last executing test programs: 44.597437618s ago: executing program 0 (id=855): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1ff, 0xfff8, 0x8, 0x8, 0x5}, 0x0) syz_open_dev$vim2m(0x0, 0x105, 0x2) gettid() r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000040)={0x0, 0x2b, 0x1, 0xfffffffd, 0x5, 0x9, '0\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00 \x00', 0x0, 0x0, 0x40, 0xd, 0xfc, 0x4, 0xe}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x101, 0x6}, &(0x7f0000000140)=0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) 41.423513053s ago: executing program 0 (id=875): unshare(0x6a040000) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000020000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) 39.45657752s ago: executing program 0 (id=885): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1ff, 0xfff8, 0x8, 0x8, 0x5}, 0x0) syz_open_dev$vim2m(0x0, 0x105, 0x2) gettid() r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000040)={0x0, 0x2b, 0x1, 0xfffffffd, 0x5, 0x9, '0\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00 \x00', 0x0, 0x0, 0x40, 0xd, 0xfc, 0x4, 0xe}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x101, 0x6}, &(0x7f0000000140)=0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) 36.688983604s ago: executing program 2 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x801, 0x10) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5a8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 35.958133927s ago: executing program 0 (id=894): socket(0xa, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$kcm(0x29, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) sendmsg$alg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000840}, 0x0) recvmmsg(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x4006fb1}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1}, 0xd8}], 0x2, 0x40010000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0045543, 0x0) 34.983112566s ago: executing program 1 (id=899): symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700, 0x0, 0x64000000}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 34.526462617s ago: executing program 1 (id=900): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x658b00, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x311) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001cc0)=ANY=[], 0x414}, 0x1, 0x0, 0x0, 0x20004040}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4a}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x0, 0x15, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK, @TCA_IPT_INDEX={0x0, 0x3, 0xffffffff}, @TCA_IPT_INDEX={0x0, 0x3, 0x6}, @TCA_IPT_TARG={0x0, 0x6, {0xce, 'nat\x00', 0x3, 0x2000, "8906cae13b01bd94b369"}}, @TCA_IPT_TARG={0x0, 0x6, {0x2f1a, 'filter\x00', 0x0, 0x3, "177fc23d94f121ce1d4ae98630514d3a9d7e91368a5546e967a3fbce1313fae460bb2dc864761800e02de64fc6f0628d8f199abc6821185d7b5ff39d8ef6d321eb489d220ccaeedfbf93df0e998af3ab201f57faeab0369d298a"}}]}, {0x0, 0x6, "1a2c3ed72f1416a52175186862989f01dba95a06a2f8251000c288258ac6ae848ecb00ccf0532b77f47e1790d77ae21e3f803a7bfb0d830841a83f01966db474aac95cba40b0184f2162c31ef4c73f98026063be1b1a5d1145c36b051157f7e39e98e3bf69f81cb230ded5ef5dde36dc93bb3c3198561621fd6bda68118fcb7eae76"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x5}}}}, @m_connmark={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x7, 0x80, 0x0, 0xe3, 0x8001}, 0x1}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x200, 0x8, 0x5, 0x7, 0xb980}, 0x8}}]}, {0x0, 0x6, "18efd522352816dc0824b7d1c1e2c962ae63e0703f67becd055154d0755550becb83c965cd8320bfef546a79086d2eddb76139876653368409698c2995495b7ce13405e17d457f39579a36186a9e02576979f065f6b234cac8d7722e"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x5, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.215470194s ago: executing program 3 (id=901): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000070000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00"], 0xd0}}, 0x0) 34.017217228s ago: executing program 1 (id=902): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) chdir(&(0x7f0000000480)='./cgroup\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setuid(0xee01) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 33.716032708s ago: executing program 3 (id=903): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x180000) connect$phonet_pipe(r0, &(0x7f0000000100)={0x23, 0x2, 0x9, 0x7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r2, 0xfffffffffffffffe, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000fc0)={0x43, 0x9, 0x1, {0x0, 0x8, 0x1ff, 0x2f, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0xb2, 0x7}}, 0x43) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000f80), 0x800, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 33.684652357s ago: executing program 0 (id=904): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1ff, 0xfff8, 0x8, 0x8, 0x5}, 0x0) syz_open_dev$vim2m(0x0, 0x105, 0x2) gettid() r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000040)={0x0, 0x2b, 0x1, 0xfffffffd, 0x5, 0x9, '0\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00 \x00', 0x0, 0x0, 0x40, 0xd, 0xfc, 0x4, 0xe}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x101, 0x6}, &(0x7f0000000140)=0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) 33.530843242s ago: executing program 1 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x17}}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x247, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x97, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0x2ad}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x1, 0xc}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x111, 0x2, 0x9, 0xb, 0x8, 0xf7}, 0x3e, &(0x7f0000000600)={0x5, 0xf, 0x3e, 0x1, [@generic={0x39, 0x10, 0x1, "0336d3e61e96df9c85602a354ecddb7900be55a8b8c698789453d3f7b9868b42f12bd7a01198b08913af800e9d3a1c55f9b19be2fe91"}]}, 0x7, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000680)=@lang_id={0xfffffffffffffdac, 0x3, 0xc01}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x40c}}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000202010100000000000000000300000508000000020600074000030000080008402a94065c"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000880)={"1c13d2e231343fc1634b4d0da3078818d31e1756c6ab1346c7ab0c1f70139f66266c3d8734c3e50d40639916e52d4444a05ef3e0d5cf4bc6b33f637ebe71de7839018d2795b83de90e3d509e6561bd0878fcf80a6fba1a60d6ac89dabbaf16eaae28d5a0651d8d2bd510e54804d552d313f0a7e3deaa8b6455ceb92eaaa01874b7dbd637f2f68a771a587ae4888ae2fa6d962dbda15e5861fc281833c8e82f4b55acf89d92fc3a0154be8763209d48d8d411132231ade002e330cd826612a983f42bba75d3e295aa7508f8e5f0c5cf46dd8ae602c5243d415e320f9e3ed53b12bb755213f28b5ccdee9f54ff9abbc679c397255b45fc1d258be287a0c87dc91048cfcee9aa7d602e1df9afadab861de2b3b2a0583cf1f381579a29e04df1010ee16844f9c603b1585c4f10158026a9a1344a9a569dff84a77d39adda8f995a3431ab12e49edcc0717eb61cdf560a26d2cc9f2aadbb8dd77b067b1c0ad04326f213dcd3e2bb596bfe13741284e37f6889f3ffef7ee5013a217b6ad7c6a509ca9df4fa1be6704b29ba6e721227f9568536b6a1b80ac6a871d7361b772b9492dcd46a5f439ac2bb8ef988204e1943d1eb71a25eb7106f2cd15221d976c7674a8818b618120e25f535f4fe68d2133ad0d3304cf25c519a821dcebee26d4e868863e0b7352ef77eabfd5a1c5474f41b1dcf507af5dcc262942a17a21b612de6e29171f9665cf611f45b6c1effca779792ed262215fc1a1b4bf2608e4186a0bbf5b645e25e830835535092453c86ff891568cb6538bb3d879e23883873cd96019219ae09c6e12f3295781ce7c46738e18e8a2543a351c62e0faffca46025023ff25a43e59e825be2fb4f3bc75389c011595bfa102b329a8ecea033a91f94829783e58ff630862341ca0f7b851581bcf3ea4d6afce7dbf1b6bc12ddfad2f0d198d7cebe3743c84ec204917f1586b9dc8c529a55d0626ab254dd1b64b612fa09c859bb999a77fe1c2efd58a66207227b9db91d9bcd5dfcf1b9b05a8bc2b8967db452458b0b22294f4925fa372638c6f5d86882c677e4f2cf56d60dfa8234883ddd4a6824fc73926ebe9d967fd6297f82cb2fba65830c888da3f1f63e9deb8231894116e151dd8bcffcb1f66769862676668b3c93d0c861492c7395afc554dac4d5c5272441b84baec9e36c11288d736752c70bdc462e22272c4fbb04ff6e6530b6ab9fd3f4118dfb8e3dccf5540dd088cbd40df686f6be4dd57ca6d6f134d6b113673d635424f99d3f27fc82ba3514a8412419da91872323c6718db532f011554d1e7f150ecc79cd762d909316b146dbbfaa9a5e61f184dc997f98fb32918a20b345ae32a444250cbfdb2ed9c896de8931e3ae9989f5e31e691fd31139cdc88468571196e9446d3ce26bc8fdd5e090d33989fb2cc42ceff8b9fd31539e635b88b53cec00"}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0xf, 0xf4, 0x2, 0xfd, 0xd7, 0x1, 0x0, 0x8, 0x3, 0x6}, {0x10102006, 0xffff1000, 0x0, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0x2, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x2, 0x6, 0x7, 0x11, 0x21, 0xc, 0x1, 0x3, 0x9}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x4a, 0x2, 0xd, 0x6, 0xff, 0x0, 0x9}, {0xffff1000, 0x4, 0xf, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x55, 0xff, 0x80, 0x80, 0x10, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xeeef0000, 0x2, 0xd, 0x5, 0xff, 0x3, 0xa, 0x0, 0x54, 0x6, 0x0, 0x7}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0x0, 0x0, 0xdddd1000, 0x22a0, 0x2, 0x0, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x1}, 0x0, 0x0, r1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_pressure(r11, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r12, &(0x7f0000000100)={'full', 0x25, 0x4, 0x20, 0xb}, 0x2f) 32.757189549s ago: executing program 4 (id=906): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, &(0x7f0000000140)=0xffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x4, &(0x7f00000003c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x3e8, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x402000, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000400)) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x637, 0x4000) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x5, 0xa, 0x7, 0x1d, "0eff571ea9dc55eebfe4f6e6da10229ccb5e6e8bde397f7ad3232fbd1f6e62d78c3035196ca897c2e6b2a45879413ecde5ccd7ca45350c481392d6503d0cb8e9", "6df624dbfce246f37f05a8374872f138be4312574b8838cf1b5019721505ddaf", [0x0, 0x4]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="111c8701feaa16bca4ac7472ee15", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 31.775413258s ago: executing program 3 (id=907): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x38, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ':[*-}\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r6}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {r6, 0x4}}]}, 0xc4}}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000040)=0x29, 0x4) bind$bt_l2cap(r9, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) shutdown(r9, 0x1) move_mount(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 31.652037383s ago: executing program 4 (id=908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000084000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}, 0x1, 0x0, 0x0, 0xe383c033d0ad305}, 0x0) 31.430064898s ago: executing program 4 (id=909): ioctl(0xffffffffffffffff, 0x7f7f, &(0x7f0000000140)="f813d506f7dfc84ef3326e357c8136c77d93e9acaabf2ad95c1be139afe7c7521252d04c3785a6577116c920e45b245f2f180b66ca7236d3150b7bcffd85862ba6e34b9c9bad3199") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(0x0, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 31.26350707s ago: executing program 4 (id=910): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2000000}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 31.188370237s ago: executing program 4 (id=911): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) 30.682537822s ago: executing program 2 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1692b7db", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf2503000000060001004e230000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 30.480855011s ago: executing program 3 (id=913): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) 30.479939392s ago: executing program 0 (id=914): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e23, 0xe4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x987e}}, 0x0, 0x0, 0x3b, 0x0, "b583842ba143f6612ca276c685105eeb9bfa192126c9a49308a03d9e4207aa8dc6aadd76929d7f7c5dd3205802e443496c920230f6edc1d3fc4302b073240eeb35db35d1eac5829b6bd90d264e90ef42"}, 0xd8) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040), 0x420, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x38, 0x32, 0x3b, 0x2d, 0x38]}}}}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r9 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0xffffffffffffffff) 29.904768306s ago: executing program 4 (id=915): socket(0xa, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$kcm(0x29, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) sendmsg$alg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000840}, 0x0) recvmmsg(r6, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x4006fb1}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1}, 0xd8}], 0x2, 0x40010000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0045543, 0x0) 29.84287992s ago: executing program 1 (id=916): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) 29.453667307s ago: executing program 2 (id=917): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x1) recvfrom(r5, 0x0, 0x0, 0x4100, 0x0, 0x0) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r8, 0x10c, 0x7, &(0x7f0000000080)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r7, 0x0, 0x0) 27.715061865s ago: executing program 1 (id=918): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000010025bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="10080400870a04000a00820000aaaaaaaabb0000300016802c00018028000100f8ffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r8, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) read$msr(r7, &(0x7f0000000680)=""/102400, 0x19000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0xfffffffffffffc84, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.713883574s ago: executing program 2 (id=919): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x800002, 0x10000}, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbf5, 0x80000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600001f00000000feff2c707f8f00ff", 0x58}], 0x1) 27.712585908s ago: executing program 3 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x0, 0xd80, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd70a72fc381a7cf772e00fbdbdf2502001100"], 0x1c}}, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000023890bda7a5eea3741a02133019df1640000ffffffff000000000000000000000000000000000000007a94022f183796979fa60e1759497a3898e8abb158ccc19890a1941c29f0b6c0eecaf8fbc1be9641956c59f2d22e46bf02a56795ce0537847d6b1accfacdcd4b61ada1f236dbe8c95893293efbc6deaea280af63836224e3707ea394389ae3ecf74c6fe0dab7b6301309531733eddd36691a215f4bd0910b06c669e4642b6840c6fc5e8708431ba27eac80b4710c930d66b16496beb170ac84e63967080309a566f3edd772c823140744f5a5c50fe87d56391f9cefda1016e87b868b89d1"], 0x0) 27.40741374s ago: executing program 2 (id=921): prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x9) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x38) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ee80) close(r0) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r2, 0xc0401289, &(0x7f00000001c0)={&(0x7f0000000100)="61e1d23b34147b4ca88ef6311f51b5af7d2aa4c6195fad4b77ff0f0b3f8c77", 0x1f, &(0x7f0000000140)=""/85, 0x55}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001340)={'tunl0\x00', &(0x7f0000001280)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0xfffffffc, 0x123e, {{0x19, 0x4, 0x2, 0x2, 0x64, 0x65, 0x0, 0x40, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x7, 0x4, "bed7"}, @cipso={0x86, 0x38, 0x3, [{0x0, 0xa, "10fabb2fed6fd4be"}, {0x0, 0x11, "194e973d345e5167cb345f131e8cec"}, {0x5, 0x9, "fca8151525f86f"}, {0x2, 0xe, "f14d15217bcd7e4d789dd396"}]}, @timestamp_addr={0x44, 0x14, 0xb2, 0x1, 0xa, [{@rand_addr=0x64010101, 