_files+0x215/0x3d0 [ 88.474613][ T6900] ? __fget_files+0x21f/0x3d0 [ 88.474628][ T6900] ksys_read+0x12a/0x250 [ 88.474638][ T6900] ? __pfx_ksys_read+0x10/0x10 [ 88.474653][ T6900] do_syscall_64+0x115/0x870 [ 88.474683][ T6900] ? clear_bhb_loop+0x70/0xc0 [ 88.474696][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.474708][ T6900] RIP: 0033:0x7f2e4375e90e [ 88.474718][ T6900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.474729][ T6900] RSP: 002b:00007f2e44650fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.474746][ T6900] RAX: ffffffffffffffda RBX: 00007f2e446516c0 RCX: 00007f2e4375e90e [ 88.474753][ T6900] RDX: 000000000000000f RSI: 00007f2e446510a0 RDI: 0000000000000005 [ 88.474759][ T6900] RBP: 00007f2e44651090 R08: 0000000000000000 R09: 0000000000000000 [ 88.474766][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.474772][ T6900] R13: 00007f2e43a26038 R14: 00007f2e43a25fa0 R15: 00007fff0bd4adb8 [ 88.474785][ T6900] [ 88.560157][ T6902] binder: 6901:6902 unknown command 0 [ 88.562152][ T6902] binder: 6901:6902 ioctl c0306201 2000000001c0 returned -22 [ 88.568463][ T6902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6902 comm=syz.3.296 [ 88.603729][ T6904] FAULT_INJECTION: forcing a failure. [ 88.603729][ T6904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.608220][ T6904] CPU: 3 UID: 0 PID: 6904 Comm: syz.3.297 Not tainted syzkaller #0 PREEMPT(full) [ 88.608236][ T6904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.608243][ T6904] Call Trace: [ 88.608248][ T6904] [ 88.608252][ T6904] dump_stack_lvl+0x100/0x190 [ 88.608270][ T6904] should_fail_ex.cold+0x5/0xa [ 88.608286][ T6904] _copy_to_user+0x32/0xd0 [ 88.608316][ T6904] simple_read_from_buffer+0xcb/0x170 [ 88.608332][ T6904] proc_fail_nth_read+0x1af/0x230 [ 88.608346][ T6904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.608359][ T6904] ? rw_verify_area+0xce/0x6d0 [ 88.608375][ T6904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.608387][ T6904] vfs_read+0x1e4/0xb40 [ 88.608398][ T6904] ? __pfx_vfs_read+0x10/0x10 [ 88.608407][ T6904] ? __fget_files+0x215/0x3d0 [ 88.608423][ T6904] ? __fget_files+0x21f/0x3d0 [ 88.608438][ T6904] ksys_read+0x12a/0x250 [ 88.608448][ T6904] ? __pfx_ksys_read+0x10/0x10 [ 88.608461][ T6904] do_syscall_64+0x115/0x870 [ 88.608478][ T6904] ? clear_bhb_loop+0x70/0xc0 [ 88.608491][ T6904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.608501][ T6904] RIP: 0033:0x7f2e4375e90e [ 88.608511][ T6904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.608521][ T6904] RSP: 002b:00007f2e44650fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.608533][ T6904] RAX: ffffffffffffffda RBX: 00007f2e446516c0 RCX: 00007f2e4375e90e [ 88.608539][ T6904] RDX: 000000000000000f RSI: 00007f2e446510a0 RDI: 0000000000000005 [ 88.608545][ T6904] RBP: 00007f2e44651090 R08: 0000000000000000 R09: 0000000000000000 [ 88.608551][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.608557][ T6904] R13: 00007f2e43a26038 R14: 00007f2e43a25fa0 R15: 00007fff0bd4adb8 [ 88.608570][ T6904] [ 88.731263][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 88.747814][ T6908] MINIX-fs: blocksize too small for device [ 88.753191][ T6908] PKCS7: Unsupported SignerInfo version [ 88.794781][ T6910] netlink: 'syz.3.300': attribute type 291 has an invalid length. [ 88.827223][ T6912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6912 comm=syz.3.301 [ 88.832405][ T64] Bluetooth: hci2: command tx timeout [ 88.838608][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.301'. [ 88.897705][ T6914] FAULT_INJECTION: forcing a failure. [ 88.897705][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.905098][ T6914] CPU: 2 UID: 0 PID: 6914 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT(full) [ 88.905123][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.905133][ T6914] Call Trace: [ 88.905139][ T6914] [ 88.905146][ T6914] dump_stack_lvl+0x100/0x190 [ 88.905173][ T6914] should_fail_ex.cold+0x5/0xa [ 88.905195][ T6914] _copy_to_iter+0x5a4/0x1720 [ 88.905228][ T6914] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 88.905269][ T6914] ? __pfx__copy_to_iter+0x10/0x10 [ 88.905295][ T6914] ? __skb_recv_datagram+0x1b2/0x220 [ 88.905320][ T6914] simple_copy_to_iter+0x46/0x90 [ 88.905341][ T6914] __skb_datagram_iter+0x129/0x900 [ 88.905361][ T6914] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 88.905384][ T6914] ? skb_recv_datagram+0x88/0xc0 [ 88.905408][ T6914] skb_copy_datagram_iter+0xa1/0x250 [ 88.905431][ T6914] netlink_recvmsg+0x27e/0xa90 [ 88.905464][ T6914] ? __pfx_netlink_recvmsg+0x10/0x10 [ 88.905483][ T6914] ? copy_iovec_from_user+0x102/0x140 [ 88.905511][ T6914] ? __import_iovec+0x1d2/0x640 [ 88.905535][ T6914] ? __pfx_netlink_recvmsg+0x10/0x10 [ 88.905555][ T6914] ____sys_recvmsg+0x5eb/0x670 [ 88.905588][ T6914] ? __pfx_____sys_recvmsg+0x10/0x10 [ 88.905615][ T6914] ? rcu_is_watching+0x12/0xc0 [ 88.905647][ T6914] ? ___sys_recvmsg+0x177/0x1a0 [ 88.905666][ T6914] ? kfree+0x1e5/0x6c0 [ 88.905693][ T6914] ___sys_recvmsg+0x16a/0x1a0 [ 88.905713][ T6914] ? __pfx____sys_recvmsg+0x10/0x10 [ 88.905745][ T6914] ? __pfx___might_resched+0x10/0x10 [ 88.905780][ T6914] do_recvmmsg+0x2f3/0x740 [ 88.905803][ T6914] ? __pfx_do_recvmmsg+0x10/0x10 [ 88.905828][ T6914] ? __mutex_unlock_slowpath+0x35d/0x930 [ 88.905859][ T6914] ? __fget_files+0x21f/0x3d0 [ 88.905885][ T6914] __x64_sys_recvmmsg+0x22a/0x280 [ 88.905903][ T6914] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 88.905926][ T6914] do_syscall_64+0x115/0x870 [ 88.905949][ T6914] ? clear_bhb_loop+0x70/0xc0 [ 88.905969][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.905986][ T6914] RIP: 0033:0x7f2e4379e0d9 [ 88.906001][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.906017][ T6914] RSP: 002b:00007f2e44651028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 88.906033][ T6914] RAX: ffffffffffffffda RBX: 00007f2e43a25fa0 RCX: 00007f2e4379e0d9 [ 88.906044][ T6914] RDX: 0000000000000004 RSI: 00002000000064c0 RDI: 0000000000000003 [ 88.906053][ T6914] RBP: 00007f2e44651090 R08: 0000000000000000 R09: 0000000000000000 [ 88.906064][ T6914] R10: 0000000000030100 R11: 0000000000000246 R12: 0000000000000002 [ 88.906073][ T6914] R13: 00007f2e43a26038 R14: 00007f2e43a25fa0 R15: 00007fff0bd4adb8 [ 88.906094][ T6914] [ 88.912954][ T34] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.009339][ T34] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.012406][ T34] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.015838][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.018754][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 89.022137][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 