last executing test programs: 2m32.518741033s ago: executing program 0 (id=262): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') syz_usb_control_io$hid(r0, 0x0, &(0x7f00000020c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400f060000005e"], 0x0, 0x0, 0x0, 0x0}) 2m30.452845311s ago: executing program 0 (id=278): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = gettid() faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x200081, 0x4df2f771f29481e5) ioctl$FIBMAP(r5, 0x1, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES64], 0xa) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0xfffffffe, 0xffffffff}, 0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000009000006001500050000000c00168005000400030000"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x1ff, &(0x7f0000002380)=0x0) io_destroy(r7) 2m28.979359514s ago: executing program 0 (id=286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) shutdown(r0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe501, 0x3, 0x230, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x198, 0x230, 0x230, 0x198, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xffffffff, 'ip6_vti0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x6e, 0x0, 0x24}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@multicast2, @rand_addr, 0x0, 0xffffffff, 'vxcan1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x1d}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x589b, 0x6, 0x0, 'syz1\x00', 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 2m28.774016856s ago: executing program 0 (id=288): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') syz_usb_control_io$hid(r0, 0x0, &(0x7f00000020c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400f060000005e"], 0x0, 0x0, 0x0, 0x0}) 2m26.52117125s ago: executing program 0 (id=302): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = gettid() faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x200081, 0x4df2f771f29481e5) ioctl$FIBMAP(r5, 0x1, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES64], 0xa) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0xfffffffe, 0xffffffff}, 0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000009000006001500050000000c00168005000400030000"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) io_setup(0x1ff, &(0x7f0000002380)=0x0) io_destroy(r7) 2m25.051660388s ago: executing program 0 (id=309): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"1a17924ab218eacb15a3fccf929e2dd2497903c1f853d95b995c65e99449ff953fa11c7723b2149ecdaa7f833f60e13b19a66e963f7e8da4297ebbfdda5b36fb4d01bd02e6c652dc4d99e2cb82c2a1d4a45e4c89ba9994e82f854bbc34a40b3a58aa256c9b4512fbf91b9846446c4909e4ec53982e7d7fd11ee0bdeab0bb4c469c9665dde8cb58f0ca148223b6cc4e2f306cfbeccedec8db5212f2fc4e14f836c68bdace4db1afbde9d463e5ac24567925b5fdf0e3af1a52dbd7669fe9227302c8f635bc2ddbf5bd7dccd7b92a9bd5c7363375a57851c2bc72509f2005f138f5a59cf85e9ddb1c972c89d50806e8941b7059cd3eca77527a7f20af70841b4d6f026614bdbb276a6814cc74d91856b968c5fdb52674d892a90d01ab91841b6811def78bdac9bc6f9df2598569fbdfef75079832b2750801dc83fd1987713c61136ac9e5f2f7e67f302109bb9a7fea75290b506a89a19d7e0e472937a8c9ecfe16ef6eb88c7a88a060756196d55d6a3d3f7cdf9915d22b6b3af69ec55017b821ec0621e8a59414efc2b46977a85846b53ae75a350947afcafbdef7233cc371bc2a6f29c0315b352ac2741c81df534303ddb30a4408db5679d05d245259c245c9d7f861711cc287cfd0462b948512623b921060386c587fd166df29e71ecfc8ed90031e95b2af1406b5ae73f6084e39e88194e3d37dc801982656b5b66342d74100f9f5b8c94c1e91b626bbf426a07b4be91dbdb76a6e40d0b788f89359e462e69bc4499fd4f9aa1e7f0c3f73a996b6ecef606c7651286e1f18a6823eed7191cd542057eaaf09aa32e8ce370c09050278b85fd359b8ca23e66e9d294ec57b3ddd90409d9b1ca28c6993b244f8ca46f6bf478ff22fb1df53e33abdda4b2b1e5cff7de19957bdc8e7ca39e4762204b1f9f33b9375b7282422b91841706751038e42023ba45c1cd0998c1794c1c2a5ff65466189bbb27bcbf01e5a48bfd8b6845f7d5c87d977df4ded5273ebf56b96c50b4eadc44bfaa0994259eeb1031644415fa9d729753d2138b06f9b7b624d9eeb1ef71dfdff0b639078f058c7a070451c4670af0c6eb1202f77be82faba9b6287995066b5f7e59b7967706d8d8c5bde48137e13df537ae54664fe4e8460b1bdf5b92a1dcf39ee1726bc6690d0ac5f799bcfab918c59cb132c45054ba17b8a44d505ad3eaeee95b4275b25b2087da8902552727a1e739014df348cfa3a1102661c35a6a38df6c410f5343577955dd57de5af089e3f1bcdf96d4ef1d5944243470b0ed10616144cccc5cac44e36fefd9441120c5d047867af0ea353da21fc0ae73b78b84d53a62efeb94ea8d441cc698c92fd7b36cf41472d036c5093bbdf943620c29ffa3b21ef4a0bb9274912b046834ee6f855ceadf18fb488040d5829ab6e8bf69a90315f7f84d002ac4e929e9f1010a8486746bd316799ba3a65744980c388202324ba50768c77a8481ba74d135da7507048c82714a8234837b69922126e4084a68f7418bfd26417cade786c7f8185e2492e3b64eb9d2c2c721504c7b4aeb383503f745fd69315c56b5b0158decd1b1606a63366b7e2d2b9124b6efca4480c703c8f37d6ddff55b0ec15f2ce6be6c902d06aec2ccabeba13b442b608076c33d19e690ab66cf6678d679758d22fb5d8d963f25d00c45576f8b2938543080297b9cb6c305e3131d2f412f00370c285251909f8ebefc3d18a23e25a183997b08251450b29fff32781e6a70e6e070ab3921f3f809392deb732d6f30cc034b5f77d41218bca86d515b16da0457dbf7aaefdcef9d5358e7b4f1e5d1a410f55449e765609d122f938fd57b71482244dff0523067cabfd322fc47aca1c331112e3d969f5fe3594c3c7adea7c36e9b9af6754cdea5ccf05b139f783d4b24540c50a6a9f7dff472d47c87c151d8439b5740cd1f423335dae2680050bd44766159cba66666b7dbc9e190130494327a0d8c9dbed5c8b831ce2b2bb236353ff7175a48b61a0f3209fa3db44f07a21a485ef1682a33cdf632ac2d6ca993b6cd90913e31704bb851711e1f2b5ebb19baaba102dd42d550933e9dfc17311665fef4d0206d7debbcbbd97efafffb905bf9a77b8eeb67d5f8bef8526f6f8607672bb3c50b14e16c264265594e05fa481f724290abdc9f60a899f26033236e3b90548c24288a7b627b51c4d7c638c359ec6325b0d79e1d69cf18cd9136a263b6aa84ad062b9831fc7c201b7ccec7d3b7ea2132ee4579632bf614bcde285527c36ef8a8e12651ef34a677a8d2f84360afa2f2245e4e0d61a12e8e446045fae61375082f983363795f11848edad24b3f7ae53f0eeb329fa62b6d7b446e3b2c1257981f9c0c3ea371c71021af834a285203b2e3177ddf5251044ea215c048f78701dec36a94ca3c435278d1fd889996adf5ea7c8db62f2b1331bc22c4b7798d587a5c4e619b7b576e19d92996bc0bdc0c8c15374e11b6eeda0e18b35aac4b96db9cdba025080bf5bea4ffdf4fa3c93ec5feede0a140f7f6727ef255783565935d59d348aaa6d12c060afd5f6d084346309d8cbf54b33050ecccf30ae083c4034165880214a94a5296427e2fcb6d90692a82212b6b8d86c6d163f0643944aaba4af1171aed463994f1374e1ec1654b89b04e9d635074e8d131bc2443daf1caad455671470329a287f4c711cb907403d5c05184cd3a647823b5b9c6dc4451fdde92dc1cb87010197026458b40d4809ab60aca1af6bb3702a3e0506cdd21faa6d9909f4ed74723de75fc48d44314fa3cc0c8e8ea226ec1d5875b9595aeacdff0a9f75b4a60dde781c58179f997ecb6479c91ecacc65bfe293a2d26c21ae7c1d7be1241cc1c4ea86a6cf8d93012bd98508aae8db723ff167026298cab227b7d0062c27ccc8e81df7268423ad063638760b44e77147ee9bd84140166ae2bfd592f845ca68c719f7520ae3c9988cc89db73bf93ad6f2f7d9394b2288f0176723acd167081ade4e066a26832f7b655cd874aa5026a7369bb9912c90599d1407f0488a9c540a31997890f5433bd1df91ba13a9e0721c9a707eac7cff1c3efef6cd716779c7ad631c3560caa2031d9d2591329c1867d0d5f96b5897cac2c6a381f0ce5c27969c2b3e7d188e1e896d815b01a3e177933817325953140272ad718a36ae522d43de109ba92255ee66d2a14897f2b2014dc9a495c108727e0eef54df617e269e43a0c48d28a91aaf14d58719e21ea39c1c534e39a1dfabb61377b55d2f69fe79c7d5111b8b952c388925ea8ab1503ae68bce95a34a10a85aa0e5da52add14b93eaac5861a6504e23dda8034e809253c1071ddda934663faac454cd378c5725f5c6f4d943779994357185e512a4b6993156e624f25d86d24e7254d3e9b231aa80ed5a32e108cb528d402f93e58c25ac937420ff7dcd7d9ec2126c7fe7cefa47c038f23de40523d5e026fe3bb4cfd3040f9bd9631cf5a2cde1e20a6032703cd64c2ad97ea95d05a7aa3ea3b3b9d5a86961116dd1338c0a2caae0ceab3178ac7736dfa8a949cd81d261748e6678cb730b57468fb2b7e22c5eb08ad496e76775dce0c31950a596580ad7d6c3fd9ce90dded340f20b77fe53e81fb6e2a7a6c450b8ac9009c7c077893f704457a90401fb758c0769fbfd38e40ae692e410b889bbf0b09a32dc731b6768c0fa3963a5b6279b6a5db611174339f3218fff567f6cfb7377ddc8e2c730da35cc3ec680a6bc95010dd03834caab7afb2c0023ad9ce3aae3c0fd1ece42ea840bf5fc798a0b5fbe7692f13549cdba4a0b68f722ef6877856a76fc3c39f7cfd760675a9f341d9f09f381972be9171e50455ed13e665e61a03b0c2a79276a871c25fc5c486639a71a8dfdf36174373b8995014752aba3026045be6b43074ac3824d687bbf5f6544228cea52791828f54980ee9f728534ea32edd205aaace717adcf61ce28f92719048d44b09812bcfd2d22cc9d7a45ed6b4634756f6b3189908c71728c373ea94aa5c74ce4a73c20138b8cb21db6e2dfb35329b86b1805a5208dd370b8342ca8aa3cbd3e7a3ec79d7b8ee677b04e19c524ddc6de0b22443ac15de908f61719399d0f9890ca2b0283a7db914944f424af10ba0ec9e3e253c060d7b28552eaae5eed1e906f8f93c2195293deabdad6cb38ddab51603e4a96ef1e086de911fb716ffbca467294d9e66e5d0f8225bc28d6c074c4ffba76706f61b0b386b7e4b6500a15fad291f34f6c84f1596a97512f31196a529a7a5725437c038e17d531da3838c8aef3bade6bc1d4c7624560d4fba72e5f8be2c5dc905e1e4bcb2aa7eddb275408ef4288ac69c7a18ae58fb26c2f5a6964f051b81d2e426fc2a5d8617050341b96d5a746e3419fbe94bd3752403868b655c2dba6f48ef109a2e6ec0041842fae52bfab70481ecfe8d27f3d5e444f1b941d871c8057cbe35df68665bc3aadea02d203b106d1179a428daa7d9fea9dbddd8955bb289a92ec790de74cd6a1edf925ab85471633dedf8ba46abe456963a2381addce2aa16c06dd80bb54d8e53d7c82607916af175061da29122afde8687add6b6f42233b76a1164893dcc1ec3dcf935576d2d0f3ab3b1adbace086da915234b4f9bad0afc2915608fc4f6611dc3b91d7e0e48cb0a0f3fdc70ef70ef82043afbd3325f0f6186390ab28ca9f0009184637530d79f0c5a77c6e912afbe6533988f543fc6c02d3d44fbdb0e2ebfad2680184f1ed451991667df958a71fb41cf4367bdb931389ea8b6340e225b312a09dadd8e2ac2d200db6e75323d48c73c6b819e13f92b01bf405e796a2e10b863e773598abcbcc196987e18b19530337809b56480778207103a12acfff1c0ad62846088251a1a0d0d6b300059a99698c84ccac78d53eb32e3984001978db7679960b4d75d71b49696909826c66320526fe02a060265821d15b8b2337121a201402a118ec03ff0d4f3dfa48f2dadd20b510ecdf4e6440b5b2466b9bf28e32327189f0405245694a6371dbe4eae7a8293cdc15193c284123d64690120634f808096a8f3f7a04a5bac9dd86c09f2e4e87c7d7c98d0b370e84ea5f265730f5480eb1375d4f82c7d4efbb6e58c5a92848331b2becd2531f6c456b5d0e690b102dd8faec55bde56f95727f4abf52c58543faaeb9cefd39bba788bd7e2b02b27ecbc1679a1ac00823c83e1ae29690cd25544d3ae0a8db25e963e9fb5bd94987637ac3546b9b312bf04d5c6211c135e806525d423fde9ccb5ef7962ec1e056e6f29adaeebb331f6c234586d1fe21577f56d620c6942a29d4915772144cc60008d1236db21100d5a3112c29396b9e18cdb5b104bed2df2b6ea72c9aa03bb6082f3eb07f0eae359864967a749492d21005b0d39c9613c20b1e21700ab66a4f5ca03ec08d67b95f759252d758743820ba243032e1708447fbaebc27e1316af4cf547cef3ac4966a1f04dd07012f257a0204107c23a0046b12493d9784b24dc561c1f88e591056bcc3b338ab1de65e5ad578021f26f93e9b12f00b5f8c8ae2db6b7b8f254303c7ff06514735974e65fb9a93dc79b115a12310040490ca11ef315340af104e20a2e22dcd132f7d7a61d9d3a12e832ee048a2170dbe03d747ed7402180eb964fde0ecb77e778b18a4e5a83479bb7e0ea0a7d5145ffed4607bd7e6b8f961625d5e3dcac2d4a05e71dc9c2e52195bd55aed4e6749dc1c329e2cda966d18e9bf882c05db627c1047fc71533bbba2c8a83d04db5bad6da349a9ad1992eb88e0274d32a16137e2396ad973c0ecbbc2d243e68b6959bf9b", 0x1000}}, 0x7fec) 2m9.95961022s ago: executing program 32 (id=309): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x7fec) 1m55.140255793s ago: executing program 2 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000401000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002840800014000000009080002400000000408000b40000000000900010073797a3000"], 0xd4}}, 0x0) 1m54.804666094s ago: executing program 2 (id=490): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000008b00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090790000"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f0000000180), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="98"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x2}, 0x40000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x5602, &(0x7f00000006c0)={0x1, "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"}) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd2d410f3f537a2f3, 0x80010, r2, 0xfffbf000) creat(&(0x7f0000000380)='.\x00', 0x89) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r5, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', 0x0, 0x1001, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000580)=""/190, 0x11f) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x104) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = socket(0x10, 0x3, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000180)={0x0, 0xfffffffffffffe0e, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040) 1m54.314920843s ago: executing program 2 (id=493): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000019080)=0xc) syz_open_procfs(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x205, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0xa}]}, 0x20}}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x4, "eb14a05928d8633b488a516f6b33478ddb690cee1786f84687ed6f2dfa55f189", 0x32314752}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 1m51.06686668s ago: executing program 2 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000180)=[0xfb], &(0x7f0000000280)=[r5, r4], &(0x7f0000000340)}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000454e881d334f504a0635776f5700914c00300000003000000005000000000000000000000700000000060000000000000202000000010000000000000bfdffffff00486279e6c6178c1cda19f2a28673c3cd7756d5f72e320f22110c01ffedb8d7d9b00c3835"], &(0x7f0000000300)=""/237, 0x4d, 0xed, 0x1, 0x6, 0x0, @void, @value}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r9 = fsmount(r8, 0x0, 0x5) (rerun: 32) fchdir(r9) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r10, &(0x7f00000000c0)=""/154, 0x9a) (async, rerun: 64) lseek(r10, 0x8, 0x1) (rerun: 64) 1m50.868911547s ago: executing program 2 (id=515): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000600)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf0, 0x31, 0x4, 0x70bd2d, 0x25dfdbfd, {0x15}, [@generic="bacdf14f084fb5442fe15a31e99d9732c0113b3f21071a98239710ac415dfdd53a45c1f810d4c934ab00251d63a6905797524ea9410a0e020364496d4ed03851254d659e6074f4ce113dfa145e54b8d8bb9080d6559434ed8d6833f30c6bdd9cbf99d771d618a86f145ff925993e18db26dd8d790ce73438ba4acc21dfa033b3f6367a6965ad45f060de9267fdf5523ae99162b8cd5472f43e376b3f81b841ad87da50b8e91d69add61f5ea8c1841706a1c16acce579aaca49ba16daa7418ff0af635040da372b038864aa2004f817cac6a505d10f2142a06291b249"]}, 0xf0}, 0x1, 0x0, 0x0, 0x8084}, 0x44054) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000280)=""/180, 0xb4}], 0x2, &(0x7f0000000340)=""/222, 0xde}, 0x40000042) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 1m48.536628842s ago: executing program 2 (id=533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe991}, {0x0, 0x1, 0x6}, 0x9, 0x1, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) lstat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x2c, r6, 0x412cfb3ab88921e3, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) 1m33.516377756s ago: executing program 33 (id=533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe991}, {0x0, 0x1, 0x6}, 0x9, 0x1, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) lstat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x2c, r6, 0x412cfb3ab88921e3, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) 46.650811909s ago: executing program 6 (id=926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='mm_migrate_pages\x00', r0, 0x0, 0x7ffc}, 0x18) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0x7}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 46.338442014s ago: executing program 6 (id=929): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x2, 0x40, 0xc, 0x1}, 0x6) read$alg(r0, &(0x7f0000000200)=""/82, 0x52) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f00000003c0)="01", 0x1) (async) write(r2, &(0x7f00000003c0)="01", 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000400)) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) (async) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000002c0)=""/170, &(0x7f0000000380)=0xaa) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sync_file_range(r5, 0xebd, 0xfffffffffffffffe, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 36.004232639s ago: executing program 6 (id=929): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x2, 0x40, 0xc, 0x1}, 0x6) read$alg(r0, &(0x7f0000000200)=""/82, 0x52) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f00000003c0)="01", 0x1) (async) write(r2, &(0x7f00000003c0)="01", 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000400)) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) (async) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000002c0)=""/170, &(0x7f0000000380)=0xaa) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sync_file_range(r5, 0xebd, 0xfffffffffffffffe, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 28.719286991s ago: executing program 6 (id=929): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x2, 0x40, 0xc, 0x1}, 0x6) read$alg(r0, &(0x7f0000000200)=""/82, 0x52) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f00000003c0)="01", 0x1) (async) write(r2, &(0x7f00000003c0)="01", 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000400)) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) (async) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000002c0)=""/170, &(0x7f0000000380)=0xaa) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sync_file_range(r5, 0xebd, 0xfffffffffffffffe, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 17.270141608s ago: executing program 6 (id=929): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x2, 0x40, 0xc, 0x1}, 0x6) read$alg(r0, &(0x7f0000000200)=""/82, 0x52) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f00000003c0)="01", 0x1) (async) write(r2, &(0x7f00000003c0)="01", 