0x7}, {@remote, 0x5}]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc6f}, [@map_fd={0x18, 0x8, 0x1, 0x0, r2}]}, &(0x7f0000000240)='syzkaller\x00', 0x2315800, 0x1000, &(0x7f0000000280)=""/4096, 0x40e00, 0x0, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000013c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001400)=[{0x5, 0x1, 0x7, 0x4}, {0x1, 0x5, 0x8, 0xb}, {0x4, 0x4, 0x4, 0x5}, {0x0, 0x2, 0xb, 0x9}, {0x2, 0x2, 0xd}], 0x10, 0x4}, 0x94) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) read$char_usb(r5, &(0x7f0000001540)=""/140, 0x8c) readv(r0, &(0x7f0000001680)=[{&(0x7f0000001600)=""/103, 0x67}], 0x1) getsockname$l2tp6(r4, &(0x7f00000016c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000001700)=0x20) r6 = accept4$unix(r2, &(0x7f0000001740), &(0x7f00000017c0)=0x6e, 0x800) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000001800)={0x0, 0x7, 0x1, [0x6, 0x2, 0x8, 0x6, 0x40], [0x4, 0x7, 0x9, 0xffff, 0x4, 0x1000, 0x6, 0x5, 0x8, 0x800, 0x100, 0x5, 0x4, 0x752, 0x4, 0x80, 0x5, 0x1000, 0xffff, 0xda, 0x1, 0x1, 0x8001, 0xfffffffffffffffa, 0x6baf93f0, 0xffffffffffff8000, 0x4, 0xb, 0x4, 0x4, 0xa4, 0x9, 0x5, 0x5, 0x7, 0x3, 0x30000, 0x5, 0x834e, 0x3, 0x6, 0x7ff, 0x97a, 0x6, 0x0, 0xfffffffffffffb09, 0x80, 0x8, 0x6, 0x6, 0xffff, 0x7, 0x5, 0x8, 0x7, 0x4, 0xdc60, 0x6, 0x200, 0xfffffffffffffbff, 0x92, 0xffff, 0x5, 0x800, 0x1, 0xffff, 0x7, 0x6000, 0xffffffffffffffff, 0xff, 0x6, 0x8d, 0xffffffff00000000, 0x6, 0x6, 0x10000, 0x0, 0x5, 0x24c, 0x100000001, 0x50, 0x2, 0x1a9, 0x6, 0x8000000000000000, 0xffffffffffffffff, 0x8000000000000000, 0x4, 0xb, 0x8, 0x395, 0x7, 0x2, 0x9, 0xc7, 0x6, 0xffffffffffff6351, 0x7fff, 0x8, 0xe5f, 0x0, 0x2, 0x100000001, 0x0, 0x1000, 0x101, 0x3, 0xffffffffffffff36, 0xfffffffffffffff8, 0x100, 0xfffffffffffff4df, 0x2, 0x200, 0x7ff, 0x6, 0xaaa, 0x6, 0x61c, 0x3, 0xe32, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000001c40)={{r1}, 0x0, 0x8, @unused=[0x8001, 0x2, 0x0, 0x7], @devid=r7}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000002d00)={0x80000000, &(0x7f0000002c40), &(0x7f0000002c80)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000002d40)={r8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002e40)) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002e80), 0x40600, 0x0) ioctl$BLKDISCARD(r9, 0x1277, &(0x7f0000002ec0)=0x8000000000000000) bind$pptp(r9, &(0x7f0000002f00)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) read$FUSE(r9, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, r10, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r9, 0xc01064c2, &(0x7f0000004f80)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r9, 0xc00864c0, &(0x7f0000004fc0)={r11}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000005000)) 26.821746536s ago: executing program 3 (id=922): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x327, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c", 0x6f, 0x4008044, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mincore(&(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/194) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x29) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) mount$9p_unix(0x0, &(0x7f0000002300)='./file0/file3\x00', 0x0, 0x1001, 0x0) 26.520351758s ago: executing program 2 (id=923): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0xe0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 0s ago: executing program 32 (id=914): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e23, 0xe4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x987e}}, 0x0, 0x0, 0x3b, 0x0, "b583842ba143f6612ca276c685105eeb9bfa192126c9a49308a03d9e4207aa8dc6aadd76929d7f7c5dd3205802e443496c920230f6edc1d3fc4302b073240eeb35db35d1eac5829b6bd90d264e90ef42"}, 0xd8) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040), 0x420, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x38, 0x32, 0x3b, 0x2d, 0x38]}}}}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r9 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0xffffffffffffffff) kernel console output (not intermixed with test programs): mit_urb failed with result -19 [ 141.624958][ T30] audit: type=1400 audit(2000000019.110:360): avc: denied { read write } for pid=6924 comm="syz.2.273" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.865019][ T30] audit: type=1400 audit(2000000019.110:361): avc: denied { open } for pid=6924 comm="syz.2.273" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.598261][ T6943] overlayfs: missing 'workdir' [ 143.294744][ T30] audit: type=1400 audit(2000000020.780:362): avc: denied { connect } for pid=6924 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.522366][ T30] audit: type=1400 audit(2000000020.850:363): avc: denied { bind } for pid=6924 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.125191][ T30] audit: type=1400 audit(2000000021.610:364): avc: denied { write } for pid=6947 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.499877][ T6952] ubi31: detaching mtd0 [ 144.566331][ T6952] ubi31: mtd0 is detached [ 144.982410][ T6961] bridge_slave_0: entered promiscuous mode [ 146.359479][ T6986] fuse: Bad value for 'fd' [ 146.659887][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 147.234348][ T6993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.293'. [ 147.370238][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.294'. [ 147.943701][ T7005] program syz.4.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.593455][ T5925] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 148.783933][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.814973][ T30] audit: type=1800 audit(2000000026.300:365): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.302" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 148.843478][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.867636][ T5925] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 148.904762][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.932069][ T7029] fuse: Bad value for 'fd' [ 149.225342][ T5925] usb 1-1: config 0 descriptor?? [ 149.655679][ T7040] FAULT_INJECTION: forcing a failure. [ 149.655679][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 149.668426][ T7040] CPU: 1 UID: 0 PID: 7040 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) [ 149.668448][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.668457][ T7040] Call Trace: [ 149.668464][ T7040] [ 149.668471][ T7040] dump_stack_lvl+0x16c/0x1f0 [ 149.668500][ T7040] should_fail_ex+0x512/0x640 [ 149.668520][ T7040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 149.668544][ T7040] should_failslab+0xc2/0x120 [ 149.668564][ T7040] kmem_cache_alloc_noprof+0x75/0x6e0 [ 149.668591][ T7040] ? skb_clone+0x190/0x3f0 [ 149.668618][ T7040] ? skb_clone+0x190/0x3f0 [ 149.668638][ T7040] skb_clone+0x190/0x3f0 [ 149.668660][ T7040] netlink_deliver_tap+0xabd/0xd30 [ 149.668689][ T7040] netlink_unicast+0x64c/0x870 [ 149.668717][ T7040] ? __pfx_netlink_unicast+0x10/0x10 [ 149.668746][ T7040] ? netlink_autobind.isra.0+0xa8/0x370 [ 149.668777][ T7040] netlink_sendmsg+0x8c8/0xdd0 [ 149.668806][ T7040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.668840][ T7040] ____sys_sendmsg+0xa98/0xc70 [ 149.668857][ T7040] ? copy_msghdr_from_user+0x10a/0x160 [ 149.668879][ T7040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.668902][ T7040] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 149.668929][ T7040] ___sys_sendmsg+0x134/0x1d0 [ 149.668953][ T7040] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.668973][ T7040] ? __lock_acquire+0x622/0x1c90 [ 149.669031][ T7040] __sys_sendmsg+0x16d/0x220 [ 149.669053][ T7040] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.669091][ T7040] do_syscall_64+0xcd/0xfa0 [ 149.669119][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.669136][ T7040] RIP: 0033:0x7f8f53d8efc9 [ 149.669151][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.669166][ T7040] RSP: 002b:00007f8f51fb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.669183][ T7040] RAX: ffffffffffffffda RBX: 00007f8f53fe6180 RCX: 00007f8f53d8efc9 [ 149.669192][ T7040] RDX: 0000000020000800 RSI: 00002000000000c0 RDI: 000000000000000a [ 149.669202][ T7040] RBP: 00007f8f51fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 149.669211][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.669220][ T7040] R13: 00007f8f53fe6218 R14: 00007f8f53fe6180 R15: 00007ffda3cd3d18 [ 149.669245][ T7040] [ 150.164198][ T7045] batman_adv: batadv0: Adding interface: ipvlan3 [ 150.180731][ T7045] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.195418][ T7047] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 150.206246][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.224758][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.241157][ T7049] loop6: detected capacity change from 0 to 524288000 [ 150.283230][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 150.339713][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.350045][ T7045] batman_adv: batadv0: Interface activated: ipvlan3 [ 150.361810][ T7051] vlan2: entered allmulticast mode [ 151.418084][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 151.425263][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 151.443848][ T5925] usb 1-1: USB disconnect, device number 6 [ 151.709335][ T7066] syzkaller0: entered promiscuous mode [ 151.742369][ T7066] syzkaller0: entered allmulticast mode [ 151.902541][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.256344][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 152.264404][ T976] usb 5-1: config 9 has an invalid interface number: 138 but max is 1 [ 152.273858][ T976] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 152.282908][ T976] usb 5-1: config 9 has an invalid interface number: 52 but max is 1 [ 152.291111][ T976] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 152.302161][ T976] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 152.311786][ T7082] netlink: 'syz.1.320': attribute type 21 has an invalid length. [ 152.331609][ T30] audit: type=1400 audit(2000000029.820:366): avc: denied { read } for pid=7063 comm="syz.0.314" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.355490][ T976] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 152.373469][ T976] usb 5-1: config 9 has no interface number 0 [ 152.382669][ T976] usb 5-1: config 9 has no interface number 1 [ 152.388781][ T976] usb 5-1: config 9 interface 138 altsetting 12 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 152.410120][ T976] usb 5-1: config 9 interface 138 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 152.431335][ T976] usb 5-1: config 9 interface 52 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 152.447269][ T976] usb 5-1: config 9 interface 52 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 32 [ 152.482328][ T976] usb 5-1: config 9 interface 52 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 152.516883][ T976] usb 5-1: config 9 interface 52 altsetting 4 endpoint 0xA has invalid maxpacket 96, setting to 64 [ 152.563684][ T976] usb 5-1: config 9 interface 52 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 152.597440][ T976] usb 5-1: config 9 interface 52 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 152.626686][ T976] usb 5-1: config 9 interface 52 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 152.658075][ T976] usb 5-1: config 9 interface 52 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 152.706029][ T976] usb 5-1: config 9 interface 52 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 152.736544][ T976] usb 5-1: config 9 interface 138 has no altsetting 0 [ 152.751309][ T976] usb 5-1: config 9 interface 52 has no altsetting 0 [ 152.777081][ T976] usb 5-1: New USB device found, idVendor=2304, idProduct=023d, bcdDevice=31.81 [ 152.787189][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.798672][ T976] usb 5-1: Product: ï“¿ [ 152.802918][ T976] usb 5-1: Manufacturer: Ð [ 152.807441][ T976] usb 5-1: SerialNumber: 渪შç‰å˜·â–Ი懨 [ 152.818603][ T7068] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.864311][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.023424][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 153.031798][ T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 153.041332][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.044081][ T7068] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.049636][ T10] usb 1-1: Product: syz [ 153.061943][ T10] usb 1-1: Manufacturer: syz [ 153.066698][ T10] usb 1-1: SerialNumber: syz [ 153.073401][ T10] usb 1-1: config 0 descriptor?? [ 153.077537][ T976] dvb-usb: found a 'Pinnacle PCTV 340e HD Pro USB Stick' in cold state, will try to load a firmware [ 153.082626][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 153.103207][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 153.143750][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.154011][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 153.154901][ T976] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 153.163474][ T10] usb 1-1: media controller created [ 153.170949][ T976] dib0700: firmware download failed at 7 with -22 [ 153.213136][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.219556][ T976] dvb-usb: found a 'Pinnacle PCTV 340e HD Pro USB Stick' in cold state, will try to load a firmware [ 153.234842][ T976] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 153.242977][ T976] dib0700: firmware download failed at 7 with -22 [ 153.246755][ T10] usb 1-1: selecting invalid altsetting 7 [ 153.260407][ T10] cxusb: set interface failed [ 153.270420][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 153.286265][ T976] usb 5-1: USB disconnect, device number 4 [ 153.303417][ T30] audit: type=1400 audit(2000000030.800:367): avc: denied { mounton } for pid=7063 comm="syz.0.314" path="/proc/198/task" dev="proc" ino=13577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 153.319062][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 153.346846][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 153.433841][ T10] rc_core: IR keymap rc-dvico-portable not found [ 153.440293][ T10] Registered IR keymap rc-empty [ 153.454936][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 153.466979][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input10 [ 153.484185][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 153.491147][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 153.594693][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 153.714608][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 153.795740][ T7082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.320'. [ 153.834292][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 153.962332][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 153.991372][ T7095] overlayfs: statfs failed on './file0' [ 154.036718][ T7096] input: syz0 as /devices/virtual/input/input11 [ 154.037067][ T976] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 154.128117][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 154.238657][ T976] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 154.255768][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 154.257036][ T976] usb 5-1: config 0 has no interface number 0 [ 154.304574][ T976] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.318315][ T976] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 154.368105][ T976] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 154.383568][ T976] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 154.397901][ T976] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 154.512378][ T976] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.542601][ T976] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 154.575910][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.586503][ T7106] batman_adv: batadv0: Adding interface: ipvlan2 [ 154.597841][ T7106] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.627638][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.638411][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.648547][ T7106] batman_adv: batadv0: Interface activated: ipvlan2 [ 154.661920][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 154.676613][ T7107] loop6: detected capacity change from 0 to 524288000 [ 154.730411][ T5925] usb 1-1: USB disconnect, device number 7 [ 154.733317][ T976] usb 5-1: config 0 descriptor?? [ 154.758224][ T7090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.780031][ T7106] vlan2: entered allmulticast mode [ 154.788570][ T7090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.801981][ T7106] hsr_slave_1: entered allmulticast mode [ 154.813405][ T976] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 154.821834][ T30] audit: type=1400 audit(2000000032.310:368): avc: denied { getopt } for pid=7108 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.219394][ T5925] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 155.232716][ T5924] usb 5-1: USB disconnect, device number 5 [ 155.254485][ T5876] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 155.256031][ T5924] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 155.421669][ T5876] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.435175][ T5876] usb 4-1: config 0 has no interface number 0 [ 155.489268][ T5876] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 155.520436][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.647574][ T5876] usb 4-1: config 0 descriptor?? [ 155.705084][ T5876] usb 4-1: selecting invalid altsetting 1 [ 155.724395][ T5876] dvb_ttusb_budget: ttusb_init_controller: error [ 155.731016][ T5876] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 155.815292][ T30] audit: type=1400 audit(2000000033.310:369): avc: denied { append } for pid=7123 comm="syz.4.333" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 155.873907][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 155.923350][ T5876] DVB: Unable to find symbol cx22700_attach() [ 155.957064][ T30] audit: type=1400 audit(2000000033.450:370): avc: denied { read } for pid=7108 comm="syz.3.328" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.040035][ T30] audit: type=1400 audit(2000000033.450:371): avc: denied { open } for pid=7108 comm="syz.3.328" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.065151][ T5876] DVB: Unable to find symbol tda10046_attach() [ 156.071314][ T5876] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 156.077130][ T7129] syzkaller0: entered promiscuous mode [ 156.109977][ T5876] usb 4-1: USB disconnect, device number 11 [ 156.113552][ T7129] syzkaller0: entered allmulticast mode [ 156.129270][ T30] audit: type=1400 audit(2000000033.480:372): avc: denied { ioctl } for pid=7108 comm="syz.3.328" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.214618][ T30] audit: type=1400 audit(2000000033.580:373): avc: denied { bind } for pid=7134 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.257579][ T30] audit: type=1400 audit(2000000033.650:374): avc: denied { append } for pid=7134 comm="syz.0.336" name="pfkey" dev="proc" ino=4026533421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 157.507898][ T7156] loop6: detected capacity change from 0 to 524288000 [ 157.885164][ T7155] batman_adv: batadv0: Adding interface: ipvlan4 [ 157.892384][ T7155] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.920881][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.932951][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.943929][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 157.962401][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.974353][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 157.986332][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.997350][ T7155] batman_adv: batadv0: Interface activated: ipvlan4 [ 158.039692][ T7156] vlan2: entered allmulticast mode [ 158.129606][ T7163] autofs: Unknown parameter '' [ 158.352392][ T5821] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.410287][ T7161] vlan0: entered promiscuous mode [ 158.533038][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 158.540882][ T5821] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.568095][ T5821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.612584][ T5821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.384487][ T5821] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.399057][ T5821] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.409746][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.411773][ T7174] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.662042][ T5821] usb 5-1: GET_CAPABILITIES returned 0 [ 159.667746][ T5821] usbtmc 5-1:16.0: can't read capabilities [ 160.692325][ T30] audit: type=1400 audit(2000000038.170:375): avc: denied { read } for pid=5170 comm="acpid" name="event8" dev="devtmpfs" ino=2946 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 160.716806][ T5925] usb 5-1: USB disconnect, device number 6 [ 160.831607][ T30] audit: type=1400 audit(2000000038.170:376): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2946 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 160.854800][ T30] audit: type=1400 audit(2000000038.170:377): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2946 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 161.099777][ T30] audit: type=1400 audit(2000000038.580:378): avc: denied { read } for pid=7182 comm="syz.0.350" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 161.275378][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'. [ 161.315319][ T30] audit: type=1400 audit(2000000038.580:379): avc: denied { open } for pid=7182 comm="syz.0.350" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 161.400623][ T30] audit: type=1400 audit(2000000038.580:380): avc: denied { ioctl } for pid=7182 comm="syz.0.350" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 161.561497][ T7202] syzkaller0: entered promiscuous mode [ 161.598609][ T30] audit: type=1400 audit(2000000038.760:381): avc: denied { setopt } for pid=7182 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.611142][ T7202] syzkaller0: entered allmulticast mode [ 161.666066][ T30] audit: type=1400 audit(2000000039.020:382): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.080513][ T7218] loop6: detected capacity change from 0 to 524288000 [ 162.207337][ T30] audit: type=1400 audit(2000000039.700:383): avc: denied { create } for pid=7224 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 162.909973][ T30] audit: type=1400 audit(2000000039.820:384): avc: denied { mount } for pid=7224 comm="syz.0.359" name="/" dev="rpc_pipefs" ino=14484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 163.359719][ T7235] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.169614][ T7243] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.504400][ T5876] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.644244][ T5876] usb 1-1: device descriptor read/64, error -71 [ 164.684047][ T7215] batman_adv: batadv0: Adding interface: ipvlan3 [ 164.690402][ T7215] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.715783][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.726292][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.736142][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 164.746515][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.763010][ T7215] batman_adv: batadv0: Interface activated: ipvlan3 [ 164.780099][ T7218] vlan2: entered allmulticast mode [ 164.892344][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.052327][ T5876] usb 1-1: device descriptor read/64, error -71 [ 165.201456][ T5876] usb usb1-port1: attempt power cycle [ 166.038514][ T7275] macvtap1: entered promiscuous mode [ 166.044711][ T7275] macvtap1: entered allmulticast mode [ 166.050122][ T7275] veth1_vlan: entered allmulticast mode [ 166.274541][ T7275] team0 (unregistering): Port device team_slave_0 removed [ 166.296511][ T7275] team0 (unregistering): Port device team_slave_1 removed [ 166.405361][ T5876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.483216][ T5876] usb 1-1: device descriptor read/8, error -71 [ 167.013063][ T5876] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.080020][ T5876] usb 1-1: device descriptor read/8, error -71 [ 167.095853][ T7285] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.286898][ T5876] usb usb1-port1: unable to enumerate USB device [ 167.560412][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 167.560423][ T30] audit: type=1400 audit(2000000045.050:387): avc: denied { bind } for pid=7290 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.921737][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.381'. [ 168.794706][ T7301] batman_adv: batadv0: Adding interface: ipvlan5 [ 168.798471][ T7308] loop6: detected capacity change from 0 to 524288000 [ 168.801068][ T7301] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.801095][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.852781][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.869510][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 168.891147][ T30] audit: type=1400 audit(2000000046.360:388): avc: denied { mount } for pid=7299 comm="syz.0.380" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 168.913977][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.927791][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 169.016528][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.061051][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 169.197683][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.227761][ T7301] batman_adv: batadv0: Interface activated: ipvlan5 [ 169.347143][ T7308] vlan2: entered allmulticast mode [ 170.247996][ T30] audit: type=1400 audit(2000000047.740:389): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 172.964281][ T7354] capability: warning: `syz.3.393' uses 32-bit capabilities (legacy support in use) [ 173.010887][ T30] audit: type=1400 audit(2000000050.500:390): avc: denied { bind } for pid=7356 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.255517][ T7362] netlink: 76 bytes leftover after parsing attributes in process `syz.1.397'. [ 173.420436][ T7368] fuse: Bad value for 'fd' [ 173.819690][ T7373] batman_adv: batadv0: Adding interface: ipvlan5 [ 173.871164][ T7373] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.896548][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.012433][ T7376] loop6: detected capacity change from 0 to 524288000 [ 174.042439][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.201494][ T7384] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.482738][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.629627][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 174.649538][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.771277][ T5925] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 175.140112][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 175.160632][ T5925] usb 4-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 175.175768][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.192129][ T5925] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 175.215552][ T5925] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 127, setting to 64 [ 175.227800][ T5925] usb 4-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.241729][ T7373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 175.257185][ T7373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.270789][ T5925] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 175.295404][ T7373] batman_adv: batadv0: Interface activated: ipvlan5 [ 175.305226][ T5925] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.336857][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.365887][ T7386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.381882][ T7386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.421508][ T5925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.500467][ T7376] vlan2: entered allmulticast mode [ 175.521384][ T5925] usb 4-1: invalid MIDI out EP 0 [ 175.712035][ T30] audit: type=1400 audit(2000000053.200:391): avc: denied { ioctl } for pid=7385 comm="syz.3.401" path="socket:[14997]" dev="sockfs" ino=14997 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.757378][ T5925] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 175.769663][ T7411] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 176.090310][ T5876] usb 4-1: USB disconnect, device number 12 [ 176.812344][ T976] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.879809][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'. [ 176.992395][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 176.998938][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 177.022698][ T976] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.041286][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.062473][ T976] usb 5-1: Product: syz [ 177.066655][ T30] audit: type=1400 audit(2000000054.550:392): avc: denied { mount } for pid=7426 comm="syz.0.413" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 177.066670][ T976] usb 5-1: Manufacturer: syz [ 177.066689][ T976] usb 5-1: SerialNumber: syz [ 177.164376][ T976] usb 5-1: config 0 descriptor?? [ 177.199085][ T976] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 177.222772][ T976] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 177.348954][ T7436] fuse: Bad value for 'fd' [ 177.349620][ T5817] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 177.814291][ T976] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 177.874648][ T7419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.916040][ T30] audit: type=1400 audit(2000000055.410:393): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 178.105795][ T7442] program syz.3.417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.122731][ T7442] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 178.133121][ T30] audit: type=1400 audit(2000000055.620:394): avc: denied { connect } for pid=7418 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 178.217393][ T976] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 178.258945][ T976] em28xx 5-1:0.0: board has no eeprom [ 178.308215][ T30] audit: type=1400 audit(2000000055.800:395): avc: denied { read } for pid=7443 comm="syz.2.419" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.444053][ T976] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 178.457964][ T976] em28xx 5-1:0.0: dvb set to bulk mode. [ 178.464039][ T5876] em28xx 5-1:0.0: Binding DVB extension [ 178.486989][ T976] usb 5-1: USB disconnect, device number 7 [ 178.544621][ T976] em28xx 5-1:0.0: Disconnecting em28xx [ 178.574158][ T30] audit: type=1400 audit(2000000055.800:396): avc: denied { open } for pid=7443 comm="syz.2.419" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.649770][ T5876] em28xx 5-1:0.0: Registering input extension [ 178.684260][ T976] em28xx 5-1:0.0: Closing input extension [ 178.752789][ T976] em28xx 5-1:0.0: Freeing device [ 179.042984][ T7465] batman_adv: batadv0: Adding interface: ipvlan3 [ 179.049480][ T7465] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.069709][ T7468] loop6: detected capacity change from 0 to 524288000 [ 179.074853][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.112439][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.131641][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.142939][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 179.154034][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.164449][ T7465] batman_adv: batadv0: Interface activated: ipvlan3 [ 180.077014][ T7477] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.342892][ T7465] vlan2: entered allmulticast mode [ 180.578772][ T5817] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 180.592402][ T7482] fuse: Bad value for 'fd' [ 180.818189][ T7488] [U] ÿÀ! [ 180.821480][ T7488] [U] [ 180.824174][ T7488] [U] [ 180.826867][ T7488] [U] [ 180.829589][ T7488] [U] [ 180.832270][ T7488] [U] [ 180.834952][ T7488] [U] [ 180.837637][ T7488] [U] [ 180.840323][ T7488] [U] [ 180.843014][ T7488] [U] [ 180.845709][ T7488] [U] [ 180.848486][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.595358][ T30] audit: type=1400 audit(2000000059.090:397): avc: denied { accept } for pid=7493 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.942923][ T7501] unsupported nla_type 52263 [ 182.147320][ T7510] syzkaller0: entered promiscuous mode [ 182.155814][ T7510] syzkaller0: entered allmulticast mode [ 182.280335][ T7518] fuse: Bad value for 'fd' [ 182.286188][ T5817] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 182.346777][ T7520] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.534411][ T7487] [U] [ 182.692378][ T976] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.750759][ T30] audit: type=1400 audit(2000000060.230:398): avc: denied { append } for pid=7524 comm="syz.3.441" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.773927][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.012676][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.204255][ T5897] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 183.255268][ T5897] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 183.308183][ T5897] usb 4-1: Product: syz [ 183.345014][ T5897] usb 4-1: Manufacturer: syz [ 183.376184][ T5897] usb 4-1: SerialNumber: syz [ 183.469843][ T5897] usb 4-1: config 0 descriptor?? [ 183.580103][ T5897] ch341 4-1:0.0: ch341-uart converter detected [ 183.736340][ T5897] usb 4-1: failed to receive control message: -121 [ 183.796998][ T5897] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 184.132321][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 184.408911][ T7534] netlink: 36 bytes leftover after parsing attributes in process `syz.4.444'. [ 184.595644][ T976] usb 1-1: no configurations [ 184.602309][ T976] usb 1-1: can't read configurations, error -22 [ 184.829333][ T976] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 185.027512][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 185.084010][ T976] usb 1-1: no configurations [ 185.096939][ T976] usb 1-1: can't read configurations, error -22 [ 185.121692][ T976] usb usb1-port1: attempt power cycle [ 185.533277][ T7554] loop6: detected capacity change from 0 to 524288000 [ 185.722389][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 185.728421][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 185.734517][ T5826] Bluetooth: hci2: command 0x0405 tx timeout [ 185.740532][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 185.746693][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 185.817179][ T10] usb 4-1: USB disconnect, device number 13 [ 185.824207][ T10] ch341 4-1:0.0: device disconnected [ 186.282325][ T30] audit: type=1400 audit(2000000063.690:399): avc: denied { mount } for pid=7557 comm="syz.3.448" name="/" dev="hugetlbfs" ino=15938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 186.316357][ T30] audit: type=1400 audit(2000000063.710:400): avc: denied { unmount } for pid=7557 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 186.418066][ T30] audit: type=1400 audit(2000000063.890:401): avc: denied { ioctl } for pid=7557 comm="syz.3.448" path="socket:[15941]" dev="sockfs" ino=15941 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 187.132485][ T7553] batman_adv: batadv0: Adding interface: ipvlan6 [ 187.141005][ T7553] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.169338][ T7553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.192675][ T7553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.212445][ T7553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 187.224680][ T7553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.235182][ T7553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 187.245318][ T7553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.255479][ T7553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 187.265588][ T7553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.295939][ T7553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 187.318204][ T7553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.328698][ T7553] batman_adv: batadv0: Interface activated: ipvlan6 [ 187.335530][ T51] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 187.352724][ T7554] vlan2: entered allmulticast mode [ 187.502752][ T30] audit: type=1400 audit(2000000064.990:402): avc: denied { node_bind } for pid=7578 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 187.612155][ T7587] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.168014][ T30] audit: type=1400 audit(2000000065.370:403): avc: denied { create } for pid=7586 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 188.273580][ T30] audit: type=1400 audit(2000000065.380:404): avc: denied { create } for pid=7591 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 190.072352][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 190.159051][ T7612] tmpfs: Unknown parameter 'trans' [ 190.188902][ T7614] syzkaller0: entered promiscuous mode [ 190.194616][ T7614] syzkaller0: entered allmulticast mode [ 190.645302][ T51] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 190.998542][ T7629] netlink: 'syz.1.465': attribute type 4 has an invalid length. [ 192.540702][ T7641] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.548259][ T30] audit: type=1400 audit(2000000071.040:405): avc: denied { map } for pid=7644 comm="syz.0.469" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 193.683828][ T7648] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.928982][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.932609][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.936096][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.884322][ T30] audit: type=1400 audit(2000000072.380:406): avc: denied { mount } for pid=7659 comm="syz.3.476" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 195.418705][ T7673] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.798254][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 195.819702][ T7683] siw: device registration error -23 [ 195.899925][ T7680] syzkaller0: entered promiscuous mode [ 195.913192][ T7680] syzkaller0: entered allmulticast mode [ 196.012049][ T30] audit: type=1400 audit(2000000073.500:407): avc: denied { watch } for pid=7685 comm="syz.2.483" path="/90/bus/file1" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.049993][ T7687] binfmt_misc: register: failed to install interpreter file ./file0 [ 196.089558][ T30] audit: type=1400 audit(2000000073.500:408): avc: denied { watch_sb watch_reads } for pid=7685 comm="syz.2.483" path="/90/bus/file1" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 197.391574][ T7709] netlink: 'syz.1.488': attribute type 11 has an invalid length. [ 198.769921][ T7719] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.644409][ T7735] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.819451][ T7752] tipc: Enabling of bearer rejected, failed to enable media [ 200.236221][ T7760] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.396172][ T7759] syzkaller0: entered promiscuous mode [ 200.412299][ T7759] syzkaller0: entered allmulticast mode [ 200.716172][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.778515][ T30] audit: type=1400 audit(2000000078.270:409): avc: denied { name_connect } for pid=7768 comm="syz.1.509" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 200.970533][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 200.980977][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.015603][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.045306][ T5876] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 201.061107][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.520319][ T5876] usb 5-1: config 0 descriptor?? [ 202.249447][ T5876] usbhid 5-1:0.0: can't add hid device: -32 [ 202.261244][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 202.285441][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.513'. [ 202.306643][ T5876] usb 5-1: USB disconnect, device number 8 [ 203.032413][ T30] audit: type=1400 audit(2000000080.430:410): avc: denied { ioctl } for pid=7799 comm="syz.4.515" path="socket:[17050]" dev="sockfs" ino=17050 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 204.000429][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 204.758522][ T7813] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.025578][ T30] audit: type=1400 audit(2000000082.520:411): avc: denied { connect } for pid=7817 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.225291][ T7831] syz.1.523(7831): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 205.648510][ T7832] batman_adv: batadv0: Adding interface: ipvlan6 [ 205.672493][ T7832] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.728337][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.732757][ T7835] loop6: detected capacity change from 0 to 524288000 [ 205.832604][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.957020][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 205.972347][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.984925][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 206.007145][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.019700][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 206.031613][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.184625][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 206.200198][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 206.222138][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.249343][ T7832] batman_adv: batadv0: Interface activated: ipvlan6 [ 206.523397][ T7836] vlan2: entered allmulticast mode [ 206.644712][ T7840] ip_vti0: Master is either lo or non-ether device [ 206.718703][ T7845] batman_adv: batadv0: Adding interface: ipvlan4 [ 206.725276][ T7845] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.786686][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.846579][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.857515][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 206.914832][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.943764][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 206.962845][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.993072][ T7845] batman_adv: batadv0: Interface activated: ipvlan4 [ 207.024588][ T7848] syzkaller0: entered promiscuous mode [ 207.030103][ T7848] syzkaller0: entered allmulticast mode [ 207.062401][ T5827] Bluetooth: hci2: command 0x0405 tx timeout [ 207.352361][ T5876] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.446100][ T30] audit: type=1400 audit(2000000084.940:412): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 207.522552][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 207.547593][ T5876] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 207.556819][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.587379][ T5876] usb 1-1: config 0 descriptor?? [ 207.621788][ T5876] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 207.982548][ T5821] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.294242][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 208.385554][ T5821] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 208.422169][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.442643][ T5821] usb 3-1: Product: syz [ 208.482735][ T5821] usb 3-1: Manufacturer: syz [ 208.488179][ T5821] usb 3-1: SerialNumber: syz [ 208.515274][ T5821] usb 3-1: config 0 descriptor?? [ 208.743164][ T5821] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 208.781902][ T5821] 00 00 00 00 00 00 00 00 [ 208.789162][ T5821] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 208.889125][ T7869] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.251583][ T7879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.536'. [ 210.567972][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 210.605109][ T5925] usb 1-1: USB disconnect, device number 15 [ 211.107365][ T5827] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 211.801622][ T5821] usb 3-1: USB disconnect, device number 9 [ 211.983096][ T7901] fuse: Bad value for 'fd' [ 212.422671][ T7910] syzkaller0: entered promiscuous mode [ 212.428193][ T7910] syzkaller0: entered allmulticast mode [ 212.632127][ T7914] loop6: detected capacity change from 0 to 524288000 [ 212.822739][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 212.825231][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 215.171054][ T7914] vlan2: entered allmulticast mode [ 215.195188][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 215.381315][ T7927] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.761725][ T5827] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 216.007096][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.562'. [ 217.126517][ T7946] xt_connbytes: Forcing CT accounting to be enabled [ 217.133309][ T7946] set match dimension is over the limit! [ 217.568793][ T7954] lo speed is unknown, defaulting to 1000 [ 217.603710][ T7954] lo speed is unknown, defaulting to 1000 [ 217.804023][ T976] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 218.085625][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 218.199894][ T976] usb 4-1: config 0 has no interfaces? [ 218.271766][ T976] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.281779][ T976] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.326552][ T976] usb 4-1: Manufacturer: syz [ 218.434115][ T976] usb 4-1: config 0 descriptor?? [ 218.471300][ T7968] syzkaller0: entered promiscuous mode [ 218.507693][ T7968] syzkaller0: entered allmulticast mode [ 218.778107][ T7963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.825870][ T976] lo speed is unknown, defaulting to 1000 [ 219.097355][ T7981] fuse: Bad value for 'fd' [ 219.103435][ T30] audit: type=1400 audit(2000000096.600:413): avc: denied { load_policy } for pid=7976 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 219.142200][ T7977] SELinux: failed to load policy [ 219.394725][ T5924] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 219.472039][ T5827] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 219.560354][ T5924] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 219.576025][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29336, setting to 64 [ 219.891348][ T5924] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 219.900738][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.903545][ T7995] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.915881][ T5924] usb 1-1: Product: syz [ 219.920191][ T5924] usb 1-1: Manufacturer: syz [ 219.932589][ T5924] usb 1-1: SerialNumber: syz [ 219.944477][ T5924] usb 1-1: config 0 descriptor?? [ 219.958591][ T7985] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.968609][ T5924] hub 1-1:0.0: bad descriptor, ignoring hub [ 219.974696][ T5924] hub 1-1:0.0: probe with driver hub failed with error -5 [ 219.992203][ T5924] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 220.139980][ T7998] comedi comedi0: board detection failed [ 220.189890][ T976] usb 1-1: USB disconnect, device number 16 [ 220.189958][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 220.327764][ T24] usb 4-1: USB disconnect, device number 14 [ 221.508044][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.579'. [ 223.103418][ T8024] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 223.374968][ T5827] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 