89.027218][ T34] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.029925][ T34] usb 7-1: Product: syz [ 89.031348][ T34] usb 7-1: Manufacturer: syz [ 89.038092][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 89.039786][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 89.045789][ T34] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 89.047768][ T34] cdc_wdm 7-1:1.0: Unknown control protocol [ 89.174795][ T6923] FAULT_INJECTION: forcing a failure. [ 89.174795][ T6923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.183420][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 89.183444][ T6923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.183454][ T6923] Call Trace: [ 89.183460][ T6923] [ 89.183466][ T6923] dump_stack_lvl+0x100/0x190 [ 89.183493][ T6923] should_fail_ex.cold+0x5/0xa [ 89.183515][ T6923] _copy_from_user+0x2e/0xd0 [ 89.183541][ T6923] kstrtouint_from_user+0xd6/0x1d0 [ 89.183559][ T6923] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 89.183577][ T6923] ? __lock_acquire+0x49f/0x1a40 [ 89.183619][ T6923] proc_fail_nth_write+0x83/0x220 [ 89.183638][ T6923] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.183662][ T6923] vfs_write+0x2aa/0x1050 [ 89.183696][ T6923] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.183717][ T6923] ? __pfx_vfs_write+0x10/0x10 [ 89.183730][ T6923] ? __fget_files+0x215/0x3d0 [ 89.183753][ T6923] ? __fget_files+0x21f/0x3d0 [ 89.183777][ T6923] ksys_write+0x12a/0x250 [ 89.183791][ T6923] ? __pfx_ksys_write+0x10/0x10 [ 89.183811][ T6923] do_syscall_64+0x115/0x870 [ 89.183833][ T6923] ? clear_bhb_loop+0x70/0xc0 [ 89.183853][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.183869][ T6923] RIP: 0033:0x7f2e4375e90e [ 89.183905][ T6923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.183921][ T6923] RSP: 002b:00007f2e44650fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.183937][ T6923] RAX: ffffffffffffffda RBX: 00007f2e446516c0 RCX: 00007f2e4375e90e [ 89.183947][ T6923] RDX: 0000000000000001 RSI: 00007f2e446510a0 RDI: 0000000000000006 [ 89.183957][ T6923] RBP: 00007f2e44651090 R08: 0000000000000000 R09: 0000000000000000 [ 89.183965][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.183974][ T6923] R13: 00007f2e43a26038 R14: 00007f2e43a25fa0 R15: 00007fff0bd4adb8 [ 89.183996][ T6923] [ 89.251527][ T5881] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 89.288243][ T1041] usb 7-1: USB disconnect, device number 12 [ 89.324447][ T6934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6934 comm=syz.2.310 [ 89.339229][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.310'. [ 89.413050][ T6936] syzkaller0: entered promiscuous mode [ 89.414861][ T6936] syzkaller0: entered allmulticast mode [ 89.421732][ T6936] tipc: Started in network mode [ 89.423514][ T6936] tipc: Node identity ae511cc95727, cluster identity 4711 [ 89.431664][ T5881] usb 9-1: Using ep0 maxpacket: 32 [ 89.433266][ T6936] tipc: Enabled bearer , priority 0 [ 89.435530][ T5881] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 89.446437][ T5881] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 89.451653][ T5881] usb 9-1: config 0 has no interface number 0 [ 89.453130][ T6936] tipc: Resetting bearer [ 89.457059][ T5881] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.461710][ T5881] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 89.464870][ T6935] tipc: Resetting bearer [ 89.466904][ T5881] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 216 [ 89.479695][ T5881] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.489873][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.493655][ T5881] usb 9-1: Product: syz [ 89.495584][ T5881] usb 9-1: Manufacturer: syz [ 89.497605][ T5881] usb 9-1: SerialNumber: syz [ 89.502112][ T6935] tipc: Disabling bearer [ 89.503538][ T5881] usb 9-1: config 0 descriptor?? [ 89.507104][ T6918] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 89.528079][ T5881] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input16 [ 89.536455][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 89.536468][ T42] audit: type=1400 audit(1787070895.272:742): avc: denied { ioctl } for pid=6944 comm="syz.0.315" path="socket:[18079]" dev="sockfs" ino=18079 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.718410][ T6957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6957 comm=syz.0.319 [ 89.730701][ T41] usb 9-1: USB disconnect, device number 2 [ 89.830856][ T42] audit: type=1400 audit(1787070895.562:743): avc: denied { write } for pid=6962 comm="syz.3.322" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.840261][ T42] audit: type=1400 audit(1787070895.562:744): avc: denied { open } for pid=6962 comm="syz.3.322" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.850120][ T42] audit: type=1400 audit(1787070895.572:745): avc: denied { ioctl } for pid=6962 comm="syz.3.322" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.935005][ T42] audit: type=1400 audit(1787070895.672:746): avc: denied { write } for pid=6965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.008146][ T42] audit: type=1400 audit(1787070895.732:747): avc: denied { write } for pid=6970 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.151250][ T5491] usb 5-1: device descriptor read/64, error -71 [ 90.261322][ T1041] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 90.284507][ T42] audit: type=1400 audit(1787070896.022:748): avc: denied { read } for pid=6978 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.346344][ T42] audit: type=1400 audit(1787070896.082:749): avc: denied { write } for pid=6980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.391292][ T5491] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 90.414760][ T42] audit: type=1400 audit(1787070896.152:750): avc: denied { write } for pid=6983 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.431255][ T1041] usb 8-1: Using ep0 maxpacket: 16 [ 90.433398][ T1041] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 90.442062][ T1041] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.447806][ T1041] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.454292][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.456950][ T1041] usb 8-1: Product: syz [ 90.458326][ T1041] usb 8-1: Manufacturer: syz [ 90.465733][ T6989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6989 comm=syz.4.328 [ 90.469716][ T1041] usb 8-1: SerialNumber: syz [ 90.475581][ T1041] usb 8-1: config 0 descriptor?? [ 90.554028][ T5491] usb 5-1: device firmware changed [ 90.575756][ T57] usb 5-1: USB disconnect, device number 11 [ 90.593425][ T42] audit: type=1400 audit(1787070896.332:751): avc: denied { write } for pid=6994 comm="syz.4.330" lport=58619 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 90.688598][ C2] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 90.695982][ T1041] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input17 [ 90.718025][ T1041] imon:send_packet: packet tx failed (-71) [ 90.741338][ T1041] imon 8-1:0.0: panel buttons/knobs setup failed [ 90.742673][ T57] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 90.811233][ T1041] rc_core: IR keymap rc-imon-pad not found [ 90.813082][ T1041] Registered IR keymap rc-empty [ 90.821239][ T1041] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 90.824363][ T1041] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 90.831203][ T1041] imon:send_packet: packet tx failed (-71) [ 90.861334][ T1041] imon 8-1:0.0: remote input dev register failed [ 90.871306][ T1041] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 90.896374][ T7012] FAULT_INJECTION: forcing a failure. [ 90.896374][ T7012] name failslab, interval 1, probability 0, space 0, times 0 [ 90.902918][ T57] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 90.903966][ T7012] CPU: 0 UID: 0 PID: 7012 Comm: syz.4.335 Not tainted syzkaller #0 PREEMPT(full) [ 90.903992][ T7012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.904004][ T7012] Call Trace: [ 90.904012][ T7012] [ 90.904020][ T7012] dump_stack_lvl+0x100/0x190 [ 90.904051][ T7012] should_fail_ex.cold+0x5/0xa [ 90.904077][ T7012] should_failslab+0xc2/0x120 [ 90.904120][ T7012] __kmalloc_cache_noprof+0x91/0x6c0 [ 90.904144][ T7012] ? tcf_action_init_1+0x27e/0x6c0 [ 90.904191][ T7012] tcf_action_init_1+0x27e/0x6c0 [ 90.904224][ T7012] ? __pfx_tcf_action_init_1+0x10/0x10 [ 90.904252][ T7012] ? tc_action_load_ops+0x1f5/0x3e0 [ 90.904282][ T7012] ? __pfx_tc_action_load_ops+0x10/0x10 [ 90.904322][ T7012] ? __nla_parse+0x40/0x60 [ 90.904362][ T7012] tcf_action_init+0x43f/0xa60 [ 90.904401][ T7012] ? __pfx_tcf_action_init+0x10/0x10 [ 90.904428][ T7012] ? __kernel_text_address+0xd/0x30 [ 90.904482][ T7012] ? stack_trace_save+0x8e/0xc0 [ 90.904527][ T7012] ? find_held_lock+0x2b/0x80 [ 90.904547][ T7012] ? pcpu_alloc_noprof+0x960/0x1ca0 [ 90.904576][ T7012] ? pcpu_alloc_noprof+0x960/0x1ca0 [ 90.904606][ T7012] tcf_exts_validate_ex+0x42f/0x550 [ 90.904633][ T7012] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 90.904652][ T7012] ? mark_held_locks+0x40/0x70 [ 90.904690][ T7012] mall_change+0x3cd/0x1030 [ 90.904720][ T7012] ? __pfx_mall_change+0x10/0x10 [ 90.904754][ T7012] ? __pfx_mall_change+0x10/0x10 [ 90.904776][ T7012] tc_new_tfilter+0x9df/0x24a0 [ 90.904815][ T7012] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 90.904848][ T7012] ? __pfx_tc_new_tfilter+0x10/0x10 [ 90.904899][ T7012] ? find_held_lock+0x2b/0x80 [ 90.904916][ T7012] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 90.904939][ T7012] ? __pfx_tc_new_tfilter+0x10/0x10 [ 90.904961][ T7012] rtnetlink_rcv_msg+0x95e/0xe90 [ 90.904985][ T7012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.905012][ T7012] ? ref_tracker_free+0x37e/0x6c0 [ 90.905038][ T7012] netlink_rcv_skb+0x159/0x420 [ 90.905066][ T7012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.905089][ T7012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 90.905142][ T7012] ? netlink_deliver_tap+0x1ae/0xcc0 [ 90.905174][ T7012] netlink_unicast+0x585/0x850 [ 90.905205][ T7012] ? __pfx_netlink_unicast+0x10/0x10 [ 90.905231][ T7012] ? __pfx_sock_has_perm+0x10/0x10 [ 90.905261][ T7012] netlink_sendmsg+0x8b0/0xda0 [ 90.905292][ T7012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.905322][ T7012] ? selinux_socket_sendmsg+0x198/0x2f0 [ 90.905353][ T7012] ____sys_sendmsg+0xa4d/0xbe0 [ 90.905376][ T7012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.905405][ T7012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.905441][ T7012] ___sys_sendmsg+0x190/0x1e0 [ 90.905468][ T7012] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.905491][ T7012] ? __lock_acquire+0x49f/0x1a40 [ 90.905514][ T7012] ? get_pid_task+0x106/0x250 [ 90.905561][ T7012] __sys_sendmsg+0x160/0x210 [ 90.905582][ T7012] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.905619][ T7012] do_syscall_64+0x115/0x870 [ 90.905647][ T7012] ? clear_bhb_loop+0x70/0xc0 [ 90.905671][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.905691][ T7012] RIP: 0033:0x7f9b98f9e0d9 [ 90.905708][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.905726][ T7012] RSP: 002b:00007f9b99ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.905745][ T7012] RAX: ffffffffffffffda RBX: 00007f9b99225fa0 RCX: 00007f9b98f9e0d9 [ 90.905758][ T7012] RDX: 0000000000048010 RSI: 0000200000000580 RDI: 0000000000000004 [ 90.905769][ T7012] RBP: 00007f9b99ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 90.905779][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.905790][ T7012] R13: 00007f9b99226038 R14: 00007f9b99225fa0 R15: 00007fffc4c6ebb8 [ 90.905816][ T7012] [ 90.911344][ T64] Bluetooth: hci2: command tx timeout [ 90.921522][ T1041] imon 8-1:0.0: unable to initialize intf0, err 0 [ 90.923468][ T57] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 90.928539][ T1041] imon:imon_probe: failed to initialize context! [ 90.934327][ T57] usb 5-1: config 0 has no interface number 0 [ 90.940976][ T1041] imon 8-1:0.0: unable to register, err -19 [ 90.945191][ T57] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.960643][ T1041] usb 8-1: USB disconnect, device number 14 [ 90.969245][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.984269][ T7016] FAULT_INJECTION: forcing a failure. [ 90.984269][ T7016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.985637][ T57] usb 5-1: Product: syz [ 90.987808][ T7016] CPU: 0 UID: 0 PID: 7016 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(full) [ 90.987830][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.987841][ T7016] Call Trace: [ 90.987848][ T7016] [ 90.987855][ T7016] dump_stack_lvl+0x100/0x190 [ 90.987907][ T7016] should_fail_ex.cold+0x5/0xa [ 90.987931][ T7016] _copy_to_user+0x32/0xd0 [ 90.987960][ T7016] simple_read_from_buffer+0xcb/0x170 [ 90.988000][ T7016] proc_fail_nth_read+0x1af/0x230 [ 90.988023][ T7016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.988047][ T7016] ? rw_verify_area+0xce/0x6d0 [ 90.988074][ T7016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.988093][ T7016] vfs_read+0x1e4/0xb40 [ 90.988114][ T7016] ? __pfx_vfs_read+0x10/0x10 [ 90.988130][ T7016] ? __fget_files+0x215/0x3d0 [ 90.988156][ T7016] ? __fget_files+0x21f/0x3d0 [ 90.988183][ T7016] ksys_read+0x12a/0x250 [ 90.988200][ T7016] ? __pfx_ksys_read+0x10/0x10 [ 90.988224][ T7016] do_syscall_64+0x115/0x870 [ 90.988250][ T7016] ? clear_bhb_loop+0x70/0xc0 [ 90.988273][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.988290][ T7016] RIP: 0033:0x7fc9e935e90e [ 90.988306][ T7016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 90.988323][ T7016] RSP: 002b:00007fc9ea237fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.988342][ T7016] RAX: ffffffffffffffda RBX: 00007fc9ea2386c0 RCX: 00007fc9e935e90e [ 90.988353][ T7016] RDX: 000000000000000f RSI: 00007fc9ea2380a0 RDI: 0000000000000004 [ 90.988364][ T7016] RBP: 00007fc9ea238090 R08: 0000000000000000 R09: 0000000000000000 [ 90.988374][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.988385][ T7016] R13: 00007fc9e9626038 R14: 00007fc9e9625fa0 R15: 00007ffe21823dd8 [ 90.988408][ T7016] [ 91.122894][ T57] usb 5-1: Manufacturer: syz [ 91.124650][ T57] usb 5-1: SerialNumber: syz [ 91.127962][ T57] usb 5-1: config 0 descriptor?? [ 91.142454][ T57] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 91.271917][ T7032] __nla_validate_parse: 7 callbacks suppressed [ 91.271931][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.342'. [ 91.321296][ T1041] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 91.511756][ T1041] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 91.530265][ T1041] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 91.543164][ T1041] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 91.549949][ T1041] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.558454][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.564461][ T1041] usb 8-1: Product: syz [ 91.566960][ T1041] usb 8-1: Manufacturer: syz [ 91.570602][ T1041] usb 8-1: SerialNumber: syz [ 91.587891][ T1041] usb 8-1: config 0 descriptor?? [ 91.592323][ T6972] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.739235][ T7063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.350'. [ 91.747312][ T7063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.350'. [ 91.754842][ T7063] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 91.810205][ C2] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 91.822117][ T1041] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input19 [ 91.832804][ T1041] imon:send_packet: packet tx failed (-71) [ 91.846097][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.2.352 [ 91.850492][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.352'. [ 91.854369][ T57] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 91.861253][ T1041] imon 8-1:0.0: panel buttons/knobs setup failed [ 91.921310][ T1041] rc_core: IR keymap rc-imon-pad not found [ 91.921324][ T1041] Registered IR keymap rc-empty [ 91.921362][ T1041] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 91.921372][ T1041] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 91.921605][ T1041] imon:send_packet: packet tx failed (-71) [ 91.951271][ T1041] imon 8-1:0.0: remote input dev register failed [ 91.951348][ T1041] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 91.960301][ T1041] imon 8-1:0.0: unable to initialize intf0, err 0 [ 91.960316][ T1041] imon:imon_probe: failed to initialize context! [ 91.960323][ T1041] imon 8-1:0.0: unable to register, err -19 [ 91.965454][ T1041] usb 8-1: USB disconnect, device number 15 [ 92.021365][ T57] usb 9-1: Invalid ep0 maxpacket: 16 [ 92.076268][ T7088] Bluetooth: MGMT ver 1.23 [ 92.171272][ T57] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 92.351429][ T57] usb 9-1: Invalid ep0 maxpacket: 16 [ 92.355533][ T57] usb usb9-port1: attempt power cycle [ 92.731343][ T57] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 92.766223][ T57] usb 9-1: Invalid ep0 maxpacket: 16 [ 92.774774][ T6959] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.777285][ T6959] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 92.799724][ T6959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.802209][ T6959] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 92.814970][ T6959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.817972][ T6959] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 92.901518][ T57] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 92.932140][ T57] usb 9-1: Invalid ep0 maxpacket: 16 [ 92.935987][ T57] usb usb9-port1: unable to enumerate USB device [ 92.957847][ T6959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.960201][ T6959] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 93.019234][ T5844] usb 5-1: USB disconnect, device number 12 [ 93.037041][ T5844] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 93.171394][ T5881] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 93.291288][ T1041] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 93.321502][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 93.324009][ T5881] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 93.327773][ T5881] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.331104][ T5881] usb 8-1: config 0 interface 0 has no altsetting 0 [ 93.335486][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.338178][ T5881] usb 8-1: Product: syz [ 93.339495][ T5881] usb 8-1: Manufacturer: syz [ 93.341006][ T5881] usb 8-1: SerialNumber: syz [ 93.344778][ T5881] usb 8-1: config 0 descriptor?? [ 93.451289][ T1041] usb 7-1: Using ep0 maxpacket: 8 [ 93.455687][ T1041] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 93.472189][ T1041] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.475355][ T1041] usb 7-1: config 179 has no interface number 0 [ 93.477735][ T1041] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 93.491218][ T1041] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 93.495470][ T1041] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.499605][ T1041] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 93.511223][ T1041] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 93.521249][ T1041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.526859][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.552920][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 93.558457][ T5881] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21 [ 93.566876][ T5881] imon:send_packet: packet tx failed (-71) [ 93.581345][ T5881] imon 8-1:0.0: panel buttons/knobs setup failed [ 93.631917][ T5881] rc_core: IR keymap rc-imon-pad not found [ 93.633836][ T5881] Registered IR keymap rc-empty [ 93.635409][ T5881] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 93.638572][ T5881] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 93.641976][ T5881] imon:send_packet: packet tx failed (-71) [ 93.661311][ T5881] imon 8-1:0.0: remote input dev register failed [ 93.663372][ T5881] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 93.671530][ T5881] imon 8-1:0.0: unable to initialize intf0, err 0 [ 93.673553][ T5881] imon:imon_probe: failed to initialize context! [ 93.675641][ T5881] imon 8-1:0.0: unable to register, err -19 [ 93.679478][ T5881] usb 8-1: USB disconnect, device number 16 [ 93.739073][ T1041] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input23 [ 93.937146][ T34] usb 7-1: USB disconnect, device number 13 [ 93.937169][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 93.942115][ C2] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 94.051330][ T5881] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 94.081245][ T41] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 94.202024][ T5881] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 94.206984][ T5881] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 94.212182][ T5881] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 94.216465][ T5881] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.221328][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.224711][ T5881] usb 8-1: Product: syz [ 94.226468][ T5881] usb 8-1: Manufacturer: syz [ 94.228364][ T5881] usb 8-1: SerialNumber: syz [ 94.231992][ T41] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.232644][ T5881] usb 8-1: config 0 descriptor?? [ 94.236760][ T41] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.238393][ T7131] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 94.244655][ T41] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.250296][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.257699][ T7149] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 94.266958][ T41] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.449139][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 94.453388][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 94.457503][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 94.460834][ T5881] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input24 [ 94.471424][ T5881] imon:send_packet: packet tx failed (-71) [ 94.473962][ T9] usb 5-1: USB disconnect, device number 13 [ 94.492997][ T5881] imon 8-1:0.0: panel buttons/knobs setup failed [ 94.494583][ T7152] syzkaller0: entered promiscuous mode [ 94.497321][ T7152] syzkaller0: entered allmulticast mode [ 94.506986][ T7152] tipc: Enabled bearer , priority 0 [ 94.516926][ T7152] FAULT_INJECTION: forcing a failure. [ 94.516926][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 94.521929][ T7152] CPU: 3 UID: 0 PID: 7152 Comm: syz.2.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.521947][ T7152] Tainted: [L]=SOFTLOCKUP [ 94.521951][ T7152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.521958][ T7152] Call Trace: [ 94.521963][ T7152] [ 94.521967][ T7152] dump_stack_lvl+0x100/0x190 [ 94.521986][ T7152] should_fail_ex.cold+0x5/0xa [ 94.522001][ T7152] should_failslab+0xc2/0x120 [ 94.522018][ T7152] __kmalloc_noprof+0xfc/0x820 [ 94.522031][ T7152] ? __lock_acquire+0x49f/0x1a40 [ 94.522044][ T7152] ? nsim_fib_event_nb+0x64c/0xe40 [ 94.522076][ T7152] nsim_fib_event_nb+0x64c/0xe40 [ 94.522089][ T7152] ? lock_acquire+0x1b9/0x370 [ 94.522103][ T7152] notifier_call_chain+0x99/0x3f0 [ 94.522118][ T7152] atomic_notifier_call_chain+0x71/0x1c0 [ 94.522131][ T7152] call_fib_notifiers+0x33/0x70 [ 94.522152][ T7152] fib6_del+0xebf/0x1790 [ 94.522177][ T7152] ? __pfx_fib6_del+0x10/0x10 [ 94.522192][ T7152] ? fib6_ifdown+0xcd/0x7e0 [ 94.522207][ T7152] fib6_clean_node+0x424/0x5d0 [ 94.522222][ T7152] ? __pfx_fib6_clean_node+0x10/0x10 [ 94.522240][ T7152] fib6_walk_continue+0x451/0x8d0 [ 94.522255][ T7152] fib6_walk+0x182/0x370 [ 94.522267][ T7152] fib6_clean_tree+0xdc/0x120 [ 94.522279][ T7152] ? __pfx_fib6_ifdown+0x10/0x10 [ 94.522289][ T7152] ? __pfx_fib6_clean_tree+0x10/0x10 [ 94.522304][ T7152] ? __pfx_fib6_clean_node+0x10/0x10 [ 94.522318][ T7152] ? __pfx_fib6_ifdown+0x10/0x10 [ 94.522331][ T7152] ? __pfx_fib6_ifdown+0x10/0x10 [ 94.522341][ T7152] __fib6_clean_all+0x107/0x2d0 [ 94.522356][ T7152] rt6_disable_ip+0x2a6/0x980 [ 94.522369][ T7152] ? __pfx_rt6_disable_ip+0x10/0x10 [ 94.522383][ T7152] addrconf_ifdown.isra.0+0x11d/0x1b70 [ 94.522398][ T7152] ? trace_contention_end+0x126/0x160 [ 94.522414][ T7152] ? __mutex_lock+0x26d/0x1bd0 [ 94.522430][ T7152] ? tee_netdev_event+0x8a/0x3d0 [ 94.522450][ T7152] ? find_held_lock+0x2b/0x80 [ 94.522459][ T7152] ? tee_netdev_event+0x300/0x3d0 [ 94.522472][ T7152] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 94.522491][ T7152] addrconf_notify+0x7c6/0x1ba0 [ 94.522509][ T7152] ? __pfx_tls_dev_event+0x10/0x10 [ 94.522530][ T7152] ? __pfx_addrconf_notify+0x10/0x10 [ 94.522547][ T7152] ? ip6mr_device_event+0x1c4/0x230 [ 94.522571][ T7152] notifier_call_chain+0x99/0x3f0 [ 94.522584][ T7152] call_netdevice_notifiers_info+0xbe/0x110 [ 94.522599][ T7152] netif_set_mtu_ext+0x48b/0x7b0 [ 94.522617][ T7152] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 94.522644][ T7152] netif_set_mtu+0x9c/0x130 [ 94.522660][ T7152] ? __pfx_netif_set_mtu+0x10/0x10 [ 94.522681][ T7152] ? full_name_hash+0xbc/0x100 [ 94.522698][ T7152] dev_set_mtu+0xb2/0x260 [ 94.522710][ T7152] dev_ifsioc+0x21b/0x1fc0 [ 94.522721][ T7152] ? __pfx_dev_ifsioc+0x10/0x10 [ 94.522730][ T7152] ? __pfx___mutex_lock+0x10/0x10 [ 94.522749][ T7152] ? dev_load+0x8e/0x240 [ 94.522764][ T7152] ? dev_load+0x8e/0x240 [ 94.522783][ T7152] dev_ioctl+0x342/0x10e0 [ 94.522793][ T7152] sock_do_ioctl+0x1a0/0x280 [ 94.522807][ T7152] ? __pfx_sock_do_ioctl+0x10/0x10 [ 94.522823][ T7152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.522840][ T7152] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 94.522861][ T7152] sock_ioctl+0x599/0x6b0 [ 94.522875][ T7152] ? __pfx_sock_ioctl+0x10/0x10 [ 94.522887][ T7152] ? hook_file_ioctl_common+0x140/0x440 [ 94.522910][ T7152] ? selinux_file_ioctl+0x13b/0x290 [ 94.522925][ T7152] ? selinux_file_ioctl+0xb6/0x290 [ 94.522941][ T7152] ? __pfx_sock_ioctl+0x10/0x10 [ 94.522955][ T7152] __x64_sys_ioctl+0x18e/0x210 [ 94.522973][ T7152] do_syscall_64+0x115/0x870 [ 94.522988][ T7152] ? clear_bhb_loop+0x70/0xc0 [ 94.523002][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.523014][ T7152] RIP: 0033:0x7fc9e939e0d9 [ 94.523024][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.523035][ T7152] RSP: 002b:00007fc9ea238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.523046][ T7152] RAX: ffffffffffffffda RBX: 00007fc9e9625fa0 RCX: 00007fc9e939e0d9 [ 94.523053][ T7152] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000006 [ 94.523060][ T7152] RBP: 00007fc9ea238090 R08: 0000000000000000 R09: 0000000000000000 [ 