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000400)) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) (async) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000002c0)=""/170, &(0x7f0000000380)=0xaa) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sync_file_range(r5, 0xebd, 0xfffffffffffffffe, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 7.37285967s ago: executing program 4 (id=1125): close(0xffffffffffffffff) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0x4, &(0x7f0000002180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 64) lseek(r5, 0x289e0cb5, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) (async) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x3, 0x1010, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) (async) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f00000c3000/0x4000)=nil, 0x4000, 0x5) (async, rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345}) (rerun: 64) 6.174670871s ago: executing program 4 (id=1133): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x10d001, 0x1c) fanotify_init(0x200, 0x0) (async) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x105440, 0x4) syslog(0x2, 0x0, 0x0) fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0) (async) fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67"], 0x0) 4.509142744s ago: executing program 1 (id=1141): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) close(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_io_uring_setup(0x80d2, &(0x7f0000000340)={0x0, 0x0, 0x400, 0x0, 0x278}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0x101, &(0x7f0000000200)=[{0x2c, 0x1, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0xc740bfca297f10c7, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, @vifc_lcl_ifindex, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000000290ac34bc94f1e9d8ae0000009078006800d2"], 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) 4.176390118s ago: executing program 1 (id=1145): openat$fb0(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x10) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000800)=ANY=[], 0x78) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x10080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, 0x0) 3.333297738s ago: executing program 4 (id=1149): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000020c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400f060000005e"], 0x0, 0x0, 0x0, 0x0}) 3.19273394s ago: executing program 1 (id=1151): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x3000d041) mknodat$null(0xffffffffffffff9c, 0x0, 0x1000, 0x103) r0 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4404c045}, 0x4040020) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x6, 0x8, 0x0, 0x519d, 0x6, 0x9}}, {0x16, 0x2, [0xe, 0xec, 0x1, 0x3, 0x3, 0x2, 0x4, 0x98, 0x789c]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x70}}, 0x0) rseq(0x0, 0x0, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, 0x0, 0x5a) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000440)=0x9, 0x4) 3.148459906s ago: executing program 1 (id=1153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002840800014000000009080002400000000408000b40000000000900010073797a3000"], 0xd4}}, 0x0) 3.088918398s ago: executing program 1 (id=1155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_012={0x2, 0x1, 0xa, "c11a"}, @local=@item_012={0x2, 0x2, 0x2, "9042"}, @global=@item_4={0x3, 0x1, 0x7, "db2f60e9"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x1, 'Iu'}, @local=@item_4={0x3, 0x2, 0x0, "0400"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)='BBB') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@netkit={@void, @value}}, 0x1c) 3.087962031s ago: executing program 3 (id=1156): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.992311223s ago: executing program 3 (id=1157): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000, 0x10000000) 2.94462274s ago: executing program 3 (id=1158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (fail_nth: 14) 2.845123137s ago: executing program 3 (id=1159): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) landlock_create_ruleset(0x0, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000000)={0xe, {0x3, 0x0, 0xe6, 0xf, "f6eaed6992076ff70574082f63677e"}}, 0x1b) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x5) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r3, r2, 0x0, 0x1000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x1c3, 0x12) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000040)={0x3, 0x280, "97c677", 0x4, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0xee00) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x23}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046}) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80984) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff"], 0x0) 2.178883299s ago: executing program 5 (id=1160): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x40) (async) r0 = syz_io_uring_setup(0x1bc8, 0x0, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000140)=0x28, 0x4) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) mknod$loop(0x0, 0x6000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230006) (async) ioctl$TUNSETOFFLOAD(r6, 0x8004745a, 0xf0ff1f00000000) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000008070100000000000000040900020053797a320000000027418a57355eccd07b55af0a9fec803c19f858dd252379fa74fb4a189c321e3da813fcac6c7d028ed31124701aa83cf47478aec272e3add028d400e8b249d45883aea1d426691948e1c75700a495248d22598c1675e7b4470fbe81d095ac71d5aedd1a852a8beb93e2f9095d95be983ac6b2af6f1990251f9815d7c87f40579768d6febcce5d78"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040d422031500000000000109022400010000000009040000010300020009218600fc01220300090581030b040007054fe1ab59cf096001041b59c5e6696427c2ef6dfd17d063ba385d31378588b74aae7664ae79f6a2da3ce7723b1d1bba6ddfb9775ed1114c5790c83aa432965793c73079dfd234ef838bdeeddb0fa009a9cd45cf0413ff5cf34cfc1f84a7e47e57f92c6b94836007b7a1c3f086030b72075c31b6c19cc53253d15bf09c188f7626249e8e917f94235a"], 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGSERIAL(r8, 0x541e, 0x0) 1.838229959s ago: executing program 5 (id=1161): openat$fb0(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x10) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000800)=ANY=[], 0x78) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x10080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, 0x0) 1.367627204s ago: executing program 4 (id=1162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x3f) syz_open_dev$vim2m(0x0, 0x1, 0x2) setrlimit(0xa, &(0x7f0000000000)={0x7, 0x2}) io_setup(0x4, &(0x7f0000000680)) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000440)={0x0, 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000040)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.268914695s ago: executing program 6 (id=929): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x2, 0x40, 0xc, 0x1}, 0x6) read$alg(r0, &(0x7f0000000200)=""/82, 0x52) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f00000003c0)="01", 0x1) (async) write(r2, &(0x7f00000003c0)="01", 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000400)) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) (async) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000002c0)=""/170, &(0x7f0000000380)=0xaa) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sync_file_range(r5, 0xebd, 0xfffffffffffffffe, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 676.574231ms ago: executing program 5 (id=1163): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) (async) 671.503979ms ago: executing program 3 (id=1164): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="851666ce20db96ab0c7d83e114e73a1762249711e34f4ce12c6aa714067726f58b7c42feb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9f2225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f3d4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9da73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acdb7e141743d3c60f75451bcd5c081a8db84ff509a2f874d", 0x0, 0x10, 0x5bb727690d5e0ff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}) 588.944028ms ago: executing program 3 (id=1165): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0}) 552.299417ms ago: executing program 5 (id=1166): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000000)) 444.913055ms ago: executing program 5 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, '\x00'}) write$binfmt_elf32(r1, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x9, 0xc6, 0x1, 0x4, 0x2, 0x6, 0x4, 0x267, 0x38, 0x1dd, 0x8, 0xb, 0x20, 0x1, 0x0, 0x3, 0x8}, [{0x1, 0x1, 0x6, 0xb, 0x2, 0x6, 0x7f, 0x5}], "d5220f18933be6bc706ab27a43e6cbd6695bf579656b0985eb896b2784d0907f3fc04c5b44b5b33330fbf3fc48ce5fe1969f0b21c2324483b15af90005df895cef748f039c6f6c9db15adb66fb6674d708b9e34ebba912f60dbfec6b3cf6f6b6bd28c11f89b117f67c807da0", ['\x00', '\x00', '\x00', '\x00']}, 0x4c4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000455a0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000004000000950000e200000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r5, 0x0, 0xa, &(0x7f0000000040)='tlb_flush\x00'}, 0x30) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 404.71265ms ago: executing program 4 (id=1168): readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)=""/203, 0xcb) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) 370.686389ms ago: executing program 4 (id=1169): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x2000000}]}, {0xfffffefa}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000040)={0x20, 0xe, 0x1, "ad"}, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) listen(r3, 0x0) 350.687006ms ago: executing program 5 (id=1170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000780)={0x2020}, 0x2020) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @empty}, &(0x7f0000000100)=0xc) connect$can_bcm(r4, &(0x7f0000000180)={0x1d, r5}, 0x10) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1171): socket$inet6(0xa, 0x80002, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x4, 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = dup(r0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d001280d09178d2da3477ec73a38ffffcd82caf103bc848e79022290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f0000001e010680"], 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0) fanotify_mark(r1, 0x1, 0x12, r3, 0x0) r5 = syz_io_uring_setup(0x19, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): path="pipe:[22058]" dev="pipefs" ino=22058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 186.779940][ T8482] batadv1: entered promiscuous mode [ 186.785317][ T8482] batadv1: entered allmulticast mode [ 187.079767][ T30] audit: type=1400 audit(1742985716.273:500): avc: denied { getopt } for pid=8490 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.972829][ T6473] hub 5-1:0.0: activate --> -90 [ 188.180577][ T6473] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 188.189367][ T6466] usb 5-1: USB disconnect, device number 12 [ 188.235570][ T8506] fuse: Unknown parameter '0x000000000000000818446744073709551615' [ 188.360183][ T5869] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 188.375761][ T8510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.384285][ T30] audit: type=1326 audit(1742985717.583:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 188.430169][ T30] audit: type=1326 audit(1742985717.583:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 188.482947][ T30] audit: type=1326 audit(1742985717.583:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 188.530808][ T30] audit: type=1326 audit(1742985717.588:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 188.580208][ T30] audit: type=1326 audit(1742985717.588:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 188.596086][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 188.603406][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.617404][ T30] audit: type=1326 audit(1742985717.588:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 188.619936][ T5869] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 188.644260][ T30] audit: type=1326 audit(1742985717.588:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 188.661171][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.673062][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.674514][ T30] audit: type=1326 audit(1742985717.588:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 188.697322][ T5869] usb 2-1: Product: syz [ 188.985868][ T5869] usb 2-1: Manufacturer: syz [ 189.068147][ T5869] usb 2-1: SerialNumber: syz [ 189.215828][ T5869] r8152-cfgselector 2-1: Unknown version 0x0000 [ 189.349273][ T5869] r8152-cfgselector 2-1: config 0 descriptor?? [ 189.661029][ T30] audit: type=1326 audit(1742985717.588:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 189.684132][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.843400][ T30] audit: type=1326 audit(1742985717.588:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 189.869752][ T30] audit: type=1326 audit(1742985717.588:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 189.893988][ T30] audit: type=1326 audit(1742985717.588:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 189.951391][ T8520] capability: warning: `syz.3.788' uses deprecated v2 capabilities in a way that may be insecure [ 189.968477][ T9] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 189.976962][ T30] audit: type=1326 audit(1742985717.588:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 190.001240][ T30] audit: type=1326 audit(1742985717.588:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8509 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 191.403432][ T8538] sp0: Synchronizing with TNC [ 191.428700][ T8533] sit1: entered promiscuous mode [ 191.464483][ T8538] sp0: Synchronizing with TNC [ 191.629811][ T8554] kernel read not supported for file /eth0 (pid: 8554 comm: syz.5.802) [ 191.710374][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 191.807769][ T5870] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 191.971442][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 191.978126][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.992201][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.006913][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.019082][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 192.030206][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.049577][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 192.058750][ T5870] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 192.066768][ T5870] usb 4-1: Manufacturer: syz [ 192.072289][ T5870] usb 4-1: config 0 descriptor?? [ 192.503966][ T9] usb 7-1: config 0 has an invalid interface number: 255 but max is 1 [ 192.512309][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.525269][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 192.548357][ T9] usb 7-1: config 0 has no interface number 0 [ 192.560214][ T9] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 192.571446][ T9] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 192.584888][ T9] usb 7-1: config 0 interface 255 has no altsetting 0 [ 192.593083][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 192.603428][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.603618][ T8567] kernel read not supported for file /eth0 (pid: 8567 comm: syz.5.805) [ 192.621306][ T9] usb 7-1: config 0 descriptor?? [ 192.670114][ T5870] rc_core: IR keymap rc-hauppauge not found [ 192.679113][ T5870] Registered IR keymap rc-empty [ 192.684767][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.806'. [ 192.685151][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 192.693642][ T8570] bridge_slave_1: left allmulticast mode [ 192.693661][ T8570] bridge_slave_1: left promiscuous mode [ 192.693801][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.721564][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 192.731315][ T8570] bridge_slave_0: left allmulticast mode [ 192.737025][ T8570] bridge_slave_0: left promiscuous mode [ 192.743270][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 192.748777][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.755527][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 192.827318][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 192.851059][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 192.901517][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 192.981095][ T6473] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 193.022989][ T9] usb 7-1: string descriptor 0 read error: -71 [ 193.031939][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.041355][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 193.050845][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 193.086695][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.130164][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.262500][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.263882][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 193.288297][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.296589][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 193.305597][ T9] usb 7-1: media controller created [ 193.312072][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.320149][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.340412][ T6473] usb 6-1: Using ep0 maxpacket: 32 [ 193.340655][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 