224.138876][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 224.157813][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.586'. [ 224.678795][ T8063] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 224.852834][ T8067] No control pipe specified [ 224.872327][ T8063] cramfs: wrong magic [ 225.097051][ T8073] loop6: detected capacity change from 0 to 524288000 [ 225.503036][ T8073] vlan2: entered allmulticast mode [ 226.282916][ T8076] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.595731][ T8082] syzkaller0: entered promiscuous mode [ 226.608601][ T8082] syzkaller0: entered allmulticast mode [ 227.043677][ T5827] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 227.192844][ T8090] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.975304][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.487827][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 228.504987][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=8107 comm=syz.0.598 [ 228.527238][ T30] audit: type=1400 audit(2000000105.990:414): avc: denied { ioctl } for pid=8102 comm="syz.0.598" path="socket:[18603]" dev="sockfs" ino=18603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.536465][ T8117] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.907455][ T8128] fuse: Bad value for 'fd' [ 230.030935][ T8131] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.903037][ T5827] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 231.126215][ T8144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.608'. [ 232.719623][ T8150] siw: device registration error -23 [ 233.088800][ T8124] batman_adv: batadv0: Adding interface: ipvlan4 [ 233.095421][ T8124] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.120931][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.131870][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.144526][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 233.158658][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.171523][ T8124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 233.183912][ T8124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.194058][ T8124] batman_adv: batadv0: Interface activated: ipvlan4 [ 233.208712][ T8125] vlan2: entered allmulticast mode [ 233.542884][ T30] audit: type=1400 audit(2000000111.040:415): avc: denied { create } for pid=8163 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.761373][ T8168] warning: `syz.2.614' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 233.875938][ T8171] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.390618][ T8175] fuse: Bad value for 'fd' [ 234.986304][ T5827] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 235.322051][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.621'. [ 235.335049][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.621'. [ 235.394800][ T8189] bridge1: entered promiscuous mode [ 235.523936][ T8193] syzkaller0: entered promiscuous mode [ 235.532022][ T8193] syzkaller0: entered allmulticast mode [ 236.011084][ T10] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 236.149909][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 236.202332][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 236.372346][ T10] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 236.622311][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 236.754482][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 236.834139][ T10] usb usb3-port1: attempt power cycle [ 236.925246][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 236.934151][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.944375][ T24] usb 4-1: config 179 has no interface number 0 [ 236.954918][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 236.966409][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 236.978508][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 16384, setting to 1024 [ 236.990556][ T24] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.004548][ T24] usb 4-1: config 179 interface 65 has no altsetting 0 [ 237.011887][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 237.024138][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.098749][ T8211] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.342045][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 237.403019][ T10] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 237.443342][ T5170] input input14: unable to receive magic message: -110 [ 237.464969][ T5170] input input14: unable to receive magic message: -32 [ 237.477117][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 237.506310][ T5170] input input14: unable to receive magic message: -32 [ 237.527668][ T5170] input input14: unable to receive magic message: -32 [ 237.553313][ T5170] input input14: unable to receive magic message: -32 [ 237.589731][ T5170] input input14: unable to receive magic message: -32 [ 237.621421][ T5170] input input14: unable to receive magic message: -32 [ 237.670156][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 237.993079][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 237.998666][ T10] usb usb3-port1: unable to enumerate USB device [ 238.071374][ T5827] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 238.269818][ T8220] set match dimension is over the limit! [ 238.616129][ T8224] fuse: Bad value for 'fd' [ 240.000181][ T24] usb 4-1: USB disconnect, device number 15 [ 240.006251][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 240.713480][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 240.815542][ T30] audit: type=1400 audit(2000000118.200:416): avc: denied { append } for pid=8235 comm="syz.1.634" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 241.500015][ T8207] batman_adv: batadv0: Adding interface: ipvlan7 [ 241.508383][ T8207] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.542470][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.554088][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.573106][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 241.595390][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.616729][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 241.638191][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.658337][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 241.681302][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.762338][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 241.789408][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.820705][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 242.310147][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.329899][ T8207] batman_adv: batadv0: Interface activated: ipvlan7 [ 242.401381][ T8247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.494971][ T8264] batman_adv: batadv0: Adding interface: ipvlan5 [ 242.503335][ T8264] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.539905][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.551104][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.562138][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 242.575122][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.595412][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 242.612572][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.622805][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 242.632899][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.643019][ T8264] batman_adv: batadv0: Interface activated: ipvlan5 [ 242.657055][ T8263] vlan2: entered allmulticast mode [ 242.873585][ T8269] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.240944][ T8278] syzkaller0: entered promiscuous mode [ 243.259811][ T8278] syzkaller0: entered allmulticast mode [ 243.269831][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 243.375413][ T8284] siw: device registration error -23 [ 243.448888][ T8285] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 243.455432][ T8285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.518154][ T8285] vhci_hcd vhci_hcd.0: Device attached [ 243.590573][ T5827] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 243.721437][ T8286] vhci_hcd: connection closed [ 243.725000][ T36] vhci_hcd: stop threads [ 243.738795][ T36] vhci_hcd: release socket [ 243.748646][ T36] vhci_hcd: disconnect device [ 243.764084][ T24] usb 34-1: enqueue for inactive port 0 [ 244.470107][ T24] usb usb34-port1: attempt power cycle [ 244.517547][ T8307] fuse: Bad value for 'fd' [ 244.776079][ T8315] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.236903][ T8317] netlink: 'syz.1.658': attribute type 11 has an invalid length. [ 245.293251][ T24] usb usb34-port1: unable to enumerate USB device [ 246.872341][ T5821] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 246.975047][ T5827] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 247.042389][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 247.064494][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.075463][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.083261][ T30] audit: type=1400 audit(2000000124.570:417): avc: denied { ioctl } for pid=8332 comm="syz.4.663" path="socket:[19921]" dev="sockfs" ino=19921 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 247.087351][ T5821] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 247.111455][ T8332] delete_channel: no stack [ 247.123849][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.142784][ T5821] usb 1-1: config 0 descriptor?? [ 247.584647][ T5821] usbhid 1-1:0.0: can't add hid device: -32 [ 247.590649][ T5821] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 249.213592][ T8354] dvmrp0: entered allmulticast mode [ 249.335827][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 250.096100][ T5925] usb 1-1: USB disconnect, device number 17 [ 250.156162][ T8358] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.473548][ T5827] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 250.792301][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 250.981735][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 251.062312][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 251.068645][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 251.077643][ T24] usb 1-1: config 179 has no interface number 0 [ 251.108242][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 251.133499][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 251.146904][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.158051][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.172317][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.182191][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 251.193527][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.206521][ T24] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 251.362023][ T5876] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 251.523912][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.534008][ T24] usb 1-1: config 179 interface 65 has no altsetting 0 [ 251.592505][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 251.612071][ T5876] usb 5-1: config 0 descriptor?? [ 251.692497][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.777714][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 251.950676][ T8382] syzkaller0: entered promiscuous mode [ 251.963118][ T8382] syzkaller0: entered allmulticast mode [ 252.009986][ T24] usb 1-1: USB disconnect, device number 18 [ 252.015996][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.142928][ T5876] hid-multitouch 0003:0EEF:72D0.0004: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0 [ 252.324351][ T5925] usb 5-1: USB disconnect, device number 9 [ 253.410591][ T8406] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.590442][ T30] audit: type=1400 audit(2000000131.060:418): avc: denied { connect } for pid=8399 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.181467][ T30] audit: type=1400 audit(2000000131.650:419): avc: denied { ioctl } for pid=8414 comm="syz.0.685" path="socket:[19231]" dev="sockfs" ino=19231 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.335558][ T30] audit: type=1400 audit(2000000131.650:420): avc: denied { connect } for pid=8414 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.355953][ T30] audit: type=1400 audit(2000000131.710:421): avc: denied { write } for pid=8414 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.474492][ T5827] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 254.502823][ T8418] netlink: 176 bytes leftover after parsing attributes in process `syz.0.685'. [ 255.166118][ T8416] netlink: 236 bytes leftover after parsing attributes in process `syz.0.685'. [ 255.173569][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'. [ 255.456841][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.467561][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.651436][ T8416] syz.0.685 (8416): drop_caches: 2 [ 255.808422][ T30] audit: type=1400 audit(2000000133.300:422): avc: denied { getopt } for pid=8440 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.351838][ T8447] FAULT_INJECTION: forcing a failure. [ 256.351838][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 256.397271][ T8447] CPU: 0 UID: 0 PID: 8447 Comm: syz.0.692 Not tainted syzkaller #0 PREEMPT(full) [ 256.397296][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.397306][ T8447] Call Trace: [ 256.397313][ T8447] [ 256.397320][ T8447] dump_stack_lvl+0x16c/0x1f0 [ 256.397350][ T8447] should_fail_ex+0x512/0x640 [ 256.397378][ T8447] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 256.397403][ T8447] should_failslab+0xc2/0x120 [ 256.397424][ T8447] kmem_cache_alloc_noprof+0x75/0x6e0 [ 256.397450][ T8447] ? skb_clone+0x190/0x3f0 [ 256.397478][ T8447] ? skb_clone+0x190/0x3f0 [ 256.397498][ T8447] skb_clone+0x190/0x3f0 [ 256.397521][ T8447] netlink_deliver_tap+0xabd/0xd30 [ 256.397552][ T8447] netlink_unicast+0x64c/0x870 [ 256.397581][ T8447] ? __pfx_netlink_unicast+0x10/0x10 [ 256.397616][ T8447] netlink_sendmsg+0x8c8/0xdd0 [ 256.397645][ T8447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.397679][ T8447] ____sys_sendmsg+0xa98/0xc70 [ 256.397697][ T8447] ? copy_msghdr_from_user+0x10a/0x160 [ 256.397719][ T8447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.397748][ T8447] ___sys_sendmsg+0x134/0x1d0 [ 256.397773][ T8447] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.397793][ T8447] ? __lock_acquire+0x622/0x1c90 [ 256.397852][ T8447] __sys_sendmsg+0x16d/0x220 [ 256.397876][ T8447] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.397915][ T8447] do_syscall_64+0xcd/0xfa0 [ 256.397945][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.397962][ T8447] RIP: 0033:0x7f8f53d8efc9 [ 256.397976][ T8447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.397993][ T8447] RSP: 002b:00007f8f51ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.398010][ T8447] RAX: ffffffffffffffda RBX: 00007f8f53fe5fa0 RCX: 00007f8f53d8efc9 [ 256.398021][ T8447] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 256.398030][ T8447] RBP: 00007f8f51ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 256.398041][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.398050][ T8447] R13: 00007f8f53fe6038 R14: 00007f8f53fe5fa0 R15: 00007ffda3cd3d18 [ 256.398076][ T8447] [ 256.805152][ T8458] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.945425][ T8456] fuse: Bad value for 'fd' [ 257.261571][ T8460] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.520372][ T8461] kvm: kvm [8459]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 257.633977][ T8461] kvm: kvm [8459]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 257.660256][ T8468] batman_adv: batadv0: Adding interface: ipvlan7 [ 257.666898][ T8468] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.705189][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.715800][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.725714][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 