94.523065][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.523072][ T7152] R13: 00007fc9e9626038 R14: 00007fc9e9625fa0 R15: 00007ffe21823dd8 [ 94.523085][ T7152] [ 94.546540][ T7152] tipc: Resetting bearer [ 94.572681][ T5881] rc_core: IR keymap rc-imon-pad not found [ 94.714879][ T7151] tipc: Resetting bearer [ 94.715478][ T5881] Registered IR keymap rc-empty [ 94.719728][ T5881] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 94.724255][ T5881] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 94.729448][ T5881] imon:send_packet: packet tx failed (-71) [ 94.737102][ T7151] tipc: Disabling bearer [ 94.748690][ T7157] syzkaller0: entered promiscuous mode [ 94.750970][ T7157] syzkaller0: entered allmulticast mode [ 94.751427][ T5881] imon 8-1:0.0: remote input dev register failed [ 94.755791][ T5881] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 94.762392][ T7157] tipc: Started in network mode [ 94.764740][ T7157] tipc: Node identity ea45b57bc6bc, cluster identity 4711 [ 94.767825][ T7157] tipc: Enabled bearer , priority 0 [ 94.773803][ T5881] imon 8-1:0.0: unable to initialize intf0, err 0 [ 94.775223][ T7157] syzkaller0: MTU too low for tipc bearer [ 94.776231][ T5881] imon:imon_probe: failed to initialize context! [ 94.778474][ T7157] tipc: Disabling bearer [ 94.780431][ T5881] imon 8-1:0.0: unable to register, err -19 [ 94.787899][ T5881] usb 8-1: USB disconnect, device number 17 [ 94.907967][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 94.907980][ T42] audit: type=1400 audit(1787070900.642:788): avc: denied { read write } for pid=7162 comm="syz.4.377" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 94.924112][ T42] audit: type=1400 audit(1787070900.642:789): avc: denied { open } for pid=7162 comm="syz.4.377" path="/24/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 95.019707][ T42] audit: type=1400 audit(1787070900.752:790): avc: denied { read write } for pid=7165 comm="syz.3.378" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 95.043393][ T42] audit: type=1400 audit(1787070900.752:791): avc: denied { open } for pid=7165 comm="syz.3.378" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 95.071268][ T42] audit: type=1400 audit(1787070900.802:792): avc: denied { ioctl } for pid=7165 comm="syz.3.378" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.085782][ T42] audit: type=1400 audit(1787070900.822:793): avc: denied { getopt } for pid=7165 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.105109][ T42] audit: type=1400 audit(1787070900.842:794): avc: denied { read } for pid=7174 comm="syz.2.381" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.234690][ T7181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7181 comm=syz.2.384 [ 95.239578][ T7181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 95.295563][ T42] audit: type=1400 audit(1787070901.032:795): avc: denied { append } for pid=7182 comm="syz.2.385" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 95.347213][ T7187] FAULT_INJECTION: forcing a failure. [ 95.347213][ T7187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.352224][ T7187] CPU: 0 UID: 0 PID: 7187 Comm: syz.3.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.352251][ T7187] Tainted: [L]=SOFTLOCKUP [ 95.352257][ T7187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.352269][ T7187] Call Trace: [ 95.352275][ T7187] [ 95.352282][ T7187] dump_stack_lvl+0x100/0x190 [ 95.352312][ T7187] should_fail_ex.cold+0x5/0xa [ 95.352334][ T7187] _copy_from_iter+0x1f4/0x1690 [ 95.352368][ T7187] ? __pfx__copy_from_iter+0x10/0x10 [ 95.352396][ T7187] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 95.352432][ T7187] copy_page_from_iter+0x238/0x300 [ 95.352462][ T7187] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 95.352509][ T7187] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 95.352531][ T7187] ? unwind_get_return_address+0x59/0xa0 [ 95.352561][ T7187] ? arch_stack_walk+0xa6/0xf0 [ 95.352603][ T7187] ? _kstrtoull+0x13c/0x1f0 [ 95.352623][ T7187] ? __pfx__kstrtoull+0x10/0x10 [ 95.352648][ T7187] tun_get_user+0x16d6/0x3c20 [ 95.352684][ T7187] ? __pfx_tun_get_user+0x10/0x10 [ 95.352709][ T7187] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 95.352737][ T7187] ? find_held_lock+0x2b/0x80 [ 95.352754][ T7187] ? tun_get+0x191/0x370 [ 95.352775][ T7187] ? tun_get+0x191/0x370 [ 95.352799][ T7187] tun_chr_write_iter+0xdc/0x200 [ 95.352825][ T7187] vfs_write+0x6ac/0x1050 [ 95.352842][ T7187] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 95.352867][ T7187] ? __pfx_vfs_write+0x10/0x10 [ 95.352881][ T7187] ? find_held_lock+0x2b/0x80 [ 95.352906][ T7187] ksys_write+0x12a/0x250 [ 95.352925][ T7187] ? __pfx_ksys_write+0x10/0x10 [ 95.352947][ T7187] do_syscall_64+0x115/0x870 [ 95.352970][ T7187] ? clear_bhb_loop+0x70/0xc0 [ 95.352995][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.353014][ T7187] RIP: 0033:0x7f2e4375e90e [ 95.353029][ T7187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.353044][ T7187] RSP: 002b:00007f2e44650fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.353073][ T7187] RAX: ffffffffffffffda RBX: 00007f2e446516c0 RCX: 00007f2e4375e90e [ 95.353084][ T7187] RDX: 0000000000000046 RSI: 0000200000000700 RDI: 00000000000000c8 [ 95.353094][ T7187] RBP: 00007f2e44651090 R08: 0000000000000000 R09: 0000000000000000 [ 95.353106][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.353116][ T7187] R13: 00007f2e43a26038 R14: 00007f2e43a25fa0 R15: 00007fff0bd4adb8 [ 95.353140][ T7187] [ 95.381307][ T57] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 95.601236][ T57] usb 9-1: Using ep0 maxpacket: 16 [ 95.604115][ T57] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 95.608826][ T57] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 95.612692][ T57] usb 9-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.619438][ T57] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.636558][ T57] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.636825][ T7196] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 95.641214][ T57] usb 9-1: config 0 interface 0 has no altsetting 0 [ 95.651547][ T41] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 95.658812][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.663794][ T57] usb 9-1: Product: syz [ 95.665670][ T57] usb 9-1: Manufacturer: syz [ 95.667686][ T57] usb 9-1: SerialNumber: syz [ 95.676362][ T57] usb 9-1: config 0 descriptor?? [ 95.678894][ T7196] syzkaller0: entered promiscuous mode [ 95.679115][ T7179] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.680628][ T7196] syzkaller0: entered allmulticast mode [ 95.724215][ T5814] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 