last executing test programs: 15.900937624s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x100001, 0x0, {[0x8, 0x7, 0x3, 0x4, 0xffffffffffffffff, 0x80, 0xd, 0x9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.433320239s ago: executing program 4 (id=18): mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2000010, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002640)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) io_setup(0x8, &(0x7f00000026c0)=0x0) syz_fuse_handle_req(r0, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x20, 0x0, 0xb, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x22801, 0x0) io_submit(r2, 0x1, &(0x7f0000004840)=[&(0x7f0000004880)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r3, 0x0, 0x0, 0x7fffffff}]) 12.999866461s ago: executing program 0 (id=35): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x196b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x15, 0x85}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="20010327"], 0x0}) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0xf, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 12.050555651s ago: executing program 4 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x180) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 11.709685815s ago: executing program 4 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[], 0x24) write$tun(r0, &(0x7f00000004c0)=ANY=[], 0x24) 10.876433024s ago: executing program 1 (id=52): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000740)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000bc0)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f00000090c0)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/233, 0xe9}], 0x5}, 0x4}], 0x1, 0x40000141, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.792236798s ago: executing program 1 (id=53): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x58010}, 0x44) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'geneve0\x00'}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x8018) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000840)={0x5, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast1}}}, 0x108) syz_usb_connect$midi(0x3, 0x89, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x1, 0x1, 0x0, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x7c, [@midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x8, 0x0, [], 0x5}], [{{0x9, 0x5, 0x2, 0x4, 0x40, 0x6, 0x2, 0x1, {0x4}}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xbe, 0x8, 0xc, {0xa, 0x25, 0x1, 0x6, "a48a0a9d0284"}}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x7, 0xc, 0x10, {0xe, 0x25, 0x1, 0xa, "08c68efc27e18035e48b"}}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x38, 0xa2, 0xd, {0x11, 0x25, 0x1, 0xd, "707361a1c4c40813cf6301a5f5"}}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0x30, 0x81, {0x4}}}]}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0x2d, 0x40, 0x10, 0x20, 0x5}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x0, 0x0) acct(0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x80002, 0x8) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e27, 0x20000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000001880)) 10.706317367s ago: executing program 0 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x200440d0) r1 = syz_genetlink_get_family_id$l2tp(0x0, r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00416f01", @ANYRES16=r1, @ANYBLOB="000128bd7000fedbdf250600000006001c0005000000080019000a01010206001b004e23000014001f0020010000000000000000000000000000050006002d0000000c0010000100000000000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/201, 0xc9}, 0x60e9}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x101, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b5735bcc31c9eff26500080700000000000800000001000d0000000000020000007400040002000000010001002000008000000000040000004a"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r11, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) recvmmsg(r10, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 9.5433014s ago: executing program 1 (id=58): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000240), 0xffffffffffffffff, 0xb00) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0xb51, 0xfffffffa, 0x0, 0x3, 0x8, 0x9, 0x5, 0x3}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 9.190921528s ago: executing program 3 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') ioctl(r1, 0x4048aec9, &(0x7f0000000300)="0200000000000000aa") r3 = syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000a40)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.973837108s ago: executing program 3 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x58010}, 0x44) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'geneve0\x00'}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x8018) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000840)={0x5, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast1}}}, 0x108) syz_usb_connect$midi(0x3, 0x89, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x1, 0x1, 0x0, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x7c, [@midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x8, 0x0, [], 0x5}], [{{0x9, 0x5, 0x2, 0x4, 0x40, 0x6, 0x2, 0x1, {0x4}}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xbe, 0x8, 0xc, {0xa, 0x25, 0x1, 0x6, "a48a0a9d0284"}}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x7, 0xc, 0x10, {0xe, 0x25, 0x1, 0xa, "08c68efc27e18035e48b"}}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x38, 0xa2, 0xd, {0x11, 0x25, 0x1, 0xd, "707361a1c4c40813cf6301a5f5"}}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0x30, 0x81, {0x4}}}]}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0x2d, 0x40, 0x10, 0x20, 0x5}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x0, 0x0) acct(0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x2, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x80002, 0x8) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e27, 0x20000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000001880)) 7.783510064s ago: executing program 3 (id=61): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) preadv(r0, 0x0, 0x0, 0x13, 0xf7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={&(0x7f00000004c0)="7cbb28af24ddacf07ab516824c5c7cac6f7f130dc69103b750371ab07a2204d88d5cd9437f8fbf7e8e90605dc9e35facf7ce7ab7673a468df5679451b72eb718c9b7217b8cb2c121d0d786bed9139d8aed81b92e516bb77728e6ebe5976bf06a5143e7e9ed81acd975a914178cb9f31686", &(0x7f00000005c0)}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000006) timer_settime(0x0, 