257.737083][ T8461] kvm: kvm [8459]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 257.751608][ T8461] kvm: kvm [8459]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 257.761867][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.770493][ T8461] kvm: kvm [8459]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 257.777346][ T8472] input: syz1 as /devices/virtual/input/input16 [ 257.787673][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 257.790600][ T8461] kvm_intel: kvm [8459]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 257.807532][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.817515][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 257.831157][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.841177][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 257.861466][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.871875][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 257.881846][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.892718][ T8468] batman_adv: batadv0: Interface activated: ipvlan7 [ 257.906146][ T8470] vlan2: entered allmulticast mode [ 257.963909][ T5827] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 258.237710][ T8481] siw: device registration error -23 [ 258.491250][ T8487] syzkaller0: entered promiscuous mode [ 258.496966][ T8487] syzkaller0: entered allmulticast mode [ 259.900608][ T8506] fuse: Bad value for 'fd' [ 260.912553][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 261.832331][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 261.846115][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.870730][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.887171][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.896832][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.915480][ T10] usb 5-1: config 0 descriptor?? [ 262.755131][ T8535] batman_adv: batadv0: Adding interface: ipvlan6 [ 262.792419][ T8535] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.834142][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.848836][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.874613][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 262.885850][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.896992][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 262.972600][ T8545] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.977644][ T8544] netlink: 'syz.2.722': attribute type 10 has an invalid length. [ 262.995569][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.997176][ T8544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.722'. [ 263.008934][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 263.082301][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 263.102609][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 263.113591][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.132473][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input17 [ 263.159849][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 263.171461][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.186365][ T8535] batman_adv: batadv0: Interface activated: ipvlan6 [ 263.197180][ T10] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 263.293722][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 263.315215][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 263.326695][ T24] usb 1-1: config 179 has no interface number 0 [ 263.336741][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 263.421097][ T8539] vlan2: entered allmulticast mode [ 263.432093][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 263.483983][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 263.516363][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 263.528676][ T24] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 263.547806][ T8544] dummy0: entered promiscuous mode [ 263.556979][ T8544] bridge0: port 3(dummy0) entered blocking state [ 263.565950][ T24] usb 1-1: config 179 interface 65 has no altsetting 0 [ 263.575872][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 263.587815][ T8544] bridge0: port 3(dummy0) entered disabled state [ 263.623693][ T8544] dummy0: entered allmulticast mode [ 263.630715][ T8544] bridge0: port 3(dummy0) entered blocking state [ 263.637277][ T8544] bridge0: port 3(dummy0) entered forwarding state [ 263.657825][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.729560][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input18 [ 264.078809][ T8553] fuse: Bad value for 'fd' [ 264.107830][ T24] usb 1-1: USB disconnect, device number 19 [ 264.113800][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 264.610336][ T976] usb 5-1: USB disconnect, device number 10 [ 264.878976][ T8564] syzkaller0: entered promiscuous mode [ 264.901931][ T8567] SET target dimension over the limit! [ 264.914074][ T8564] syzkaller0: entered allmulticast mode [ 268.037497][ T8591] 9pnet_fd: p9_fd_create_unix (8591): problem connecting socket: éq‰Y’3aK: -91 [ 268.041362][ T30] audit: type=1400 audit(2000000145.530:423): avc: denied { mounton } for pid=8590 comm="syz.2.733" path=2F3133382FE91F7189591E9233614B dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 268.626091][ T8599] batman_adv: batadv0: Adding interface: ipvlan8 [ 268.634501][ T8599] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.693682][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.735645][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.753821][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 268.775164][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.792300][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 268.812344][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.833225][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 268.848823][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.851744][ T8605] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.859887][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 268.896043][ T8606] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.737'. [ 268.907092][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.949605][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 269.007852][ T8608] fuse: Bad value for 'fd' [ 269.298164][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.350002][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 269.360373][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.370855][ T8599] batman_adv: batadv0: Interface activated: ipvlan8 [ 269.460859][ T8600] vlan2: entered allmulticast mode [ 269.796436][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 270.007866][ T8620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=8620 comm=syz.2.742 [ 270.048183][ T30] audit: type=1400 audit(2000000147.540:424): avc: denied { name_bind } for pid=8614 comm="syz.1.740" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 271.418203][ T8637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.747'. [ 271.982495][ T8642] siw: device registration error -23 [ 272.320019][ T8654] batman_adv: batadv0: Adding interface: ipvlan5 [ 272.326591][ T8654] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.355116][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.377410][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.406261][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 272.417845][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.445331][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 272.455418][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.469343][ T8654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 272.481235][ T8654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.494399][ T8654] batman_adv: batadv0: Interface activated: ipvlan5 [ 273.173027][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 273.190866][ T8669] fuse: Bad value for 'fd' [ 273.494989][ T8655] vlan2: entered allmulticast mode [ 273.550951][ T5827] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 274.998400][ T8666] bridge_slave_1: left allmulticast mode [ 275.045041][ T8687] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.146003][ T8666] bridge_slave_1: left promiscuous mode [ 275.162489][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.177633][ T8666] bridge_slave_0: left allmulticast mode [ 275.196225][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.371887][ T8691] siw: device registration error -23 [ 275.811195][ T30] audit: type=1400 audit(2000000153.300:425): avc: denied { create } for pid=8694 comm="syz.1.763" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.964600][ T30] audit: type=1400 audit(2000000153.430:426): avc: denied { mounton } for pid=8694 comm="syz.1.763" path="/151/file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 276.052648][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 276.103985][ T30] audit: type=1400 audit(2000000153.450:427): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 276.130646][ T8703] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.223401][ T8705] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.232376][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 276.239126][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.250285][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.317769][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 276.347924][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.402901][ T24] usb 1-1: config 0 descriptor?? [ 276.836109][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 277.165368][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input19 [ 277.212000][ T24] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 277.319744][ T8716] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.661905][ T24] usb 1-1: USB disconnect, device number 20 [ 277.698421][ T8718] program syz.2.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.821134][ T8715] fido_id[8715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 278.577994][ T8718] tipc: Started in network mode [ 278.583013][ T8718] tipc: Node identity b6812b95bd7b, cluster identity 4711 [ 278.590385][ T8718] tipc: Enabled bearer , priority 0 [ 278.598021][ T8718] syzkaller0: entered promiscuous mode [ 278.603527][ T8718] syzkaller0: entered allmulticast mode [ 278.622004][ T8717] tipc: Resetting bearer [ 278.636640][ T8717] tipc: Disabling bearer [ 279.312572][ T8733] hub 1-0:1.0: USB hub found [ 279.320349][ T8733] hub 1-0:1.0: 1 port detected [ 280.101996][ T8746] siw: device registration error -23 [ 283.042396][ T8762] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.216492][ T8764] block device autoloading is deprecated and will be removed. [ 283.612989][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 283.685800][ T8778] 9pnet_fd: Insufficient options for proto=fd [ 284.062485][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 284.080352][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.114968][ T5897] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 284.124499][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.329635][ T5897] usb 5-1: Product: syz [ 284.807604][ T5897] usb 5-1: Manufacturer: syz [ 284.825966][ T5897] usb 5-1: SerialNumber: syz [ 284.920207][ T5897] usb 5-1: config 0 descriptor?? [ 284.974462][ T5897] usb 5-1: no audio or video endpoints found [ 285.944122][ T8795] FAULT_INJECTION: forcing a failure. [ 285.944122][ T8795] name failslab, interval 1, probability 0, space 0, times 0 [ 285.960168][ T8795] CPU: 1 UID: 0 PID: 8795 Comm: syz.2.793 Not tainted syzkaller #0 PREEMPT(full) [ 285.960191][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.960201][ T8795] Call Trace: [ 285.960206][ T8795] [ 285.960215][ T8795] dump_stack_lvl+0x16c/0x1f0 [ 285.960237][ T8795] should_fail_ex+0x512/0x640 [ 285.960249][ T8795] ? __kmalloc_cache_noprof+0x5f/0x780 [ 285.960267][ T8795] should_failslab+0xc2/0x120 [ 285.960280][ T8795] __kmalloc_cache_noprof+0x72/0x780 [ 285.960296][ T8795] ? tcf_action_init_1+0x278/0x6c0 [ 285.960310][ T8795] ? tcf_action_init_1+0x278/0x6c0 [ 285.960320][ T8795] tcf_action_init_1+0x278/0x6c0 [ 285.960331][ T8795] ? tc_lookup_action_n+0xc9/0xf0 [ 285.960348][ T8795] ? __pfx_tcf_action_init_1+0x10/0x10 [ 285.960360][ T8795] ? __pfx_tc_action_load_ops+0x10/0x10 [ 285.960377][ T8795] ? __nla_parse+0x40/0x60 [ 285.960393][ T8795] tcf_action_init+0x432/0xa50 [ 285.960409][ T8795] ? __pfx_tcf_action_init+0x10/0x10 [ 285.960431][ T8795] ? arch_stack_walk+0xa6/0x100 [ 285.960456][ T8795] ? __kasan_slab_free+0x5f/0x80 [ 285.960466][ T8795] ? kmem_cache_free+0x2d4/0x6c0 [ 285.960476][ T8795] ? __lock_acquire+0x622/0x1c90 [ 285.960500][ T8795] tcf_action_add+0xee/0x5c0 [ 285.960514][ T8795] ? __pfx_tcf_action_add+0x10/0x10 [ 285.960546][ T8795] ? __nla_parse+0x40/0x60 [ 285.960562][ T8795] tc_ctl_action+0x35b/0x470 [ 285.960574][ T8795] ? __pfx_tc_ctl_action+0x10/0x10 [ 285.960590][ T8795] ? __pfx_tc_ctl_action+0x10/0x10 [ 285.960602][ T8795] rtnetlink_rcv_msg+0x3c9/0xe90 [ 285.960619][ T8795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.960637][ T8795] ? ref_tracker_free+0x37c/0x830 [ 285.960652][ T8795] netlink_rcv_skb+0x158/0x420 [ 285.960668][ T8795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.960684][ T8795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.960704][ T8795] ? netlink_deliver_tap+0x1ae/0xd30 [ 285.960721][ T8795] netlink_unicast+0x5aa/0x870 [ 285.960738][ T8795] ? __pfx_netlink_unicast+0x10/0x10 [ 285.960759][ T8795] netlink_sendmsg+0x8c8/0xdd0 [ 285.960776][ T8795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.960797][ T8795] ____sys_sendmsg+0xa98/0xc70 [ 285.960808][ T8795] ? copy_msghdr_from_user+0x10a/0x160 [ 285.960822][ T8795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.960838][ T8795] ___sys_sendmsg+0x134/0x1d0 [ 285.960852][ T8795] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.960865][ T8795] ? __lock_acquire+0x622/0x1c90 [ 285.960898][ T8795] __sys_sendmsg+0x16d/0x220 [ 285.960912][ T8795] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.960935][ T8795] do_syscall_64+0xcd/0xfa0 [ 285.960952][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.960963][ T8795] RIP: 0033:0x7fcbeff8efc9 [ 285.960972][ T8795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.960982][ T8795] RSP: 002b:00007fcbf0e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.960993][ T8795] RAX: ffffffffffffffda RBX: 00007fcbf01e5fa0 RCX: 00007fcbeff8efc9 [ 285.961000][ T8795] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 285.961006][ T8795] RBP: 00007fcbf0e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 285.961011][ T8795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.961017][ T8795] R13: 00007fcbf01e6038 R14: 00007fcbf01e5fa0 R15: 00007ffecb554038 [ 285.961031][ T8795] [ 286.879361][ T976] usb 5-1: USB disconnect, device number 11 [ 286.985648][ T8804] batman_adv: batadv0: Adding interface: ipvlan5 [ 286.992977][ T8804] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.032049][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.054492][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.067174][ T5925] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 287.115304][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 287.129311][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.162909][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 287.173794][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.189158][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 287.199630][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.209792][ T8804] batman_adv: batadv0: Interface activated: ipvlan5 [ 287.323058][ T8807] vlan2: entered allmulticast mode [ 287.424842][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 