95.801316][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 95.804725][ T41] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 95.809651][ T41] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.817370][ T41] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.821744][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 95.824656][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.830599][ T41] usb 8-1: config 0 descriptor?? [ 95.882006][ T5814] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 95.884764][ T7179] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.890148][ T57] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input26 [ 95.892238][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.896762][ T5814] usb 7-1: Product: syz [ 95.898723][ T5814] usb 7-1: Manufacturer: syz [ 95.900751][ T5814] usb 7-1: SerialNumber: syz [ 96.054317][ T41] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 96.057409][ T41] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 96.060590][ T41] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 96.064146][ T41] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 96.067742][ T41] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 96.077544][ T41] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 96.184565][ T7179] FAULT_INJECTION: forcing a failure. [ 96.184565][ T7179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.196243][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.4.383 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.196273][ T7179] Tainted: [L]=SOFTLOCKUP [ 96.196280][ T7179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.196290][ T7179] Call Trace: [ 96.196297][ T7179] [ 96.196305][ T7179] dump_stack_lvl+0x100/0x190 [ 96.196335][ T7179] should_fail_ex.cold+0x5/0xa [ 96.196360][ T7179] _copy_to_user+0x32/0xd0 [ 96.196390][ T7179] simple_read_from_buffer+0xcb/0x170 [ 96.196413][ T7179] proc_fail_nth_read+0x1af/0x230 [ 96.196436][ T7179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.196457][ T7179] ? rw_verify_area+0xce/0x6d0 [ 96.196483][ T7179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.196503][ T7179] vfs_read+0x1e4/0xb40 [ 96.196523][ T7179] ? __pfx_vfs_read+0x10/0x10 [ 96.196538][ T7179] ? __fget_files+0x215/0x3d0 [ 96.196564][ T7179] ? __fget_files+0x21f/0x3d0 [ 96.196590][ T7179] ksys_read+0x12a/0x250 [ 96.196606][ T7179] ? __pfx_ksys_read+0x10/0x10 [ 96.196636][ T7179] do_syscall_64+0x115/0x870 [ 96.196663][ T7179] ? clear_bhb_loop+0x70/0xc0 [ 96.196685][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.196703][ T7179] RIP: 0033:0x7f9b98f5e90e [ 96.196719][ T7179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.196736][ T7179] RSP: 002b:00007f9b99ea4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.196753][ T7179] RAX: ffffffffffffffda RBX: 00007f9b99ea56c0 RCX: 00007f9b98f5e90e [ 96.196764][ T7179] RDX: 000000000000000f RSI: 00007f9b99ea50a0 RDI: 0000000000000004 [ 96.196773][ T7179] RBP: 00007f9b99ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 96.196784][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.196794][ T7179] R13: 00007f9b99226038 R14: 00007f9b99225fa0 R15: 00007fffc4c6ebb8 [ 96.196818][ T7179] [ 96.209721][ T57] usb 9-1: USB disconnect, device number 7 [ 96.251323][ T41] usb 8-1: USB disconnect, device number 18 [ 96.333745][ T5814] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 96.338206][ T7202] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.686410][ T42] audit: type=1400 audit(1787070902.422:796): avc: denied { read write } for pid=7190 comm="syz.2.389" name="lp0" dev="devtmpfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 96.695098][ T42] audit: type=1400 audit(1787070902.422:797): avc: denied { open } for pid=7190 comm="syz.2.389" path="/dev/usb/lp0" dev="devtmpfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 97.373734][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 97.545321][ T7236] syzkaller0: entered promiscuous mode [ 97.547178][ T7236] syzkaller0: entered allmulticast mode [ 97.556021][ T7236] tipc: Started in network mode [ 97.557584][ T7236] tipc: Node identity 020ea4c901fe, cluster identity 4711 [ 97.560055][ T7236] tipc: Enabled bearer , priority 0 [ 97.579436][ T7235] tipc: Resetting bearer [ 97.646765][ T7235] tipc: Disabling bearer [ 97.793153][ T7243] xt_hashlimit: size too large, truncated to 1048576 [ 98.045078][ T7260] syzkaller0: entered promiscuous mode [ 98.046885][ T7260] syzkaller0: entered allmulticast mode [ 98.050451][ T7260] FAULT_INJECTION: forcing a failure. [ 98.050451][ T7260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.055540][ T7260] CPU: 3 UID: 0 PID: 7260 Comm: syz.4.409 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.055558][ T7260] Tainted: [L]=SOFTLOCKUP [ 98.055562][ T7260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.055569][ T7260] Call Trace: [ 98.055573][ T7260] [ 98.055578][ T7260] dump_stack_lvl+0x100/0x190 [ 98.055616][ T7260] should_fail_ex.cold+0x5/0xa [ 98.055653][ T7260] _copy_from_iter+0x1f4/0x1690 [ 98.055700][ T7260] ? __pfx__copy_from_iter+0x10/0x10 [ 98.055718][ T7260] ? _copy_from_iter+0x270/0x1690 [ 98.055736][ T7260] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 98.055764][ T7260] skb_copy_datagram_from_iter+0x11f/0x720 [ 98.055785][ T7260] packet_sendmsg+0x2257/0x4f00 [ 98.055813][ T7260] ? sock_has_perm+0x25a/0x2f0 [ 98.055856][ T7260] ? __pfx_sock_has_perm+0x10/0x10 [ 98.055875][ T7260] ? __pfx_packet_sendmsg+0x10/0x10 [ 98.055892][ T7260] ? selinux_socket_sendmsg+0x198/0x2f0 [ 98.055909][ T7260] ____sys_sendmsg+0xa4d/0xbe0 [ 98.055929][ T7260] ? __pfx_packet_sendmsg+0x10/0x10 [ 98.055945][ T7260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.055963][ T7260] ___sys_sendmsg+0x190/0x1e0 [ 98.055978][ T7260] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.055992][ T7260] ? __lock_acquire+0x49f/0x1a40 [ 98.056015][ T7260] ? get_pid_task+0x106/0x250 [ 98.056045][ T7260] __sys_sendmsg+0x160/0x210 [ 98.056056][ T7260] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.056073][ T7260] do_syscall_64+0x115/0x870 [ 98.056101][ T7260] ? clear_bhb_loop+0x70/0xc0 [ 98.056114][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.056125][ T7260] RIP: 0033:0x7f9b98f9e0d9 [ 98.056135][ T7260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.056146][ T7260] RSP: 002b:00007f9b99ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.056164][ T7260] RAX: ffffffffffffffda RBX: 00007f9b99225fa0 RCX: 00007f9b98f9e0d9 [ 98.056171][ T7260] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 98.056178][ T7260] RBP: 00007f9b99ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 98.056184][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.056190][ T7260] R13: 00007f9b99226038 R14: 00007f9b99225fa0 R15: 00007fffc4c6ebb8 [ 98.056203][ T7260] [ 98.421482][ T7265] FAULT_INJECTION: forcing a failure. [ 98.421482][ T7265] name failslab, interval 1, probability 0, space 0, times 0 [ 98.427166][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.4.