193.347879][ T6473] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 193.405523][ T5870] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 193.405824][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 193.415601][ T5870] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 193.427823][ T6473] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.427847][ T6473] usb 6-1: config 0 has no interface number 0 [ 193.495705][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 193.514966][ T5870] usb 4-1: USB disconnect, device number 14 [ 193.658958][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14 [ 193.684759][ T6473] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 193.695434][ T6473] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.699663][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 193.699674][ T30] audit: type=1400 audit(1742985722.888:539): avc: denied { write } for pid=8584 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 193.751603][ T6473] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 193.761234][ T6473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.769344][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 193.776320][ T6473] usb 6-1: Product: syz [ 193.780607][ T6473] usb 6-1: Manufacturer: syz [ 193.785194][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 193.793097][ T6473] usb 6-1: SerialNumber: syz [ 193.802682][ T8585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.812261][ T6473] usb 6-1: config 0 descriptor?? [ 193.819345][ T9] usb 7-1: USB disconnect, device number 3 [ 193.830587][ T8571] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 193.839758][ T6473] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.852568][ T6473] usb 6-1: invalid MIDI in EP 0 [ 193.868891][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 193.885448][ T6473] snd-usb-audio 6-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 193.929784][ T8588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.811'. [ 193.938934][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 193.949179][ T8588] 9pnet_fd: Insufficient options for proto=fd [ 194.331830][ T9] usb 6-1: USB disconnect, device number 9 [ 194.680249][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 194.858269][ T10] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.955155][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.963990][ T10] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 194.978224][ T30] audit: type=1400 audit(1742985724.158:540): avc: denied { listen } for pid=8619 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 194.978241][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.022041][ T10] usb 4-1: config 0 descriptor?? [ 195.038854][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.046603][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.389463][ T8602] overlay: ./file0 is not a directory [ 195.395242][ T30] audit: type=1400 audit(1742985724.578:541): avc: denied { mount } for pid=8601 comm="syz.3.816" name="/" dev="hugetlbfs" ino=22946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 195.433451][ T30] audit: type=1400 audit(1742985724.628:542): avc: denied { getopt } for pid=8639 comm="syz.6.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.470100][ T5870] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 195.621366][ T8602] tmpfs: Unknown parameter 'indo64' [ 195.627563][ T5870] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.646976][ T30] audit: type=1400 audit(1742985724.838:543): avc: denied { ioctl } for pid=8601 comm="syz.3.816" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 195.680200][ T5870] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 195.699937][ T5870] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.700252][ T10] macally 0003:060B:0001.0004: hidraw0: USB HID v8.00 Device [HID 060b:0001] on usb-dummy_hcd.3-1/input0 [ 195.726807][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 195.739045][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.772729][ T5870] usb 6-1: Product: syz [ 195.791102][ T5870] usb 6-1: Manufacturer: syz [ 195.803481][ T5870] usb 6-1: SerialNumber: syz [ 195.879768][ T5872] usb 4-1: USB disconnect, device number 15 [ 195.943589][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.6.833'. [ 195.952693][ T8659] bond0: option ad_select: unable to set because the bond device is up [ 196.025576][ T5870] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 196.246863][ T5872] usb 6-1: USB disconnect, device number 10 [ 196.381990][ T5872] usblp0: removed [ 196.574645][ T30] audit: type=1326 audit(1742985725.768:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8673 comm="syz.6.840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90ebd8d169 code=0x0 [ 196.622050][ T8678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.842'. [ 196.636006][ T8679] can0: slcan on pty33. [ 196.665323][ T30] audit: type=1400 audit(1742985725.858:545): avc: denied { setopt } for pid=8671 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.685406][ T8682] syzkaller0: Caught tx_queue_len zero misconfig [ 196.790314][ T5870] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 197.094026][ T8693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.245310][ T30] audit: type=1400 audit(1742985726.328:546): avc: denied { listen } for pid=8691 comm="syz.5.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.289978][ T30] audit: type=1400 audit(1742985726.328:547): avc: denied { connect } for pid=8691 comm="syz.5.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.501215][ T8673] can0 (unregistered): slcan off pty33. [ 197.510249][ T5869] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 197.690952][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 197.774331][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.903722][ T5869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.933568][ T5869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.944351][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.955542][ T5869] usb 4-1: Product: syz [ 197.959757][ T5869] usb 4-1: Manufacturer: syz [ 197.968966][ T5869] usb 4-1: SerialNumber: syz [ 197.980156][ T30] audit: type=1400 audit(1742985727.168:548): avc: denied { write } for pid=8708 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.187114][ T5869] usb 4-1: 0:2 : does not exist [ 198.202782][ T5869] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 198.243063][ T5869] usb 4-1: USB disconnect, device number 16 [ 198.448208][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.857'. [ 199.730947][ T8763] kernel read not supported for file /eth0 (pid: 8763 comm: syz.5.869) [ 199.739608][ T30] audit: type=1800 audit(1742985728.928:549): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.869" name="eth0" dev="mqueue" ino=18329 res=0 errno=0 [ 199.760376][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.766985][ T8763] FAULT_INJECTION: forcing a failure. [ 199.766985][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 199.811735][ T8763] CPU: 1 UID: 0 PID: 8763 Comm: syz.5.869 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 199.811762][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.811771][ T8763] Call Trace: [ 199.811777][ T8763] [ 199.811784][ T8763] dump_stack_lvl+0x16c/0x1f0 [ 199.811808][ T8763] should_fail_ex+0x512/0x640 [ 199.811825][ T8763] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 199.811845][ T8763] should_failslab+0xc2/0x120 [ 199.811863][ T8763] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 199.811881][ T8763] ? kasan_save_stack+0x33/0x60 [ 199.811895][ T8763] ? kasan_save_track+0x14/0x30 [ 199.811909][ T8763] ? __kasan_kmalloc+0xaa/0xb0 [ 199.811922][ T8763] ? v9fs_session_init+0xb3/0x1a80 [ 199.811939][ T8763] ? path_mount+0x14d4/0x1f30 [ 199.811959][ T8763] kstrdup+0x53/0x100 [ 199.811981][ T8763] v9fs_session_init+0xb3/0x1a80 [ 199.812004][ T8763] ? __pfx_v9fs_session_init+0x10/0x10 [ 199.812031][ T8763] v9fs_mount+0xc5/0xa30 [ 199.812049][ T8763] ? __pfx_v9fs_mount+0x10/0x10 [ 199.812069][ T8763] ? cap_capable+0xb3/0x250 [ 199.812092][ T8763] ? __pfx_v9fs_mount+0x10/0x10 [ 199.812110][ T8763] legacy_get_tree+0x109/0x220 [ 199.812129][ T8763] vfs_get_tree+0x8b/0x340 [ 199.812150][ T8763] path_mount+0x14d4/0x1f30 [ 199.812169][ T8763] ? kmem_cache_free+0x2d4/0x4d0 [ 199.812194][ T8763] ? __pfx_path_mount+0x10/0x10 [ 199.812214][ T8763] ? putname+0x154/0x1a0 [ 199.812234][ T8763] __x64_sys_mount+0x28d/0x310 [ 199.812252][ T8763] ? __pfx___x64_sys_mount+0x10/0x10 [ 199.812270][ T8763] ? rcu_is_watching+0x12/0xc0 [ 199.812291][ T8763] do_syscall_64+0xcd/0x260 [ 199.812313][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.812330][ T8763] RIP: 0033:0x7fefbb78d169 [ 199.812344][ T8763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.812358][ T8763] RSP: 002b:00007fefbc670038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.812372][ T8763] RAX: ffffffffffffffda RBX: 00007fefbb9a5fa0 RCX: 00007fefbb78d169 [ 199.812383][ T8763] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 199.812394][ T8763] RBP: 00007fefbc670090 R08: 0000200000000300 R09: 0000000000000000 [ 199.812404][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.812413][ T8763] R13: 0000000000000000 R14: 00007fefbb9a5fa0 R15: 00007ffd8eafaea8 [ 199.812433][ T8763] [ 200.283210][ T30] audit: type=1400 audit(1742985729.468:550): avc: denied { ioctl } for pid=8766 comm="syz.4.871" path="pid:[4026532793]" dev="nsfs" ino=4026532793 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.317839][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 200.711825][ T30] audit: type=1400 audit(1742985729.898:551): avc: denied { setopt } for pid=8776 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.948130][ T6473] IPVS: starting estimator thread 0... [ 201.018280][ T8790] mmap: syz.6.878 (8790): VmData 37523456 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 201.080074][ T8794] IPVS: using max 51 ests per chain, 122400 per kthread [ 201.155702][ T30] audit: type=1400 audit(1742985730.348:552): avc: denied { bind } for pid=8797 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.210216][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 201.530123][ T6473] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 201.650096][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 201.666630][ T5870] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 201.691596][ T5870] usb 5-1: config 0 has no interface number 0 [ 201.708367][ T5870] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.735666][ T5870] usb 5-1: config 0 interface 2 has no altsetting 0 [ 201.752765][ T5870] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 201.761969][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.780201][ T5870] usb 5-1: Product: syz [ 201.798157][ T5870] usb 5-1: Manufacturer: syz [ 201.805471][ T5870] usb 5-1: SerialNumber: syz [ 201.828327][ T5870] usb 5-1: config 0 descriptor?? [ 201.897869][ T8810] tmpfs: Unknown parameter '' [ 202.056709][ T8812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.083570][ T5870] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.087702][ T8815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.885'. [ 202.133770][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.164325][ T5870] usb 5-1: USB disconnect, device number 15 [ 202.502868][ T30] audit: type=1400 audit(1742985731.698:553): avc: denied { getopt } for pid=8823 comm="syz.5.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.545823][ T30] audit: type=1400 audit(1742985731.738:554): avc: denied { listen } for pid=8819 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.767805][ T8843] mmap: syz.4.893 (8843) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.932786][ T8848] tmpfs: Bad value for 'huge' [ 203.042599][ T8849] kernel read not supported for file /eth0 (pid: 8849 comm: syz.4.895) [ 203.052185][ T30] audit: type=1800 audit(1742985732.248:555): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.895" name="eth0" dev="mqueue" ino=12939 res=0 errno=0 [ 203.160057][ T6473] usb 7-1: device descriptor read/64, error -71 [ 203.337031][ T8862] xt_TCPMSS: Only works on TCP SYN packets [ 203.410152][ T6473] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 203.501581][ T972] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 203.511362][ T8875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.514583][ T30] audit: type=1400 audit(1742985732.708:556): avc: denied { read } for pid=8878 comm="syz.4.905" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.544618][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.555171][ T30] audit: type=1400 audit(1742985732.748:557): avc: denied { open } for pid=8878 comm="syz.4.905" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.580230][ T30] audit: type=1400 audit(1742985732.748:558): avc: denied { map } for pid=8878 comm="syz.4.905" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.615978][ T8872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.680926][ T6473] usb 7-1: Using ep0 maxpacket: 8 [ 203.708802][ T6473] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.725132][ T6473] usb 7-1: config 0 has no interface number 0 [ 203.747119][ T972] usb 2-1: Using ep0 maxpacket: 32 [ 203.790175][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.871156][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.885770][ T972] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.896595][ T6473] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d [ 203.905824][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.917428][ T6473] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.981056][ T972] usb 2-1: config 0 descriptor?? [ 203.986823][ T6473] usb 7-1: Product: syz [ 203.994729][ T6473] usb 7-1: Manufacturer: syz [ 204.006937][ T6473] usb 7-1: SerialNumber: syz [ 204.012518][ T972] hub 2-1:0.0: USB hub found [ 204.025563][ T6473] usb 7-1: config 0 descriptor?? [ 204.046166][ T6473] usb 7-1: selecting invalid altsetting 2 [ 204.057841][ T6473] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 204.209515][ T8888] netlink: 'syz.3.907': attribute type 88 has an invalid length. [ 204.224812][ T972] hub 2-1:0.0: 1 port detected [ 204.250126][ T5869] usb 7-1: USB disconnect, device number 5 [ 204.396820][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 204.509742][ T8905] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.518770][ T8905] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.527512][ T8905] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.536404][ T8905] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.990413][ T6473] hub 2-1:0.0: activate --> -90 [ 205.195744][ T6473] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 205.213099][ T972] usb 2-1: USB disconnect, device number 19 [ 205.213216][ T8919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.314089][ T8916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.479700][ T8924] netlink: 'syz.5.919': attribute type 88 has an invalid length. [ 205.556532][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.918'. [ 205.595942][ T8923] netlink: 'syz.4.918': attribute type 4 has an invalid length. [ 205.822295][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 205.822309][ T30] audit: type=1400 audit(1742985735.018:560): avc: denied { listen } for pid=8932 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.848732][ T8935] openvswitch: netlink: IP tunnel TTL not specified. [ 206.040305][ T5869] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 206.095166][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'. [ 206.104341][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'. [ 206.121220][ T8943] mkiss: ax0: crc mode is auto. [ 206.127030][ T5872] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 206.231355][ T5869] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.258234][ T5869] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.281322][ T5872] usb 5-1: device descriptor read/64, error -71 [ 206.293509][ T5869] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.314713][ T6339] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.402743][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.428032][ T8931] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 206.438505][ T5869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.457405][ T6473] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 206.517157][ T6339] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.530431][ T5872] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 206.627376][ T6339] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.650663][ T6473] usb 2-1: Using ep0 maxpacket: 32 [ 206.658191][ T6473] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 206.667011][ T6473] usb 2-1: config 0 has no interface number 1 [ 206.692031][ T5872] usb 5-1: device descriptor read/64, error -71 [ 206.695620][ T6473] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 206.710737][ T6473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.718899][ T6473] usb 2-1: Product: syz [ 206.728337][ T6473] usb 2-1: Manufacturer: syz [ 206.733338][ T6473] usb 2-1: SerialNumber: syz [ 206.739345][ T6473] usb 2-1: config 0 descriptor?? [ 206.748343][ T6339] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.821100][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.921'. [ 206.841850][ T5872] usb usb5-port1: attempt