0x1, 0x0, 0x0) personality(0xfe47fef9f5ff7379) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="04a5435f3500004900000000", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) r8 = getpid() kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r5, &(0x7f0000000040)={r6, r7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) timer_gettime(0x0, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="67410f0766b88f000f00d0b9e20800000f32f30fc7b271396e963666410f38824a00c48161d9d8c4217d50d00f01ca26f30fc7358d000000b9280300000f32", 0x3f}], 0x1, 0x7a, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x4161, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 7.471362227s ago: executing program 0 (id=63): syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @random="af23eb8c44a1", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x1, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x33) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r0, &(0x7f0000000500)='3', 0x4e) syz_emit_ethernet(0x19, &(0x7f0000000540)=ANY=[], 0x0) 7.093886772s ago: executing program 0 (id=64): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x3ff, 0x2, 0xb5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000380), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000003c0)={0x20004, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000480)={r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7.02650441s ago: executing program 3 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x30bd22, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x255fdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x3004c8b9}, 0x0) 6.928140897s ago: executing program 0 (id=66): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x3481cc70, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24181, 0x101) r3 = dup2(r2, r0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x6) 6.858949611s ago: executing program 3 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4014) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) 6.768565511s ago: executing program 3 (id=68): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000180)=[{0x234, 0x4800, 0x0, 0x0}, {0x2, 0x9801, 0x0, 0x0}], 0x2}) 6.489154435s ago: executing program 1 (id=69): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0xe37, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0x5}, {}, {0x7, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff4b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 6.326034009s ago: executing program 1 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44800}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 6.25380857s ago: executing program 1 (id=73): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000005c0), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000600)={0x1, 0x84, 0x3, &(0x7f0000000640)={0xc, "8105d6c721100f00000000400000a8267d87000200"}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB='@H\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000084) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x52, 0x0, 0x0) 3.73913574s ago: executing program 0 (id=76): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) preadv(r0, 0x0, 0x0, 0x13, 0xf7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={&(0x7f00000004c0)="7cbb28af24ddacf07ab516824c5c7cac6f7f130dc69103b750371ab07a2204d88d5cd9437f8fbf7e8e90605dc9e35facf7ce7ab7673a468df5679451b72eb718c9b7217b8cb2c121d0d786bed9139d8aed81b92e516bb77728e6ebe5976bf06a5143e7e9ed81acd975a914178cb9f31686", &(0x7f00000005c0)}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000006) timer_settime(0x0, 0x1, 0x0, 0x0) personality(0xfe47fef9f5ff7379) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="04a5435f3500004900000000", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) r8 = getpid() kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r5, &(0x7f0000000040)={r6, r7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) timer_gettime(0x0, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="67410f0766b88f000f00d0b9e20800000f32f30fc7b271396e963666410f38824a00c48161d9d8c4217d50d00f01ca26f30fc7358d000000b9280300000f32", 0x3f}], 0x1, 0x7a, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x4161, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.020740781s ago: executing program 2 (id=78): socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r5 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000440)={r5, 0x1, 0x0, 0x2000}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000f40)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2.942302959s ago: executing program 2 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001080)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000010c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001100)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2af, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x29b, 0x0, @wg=@data={0x4, 0x9, 0x5, "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"}}}}, 0x2bd) 2.699272498s ago: executing program 2 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001740)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11883}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001940)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000019c0)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac"], 0x4e) 2.512196171s ago: executing program 2 (id=81): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x20, 0x11, 0x5, "46370262a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 179.86772ms ago: executing program 2 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='27', 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', 0x1004, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002600), 0x2808808, &(0x7f00000068c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) 0s ago: executing program 2 (id=83): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x8000, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x4000000000000009, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000780)='3', 0x4e) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000007c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 73.281792][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 73.281806][ T30] audit: type=1400 audit(1792655421.305:129): avc: denied { mounton } for pid=5584 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 73.283704][ T30] audit: type=1400 audit(1792655421.305:130): avc: denied { mount } for pid=5584 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.291277][ T5584] cgroup: Unknown subsys name 'net' [ 73.293817][ T30] audit: type=1400 audit(1792655421.315:131): avc: denied { unmount } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.427775][ T5584] cgroup: Unknown subsys name 'cpuset' [ 73.430452][ T5584] cgroup: Unknown subsys name 'rlimit' [ 73.534655][ T30] audit: type=1400 audit(1792655421.555:132): avc: denied { setattr } for pid=5584 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.535453][ T30] audit: type=1400 audit(1792655421.565:133): avc: denied { create } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.535723][ T30] audit: type=1400 audit(1792655421.565:134): avc: denied { write } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.535985][ T30] audit: type=1400 audit(1792655421.565:135): avc: denied { read } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.584186][ T30] audit: type=1400 audit(1792655421.575:136): avc: denied { mounton } for pid=5584 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 73.584247][ T30] audit: type=1400 audit(1792655421.575:137): avc: denied { mount } for pid=5584 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 73.661833][ T5586] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 73.663630][ T30] audit: type=1400 audit(1792655421.685:138): avc: denied { relabelto } for pid=5586 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.691826][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.964451][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.968022][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.971886][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.972776][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.973289][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.982244][ T4918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.990834][ T4918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.998731][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.014193][ T4918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.036575][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.070305][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.083013][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.084217][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.092030][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.092344][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.094773][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.107930][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.129881][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.131181][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.132643][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.133416][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.135114][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.136110][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.136462][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.137750][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.974294][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.981156][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.982985][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.999896][ T5596] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.013597][ T5604] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.262805][ T5597] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.278421][ T5605] infiniband rxe0: set active [ 78.281163][ T5605] infiniband rxe0: added rxe_eth0 [ 78.325830][ T5605] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 78.325870][ T5605] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 78.325914][ T5605] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 78.332491][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.427907][ T5605] RDS/IB: rxe0: added [ 78.428596][ T5605] smc: adding ib device rxe0 with port count 1 [ 78.428687][ T5605] smc: ib device rxe0 port 1 has no pnetid [ 78.448475][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.461404][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.587908][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 78.587927][ T30] audit: type=1400 audit(1792655426.615:157): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.707149][ T30] audit: type=1400 audit(1792655426.735:158): avc: denied { write } for pid=5673 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.837859][ T5601] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.864731][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.919104][ T5597] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.055764][ T5602] Bluetooth: hci0: command tx timeout [ 79.134738][ T5602] Bluetooth: hci2: command tx timeout [ 79.134955][ T5602] Bluetooth: hci1: command tx timeout [ 79.210527][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.215164][ T5598] Bluetooth: hci4: command tx timeout [ 79.215875][ T5598] Bluetooth: hci3: command tx timeout [ 79.262855][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.263644][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.263812][ T5606] bridge_slave_0: entered allmulticast mode [ 79.267567][ T5606] bridge_slave_0: entered promiscuous mode [ 79.336016][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.336156][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.336291][ T5606] bridge_slave_1: entered allmulticast mode [ 79.337912][ T5606] bridge_slave_1: entered promiscuous mode [ 79.369304][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.392202][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.392282][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.392395][ T5604] bridge_slave_0: entered allmulticast mode [ 79.393685][ T5604] bridge_slave_0: entered promiscuous mode [ 79.438251][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.450773][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.450919][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.451021][ T5604] bridge_slave_1: entered allmulticast mode [ 79.452684][ T5604] bridge_slave_1: entered promiscuous mode [ 79.504063][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.523884][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.523970][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.524083][ T5596] bridge_slave_0: entered allmulticast mode [ 79.527961][ T5596] bridge_slave_0: entered promiscuous mode [ 79.532355][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.533979][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.534115][ T5596] bridge_slave_1: entered allmulticast mode [ 79.538064][ T5596] bridge_slave_1: entered promiscuous mode [ 79.566081][ T5606] team0: Port device team_slave_0 added [ 