287.473382][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.484500][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.494481][ T5925] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 287.503820][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.550369][ T5925] usb 1-1: config 0 descriptor?? [ 287.860425][ T8812] batman_adv: batadv0: Adding interface: ipvlan8 [ 287.916614][ T8812] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.958574][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.969843][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.982388][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 287.993678][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.003799][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 288.013764][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.023945][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 288.333053][ T5925] usbhid 1-1:0.0: can't add hid device: -32 [ 288.344179][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.382892][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 288.383194][ T30] audit: type=1800 audit(2000000165.530:428): pid=8815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.798" name="file1" dev="overlay" ino=855 res=0 errno=0 [ 288.452379][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 288.463400][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.495698][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 288.511980][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.522205][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 288.532883][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.543133][ T8812] batman_adv: batadv0: Interface activated: ipvlan8 [ 288.617364][ T8820] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.867185][ T8813] vlan2: entered allmulticast mode [ 289.596993][ T8839] FAULT_INJECTION: forcing a failure. [ 289.596993][ T8839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.617768][ T8839] CPU: 0 UID: 0 PID: 8839 Comm: syz.1.805 Not tainted syzkaller #0 PREEMPT(full) [ 289.617795][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.617806][ T8839] Call Trace: [ 289.617812][ T8839] [ 289.617819][ T8839] dump_stack_lvl+0x16c/0x1f0 [ 289.617851][ T8839] should_fail_ex+0x512/0x640 [ 289.617882][ T8839] _copy_from_user+0x2e/0xd0 [ 289.617910][ T8839] copy_from_sockptr_offset+0x15c/0x1b0 [ 289.617934][ T8839] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 289.617957][ T8839] ? bpf_lsm_capable+0x9/0x10 [ 289.617977][ T8839] ? security_capable+0x7e/0x260 [ 289.618008][ T8839] do_ip6t_set_ctl+0x479/0xb00 [ 289.618029][ T8839] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 289.618063][ T8839] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 289.618087][ T8839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 289.618118][ T8839] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 289.618149][ T8839] nf_setsockopt+0x8d/0xf0 [ 289.618180][ T8839] ipv6_setsockopt+0x135/0x170 [ 289.618204][ T8839] tcp_setsockopt+0xa7/0x100 [ 289.618227][ T8839] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 289.618256][ T8839] do_sock_setsockopt+0xf3/0x1d0 [ 289.618286][ T8839] __sys_setsockopt+0x1a0/0x230 [ 289.618311][ T8839] __x64_sys_setsockopt+0xbd/0x160 [ 289.618332][ T8839] ? do_syscall_64+0x91/0xfa0 [ 289.618359][ T8839] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.618385][ T8839] do_syscall_64+0xcd/0xfa0 [ 289.618413][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.618431][ T8839] RIP: 0033:0x7fa72dd8efc9 [ 289.618445][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.618462][ T8839] RSP: 002b:00007fa72ec9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.618480][ T8839] RAX: ffffffffffffffda RBX: 00007fa72dfe5fa0 RCX: 00007fa72dd8efc9 [ 289.618491][ T8839] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 289.618502][ T8839] RBP: 00007fa72ec9e090 R08: 00000000000002f0 R09: 0000000000000000 [ 289.618512][ T8839] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 289.618523][ T8839] R13: 00007fa72dfe6038 R14: 00007fa72dfe5fa0 R15: 00007ffcb981a208 [ 289.618553][ T8839] [ 290.589627][ T5925] usb 1-1: USB disconnect, device number 21 [ 290.744223][ T8850] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.030499][ T8851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 291.084007][ T8856] siw: device registration error -23 [ 291.109621][ T8851] block device autoloading is deprecated and will be removed. [ 292.568001][ T30] audit: type=1400 audit(2000000170.060:429): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.639022][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 292.662166][ T8879] netlink: 260 bytes leftover after parsing attributes in process `syz.3.813'. [ 292.694028][ T30] audit: type=1400 audit(2000000170.060:430): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.896430][ T30] audit: type=1400 audit(2000000170.060:431): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.919173][ T30] audit: type=1400 audit(2000000170.060:432): avc: denied { read } for pid=5480 comm="dhcpcd" name="n100" dev="tmpfs" ino=5432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.945449][ T30] audit: type=1400 audit(2000000170.060:433): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=5432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.972152][ T30] audit: type=1400 audit(2000000170.060:434): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=5432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.018240][ T30] audit: type=1400 audit(2000000170.390:435): avc: denied { write } for pid=8874 comm="syz.4.811" path="socket:[22536]" dev="sockfs" ino=22536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.172587][ T5897] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 294.402286][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 294.463716][ T8902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.820'. [ 295.588630][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.599974][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.710762][ T8907] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.822667][ T5897] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 295.957037][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.974870][ T5897] usb 4-1: config 0 descriptor?? [ 295.993349][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'. [ 296.147515][ T8912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8912 comm=syz.2.822 [ 296.173807][ T8912] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 296.181576][ T8912] netlink: 'syz.2.822': attribute type 2 has an invalid length. [ 296.579466][ T30] audit: type=1400 audit(2000000174.070:436): avc: denied { module_request } for pid=8923 comm="syz.2.828" kmod="net-pf-10-proto-2-type-7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 296.588917][ T5827] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 296.602176][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.638639][ T8928] fuse: Bad value for 'fd' [ 296.698864][ T30] audit: type=1400 audit(2000000174.130:437): avc: denied { listen } for pid=8923 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.718338][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.736518][ T5897] usbhid 4-1:0.0: can't add hid device: -32 [ 296.752340][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 297.655787][ T8950] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.064412][ T8954] tipc: Enabling of bearer rejected, failed to enable media [ 298.088092][ T8954] netlink: 'syz.4.835': attribute type 28 has an invalid length. [ 298.097058][ T8954] netlink: 'syz.4.835': attribute type 3 has an invalid length. [ 298.107316][ T8954] netlink: 132 bytes leftover after parsing attributes in process `syz.4.835'. [ 298.197058][ T8959] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.652641][ T5897] usb 4-1: USB disconnect, device number 16 [ 298.783001][ T8970] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.042038][ T8969] tipc: Started in network mode [ 299.057376][ T8969] tipc: Node identity ca1c00a03d0c, cluster identity 4711 [ 299.066869][ T8969] tipc: Enabled bearer , priority 0 [ 299.226884][ T8973] No such timeout policy "syz1" [ 299.247348][ T8969] tipc: Resetting bearer [ 299.375149][ T8968] tipc: Disabling bearer [ 299.392796][ T30] audit: type=1400 audit(2000000176.880:438): avc: denied { getopt } for pid=8974 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.285177][ T9001] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.622401][ T5897] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 301.720300][ T30] audit: type=1400 audit(2000000179.210:439): avc: denied { setopt } for pid=9006 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 301.784932][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 301.801452][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.837976][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.849315][ T5897] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 301.859674][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.933419][ T5897] usb 3-1: config 0 descriptor?? [ 302.749787][ T5897] usbhid 3-1:0.0: can't add hid device: -32 [ 302.766234][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 302.815492][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.857'. [ 302.872068][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 302.892529][ T5925] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 303.062289][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 303.083843][ T5925] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 303.119623][ T5925] usb 1-1: config 179 has no interface number 0 [ 303.132885][ T5925] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 303.149323][ T5925] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 303.243384][ T9035] program syz.3.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.253004][ T5925] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 16384, setting to 1024 [ 303.264674][ T5925] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 303.279314][ T5925] usb 1-1: config 179 interface 65 has no altsetting 0 [ 303.286986][ T5925] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 303.800257][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.828232][ T5925] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input20 [ 303.913421][ T5170] input input20: unable to receive magic message: -110 [ 303.945988][ T5170] input input20: unable to receive magic message: -32 [ 303.965411][ T5170] input input20: unable to receive magic message: -32 [ 304.060215][ T5825] input input20: unable to receive magic message: -32 [ 304.166890][ T9043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.862'. [ 304.252454][ T9044] ieee802154 phy0 wpan0: encryption failed: -22 [ 304.615287][ T5876] usb 3-1: USB disconnect, device number 14 [ 304.956317][ T9051] openvswitch: netlink: Message has 8 unknown bytes. [ 305.059952][ T30] audit: type=1400 audit(2000000182.550:440): avc: denied { getopt } for pid=9052 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.171544][ T9062] FAULT_INJECTION: forcing a failure. [ 305.171544][ T9062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.200929][ T30] audit: type=1400 audit(2000000182.690:441): avc: denied { getopt } for pid=9048 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 305.201737][ T9062] CPU: 0 UID: 0 PID: 9062 Comm: syz.3.870 Not tainted syzkaller #0 PREEMPT(full) [ 305.201757][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.201766][ T9062] Call Trace: [ 305.201771][ T9062] [ 305.201777][ T9062] dump_stack_lvl+0x16c/0x1f0 [ 305.201805][ T9062] should_fail_ex+0x512/0x640 [ 305.201826][ T9062] _copy_from_iter+0x29f/0x1720 [ 305.201851][ T9062] ? _copy_from_iter+0x15d/0x1720 [ 305.201869][ T9062] ? __pfx__copy_from_iter+0x10/0x10 [ 305.201890][ T9062] ? __pfx__copy_from_iter+0x10/0x10 [ 305.201907][ T9062] ? arch_stack_walk+0xa6/0x100 [ 305.201929][ T9062] copy_page_from_iter+0xde/0x180 [ 305.201950][ T9062] skb_copy_datagram_from_iter+0x2a0/0x740 [ 305.201975][ T9062] tun_get_user+0x1850/0x3cc0 [ 305.202007][ T9062] ? __pfx_tun_get_user+0x10/0x10 [ 305.202028][ T9062] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 305.202054][ T9062] ? find_held_lock+0x2b/0x80 [ 305.202073][ T9062] ? tun_get+0x191/0x370 [ 305.202096][ T9062] tun_chr_write_iter+0xdc/0x210 [ 305.202118][ T9062] vfs_write+0x7d3/0x11d0 [ 305.202134][ T9062] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 305.202156][ T9062] ? __pfx_vfs_write+0x10/0x10 [ 305.202168][ T9062] ? find_held_lock+0x2b/0x80 [ 305.202200][ T9062] ksys_write+0x12a/0x250 [ 305.202213][ T9062] ? __pfx_ksys_write+0x10/0x10 [ 305.202233][ T9062] do_syscall_64+0xcd/0xfa0 [ 305.202256][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.202271][ T9062] RIP: 0033:0x7f4c03b8da7f [ 305.202284][ T9062] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 305.202298][ T9062] RSP: 002b:00007f4c04ad9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 305.202313][ T9062] RAX: ffffffffffffffda RBX: 00007f4c03de5fa0 RCX: 00007f4c03b8da7f [ 305.202323][ T9062] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 305.202332][ T9062] RBP: 00007f4c04ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 305.202341][ T9062] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 305.202349][ T9062] R13: 00007f4c03de6038 R14: 00007f4c03de5fa0 R15: 00007ffd5d901938 [ 305.202371][ T9062] [ 305.623419][ T5925] usb 1-1: USB disconnect, device number 22 [ 305.629455][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 305.784769][ T9079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 305.789600][ T9075] lo speed is unknown, defaulting to 1000 [ 305.812716][ T5940] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 305.871315][ T9080] batman_adv: batadv0: Adding interface: ipvlan6 [ 305.884486][ T9080] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.973648][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 305.979194][ T9083] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.994959][ T5940] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 306.038513][ T5940] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 306.302255][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 306.321621][ T5940] usb 4-1: Product: syz [ 306.327033][ T5940] usb 4-1: Manufacturer: syz [ 306.332759][ T5940] usb 4-1: SerialNumber: syz [ 306.337139][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.352773][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.363007][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 306.363432][ T5940] usb 4-1: config 0 descriptor?? [ 306.379145][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.380073][ T9070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 306.397558][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 306.410770][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.422700][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 306.432884][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.444171][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 306.454718][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.464711][ T9080] batman_adv: batadv0: Interface activated: ipvlan6 [ 306.479259][ T5940] hub 4-1:0.0: bad descriptor, ignoring hub [ 306.529864][ T5940] hub 4-1:0.0: probe with driver hub failed with error -5 [ 306.564384][ T9084] vlan2: entered allmulticast mode [ 306.713757][ T9088] netlink: 36 bytes leftover after parsing attributes in process `syz.4.877'. [ 306.728006][ T9075] lo speed is unknown, defaulting to 1000 [ 306.792769][ T976] usb 4-1: USB disconnect, device number 17 [ 307.487149][ T9103] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 307.493674][ T9103] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 