power cycle [ 207.130889][ T6473] snd-usb-audio 2-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 207.155243][ T6339] bridge_slave_1: left allmulticast mode [ 207.158097][ T6473] usb 2-1: USB disconnect, device number 20 [ 207.167866][ T6339] bridge_slave_1: left promiscuous mode [ 207.175270][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.185111][ T8813] usb 6-1: USB disconnect, device number 11 [ 207.194771][ T6339] bridge_slave_0: left allmulticast mode [ 207.201350][ T6339] bridge_slave_0: left promiscuous mode [ 207.207120][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.260235][ T5872] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.292322][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.300861][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.308920][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.319899][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.327257][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.334684][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.344519][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.355222][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.356038][ T5872] usb 5-1: device descriptor read/8, error -71 [ 207.466311][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.477063][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.486346][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.494083][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.904078][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.914261][ T6339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.923865][ T6339] bond0 (unregistering): Released all slaves [ 207.982912][ T5872] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 208.010944][ T5872] usb 5-1: device descriptor read/8, error -71 [ 208.142566][ T5872] usb usb5-port1: unable to enumerate USB device [ 208.262154][ T8952] chnl_net:caif_netlink_parms(): no params data found [ 208.316711][ T6339] hsr_slave_0: left promiscuous mode [ 208.317925][ T8970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.335194][ T6339] hsr_slave_1: left promiscuous mode [ 208.341342][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.344855][ T30] audit: type=1400 audit(1742985737.538:561): avc: denied { map } for pid=8973 comm="syz.3.937" path="socket:[25032]" dev="sockfs" ino=25032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.348783][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.378893][ T30] audit: type=1400 audit(1742985737.538:562): avc: denied { accept } for pid=8973 comm="syz.3.937" path="socket:[25032]" dev="sockfs" ino=25032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.402490][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.409892][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.424119][ T8969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.465896][ T6339] veth1_macvtap: left promiscuous mode [ 208.520391][ T30] audit: type=1400 audit(1742985737.718:563): avc: denied { map } for pid=8973 comm="syz.3.937" path="/newroot/proc/sys/net/ipv4/vs/sync_refresh_period" dev="proc" ino=25033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 208.546292][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.590132][ T6339] veth0_macvtap: left promiscuous mode [ 208.600210][ T6339] veth1_vlan: left promiscuous mode [ 208.610943][ T6339] veth0_vlan: left promiscuous mode [ 208.687744][ T30] audit: type=1326 audit(1742985737.878:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 208.710946][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.742876][ T30] audit: type=1326 audit(1742985737.878:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 208.770229][ T30] audit: type=1326 audit(1742985737.918:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 208.797549][ T30] audit: type=1326 audit(1742985737.918:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 208.894714][ T30] audit: type=1326 audit(1742985737.918:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 208.918557][ T30] audit: type=1326 audit(1742985737.918:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.3.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 209.429819][ T8991] 9pnet_fd: Insufficient options for proto=fd [ 209.590733][ T5819] Bluetooth: hci4: command tx timeout [ 210.242903][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 210.285278][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 210.300411][ T9005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 210.390725][ T5899] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 210.555323][ T5899] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 210.572342][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.588096][ T5899] usb 4-1: config 0 descriptor?? [ 210.639611][ T9015] dlm: no local IP address has been set [ 210.645444][ T9015] dlm: cannot start dlm midcomms -107 [ 210.783930][ T9015] vlan3: entered promiscuous mode [ 210.791569][ T9015] bridge0: entered promiscuous mode [ 210.797013][ T9015] vlan3: entered allmulticast mode [ 210.802648][ T9015] bridge0: entered allmulticast mode [ 210.809685][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.819039][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.833810][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 210.833823][ T30] audit: type=1400 audit(1742985740.028:571): avc: denied { map } for pid=9017 comm="syz.1.950" path="socket:[25085]" dev="sockfs" ino=25085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.870276][ T30] audit: type=1400 audit(1742985740.028:572): avc: denied { read } for pid=9017 comm="syz.1.950" path="socket:[25085]" dev="sockfs" ino=25085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.920669][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.961818][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.969000][ T8952] bridge_slave_0: entered allmulticast mode [ 210.973483][ T5899] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 210.975995][ T8952] bridge_slave_0: entered promiscuous mode [ 210.990234][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.997345][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.004617][ T8952] bridge_slave_1: entered allmulticast mode [ 211.007227][ T5899] usb 4-1: USB disconnect, device number 17 [ 211.011171][ T8952] bridge_slave_1: entered promiscuous mode [ 211.040222][ T6473] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 211.062376][ T8952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.091234][ T8952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.163377][ T8952] team0: Port device team_slave_0 added [ 211.173926][ T8952] team0: Port device team_slave_1 added [ 211.190307][ T6473] usb 6-1: Using ep0 maxpacket: 8 [ 211.211879][ T6473] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 211.223556][ T9021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.230434][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.240327][ T6473] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 211.248488][ T6473] usb 6-1: Product: syz [ 211.252875][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.278734][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.295384][ T6473] usb 6-1: Manufacturer: syz [ 211.299855][ T9020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.299982][ T6473] usb 6-1: SerialNumber: syz [ 211.317292][ T8952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.329348][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.337103][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.337683][ T6473] usb 6-1: config 0 descriptor?? [ 211.362969][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.363263][ T8952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.391424][ T6339] IPVS: stop unused estimator thread 0... [ 211.414201][ T8952] hsr_slave_0: entered promiscuous mode [ 211.422994][ T8952] hsr_slave_1: entered promiscuous mode [ 211.428922][ T8952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.443786][ T8952] Cannot create hsr debugfs directory [ 211.567869][ T9025] overlay: Unknown parameter 'ÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿoverlay' [ 211.583227][ T30] audit: type=1400 audit(1742985740.778:573): avc: denied { remount } for pid=9024 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 211.670507][ T5819] Bluetooth: hci4: command tx timeout [ 211.745642][ T30] audit: type=1400 audit(1742985740.938:574): avc: denied { connect } for pid=9028 comm="syz.3.954" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.791279][ T9010] Cannot find add_set index 2 as target [ 211.803256][ T9010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.827994][ T30] audit: type=1400 audit(1742985741.018:575): avc: denied { connect } for pid=9009 comm="syz.5.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 211.929147][ T8952] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.938251][ T6473] usb 6-1: USB disconnect, device number 12 [ 211.949678][ T9039] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.982832][ T8952] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.992750][ T8952] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 212.012177][ T8952] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.128037][ T8952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.193195][ T8952] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.228661][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.235803][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.279181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.286315][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.569919][ T9058] kernel read not supported for file /eth0 (pid: 9058 comm: syz.4.962) [ 212.643664][ T9052] 9pnet_fd: Insufficient options for proto=fd [ 212.835955][ T9061] 9pnet_fd: Insufficient options for proto=fd [ 212.914941][ T30] audit: type=1800 audit(1742985742.108:576): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.962" name="eth0" dev="mqueue" ino=12939 res=0 errno=0 [ 212.933212][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.308237][ T8952] veth0_vlan: entered promiscuous mode [ 213.345496][ T8952] veth1_vlan: entered promiscuous mode [ 213.378143][ T8952] veth0_macvtap: entered promiscuous mode [ 213.395672][ T8952] veth1_macvtap: entered promiscuous mode [ 213.417766][ T30] audit: type=1326 audit(2000000000.310:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbb78d169 code=0x7ffc0000 [ 213.423037][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.441242][ T5869] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 213.453960][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.480391][ T30] audit: type=1326 audit(2000000000.310:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbb78d169 code=0x7ffc0000 [ 213.503815][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.503848][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.503858][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.503868][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.503878][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.503888][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.503908][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.518707][ T30] audit: type=1326 audit(2000000000.310:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fefbb78d169 code=0x7ffc0000 [ 213.567215][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.591945][ T30] audit: type=1326 audit(2000000000.370:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbb78d169 code=0x7ffc0000 [ 213.634815][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.644487][ T9092] mkiss: ax0: crc mode is auto. [ 213.703342][ T5869] usb 5-1: too many configurations: 78, using maximum allowed: 8 [ 213.734708][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.748385][ T5869] usb 5-1: string descriptor 0 read error: -71 [ 213.754761][ T5869] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.760280][ T5819] Bluetooth: hci4: command tx timeout [ 213.764118][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.812349][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.830921][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.848743][ T5869] usb 5-1: can't set config #1, error -71 [ 213.861088][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.876094][ T5869] usb 5-1: USB disconnect, device number 20 [ 213.892069][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.911378][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.954387][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.962516][ T9105] kernel read not supported for file /eth0 (pid: 9105 comm: syz.1.975) [ 213.975016][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.995212][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.015832][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.027186][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.038996][ T9107] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 214.048077][ T9107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 214.066639][ T8952] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.092997][ T8952] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.108837][ T8952] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.117735][ T8952] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.251474][ T6333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.289937][ T6333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.401607][ T6345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.440489][ T6345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.098799][ T972] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 215.275531][ T972] usb 5-1: config 0 has an invalid interface number: 173 but max is 0 [ 215.310230][ T972] usb 5-1: config 0 has no interface number 0 [ 215.328845][ T972] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=ff.4d [ 215.328899][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.328945][ T972] usb 5-1: Product: syz [ 215.328984][ T972] usb 5-1: Manufacturer: syz [ 215.329024][ T972] usb 5-1: SerialNumber: syz [ 215.335053][ T972] usb 5-1: config 0 descriptor?? [ 215.556209][ T9144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.986'. [ 215.643955][ T972] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 215.656900][ T972] gspca_sunplus: reg_r err -71 [ 215.744720][ T972] sunplus 5-1:0.173: probe with driver sunplus failed with error -71 [ 215.773139][ T972] usb 5-1: USB disconnect, device number 21 [ 216.416843][ T5828] Bluetooth: hci4: sending frame failed (-49) [ 216.426275][ T5819] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 216.442882][ T9169] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.460925][ T9170] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.485095][ T9148] ALSA: mixer_oss: invalid OSS volume 'PHUT' [ 216.599185][ T9148] ALSA: mixer_oss: invalid OSS volume '' [ 216.704108][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 216.704124][ T30] audit: type=1326 audit(2000000003.600:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 216.767917][ T30] audit: type=1326 audit(2000000003.600:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 216.798067][ T30] audit: type=1326 audit(2000000003.610:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 216.823901][ T30] audit: type=1326 audit(2000000003.610:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 216.882267][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.930332][ T30] audit: type=1326 audit(2000000003.610:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 217.000159][ T30] audit: type=1326 audit(2000000003.610:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45a978d169 code=0x7ffc0000 [ 217.073771][ T30] audit: type=1400 audit(2000000003.820:602): avc: denied { connect } for pid=9176 comm="syz.5.