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.427186][ T7265] Tainted: [L]=SOFTLOCKUP [ 98.427190][ T7265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.427197][ T7265] Call Trace: [ 98.427202][ T7265] [ 98.427207][ T7265] dump_stack_lvl+0x100/0x190 [ 98.427234][ T7265] should_fail_ex.cold+0x5/0xa [ 98.427249][ T7265] should_failslab+0xc2/0x120 [ 98.427275][ T7265] kmem_cache_alloc_noprof+0x91/0x6a0 [ 98.427293][ T7265] ? __kvmalloc_node_noprof+0x36d/0x970 [ 98.427306][ T7265] ? netfs_alloc_subrequest+0x116/0x3f0 [ 98.427328][ T7265] netfs_alloc_subrequest+0x116/0x3f0 [ 98.427343][ T7265] netfs_prepare_write+0x76/0x7b0 [ 98.427362][ T7265] netfs_unbuffered_write+0x75c/0x2020 [ 98.427382][ T7265] ? rolling_buffer_init+0x8d/0xc0 [ 98.427399][ T7265] netfs_unbuffered_write_iter_locked+0x7d6/0xa80 [ 98.427415][ T7265] netfs_unbuffered_write_iter+0x442/0x720 [ 98.427430][ T7265] netfs_file_write_iter+0x1c3/0x4a0 [ 98.427444][ T7265] v9fs_file_write_iter+0x9b/0x100 [ 98.427464][ T7265] vfs_write+0x6ac/0x1050 [ 98.427480][ T7265] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 98.427493][ T7265] ? __pfx_vfs_write+0x10/0x10 [ 98.427512][ T7265] ksys_write+0x12a/0x250 [ 98.427528][ T7265] ? __pfx_ksys_write+0x10/0x10 [ 98.427542][ T7265] do_syscall_64+0x115/0x870 [ 98.427562][ T7265] ? clear_bhb_loop+0x70/0xc0 [ 98.427576][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.427587][ T7265] RIP: 0033:0x7f9b98f9e0d9 [ 98.427601][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.427611][ T7265] RSP: 002b:00007f9b99ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.427624][ T7265] RAX: ffffffffffffffda RBX: 00007f9b99225fa0 RCX: 00007f9b98f9e0d9 [ 98.427634][ T7265] RDX: 0000000000000042 RSI: 0000200000000600 RDI: 0000000000000003 [ 98.427644][ T7265] RBP: 00007f9b99ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 98.427653][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.427662][ T7265] R13: 00007f9b99226038 R14: 00007f9b99225fa0 R15: 00007fffc4c6ebb8 [ 98.427776][ T7265] [ 98.427806][ T7265] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] SMP KASAN NOPTI [ 98.511125][ T7265] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 98.514062][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.4.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.517662][ T7265] Tainted: [L]=SOFTLOCKUP [ 98.519229][ T7265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.522838][ T7265] RIP: 0010:netfs_prepare_write+0xbc/0x7b0 [ 98.524822][ T7265] Code: e1 07 38 ca 7f 08 84 d2 0f 85 04 06 00 00 48 8d bb ad 00 00 00 0f b6 45 52 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <0f> b6 14 11 48 89 f9 83 e1 07 38 ca 7f 08 84 d2 0f 85 c1 05 00 00 [ 98.532051][ T7265] RSP: 0018:ffffc900047cfb00 EFLAGS: 00010203 [ 98.534801][ T7265] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000015 [ 98.538286][ T7265] RDX: dffffc0000000000 RSI: ffffffff82cc2b39 RDI: 00000000000000ad [ 98.541857][ T7265] RBP: ffff8880383d6de0 R08: 00000000ffffffff R09: fffffbfff1dfdce6 [ 98.544753][ T7265] R10: ffffffff8efee733 R11: 0000000000000000 R12: ffff8880383d6d00 [ 98.547395][ T7265] R13: ffff8880383d6eb8 R14: 0000000000000000 R15: ffff8880383d6e32 [ 98.550224][ T7265] FS: 00007f9b99ea56c0(0000) GS:ffff8880d5bd6000(0000) knlGS:0000000000000000 [ 98.553330][ T7265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.555736][ T7265] CR2: 0000200000001000 CR3: 00000000284c8000 CR4: 0000000000352ef0 [ 98.558412][ T7265] Call Trace: [ 98.559539][ T7265] [ 98.560610][ T7265] netfs_unbuffered_write+0x75c/0x2020 [ 98.562576][ T7265] ? rolling_buffer_init+0x8d/0xc0 [ 98.564299][ T7265] netfs_unbuffered_write_iter_locked+0x7d6/0xa80 [ 98.566429][ T7265] netfs_unbuffered_write_iter+0x442/0x720 [ 98.568443][ T7265] netfs_file_write_iter+0x1c3/0x4a0 [ 98.570289][ T7265] v9fs_file_write_iter+0x9b/0x100 [ 98.572254][ T7265] vfs_write+0x6ac/0x1050 [ 98.573736][ T7265] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 98.575616][ T7265] ? __pfx_vfs_write+0x10/0x10 [ 98.577260][ T7265] ksys_write+0x12a/0x250 [ 98.578754][ T7265] ? __pfx_ksys_write+0x10/0x10 [ 98.580419][ T7265] do_syscall_64+0x115/0x870 [ 98.582191][ T7265] ? clear_bhb_loop+0x70/0xc0 [ 98.584196][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.586749][ T7265] RIP: 0033:0x7f9b98f9e0d9 [ 98.588727][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.596944][ T7265] RSP: 002b:00007f9b99ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.600663][ T7265] RAX: ffffffffffffffda RBX: 00007f9b99225fa0 RCX: 00007f9b98f9e0d9 [ 98.604191][ T7265] RDX: 0000000000000042 RSI: 0000200000000600 RDI: 0000000000000003 [ 98.607600][ T7265] RBP: 00007f9b99ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 98.611195][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.614659][ T7265] R13: 00007f9b99226038 R14: 00007f9b99225fa0 R15: 00007fffc4c6ebb8 [ 98.618215][ T7265] [ 98.619613][ T7265] Modules linked in: [ 98.621744][ T7265] ---[ end trace 0000000000000000 ]--- [ 98.627539][ T5814] usb 7-1: USB disconnect, device number 14 [ 98.628510][ T7265] RIP: 0010:netfs_prepare_write+0xbc/0x7b0 [ 98.631030][ T5814] usblp0: removed [ 98.631544][ T7265] Code: e1 07 38 ca 7f 08 84 d2 0f 85 04 06 00 00 48 8d bb ad 00 00 00 0f b6 45 52 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <0f> b6 14 11 48 89 f9 83 e1 07 38 ca 7f 08 84 d2 0f 85 c1 05 00 00 [ 98.639504][ T7265] RSP: 0018:ffffc900047cfb00 EFLAGS: 00010203 [ 98.641937][ T7265] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000015 [ 98.644602][ T7265] RDX: dffffc0000000000 RSI: ffffffff82cc2b39 RDI: 00000000000000ad [ 98.647345][ T7265] RBP: ffff8880383d6de0 R08: 00000000ffffffff R09: fffffbfff1dfdce6 [ 98.650013][ T7265] R10: ffffffff8efee733 R11: 0000000000000000 R12: ffff8880383d6d00 [ 98.652668][ T7265] R13: ffff8880383d6eb8 R14: 0000000000000000 R15: ffff8880383d6e32 [ 98.655326][ T7265] FS: 00007f9b99ea56c0(0000) GS:ffff8880d5bd6000(0000) knlGS:0000000000000000 [ 98.658513][ T7265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.660739][ T7265] CR2: 00007f9b98feb7c0 CR3: 00000000284c8000 CR4: 0000000000352ef0 [ 98.663515][ T7265] Kernel panic - not syncing: Fatal exception [ 98.666122][ T7265] Kernel Offset: disabled [ 98.667576][ T7265] Rebooting in 86400 seconds..