307.516710][ T9103] vhci_hcd vhci_hcd.0: Device attached [ 307.583037][ T9104] vhci_hcd: connection closed [ 307.585645][ T36] vhci_hcd: stop threads [ 307.619413][ T36] vhci_hcd: release socket [ 307.660705][ T36] vhci_hcd: disconnect device [ 307.695913][ T5925] vhci_hcd: vhci_device speed not set [ 308.042937][ T5940] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 308.562604][ T30] audit: type=1400 audit(2000000186.060:442): avc: denied { read write } for pid=9114 comm="syz.1.886" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 308.587725][ T30] audit: type=1400 audit(2000000186.080:443): avc: denied { open } for pid=9114 comm="syz.1.886" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 308.615795][ T9113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.702304][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 308.713023][ T5940] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 308.747662][ T5940] usb 1-1: config 179 has no interface number 0 [ 308.759669][ T30] audit: type=1400 audit(2000000186.250:444): avc: denied { accept } for pid=9120 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 308.925922][ T9127] netlink: 88 bytes leftover after parsing attributes in process `syz.1.886'. [ 309.110640][ T5940] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 309.161045][ T5940] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 309.536031][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 309.790769][ T5940] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 16384, setting to 1024 [ 310.253528][ T5940] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.289419][ T5940] usb 1-1: config 179 interface 65 has no altsetting 0 [ 310.367683][ T5940] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 310.383096][ T9137] syzkaller0: entered promiscuous mode [ 310.388830][ T9137] syzkaller0: entered allmulticast mode [ 310.395116][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.528460][ T5940] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input22 [ 310.649193][ T5170] input input22: unable to receive magic message: -110 [ 311.096177][ T5170] input input22: unable to receive magic message: -71 [ 311.283858][ T5170] input input22: unable to receive magic message: -71 [ 311.300283][ T5940] usb 1-1: USB disconnect, device number 23 [ 311.306347][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 311.306394][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 311.627038][ T30] audit: type=1400 audit(2000000189.110:445): avc: denied { mount } for pid=9152 comm="syz.1.895" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 311.803324][ T30] audit: type=1400 audit(2000000189.110:446): avc: denied { write } for pid=9152 comm="syz.1.895" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.977005][ T30] audit: type=1400 audit(2000000189.470:447): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 312.016849][ T9159] sg_write: data in/out 65500/17 bytes for SCSI command 0x8-- guessing data in; [ 312.016849][ T9159] program syz.3.896 not setting count and/or reply_len properly [ 312.572650][ T9167] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.979292][ T9169] ptrace attach of "./syz-executor exec"[5810] was attempted by ""[9169] [ 312.988283][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 312.997301][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 313.007161][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 313.016020][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 313.126316][ T9174] netlink: 128 bytes leftover after parsing attributes in process `syz.3.901'. [ 313.846351][ T9189] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 313.972577][ T976] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 314.152457][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 314.218621][ T976] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 314.262606][ T30] audit: type=1326 audit(2000000191.750:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c03b8efc9 code=0x7fc00000 [ 314.302285][ T976] usb 1-1: config 179 has no interface number 0 [ 314.326722][ T976] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 314.462645][ T976] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 315.008715][ T976] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 16384, setting to 1024 [ 315.048337][ T976] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.062284][ T976] usb 1-1: config 179 interface 65 has no altsetting 0 [ 315.069257][ T976] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 315.079696][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.108200][ T976] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23 [ 315.162720][ T5170] input input23: unable to receive magic message: -110 [ 315.278267][ T5170] input input23: unable to receive magic message: -32 [ 315.579480][ T30] audit: type=1400 audit(2000000193.070:449): avc: denied { shutdown } for pid=9194 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.066552][ T9206] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.549950][ T976] usb 1-1: USB disconnect, device number 24 [ 316.555902][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 316.640376][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 316.649318][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.912'. [ 316.685715][ T9210] geneve2: entered promiscuous mode [ 316.691004][ T9210] geneve2: entered allmulticast mode [ 316.748369][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.083359][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.760614][ T9222] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.424138][ T9214] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.457847][ T30] audit: type=1400 audit(2000000195.950:450): avc: denied { setopt } for pid=9224 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 318.707799][ T9223] batman_adv: batadv0: Adding interface: ipvlan9 [ 319.408491][ T9223] batman_adv: batadv0: The MTU of interface ipvlan9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.474479][ T30] audit: type=1400 audit(2000000196.960:451): avc: denied { bind } for pid=9233 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 319.516423][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.546487][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.563367][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 319.579393][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.590358][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 319.618514][ T30] audit: type=1400 audit(2000000196.960:452): avc: denied { bind } for pid=9233 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 319.642110][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.657591][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 319.669625][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.685624][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 319.696303][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.707457][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 319.717359][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.727348][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 319.737282][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.747134][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 319.757021][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.766910][ T9223] batman_adv: batadv0: Interface activated: ipvlan9 [ 319.948842][ T9229] vlan2: entered allmulticast mode [ 320.503713][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 335.102226][ C0] sched: DL replenish lagged too much [ 378.302487][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.782165][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 452.789128][ C0] rcu: (detected by 0, t=10502 jiffies, g=31837, q=1508 ncpus=2) [ 452.796930][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 3314 (4294982436-4294979122), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 452.810200][ C0] rcu: rcu_preempt kthread starved for 3314 jiffies! g31837 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 452.821299][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 452.831287][ C0] rcu: RCU grace-period kthread stack dump: [ 452.837162][ C0] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 452.850616][ C0] Call Trace: [ 452.853913][ C0] [ 452.856847][ C0] __schedule+0x1190/0x5de0 [ 452.861366][ C0] ? __lock_acquire+0x622/0x1c90 [ 452.866314][ C0] ? __pfx___schedule+0x10/0x10 [ 452.871172][ C0] ? find_held_lock+0x2b/0x80 [ 452.875849][ C0] ? schedule+0x2d7/0x3a0 [ 452.880179][ C0] schedule+0xe7/0x3a0 [ 452.884243][ C0] schedule_timeout+0x123/0x290 [ 452.889168][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 452.894520][ C0] ? __pfx_process_timeout+0x10/0x10 [ 452.899809][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 452.905628][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 452.911098][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 452.915858][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 452.921132][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.926331][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 452.931265][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 452.936107][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 452.941899][ C0] rcu_gp_kthread+0x26d/0x380 [ 452.946556][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 452.951754][ C0] ? rcu_is_watching+0x12/0xc0 [ 452.956519][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.961722][ C0] ? __kthread_parkme+0x19e/0x250 [ 452.966750][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 452.971949][ C0] kthread+0x3c5/0x780 [ 452.976012][ C0] ? __pfx_kthread+0x10/0x10 [ 452.980599][ C0] ? rcu_is_watching+0x12/0xc0 [ 452.985358][ C0] ? __pfx_kthread+0x10/0x10 [ 452.989920][ C0] ret_from_fork+0x675/0x7d0 [ 452.994485][ C0] ? __pfx_kthread+0x10/0x10 [ 452.999070][ C0] ret_from_fork_asm+0x1a/0x30 [ 453.003874][ C0] [ 453.006884][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 453.013191][ C0] Sending NMI from CPU 0 to CPUs 1: [ 453.018400][ C1] NMI backtrace for cpu 1 [ 453.018412][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 453.018429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.018437][ C1] RIP: 0010:write_comp_data+0x24/0x90 [ 453.018456][ C1] Code: 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 e7 78 e4 11 65 8b 05 f8 78 e4 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 7c 16 00 00 85 c0 [ 453.018470][ C1] RSP: 0018:ffffc90000a082b8 EFLAGS: 00000202 [ 453.018484][ C1] RAX: 0000000080000101 RBX: ffff8881b6f98000 RCX: ffffffff898798f1 [ 453.018493][ C1] RDX: ffff88801d6e2480 RSI: 0000000000000000 RDI: 0000000000000003 [ 453.018502][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 453.018511][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90000a08398 [ 453.018520][ C1] R13: ffff888079480480 R14: 0000000000000000 R15: 0000000000000000 [ 453.018529][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 453.018544][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.018554][ C1] CR2: 00007ffecb552b18 CR3: 000000005c6e0000 CR4: 00000000003526f0 [ 453.018563][ C1] Call Trace: [ 453.018568][ C1] [ 453.018572][ C1] nf_nat_ipv4_local_fn+0x301/0x590 [ 453.018591][ C1] ? __pfx_nf_nat_ipv4_local_fn+0x10/0x10 [ 453.018606][ C1] nf_hook_slow+0xbe/0x200 [ 453.018625][ C1] nf_hook+0x371/0x680 [ 453.018644][ C1] ? __pfx_dst_output+0x10/0x10 [ 453.018664][ C1] ? __pfx_nf_hook+0x10/0x10 [ 453.018683][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 453.018704][ C1] ? __pfx_dst_output+0x10/0x10 [ 453.018724][ C1] ? do_csum+0x26f/0x2d0 [ 453.018745][ C1] __ip_local_out+0x33a/0x7c0 [ 453.018758][ C1] ? __pfx_dst_output+0x10/0x10 [ 453.018778][ C1] ip_local_out+0x2e/0x4d0 [ 453.018792][ C1] synproxy_send_tcp.isra.0+0x491/0x6a0 [ 453.018813][ C1] synproxy_send_client_synack+0x6f6/0x8f0 [ 453.018841][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 453.018860][ C1] ? nft_tunnel_obj_dump+0x898/0x1590 [ 453.018881][ C1] nft_synproxy_do_eval+0xa63/0xd80 [ 453.018897][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 453.018911][ C1] ? lock_acquire+0x179/0x350 [ 453.018924][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 453.018944][ C1] ? sched_clock_cpu+0x6c/0x530 [ 453.018963][ C1] ? find_held_lock+0x2b/0x80 [ 453.018980][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 453.018995][ C1] nft_do_chain+0x2e9/0x1920 [ 453.019010][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.019029][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 453.019041][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 453.019057][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.019078][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.019097][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 453.019118][ C1] nft_do_chain_inet+0x18a/0x340 [ 453.019138][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 453.019158][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.019174][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 453.019190][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 453.019207][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 453.019226][ C1] nf_hook_slow+0xbe/0x200 [ 453.019243][ C1] nf_hook.constprop.0+0x424/0x750 [ 453.019260][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 453.019278][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 453.019295][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 453.019312][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 453.019333][ C1] ip_local_deliver+0x169/0x1f0 [ 453.019351][ C1] ip_rcv+0x2e0/0x600 [ 453.019368][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 453.019384][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 453.019400][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 453.019417][ C1] ? lock_acquire+0x179/0x350 [ 453.019431][ C1] ? process_backlog+0x3e7/0x15e0 [ 453.019446][ C1] __netif_receive_skb+0x1d/0x160 [ 453.019462][ C1] process_backlog+0x439/0x15e0 [ 453.019479][ C1] __napi_poll.constprop.0+0xba/0x550 [ 453.019494][ C1] ? skb_defer_free_flush+0x149/0x280 [ 453.019515][ C1] net_rx_action+0x97f/0xef0 [ 453.019533][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 453.019548][ C1] ? sched_balance_domains+0x283/0xee0 [ 453.019575][ C1] handle_softirqs+0x219/0x8e0 [ 453.019593][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 453.019611][ C1] __irq_exit_rcu+0x109/0x170 [ 453.019627][ C1] irq_exit_rcu+0x9/0x30 [ 453.019642][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 453.019662][ C1] [ 453.019667][ C1] [ 453.019672][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.019687][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 453.019706][ C1] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 453.019719][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 453.019731][ C1] RAX: 00000000021c2c63 RBX: 0000000000000001 RCX: ffffffff8b6082a9 [ 453.019740][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b0a2 RDI: ffffffff8bf07040 [ 453.019749][ C1] RBP: ffffed1003adc490 R08: 0000000000000001 R09: ffffed10170a6655 [ 453.019757][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 453.019766][ C1] R13: ffff88801d6e2480 R14: ffffffff908203d0 R15: 0000000000000000 [ 453.019778][ C1] ? ct_kernel_exit+0x139/0x190 [ 453.019792][ C1] default_idle+0x13/0x20 [ 453.019805][ C1] default_idle_call+0x6c/0xb0 [ 453.019819][ C1] do_idle+0x38d/0x500 [ 453.019841][ C1] ? __pfx_do_idle+0x10/0x10 [ 453.019858][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 453.019875][ C1] cpu_startup_entry+0x4f/0x60 [ 453.019891][ C1] start_secondary+0x21d/0x2b0 [ 453.019910][ C1] ? __pfx_start_secondary+0x10/0x10 [ 453.019930][ C1] common_startup_64+0x13e/0x148 [ 453.019950][ C1]