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 217.147876][ T30] audit: type=1326 audit(2000000004.040:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45a9784127 code=0x7ffc0000 [ 217.203976][ T30] audit: type=1326 audit(2000000004.040:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45a9729359 code=0x7ffc0000 [ 217.230269][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 217.268419][ T30] audit: type=1326 audit(2000000004.040:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45a9784127 code=0x7ffc0000 [ 217.292936][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.308489][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.318840][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.326493][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.336151][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.347284][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.354764][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.372741][ T10] usb 6-1: device descriptor read/64, error -71 [ 217.384844][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.467020][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'. [ 217.478678][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.593470][ T13] bridge_slave_1: left allmulticast mode [ 217.605764][ T13] bridge_slave_1: left promiscuous mode [ 217.615807][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.623353][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 217.636118][ T13] bridge_slave_0: left allmulticast mode [ 217.642647][ T13] bridge_slave_0: left promiscuous mode [ 217.651624][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.670144][ T5899] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 217.762502][ T10] usb 6-1: device descriptor read/64, error -71 [ 217.820101][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 217.826459][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.843589][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.853383][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.862467][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.871412][ T5899] usb 5-1: config 0 descriptor?? [ 217.877190][ T5899] hub 5-1:0.0: USB hub found [ 217.881494][ T10] usb usb6-port1: attempt power cycle [ 217.943489][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.954906][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.964338][ T13] bond0 (unregistering): Released all slaves [ 217.973966][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'. [ 217.983116][ T9203] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1004'. [ 218.003053][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 218.050102][ T5872] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 218.079151][ T5899] hub 5-1:0.0: 1 port detected [ 218.088847][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.096137][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.103448][ T9188] bridge_slave_0: entered allmulticast mode [ 218.109796][ T9188] bridge_slave_0: entered promiscuous mode [ 218.117677][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.125862][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.133057][ T9188] bridge_slave_1: entered allmulticast mode [ 218.139396][ T9188] bridge_slave_1: entered promiscuous mode [ 218.168801][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.181386][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.204853][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 218.206366][ T9188] team0: Port device team_slave_0 added [ 218.217836][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.229233][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.239112][ T13] hsr_slave_0: left promiscuous mode [ 218.239452][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 218.244877][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 218.253567][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.269780][ T13] hsr_slave_1: left promiscuous mode [ 218.275700][ T5872] usb 4-1: config 0 descriptor?? [ 218.275891][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.282658][ T5872] hub 4-1:0.0: USB hub found [ 218.291615][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.293195][ T5870] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 218.308795][ T10] usb 6-1: device descriptor read/8, error -71 [ 218.310696][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.324397][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.336879][ T13] veth1_macvtap: left promiscuous mode [ 218.342527][ T13] veth0_macvtap: left promiscuous mode [ 218.348119][ T13] veth1_vlan: left promiscuous mode [ 218.353396][ T13] veth0_vlan: left promiscuous mode [ 218.460153][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 218.467015][ T5870] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 218.476426][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.491853][ T5872] hub 4-1:0.0: 1 port detected [ 218.502907][ T5870] usb 2-1: config 0 descriptor?? [ 218.563599][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 218.592280][ T10] usb 6-1: device descriptor read/8, error -71 [ 218.616462][ T13] team0 (unregistering): Port device team_slave_1 removed [ 218.644500][ T13] team0 (unregistering): Port device team_slave_0 removed [ 218.713335][ T10] usb usb6-port1: unable to enumerate USB device [ 218.722839][ T5870] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 218.733088][ T5870] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 218.742560][ T5870] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 218.883389][ T9188] team0: Port device team_slave_1 added [ 218.896897][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.904001][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.933299][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.933575][ T5899] hub 5-1:0.0: activate --> -90 [ 218.949348][ T5872] usb 5-1: USB disconnect, device number 22 [ 218.950507][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.965568][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.992430][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.025645][ T9188] hsr_slave_0: entered promiscuous mode [ 219.031885][ T9188] hsr_slave_1: entered promiscuous mode [ 219.037750][ T9188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.045536][ T9188] Cannot create hsr debugfs directory [ 219.121957][ T5899] hub 4-1:0.0: activate --> -90 [ 219.317606][ T9188] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.325292][ T5899] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 219.333500][ T9188] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.348321][ T9188] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.356425][ T9188] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.388190][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.402170][ T9188] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.412776][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.419818][ T6345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.430666][ T5828] Bluetooth: hci4: command tx timeout [ 219.431005][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.443210][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.584819][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.653571][ T5869] usb 4-1: USB disconnect, device number 18 [ 219.822343][ T9188] veth0_vlan: entered promiscuous mode [ 219.876742][ T9188] veth1_vlan: entered promiscuous mode [ 220.148412][ T9188] veth0_macvtap: entered promiscuous mode [ 220.156591][ T9188] veth1_macvtap: entered promiscuous mode [ 220.174941][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.186240][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.196707][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.207340][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.224480][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.239704][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.249735][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.249761][ T9236] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 220.266645][ T9236] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.268490][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.277682][ T9236] vhci_hcd vhci_hcd.0: Device attached [ 220.293056][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.304787][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.328350][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.621404][ T5827] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 220.660498][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.682833][ T9237] vhci_hcd: connection reset by peer [ 220.682879][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.698032][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.708596][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.709601][ T36] vhci_hcd: stop threads [ 220.718796][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.735607][ T36] vhci_hcd: release socket [ 220.739953][ T9243] FAULT_INJECTION: forcing a failure. [ 220.739953][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.744476][ T36] vhci_hcd: disconnect device [ 220.755637][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.4.1012 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 220.755657][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.755665][ T9243] Call Trace: [ 220.755670][ T9243] [ 220.755676][ T9243] dump_stack_lvl+0x16c/0x1f0 [ 220.755698][ T9243] should_fail_ex+0x512/0x640 [ 220.755715][ T9243] _copy_from_user+0x2e/0xd0 [ 220.755731][ T9243] __sys_bpf+0x226/0x4c80 [ 220.755747][ T9243] ? __pfx___sys_bpf+0x10/0x10 [ 220.755761][ T9243] ? ksys_write+0x190/0x240 [ 220.755785][ T9243] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 220.755812][ T9243] ? fput+0x70/0xf0 [ 220.755827][ T9243] ? ksys_write+0x1b9/0x240 [ 220.755846][ T9243] ? __pfx_ksys_write+0x10/0x10 [ 220.755866][ T9243] ? rcu_is_watching+0x12/0xc0 [ 220.755883][ T9243] __x64_sys_bpf+0x78/0xc0 [ 220.755897][ T9243] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.755912][ T9243] do_syscall_64+0xcd/0x260 [ 220.755930][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.755944][ T9243] RIP: 0033:0x7f577938d169 [ 220.755956][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.755970][ T9243] RSP: 002b:00007f577a101038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.755984][ T9243] RAX: ffffffffffffffda RBX: 00007f57795a5fa0 RCX: 00007f577938d169 [ 220.755993][ T9243] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 220.756002][ T9243] RBP: 00007f577a101090 R08: 0000000000000000 R09: 0000000000000000 [ 220.756011][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.756019][ T9243] R13: 0000000000000000 R14: 00007f57795a5fa0 R15: 00007fff94322ee8 [ 220.756035][ T9243] [ 220.760049][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.956280][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.966833][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.976941][ T9188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.987607][ T9188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.999166][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.009896][ T9244] kernel read not supported for file /eth0 (pid: 9244 comm: syz.3.1011) [ 221.021064][ T9188] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.030153][ T9188] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.039096][ T9188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.048196][ T9188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.092899][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1014'. [ 221.182767][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.217092][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.241117][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.270427][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.361779][ T9259] ubi: mtd0 is already attached to ubi31 [ 221.511372][ T5828] Bluetooth: hci4: command tx timeout [ 223.679451][ T9278] hfs: unable to load iocharset "io#harset" [ 223.836005][ T9294] kernel read not supported for file /eth0 (pid: 9294 comm: syz.3.1028) [ 223.845925][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 223.845993][ T30] audit: type=1800 audit(2000000010.740:653): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1028" name="eth0" dev="mqueue" ino=12845 res=0 errno=0 [ 223.969123][ T2974] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.060164][ T6473] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 224.200180][ T6473] usb 5-1: device descriptor read/64, error -71 [ 224.490106][ T6473] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 224.566928][ T9304] kernel read not supported for file /eth0 (pid: 9304 comm: syz.1.1031) [ 224.579925][ T30] audit: type=1800 audit(2000000011.480:654): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1031" name="eth0" dev="mqueue" ino=10705 res=0 errno=0 [ 224.637591][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.646109][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.653621][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.661809][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.669294][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.670149][ T6473] usb 5-1: device descriptor read/64, error -71 [ 224.690396][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.777768][ T2974] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.811845][ T6473] usb usb5-port1: attempt power cycle [ 224.830096][ T30] audit: type=1400 audit(2000000011.720:655): avc: denied { setopt } for pid=9307 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 224.870357][ T30] audit: type=1400 audit(2000000011.720:656): avc: denied { nlmsg_read } for pid=9307 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 224.892510][ T2974] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.986252][ T9317] random: crng reseeded on system resumption [ 225.010280][ T30] audit: type=1400 audit(2000000011.880:657): avc: denied { append } for pid=9310 comm="syz.5.1033" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 225.041115][ T9316] syz.1.1034: attempt to access beyond end of device [ 225.041115][ T9316] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 225.085085][ T9316] SQUASHFS error: Failed to read block 0x0: -5 [ 225.122824][ T30] audit: type=1400 audit(2000000011.880:658): avc: denied { open } for pid=9310 comm="syz.5.1033" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 225.130225][ T9316] unable to read squashfs_super_block [ 225.212685][ T2974] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.250201][ T6473] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 225.271354][ T6473] usb 5-1: device descriptor read/8, error -71 [ 225.305419][ T30] audit: type=1400 audit(2000000012.200:659): avc: denied { module_request } for pid=9305 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 225.397019][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 225.530244][ T6473] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 225.553792][ T9328] input: syz1 as /devices/virtual/input/input16 [ 225.553909][ T30] audit: type=1400 audit(2000000012.450:660): avc: denied { read } for pid=9326 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.561497][ T6473] usb 5-1: device descriptor read/8, error -71 [ 225.650990][ T9331] FAULT_INJECTION: forcing a failure. [ 225.650990][ T9331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.706123][ T2974] bridge_slave_1: left allmulticast mode [ 225.714019][ T9331] CPU: 1 UID: 0 PID: 9331 Comm: syz.3.1037 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 225.714034][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.714041][ T9331] Call Trace: [ 225.714044][ T9331] [ 225.714048][ T9331] dump_stack_lvl+0x16c/0x1f0 [ 225.714064][ T9331] should_fail_ex+0x512/0x640 [ 225.714077][ T9331] _copy_from_user+0x2e/0xd0 [ 225.714089][ T9331] bpf_test_init.isra.0+0xf4/0x140 [ 225.714102][ T9331] bpf_prog_test_run_skb+0x245/0x2280 [ 225.714114][ T9331] ? __fget_files+0x204/0x3c0 [ 225.714125][ T9331] ? __fget_files+0x20e/0x3c0 [ 225.714134][ T9331] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 225.714149][ T9331] ? fput+0x70/0xf0 [ 225.714162][ T9331] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 225.714174][ T9331] __sys_bpf+0x141f/0x4c80 [ 225.714186][ T9331] ? __pfx___sys_bpf+0x10/0x10 [ 225.714196][ T9331] ? ksys_write+0x190/0x240 [ 225.714213][ T9331] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 225.714232][ T9331] ? fput+0x70/0xf0 [ 225.714243][ T9331] ? ksys_write+0x1b9/0x240 [ 225.714259][ T9331] ? __pfx_ksys_write+0x10/0x10 [ 225.714274][ T9331] ? rcu_is_watching+0x12/0xc0 [ 225.714286][ T9331] __x64_sys_bpf+0x78/0xc0 [ 225.714296][ T9331] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.714308][ T9331] do_syscall_64+0xcd/0x260 [ 225.714321][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.714332][ T9331] RIP: 0033:0x7f45a978d169 [ 225.714340][ T9331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.714350][ T9331] RSP: 002b:00007f45aa505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.714360][ T9331] RAX: ffffffffffffffda RBX: 00007f45a99a5fa0 RCX: 00007f45a978d169 [ 225.714367][ T9331] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 225.714373][ T9331] RBP: 00007f45aa505090 R08: 0000000000000000 R09: 0000000000000000 [ 225.714379][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.714385][ T9331] R13: 0000000000000000 R14: 00007f45a99a5fa0 R15: 00007ffd94521728 [ 225.714400][ T9331] [ 225.820214][ T2974] bridge_slave_1: left promiscuous mode [ 225.960221][ T6473] usb usb5-port1: unable to enumerate USB device [ 226.052071][ T5827] vhci_hcd: vhci_device speed not set [ 226.073222][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.083116][ T2974] bridge_slave_0: left allmulticast mode [ 226.088936][ T2974] bridge_slave_0: left promiscuous mode [ 226.097606][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.675477][ T30] audit: type=1400 audit(2000000013.570:661): avc: denied { lock } for pid=9341 comm="syz.1.1041" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 226.724238][ T5828] Bluetooth: hci4: command tx timeout [ 226.798197][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.823072][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.837746][ T2974] bond0 (unregistering): Released all slaves [ 226.916530][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.948503][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.993720][ T9305] bridge_slave_0: entered allmulticast mode [ 227.003643][ T9348] kvm: pic: non byte write [ 227.012310][ T9348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (17179869180 ns) > initial count (144 ns). Using initial count to start timer. [ 227.034368][ T9305] bridge_slave_0: entered promiscuous mode [ 227.328926][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.336583][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.344029][ T9305] bridge_slave_1: entered allmulticast mode [ 227.370085][ T972] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 227.387143][ T9305] bridge_slave_1: entered promiscuous mode [ 227.494658][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.535780][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.551515][ T972] usb 5-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.565637][ T972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.572642][ T972] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 227.581764][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.591158][ T972] usb 5-1: config 0 descriptor?? [ 227.620005][ T9305] team0: Port device team_slave_0 added [ 227.628644][ T9305] team0: Port device team_slave_1 added [ 227.639253][ T2974] hsr_slave_0: left promiscuous mode [ 227.656902][ T2974] hsr_slave_1: left promiscuous mode [ 227.674656][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.684185][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.700280][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.716986][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.745649][ T2974] veth1_macvtap: left promiscuous mode [ 227.756093][ T2974] veth0_macvtap: left promiscuous mode [ 227.761741][ T2974] veth1_vlan: left promiscuous mode [ 227.767163][ T2974] veth0_vlan: left promiscuous mode [ 227.911439][ T30] audit: type=1400 audit(2000000014.810:662): avc: denied { create } for pid=9359 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 227.928559][ T9360] xt_l2tp: invalid flags combination: 0 [ 228.156852][ T9363] xt_l2tp: invalid flags combination: 0 [ 228.448813][ T972] holtek_mouse 0003:04D9:A072.0005: item fetching failed at offset 3/5 [ 228.467766][ T972] holtek_mouse 0003:04D9:A072.0005: hid parse failed: -22 [ 228.472524][ T9345] kernel read not supported for file /eth0 (pid: 9345 comm: syz.4.1042) [ 228.475496][ T972] holtek_mouse 0003:04D9:A072.0005: probe with driver holtek_mouse failed with error -22 [ 228.524923][ T972] usb 5-1: USB disconnect, device number 27 [ 228.797907][ T5828] Bluetooth: hci4: command tx timeout [ 229.052460][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 229.052475][ T30] audit: type=1400 audit(2000000015.950:666): avc: denied { read } for pid=9372 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 229.080071][ T5869] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 229.081043][ T9377] 9pnet_fd: Insufficient options for proto=fd [ 229.103278][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 229.144581][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 229.350090][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 229.370888][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.515873][ T5869] usb 6-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 229.562472][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.624727][ T5869] usb 6-1: config 0 descriptor?? [ 230.268392][ T30] audit: type=1400 audit(2000000017.160:667): avc: denied { watch_reads } for pid=9388 comm="syz.3.1056" path="/218" dev="tmpfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 230.393851][ T9371] netlink: 'syz.5.1051': attribute type 1 has an invalid length. [ 230.403127][ T9371] netlink: 'syz.5.1051': attribute type 4 has an invalid length. [ 230.410956][ T30] audit: type=1400 audit(2000000017.290:668): avc: denied { bind } for pid=9370 comm="syz.5.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.435040][ T9371] netlink: 'syz.5.1051': attribute type 1 has an invalid length. [ 230.436211][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.449842][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.453481][ T9371] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1051'. [ 230.475828][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.482174][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.498616][ T30] audit: type=1400 audit(2000000017.380:669): avc: denied { write } for pid=9370 comm="syz.5.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.506842][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.532754][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.558662][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.576502][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.587302][ T5869] usb 6-1: string descriptor 0 read error: -71 [ 230.593887][ T5869] uclogic 0003:5543:3031.0006: failed retrieving string descriptor #200: -71 [ 230.602819][ T5869] uclogic 0003:5543:3031.0006: failed retrieving pen parameters: -71 [ 230.615526][ T5869] uclogic 0003:5543:3031.0006: failed probing pen v2 parameters: -71 [ 230.630272][ T5869] uclogic 0003:5543:3031.0006: failed probing parameters: -71 [ 230.640276][ T5869] uclogic 0003:5543:3031.0006: probe with driver uclogic failed with error -71 [ 230.642953][ T9399] picdev_read: 10838 callbacks suppressed [ 230.642965][ T9399] kvm: pic: non byte read [ 230.657400][ T5869] usb 6-1: USB disconnect, device number 17 [ 230.690281][ T9305] hsr_slave_0: entered promiscuous mode [ 230.696456][ T9305] hsr_slave_1: entered promiscuous mode [ 230.703739][ T9305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.711503][ T9305] Cannot create hsr debugfs directory [ 230.719919][ T9399] vlan4: entered allmulticast mode [ 230.728827][ T9399] macsec0: entered allmulticast mode [ 230.734166][ T9399] veth1_macvtap: entered allmulticast mode [ 230.744406][ T30] audit: type=1400 audit(2000000017.640:670): avc: denied { ioctl } for pid=9397 comm="syz.4.1059" path="socket:[28021]" dev="sockfs" ino=28021 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.746063][ T9399] bridge0: port 3(vlan4) entered blocking state [ 230.775444][ T9399] bridge0: port 3(vlan4) entered disabled state [ 230.782763][ T9399] vlan4: entered promiscuous mode [ 230.790002][ T9399] macsec0: entered promiscuous mode [ 230.797053][ T9399] bridge0: port 3(vlan4) entered blocking state [ 230.804512][ T9399] bridge0: port 3(vlan4) entered forwarding state [ 230.870287][ T5828] Bluetooth: hci4: command tx timeout [ 231.153973][ T9421] ALSA: mixer_oss: invalid OSS volume '' [ 231.269189][ T9305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.289044][ T9305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 231.296265][ T9426] 9pnet_fd: Insufficient options for proto=fd [ 231.307308][ T9305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 231.316362][ T9305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 231.377726][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.396784][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.407510][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.414600][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.439025][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.446167][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.627443][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.947035][ T9438] overlayfs: failed to resolve './file0': -2 [ 232.104950][ T9438] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=128 (256 ns) > initial count (34 ns). Using initial count to start timer. [ 232.950230][ T5828] Bluetooth: hci4: command tx timeout [ 233.077857][ T9305] veth0_vlan: entered promiscuous mode [ 233.096712][ T9456] team_slave_0: entered promiscuous mode [ 233.102556][ T9456] team_slave_1: entered promiscuous mode [ 233.399614][ T9456] vlan2: entered promiscuous mode [ 233.405132][ T9456] team0: entered promiscuous mode [ 233.411460][ T9462] ip6t_srh: unknown srh invflags 7863 [ 233.422383][ T9456] team0: left promiscuous mode [ 233.427563][ T9456] team_slave_0: left promiscuous mode [ 233.432988][ T9456] team_slave_1: left promiscuous mode [ 233.471839][ T9305] veth1_vlan: entered promiscuous mode [ 233.479462][ T9466] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1075'. [ 233.507801][ T9305] veth0_macvtap: entered promiscuous mode [ 233.525961][ T9305] veth1_macvtap: entered promiscuous mode [ 233.541855][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.553083][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.563647][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.574747][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.584926][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.596026][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.606447][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.617053][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.626932][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.638063][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.663441][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.682324][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.698194][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.708316][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.722084][ T9470] xt_cgroup: path and classid specified [ 233.731913][ T972] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 233.741319][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.752223][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.764069][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.774618][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.786180][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.797818][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.809377][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.831719][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.847640][ T9305] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.856797][ T9305] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.866601][ T9305] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.875757][ T9305] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.921052][ T972] usb 5-1: Using ep0 maxpacket: 8 [ 233.927911][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.940326][ T972] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 233.962407][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.996383][ T972] usb 5-1: config 0 descriptor?? [ 234.004337][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.024834][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.075908][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.085308][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.216332][ T972] belkin 0003:050D:3201.0007: unknown main item tag 0x0 [ 234.224895][ T972] belkin 0003:050D:3201.0007: unknown main item tag 0x0 [ 234.247846][ T972] belkin 0003:050D:3201.0007: unknown main item tag 0x0 [ 234.256121][ T972] belkin 0003:050D:3201.0007: unknown main item tag 0x1 [ 234.265128][ T972] belkin 0003:050D:3201.0007: item fetching failed at offset 6/7 [ 234.273754][ T972] belkin 0003:050D:3201.0007: parse failed [ 234.280453][ T972] belkin 0003:050D:3201.0007: probe with driver belkin failed with error -22 [ 234.319995][ T972] usb 5-1: USB disconnect, device number 28 [ 235.483402][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.590083][ T972] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 235.630149][ T5899] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 235.763183][ T972] usb 6-1: Using ep0 maxpacket: 16 [ 235.769725][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.791789][ T972] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 235.797553][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.800851][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.825029][ T972] usb 6-1: config 0 descriptor?? [ 235.825787][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.840721][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.855603][ T5899] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 235.866086][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.875613][ T5899] usb 5-1: config 0 descriptor?? [ 235.882598][ T5899] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 235.927908][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.997592][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.230946][ T13] bridge_slave_1: left allmulticast mode [ 236.236724][ T13] bridge_slave_1: left promiscuous mode [ 236.242784][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.397465][ T13] bridge_slave_0: left allmulticast mode [ 236.417713][ T13] bridge_slave_0: left promiscuous mode [ 236.525554][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.697272][ T972] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 236.705070][ T972] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 236.720373][ T972] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 236.727663][ T972] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 236.763252][ T972] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 236.772381][ T972] uclogic 0003:5543:0003.0008: No inputs registered, leaving [ 236.773184][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.788302][ T972] uclogic 0003:5543:0003.0008: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.5-1/input0 [ 236.789633][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.810455][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.818155][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.827184][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.830681][ T972] usb 6-1: USB disconnect, device number 18 [ 236.834629][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.945023][ T30] audit: type=1400 audit(2000000023.840:671): avc: denied { bind } for pid=9505 comm="syz.4.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 237.262853][ T30] audit: type=1400 audit(2000000023.840:672): avc: denied { name_bind } for pid=9505 comm="syz.4.1087" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 237.304263][ T30] audit: type=1400 audit(2000000023.840:673): avc: denied { node_bind } for pid=9505 comm="syz.4.1087" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 237.563010][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.790228][ T5869] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 237.992866][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 237.998283][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.999197][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 238.019147][ T5869] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 238.019666][ T13] bond0 (unregistering): Released all slaves [ 238.028915][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.042620][ T5869] usb 6-1: Product: syz [ 238.046811][ T5869] usb 6-1: Manufacturer: syz [ 238.051463][ T5869] usb 6-1: SerialNumber: syz [ 238.062824][ T5869] usb 6-1: config 0 descriptor?? [ 238.074974][ T5869] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 238.086360][ T5869] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 238.410540][ T5899] usb 5-1: USB disconnect, device number 29 [ 238.626683][ T13] hsr_slave_0: left promiscuous mode [ 238.640568][ T13] hsr_slave_1: left promiscuous mode [ 238.646218][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.667843][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.675658][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.683282][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.699304][ T13] veth1_macvtap: left promiscuous mode [ 238.890118][ T5828] Bluetooth: hci4: command tx timeout [ 238.930135][ T5869] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 238.950309][ T13] veth0_macvtap: left promiscuous mode [ 238.955864][ T13] veth1_vlan: left promiscuous mode [ 238.965843][ T13] veth0_vlan: left promiscuous mode [ 239.707396][ T5869] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 239.723259][ T5869] em28xx 6-1:0.0: board has no eeprom [ 239.853667][ T5869] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 239.862046][ T5869] em28xx 6-1:0.0: dvb set to bulk mode. [ 239.867849][ T5872] em28xx 6-1:0.0: Binding DVB extension [ 239.878326][ T5869] usb 6-1: USB disconnect, device number 19 [ 239.888326][ T5869] em28xx 6-1:0.0: Disconnecting em28xx [ 239.913310][ T5872] em28xx 6-1:0.0: Registering input extension [ 239.926427][ T5869] em28xx 6-1:0.0: Closing input extension [ 239.971008][ T5869] em28xx 6-1:0.0: Freeing device [ 240.461420][ T13] team0 (unregistering): Port device team_slave_1 removed [ 240.488621][ T13] team0 (unregistering): Port device team_slave_0 removed [ 240.567088][ T9570] FAULT_INJECTION: forcing a failure. [ 240.567088][ T9570] name failslab, interval 1, probability 0, space 0, times 0 [ 240.579927][ T9570] CPU: 0 UID: 0 PID: 9570 Comm: syz.4.1102 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 240.579949][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.579957][ T9570] Call Trace: [ 240.579961][ T9570] [ 240.579965][ T9570] dump_stack_lvl+0x16c/0x1f0 [ 240.579983][ T9570] should_fail_ex+0x512/0x640 [ 240.579994][ T9570] should_failslab+0xc2/0x120 [ 240.580012][ T9570] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 240.580034][ T9570] ? dst_alloc+0x99/0x1a0 [ 240.580050][ T9570] ? find_held_lock+0x2b/0x80 [ 240.580069][ T9570] dst_alloc+0x99/0x1a0 [ 240.580085][ T9570] rt_dst_alloc+0x35/0x3a0 [ 240.580106][ T9570] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 240.580137][ T9570] ip_route_output_key_hash+0x137/0x2e0 [ 240.580161][ T9570] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 240.580199][ T9570] vti6_tnl_xmit+0xfbf/0x21d0 [ 240.580225][ T9570] ? __lock_acquire+0xaa4/0x1ba0 [ 240.580246][ T9570] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 240.580264][ T9570] ? rt6_disable_ip+0x8a/0x990 [ 240.580294][ T9570] ? do_raw_spin_lock+0x12c/0x2b0 [ 240.580311][ T9570] dev_hard_start_xmit+0x99/0x790 [ 240.580332][ T9570] __dev_queue_xmit+0x7eb/0x43e0 [ 240.580357][ T9570] ? __pfx___dev_queue_xmit+0x10/0x10 [ 240.580376][ T9570] ? rcu_is_watching+0x12/0xc0 [ 240.580393][ T9570] ? trace_kmalloc+0x2b/0xd0 [ 240.580411][ T9570] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 240.580428][ T9570] ? pskb_expand_head+0x22d/0x10b0 [ 240.580451][ T9570] ? skb_release_data+0x572/0x740 [ 240.580471][ T9570] ? kmalloc_reserve+0x13c/0x2c0 [ 240.580496][ T9570] ? skb_headers_offset_update+0x129/0x260 [ 240.580529][ T9570] ? __pfx_pskb_expand_head+0x10/0x10 [ 240.580553][ T9570] __bpf_redirect+0x71c/0xfc0 [ 240.580579][ T9570] bpf_clone_redirect+0x2ce/0x3f0 [ 240.580604][ T9570] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 240.580618][ T9570] ? __kernel_text_address+0xd/0x40 [ 240.580635][ T9570] ? unwind_get_return_address+0x59/0xa0 [ 240.580658][ T9570] ? __lock_acquire+0xaa4/0x1ba0 [ 240.580680][ T9570] ? __lock_acquire+0x5ca/0x1ba0 [ 240.580707][ T9570] ? find_held_lock+0x2b/0x80 [ 240.580726][ T9570] ? ktime_get+0x200/0x310 [ 240.580745][ T9570] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.580764][ T9570] ? read_tsc+0x9/0x20 [ 240.580785][ T9570] ? __pfx___cant_migrate+0x10/0x10 [ 240.580810][ T9570] bpf_test_run+0x489/0xa70 [ 240.580831][ T9570] ? __pfx_bpf_test_run+0x10/0x10 [ 240.580862][ T9570] ? __asan_memset+0x23/0x50 [ 240.580886][ T9570] bpf_prog_test_run_skb+0xb92/0x2280 [ 240.580911][ T9570] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 240.580932][ T9570] ? fput+0x70/0xf0 [ 240.580951][ T9570] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 240.580969][ T9570] __sys_bpf+0x141f/0x4c80 [ 240.580987][ T9570] ? __pfx___sys_bpf+0x10/0x10 [ 240.581003][ T9570] ? ksys_write+0x190/0x240 [ 240.581035][ T9570] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 240.581062][ T9570] ? fput+0x70/0xf0 [ 240.581073][ T9570] ? ksys_write+0x1b9/0x240 [ 240.581088][ T9570] ? __pfx_ksys_write+0x10/0x10 [ 240.581103][ T9570] ? rcu_is_watching+0x12/0xc0 [ 240.581115][ T9570] __x64_sys_bpf+0x78/0xc0 [ 240.581125][ T9570] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.581136][ T9570] do_syscall_64+0xcd/0x260 [ 240.581150][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.581160][ T9570] RIP: 0033:0x7f577938d169 [ 240.581169][ T9570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.581179][ T9570] RSP: 002b:00007f577a101038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.581190][ T9570] RAX: ffffffffffffffda RBX: 00007f57795a5fa0 RCX: 00007f577938d169 [ 240.581196][ T9570] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 240.581202][ T9570] RBP: 00007f577a101090 R08: 0000000000000000 R09: 0000000000000000 [ 240.581208][ T9570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.581214][ T9570] R13: 0000000000000000 R14: 00007f57795a5fa0 R15: 00007fff94322ee8 [ 240.581225][ T9570] [ 240.971942][ T5828] Bluetooth: hci4: command tx timeout [ 241.731354][ T6473] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.785932][ T9514] chnl_net:caif_netlink_parms(): no params data found [ 241.871146][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.911231][ T6473] usb 4-1: Using ep0 maxpacket: 8 [ 241.916640][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.926494][ T6473] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 241.935812][ T6473] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.945658][ T9514] bridge_slave_0: entered allmulticast mode [ 241.960078][ T9514] bridge_slave_0: entered promiscuous mode [ 241.966079][ T6473] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.978821][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.985931][ T6473] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.995905][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.005636][ T6473] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.046886][ T6473] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.047553][ T9514] bridge_slave_1: entered allmulticast mode [ 242.066784][ T9514] bridge_slave_1: entered promiscuous mode [ 242.076551][ T6473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.089084][ T30] audit: type=1326 audit(2000000028.980:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9591 comm="syz.5.1108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefbb78d169 code=0x0 [ 242.112012][ T5869] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 242.140180][ T9514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.155624][ T9514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.164967][ T30] audit: type=1400 audit(2000000029.050:675): avc: denied { connect } for pid=9591 comm="syz.5.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.216211][ T9514] team0: Port device team_slave_0 added [ 242.234532][ T9514] team0: Port device team_slave_1 added [ 242.253025][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.260311][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.286362][ T9514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.298621][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.298971][ T6473] usb 4-1: usb_control_msg returned -32 [ 242.312407][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.316614][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.332011][ T6473] usbtmc 4-1:16.0: can't read capabilities [ 242.333824][ T5869] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 242.337855][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.346935][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.374201][ T9514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.386007][ T5869] usb 5-1: config 0 descriptor?? [ 242.431089][ T9600] FAULT_INJECTION: forcing a failure. [ 242.431089][ T9600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.445350][ T9600] CPU: 1 UID: 0 PID: 9600 Comm: syz.1.1111 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 242.445373][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.445381][ T9600] Call Trace: [ 242.445387][ T9600] [ 242.445393][ T9600] dump_stack_lvl+0x16c/0x1f0 [ 242.445416][ T9600] should_fail_ex+0x512/0x640 [ 242.445438][ T9600] _copy_from_user+0x2e/0xd0 [ 242.445456][ T9600] copy_msghdr_from_user+0x98/0x160 [ 242.445477][ T9600] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 242.445505][ T9600] ___sys_sendmsg+0xfe/0x1d0 [ 242.445526][ T9600] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.445563][ T9600] __sys_sendmsg+0x16d/0x220 [ 242.445581][ T9600] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.445603][ T9600] ? rcu_is_watching+0x12/0xc0 [ 242.445622][ T9600] do_syscall_64+0xcd/0x260 [ 242.445641][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.445655][ T9600] RIP: 0033:0x7f1e2278d169 [ 242.445665][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.445679][ T9600] RSP: 002b:00007f1e23563038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.445692][ T9600] RAX: ffffffffffffffda RBX: 00007f1e229a5fa0 RCX: 00007f1e2278d169 [ 242.445701][ T9600] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 242.445710][ T9600] RBP: 00007f1e23563090 R08: 0000000000000000 R09: 0000000000000000 [ 242.445718][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.445726][ T9600] R13: 0000000000000000 R14: 00007f1e229a5fa0 R15: 00007fff833448b8 [ 242.445742][ T9600] [ 242.630986][ T9514] hsr_slave_0: entered promiscuous mode [ 242.637224][ T9514] hsr_slave_1: entered promiscuous mode [ 242.643327][ T9514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.683222][ T9514] Cannot create hsr debugfs directory [ 242.734118][ T9604] mkiss: ax0: crc mode is auto. [ 242.769862][ T9604] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 243.030108][ T5828] Bluetooth: hci4: command tx timeout [ 243.183541][ T5869] usbhid 5-1:0.0: can't add hid device: -71 [ 244.037042][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 244.056678][ T5869] usb 5-1: USB disconnect, device number 30 [ 244.131936][ T5827] usb 4-1: USB disconnect, device number 19 [ 244.750372][ T9514] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.759386][ T9514] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.784110][ T9514] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.793141][ T9514] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.809260][ T9638] FAULT_INJECTION: forcing a failure. [ 244.809260][ T9638] name failslab, interval 1, probability 0, space 0, times 0 [ 244.823679][ T9638] CPU: 1 UID: 0 PID: 9638 Comm: syz.4.1122 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 244.823702][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.823712][ T9638] Call Trace: [ 244.823717][ T9638] [ 244.823723][ T9638] dump_stack_lvl+0x16c/0x1f0 [ 244.823747][ T9638] should_fail_ex+0x512/0x640 [ 244.823763][ T9638] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 244.823782][ T9638] should_failslab+0xc2/0x120 [ 244.823799][ T9638] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 244.823815][ T9638] ? __alloc_skb+0x2b2/0x380 [ 244.823839][ T9638] __alloc_skb+0x2b2/0x380 [ 244.823858][ T9638] ? __pfx___alloc_skb+0x10/0x10 [ 244.823879][ T9638] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 244.823903][ T9638] netlink_alloc_large_skb+0x69/0x130 [ 244.823924][ T9638] netlink_sendmsg+0x694/0xd70 [ 244.823946][ T9638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.823972][ T9638] ____sys_sendmsg+0xa8d/0xc60 [ 244.823987][ T9638] ? copy_msghdr_from_user+0x10a/0x160 [ 244.824007][ T9638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.824030][ T9638] ___sys_sendmsg+0x134/0x1d0 [ 244.824051][ T9638] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.824092][ T9638] __sys_sendmsg+0x16d/0x220 [ 244.824115][ T9638] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.824142][ T9638] ? rcu_is_watching+0x12/0xc0 [ 244.824165][ T9638] do_syscall_64+0xcd/0x260 [ 244.824185][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.824201][ T9638] RIP: 0033:0x7f577938d169 [ 244.824214][ T9638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.824230][ T9638] RSP: 002b:00007f577a101038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.824246][ T9638] RAX: ffffffffffffffda RBX: 00007f57795a5fa0 RCX: 00007f577938d169 [ 244.824257][ T9638] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 244.824268][ T9638] RBP: 00007f577a101090 R08: 0000000000000000 R09: 0000000000000000 [ 244.824277][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.824287][ T9638] R13: 0000000000000000 R14: 00007f57795a5fa0 R15: 00007fff94322ee8 [ 244.824306][ T9638] [ 245.051466][ T9514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.065327][ T9514] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.087412][ T9514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.097787][ T9514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.112053][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.119102][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.125324][ T5819] Bluetooth: hci4: command tx timeout [ 245.127276][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.138844][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.585360][ T9514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.004191][ T9670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1127'. [ 246.236265][ T9514] veth0_vlan: entered promiscuous mode [ 246.270768][ T9514] veth1_vlan: entered promiscuous mode [ 246.322724][ T9514] veth0_macvtap: entered promiscuous mode [ 246.355746][ T9514] veth1_macvtap: entered promiscuous mode [ 246.376388][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.389185][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.404772][ T9682] kernel read not supported for file /eth0 (pid: 9682 comm: syz.5.1131) [ 246.421470][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.433022][ T30] audit: type=1800 audit(2000000033.330:676): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1131" name="eth0" dev="mqueue" ino=18329 res=0 errno=0 [ 246.439077][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.469664][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.483087][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.493048][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.515601][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.526554][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.539156][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.553288][ T9514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.567815][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.584533][ T30] audit: type=1400 audit(2000000033.410:677): avc: denied { watch } for pid=9685 comm="syz.4.1133" path="/241/file0" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 246.607330][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.636524][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.654086][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.675055][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.694023][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.806302][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.819910][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.860993][ T834] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 246.900444][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.786725][ T9695] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 247.812192][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.822949][ T9514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.851315][ T9514] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.866378][ T9514] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.877820][ T9514] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.887051][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 247.895103][ T9514] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.905309][ T834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.918903][ T30] audit: type=1400 audit(2000000034.760:678): avc: denied { relabelto } for pid=9690 comm="syz.5.1136" name="cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 248.011096][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.029432][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 248.055977][ T834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.068916][ T30] audit: type=1400 audit(2000000034.760:679): avc: denied { associate } for pid=9690 comm="syz.5.1136" name="cgroup.procs" dev="cgroup" ino=410 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 248.112319][ T834] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 248.151639][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.181932][ T834] usb 5-1: config 0 descriptor?? [ 248.368105][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.381459][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.390859][ T834] usb 5-1: USB disconnect, device number 31 [ 248.419587][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.433156][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.489426][ T9724] kernel read not supported for file /eth0 (pid: 9724 comm: syz.3.1146) [ 248.503731][ T30] audit: type=1800 audit(2000000035.400:680): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1146" name="eth0" dev="mqueue" ino=12845 res=0 errno=0 [ 248.532133][ T9726] FAULT_INJECTION: forcing a failure. [ 248.532133][ T9726] name failslab, interval 1, probability 0, space 0, times 0 [ 248.544798][ T9726] CPU: 1 UID: 0 PID: 9726 Comm: syz.3.1147 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 248.544817][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.544825][ T9726] Call Trace: [ 248.544830][ T9726] [ 248.544835][ T9726] dump_stack_lvl+0x16c/0x1f0 [ 248.544855][ T9726] should_fail_ex+0x512/0x640 [ 248.544870][ T9726] should_failslab+0xc2/0x120 [ 248.544885][ T9726] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 248.544898][ T9726] ? dst_alloc+0x99/0x1a0 [ 248.544911][ T9726] ? find_held_lock+0x2b/0x80 [ 248.544926][ T9726] dst_alloc+0x99/0x1a0 [ 248.544939][ T9726] rt_dst_alloc+0x35/0x3a0 [ 248.544956][ T9726] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 248.544980][ T9726] ip_route_output_key_hash+0x137/0x2e0 [ 248.544999][ T9726] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 248.545025][ T9726] vti6_tnl_xmit+0xfbf/0x21d0 [ 248.545045][ T9726] ? __lock_acquire+0xaa4/0x1ba0 [ 248.545062][ T9726] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 248.545076][ T9726] ? rt6_disable_ip+0x8a/0x990 [ 248.545098][ T9726] ? do_raw_spin_lock+0x12c/0x2b0 [ 248.545111][ T9726] dev_hard_start_xmit+0x99/0x790 [ 248.545127][ T9726] __dev_queue_xmit+0x7eb/0x43e0 [ 248.545145][ T9726] ? __pfx___dev_queue_xmit+0x10/0x10 [ 248.545160][ T9726] ? rcu_is_watching+0x12/0xc0 [ 248.545173][ T9726] ? trace_kmalloc+0x2b/0xd0 [ 248.545187][ T9726] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 248.545205][ T9726] ? pskb_expand_head+0x22d/0x10b0 [ 248.545222][ T9726] ? skb_release_data+0x572/0x740 [ 248.545238][ T9726] ? kmalloc_reserve+0x13c/0x2c0 [ 248.545258][ T9726] ? skb_headers_offset_update+0x129/0x260 [ 248.545282][ T9726] ? __pfx_pskb_expand_head+0x10/0x10 [ 248.545301][ T9726] __bpf_redirect+0x71c/0xfc0 [ 248.545321][ T9726] bpf_clone_redirect+0x2ce/0x3f0 [ 248.545341][ T9726] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 248.545357][ T9726] ? __pfx___schedule+0x10/0x10 [ 248.545370][ T9726] ? __lock_acquire+0x5ca/0x1ba0 [ 248.545391][ T9726] ? find_held_lock+0x2b/0x80 [ 248.545403][ T9726] ? preempt_schedule_thunk+0x16/0x30 [ 248.545425][ T9726] ? preempt_schedule_common+0x44/0xc0 [ 248.545439][ T9726] ? preempt_schedule_thunk+0x16/0x30 [ 248.545458][ T9726] ? __pfx___cant_migrate+0x10/0x10 [ 248.545475][ T9726] ? bpf_test_timer_continue+0x150/0x3c0 [ 248.545490][ T9726] bpf_test_run+0x489/0xa70 [ 248.545506][ T9726] ? __pfx_bpf_test_run+0x10/0x10 [ 248.545530][ T9726] ? __asan_memset+0x23/0x50 [ 248.545549][ T9726] bpf_prog_test_run_skb+0xb92/0x2280 [ 248.545568][ T9726] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 248.545584][ T9726] ? fput+0x70/0xf0 [ 248.545599][ T9726] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 248.545614][ T9726] __sys_bpf+0x141f/0x4c80 [ 248.545628][ T9726] ? __pfx___sys_bpf+0x10/0x10 [ 248.545640][ T9726] ? ksys_write+0x190/0x240 [ 248.545661][ T9726] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 248.545684][ T9726] ? fput+0x70/0xf0 [ 248.545697][ T9726] ? ksys_write+0x1b9/0x240 [ 248.545715][ T9726] ? __pfx_ksys_write+0x10/0x10 [ 248.545736][ T9726] __x64_sys_bpf+0x78/0xc0 [ 248.545748][ T9726] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.545762][ T9726] do_syscall_64+0xcd/0x260 [ 248.545778][ T9726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.545791][ T9726] RIP: 0033:0x7f45a978d169 [ 248.545802][ T9726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.545814][ T9726] RSP: 002b:00007f45aa505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.545827][ T9726] RAX: ffffffffffffffda RBX: 00007f45a99a5fa0 RCX: 00007f45a978d169 [ 248.545836][ T9726] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 248.545843][ T9726] RBP: 00007f45aa505090 R08: 0000000000000000 R09: 0000000000000000 [ 248.545851][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.545859][ T9726] R13: 0000000000000000 R14: 00007f45a99a5fa0 R15: 00007ffd94521728 [ 248.545874][ T9726] [ 249.000222][ T5869] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 249.161243][ T5869] usb 6-1: config 0 has an invalid interface number: 100 but max is 0 [ 249.169535][ T5869] usb 6-1: config 0 has no interface number 0 [ 249.176774][ T5869] usb 6-1: config 0 interface 100 altsetting 142 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.189136][ T5869] usb 6-1: config 0 interface 100 altsetting 142 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.199634][ T5869] usb 6-1: config 0 interface 100 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.212963][ T5869] usb 6-1: config 0 interface 100 has no altsetting 0 [ 249.219784][ T5869] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 249.228915][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.238321][ T5869] usb 6-1: config 0 descriptor?? [ 249.351272][ T9738] sch_tbf: burst 661 is lower than device lo mtu (65550) ! [ 249.510215][ T834] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 249.680179][ T834] usb 5-1: Using ep0 maxpacket: 32 [ 249.692742][ T5869] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 249.699695][ T5869] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 249.707682][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.718800][ T5869] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 249.728636][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.738785][ T5869] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 249.748651][ T834] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.758006][ T5869] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 249.765042][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.775142][ T5869] wacom 0003:056A:0084.0009: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.5-1/input100 [ 249.787602][ T834] usb 5-1: config 0 descriptor?? [ 249.799071][ T834] hub 5-1:0.0: USB hub found [ 249.895538][ T6473] usb 6-1: USB disconnect, device number 20 [ 250.061833][ T834] hub 5-1:0.0: 1 port detected [ 250.290108][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 250.443420][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 250.452832][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.464062][ T10] usb 4-1: Product: syz [ 250.468516][ T10] usb 4-1: Manufacturer: syz [ 250.474061][ T10] usb 4-1: SerialNumber: syz [ 250.484556][ T10] usb 4-1: config 0 descriptor?? [ 250.726749][ T834] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 250.726955][ T6473] usb 5-1: USB disconnect, device number 32 [ 250.952265][ T10] usb-storage 4-1:0.0: USB Mass Storage device detected [ 251.018102][ T10] usb 4-1: USB disconnect, device number 20 [ 251.382847][ T6345] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.546482][ T6345] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.609138][ T6345] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.668072][ T6345] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.723139][ T6345] bridge_slave_1: left allmulticast mode [ 251.728780][ T6345] bridge_slave_1: left promiscuous mode [ 251.734428][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.742469][ T6345] bridge_slave_0: left allmulticast mode [ 251.748107][ T6345] bridge_slave_0: left promiscuous mode [ 251.756446][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.934074][ T6345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.944017][ T6345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.954703][ T6345] bond0 (unregistering): Released all slaves [ 252.153132][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.161976][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.169628][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.185384][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.193331][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.201632][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.303122][ T6345] hsr_slave_0: left promiscuous mode [ 252.310598][ T6345] hsr_slave_1: left promiscuous mode [ 252.316292][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.327289][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.334512][ T5869] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 252.344105][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.351784][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.367775][ T6345] veth1_macvtap: left promiscuous mode [ 252.373533][ T6345] veth0_macvtap: left promiscuous mode [ 252.379133][ T6345] veth1_vlan: left promiscuous mode [ 252.384679][ T6345] veth0_vlan: left promiscuous mode [ 252.502969][ T5869] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 252.516301][ T5869] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 252.533014][ T52] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 252.544221][ T5869] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 252.561418][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.600728][ T5869] usb 4-1: Product: syz [ 252.608349][ T5869] usb 4-1: Manufacturer: syz [ 252.618866][ T5869] usb 4-1: SerialNumber: syz [ 252.627273][ T5869] usb 4-1: config 0 descriptor?? [ 252.632530][ T31] INFO: task syz.0.309:7010 blocked for more than 144 seconds. [ 252.640838][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 252.648210][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 252.657297][ T31] task:syz.0.309 state:D stack:26312 pid:7010 tgid:7009 ppid:5822 task_flags:0x400140 flags:0x00004004 [ 252.670274][ T31] Call Trace: [ 252.673728][ T31] [ 252.676662][ T31] __schedule+0x1129/0x5c00 [ 252.682038][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 252.686995][ T31] ? __pfx___schedule+0x10/0x10 [ 252.700199][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 252.716920][ T52] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 252.731079][ T31] ? find_held_lock+0x2b/0x80 [ 252.740704][ T30] audit: type=1400 audit(2000000039.630:681): avc: denied { name_bind 0x1000000 } for pid=9797 comm="syz.1.1171" path="socket:[31884]" dev="sockfs" ino=31884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.766357][ T31] ? schedule+0x2d7/0x3a0 [ 252.772670][ T52] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.780062][ T31] schedule+0xe7/0x3a0 [ 252.787020][ T31] bit_wait+0x15/0xe0 [ 252.793252][ T52] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.806302][ T31] __wait_on_bit+0x62/0x180 [ 252.822813][ T31] ? __pfx_bit_wait+0x10/0x10 [ 252.827512][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 252.834000][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 252.843194][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 252.848673][ T31] ? netfs_create_write_req+0x511/0x880 [ 252.850137][ T52] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.854263][ T31] netfs_unbuffered_write_iter_locked+0xaa7/0xd40 [ 252.875498][ T31] netfs_unbuffered_write_iter+0x414/0x6d0 [ 252.876383][ T52] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.881344][ T31] v9fs_file_write_iter+0xbf/0x100 [ 252.901550][ T52] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.903489][ T31] vfs_write+0x5ba/0x1180 [ 252.910734][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.915420][ T31] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 252.930149][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 252.935212][ T31] ? __pfx_vfs_write+0x10/0x10 [ 252.939996][ T31] ksys_write+0x12a/0x240 [ 252.944486][ T31] ? __pfx_ksys_write+0x10/0x10 [ 252.949431][ T31] ? rcu_is_watching+0x12/0xc0 [ 252.954230][ T31] do_syscall_64+0xcd/0x260 [ 252.958738][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.964677][ T31] RIP: 0033:0x7f2454d8d169 [ 252.969089][ T31] RSP: 002b:00007f2455be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.977504][ T31] RAX: ffffffffffffffda RBX: 00007f2454fa5fa0 RCX: 00007f2454d8d169 [ 252.985472][ T31] RDX: 0000000000007fec RSI: 0000200000000540 RDI: 0000000000000007 [ 252.993468][ T31] RBP: 00007f2454e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.001468][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.009443][ T31] R13: 0000000000000000 R14: 00007f2454fa5fa0 R15: 00007ffdd47eb3e8 [ 253.017416][ T31] [ 253.020596][ T31] [ 253.020596][ T31] Showing all locks held in the system: [ 253.028334][ T31] 1 lock held by khungtaskd/31: [ 253.033525][ T31] #0: ffffffff8e3be0c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 253.043438][ T31] 5 locks held by kworker/1:1/52: [ 253.048480][ T31] #0: ffff8881446ab548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 253.059337][ T31] #1: ffffc90000bc7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 253.070812][ T31] #2: ffff88802901b190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 253.079732][ T31] #3: ffff888012b95190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 253.092762][ T31] #4: ffff88802692f968 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_configuration+0x616/0x1e20 [ 253.104344][ T31] 3 locks held by kworker/u8:8/1156: [ 253.109653][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 253.129166][ T31] #1: ffffc9000416fd18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 253.147698][ T31] #2: ffffffff900f83e8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 253.156892][ T31] 2 locks held by getty/5587: [ 253.164933][ T31] #0: ffff888031f2c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 253.175092][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfa1/0x1450 [ 253.196821][ T31] 3 locks held by kworker/0:3/5827: [ 253.202096][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 253.213300][ T31] #1: ffffc9000413fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 253.223234][ T31] #2: ffffffff8e3c95f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 253.233290][ T31] 5 locks held by kworker/1:4/5869: [ 253.238470][ T31] #0: ffff8881446ab548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 253.249270][ T31] #1: ffffc9000434fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 253.260725][ T31] #2: ffff888145b4b190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 253.269575][ T31] #3: ffff88823bf46990 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 253.280379][ T31] #4: ffff888034d99160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 253.289650][ T31] 6 locks held by kworker/1:5/5870: [ 253.295031][ T31] #0: ffff8881446ab548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 253.305904][ T31] #1: ffffc9000435fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 253.317157][ T31] #2: ffff888028e26190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 253.326101][ T31] #3: ffff88807bc4a190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 253.335353][ T31] #4: ffff8880795ca160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 253.344635][ T31] #5: ffffffff8e274fd0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250 [ 253.355116][ T31] 2 locks held by kworker/u8:17/6342: [ 253.360606][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 253.371804][ T31] #1: ffffc9000e687d18 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 253.382947][ T31] 6 locks held by kworker/u8:18/6345: [ 253.388301][ T31] #0: ffff88801c2eb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 253.398749][ T31] #1: ffffc9000eee7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 253.408675][ T31] #2: ffffffff900e26d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 253.417986][ T31] #3: ffffffff900f83e8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 253.428006][ T31] #4: ffff888145302768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0xa49/0x10f0 [ 253.439078][ T31] #5: ffffffff8e3c95f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 253.449099][ T31] 3 locks held by syz.0.309/7010: [ 253.454126][ T31] #0: ffff888035171978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 253.463182][ T31] #1: ffff88807bfbc420 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 253.472312][ T31] #2: ffff8880584f8e28 (&sb->s_type->i_mutex_key#21){++++}-{4:4}, at: netfs_start_io_direct+0x116/0x260 [ 253.483651][ T31] 1 lock held by syz.3.1165/9780: [ 253.488694][ T31] #0: ffffffff900f83e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 253.497735][ T31] 1 lock held by syz-executor/9785: [ 253.502938][ T31] #0: ffffffff900f83e8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x26f/0x46e0 [ 253.512345][ T31] 1 lock held by syz.4.1169/9792: [ 253.517476][ T31] #0: ffffffff900f83e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 253.526573][ T31] 2 locks held by syz.5.1170/9795: [ 253.531750][ T31] #0: ffffffff9082a720 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 253.541831][ T31] #1: ffffffff900f83e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5e9/0x1d40 [ 253.551036][ T31] 1 lock held by syz.1.1171/9798: [ 253.556091][ T31] #0: ffffffff900f83e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 253.565900][ T31] [ 253.568251][ T31] ============================================= [ 253.568251][ T31] [ 253.576771][ T31] NMI backtrace for cpu 1 [ 253.576785][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 253.576804][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.576812][ T31] Call Trace: [ 253.576817][ T31] [ 253.576827][ T31] dump_stack_lvl+0x116/0x1f0 [ 253.576850][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 253.576871][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 253.576887][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 253.576903][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 253.576935][ T31] watchdog+0xf70/0x12c0 [ 253.576960][ T31] ? __pfx_watchdog+0x10/0x10 [ 253.576980][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.576997][ T31] ? __kthread_parkme+0x148/0x220 [ 253.577018][ T31] ? __pfx_watchdog+0x10/0x10 [ 253.577039][ T31] kthread+0x3a4/0x760 [ 253.577052][ T31] ? __pfx_kthread+0x10/0x10 [ 253.577063][ T31] ? __pfx_kthread+0x10/0x10 [ 253.577075][ T31] ? __pfx_kthread+0x10/0x10 [ 253.577086][ T31] ? __pfx_kthread+0x10/0x10 [ 253.577098][ T31] ? rcu_is_watching+0x12/0xc0 [ 253.577114][ T31] ? __pfx_kthread+0x10/0x10 [ 253.577127][ T31] ret_from_fork+0x45/0x80 [ 253.577140][ T31] ? __pfx_kthread+0x10/0x10 [ 253.577153][ T31] ret_from_fork_asm+0x1a/0x30 [ 253.577180][ T31] [ 253.577209][ T31] Sending NMI from CPU 1 to CPUs 0: [ 253.718133][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 253.728603][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 253.735460][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 253.746886][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.756925][ T31] Call Trace: [ 253.760186][ T31] [ 253.763101][ T31] dump_stack_lvl+0x3d/0x1f0 [ 253.767684][ T31] panic+0x71c/0x800 [ 253.771574][ T31] ? __pfx_panic+0x10/0x10 [ 253.775983][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 253.781354][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 253.787314][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 253.792677][ T31] ? watchdog+0xdda/0x12c0 [ 253.797102][ T31] ? watchdog+0xdcd/0x12c0 [ 253.801514][ T31] watchdog+0xdeb/0x12c0 [ 253.805752][ T31] ? __pfx_watchdog+0x10/0x10 [ 253.810420][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.815611][ T31] ? __kthread_parkme+0x148/0x220 [ 253.820637][ T31] ? __pfx_watchdog+0x10/0x10 [ 253.825312][ T31] kthread+0x3a4/0x760 [ 253.829380][ T31] ? __pfx_kthread+0x10/0x10 [ 253.833962][ T31] ? __pfx_kthread+0x10/0x10 [ 253.838535][ T31] ? __pfx_kthread+0x10/0x10 [ 253.843112][ T31] ? __pfx_kthread+0x10/0x10 [ 253.847695][ T31] ? rcu_is_watching+0x12/0xc0 [ 253.852446][ T31] ? __pfx_kthread+0x10/0x10 [ 253.857018][ T31] ret_from_fork+0x45/0x80 [ 253.861424][ T31] ? __pfx_kthread+0x10/0x10 [ 253.866000][ T31] ret_from_fork_asm+0x1a/0x30 [ 253.870770][ T31] [ 253.873975][ T31] Kernel Offset: disabled [ 253.878278][ T31] Rebooting in 86400 seconds..