79.574171][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.625054][ T5606] team0: Port device team_slave_1 added [ 79.651620][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.670788][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.710272][ T5604] team0: Port device team_slave_0 added [ 79.713777][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.748003][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.748037][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.748070][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.750705][ T5604] team0: Port device team_slave_1 added [ 79.770190][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.770208][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.770233][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.787578][ T5596] team0: Port device team_slave_0 added [ 79.798243][ T5596] team0: Port device team_slave_1 added [ 79.885262][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.885279][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.885301][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.891211][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.891229][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.891254][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.892109][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.892121][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.892763][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.893422][ T5605] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.950601][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.950620][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.950644][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.028230][ T5606] hsr_slave_0: entered promiscuous mode [ 80.032334][ T5606] hsr_slave_1: entered promiscuous mode [ 80.158963][ T5604] hsr_slave_0: entered promiscuous mode [ 80.161843][ T5604] hsr_slave_1: entered promiscuous mode [ 80.162697][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 80.162806][ T5604] Cannot create hsr debugfs directory [ 80.199542][ T5596] hsr_slave_0: entered promiscuous mode [ 80.200517][ T5596] hsr_slave_1: entered promiscuous mode [ 80.201179][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 80.201197][ T5596] Cannot create hsr debugfs directory [ 80.538214][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.538299][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.538618][ T5597] bridge_slave_0: entered allmulticast mode [ 80.540007][ T5597] bridge_slave_0: entered promiscuous mode [ 80.543040][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.543179][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.543323][ T5597] bridge_slave_1: entered allmulticast mode [ 80.545578][ T5597] bridge_slave_1: entered promiscuous mode [ 80.631978][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.649240][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.705189][ T5597] team0: Port device team_slave_0 added [ 80.707784][ T5597] team0: Port device team_slave_1 added [ 80.749180][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.749198][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.749223][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.759439][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.759458][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.759483][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.783433][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.810462][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.858533][ T5597] hsr_slave_0: entered promiscuous mode [ 80.859385][ T5597] hsr_slave_1: entered promiscuous mode [ 80.860328][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 80.860348][ T5597] Cannot create hsr debugfs directory [ 80.878707][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.894198][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.897319][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.909907][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.933771][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.945155][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.120866][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.124071][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.125194][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.135087][ T5602] Bluetooth: hci0: command tx timeout [ 81.136335][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.162519][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.162616][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.162773][ T5605] bridge_slave_0: entered allmulticast mode [ 81.164331][ T5605] bridge_slave_0: entered promiscuous mode [ 81.167941][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.168025][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.168476][ T5605] bridge_slave_1: entered allmulticast mode [ 81.169880][ T5605] bridge_slave_1: entered promiscuous mode [ 81.186217][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.196488][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.197285][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.203239][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.214714][ T5598] Bluetooth: hci2: command tx timeout [ 81.214912][ T5602] Bluetooth: hci1: command tx timeout [ 81.262494][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.277231][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.296817][ T5598] Bluetooth: hci4: command tx timeout [ 81.296895][ T5602] Bluetooth: hci3: command tx timeout [ 81.338403][ T5605] team0: Port device team_slave_0 added [ 81.359580][ T5605] team0: Port device team_slave_1 added [ 81.382067][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.386344][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.388752][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.395628][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.406356][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.406373][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.406393][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.426432][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.452608][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.473811][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.473827][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.473850][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.486448][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.512202][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.570691][ T5605] hsr_slave_0: entered promiscuous mode [ 81.571484][ T5605] hsr_slave_1: entered promiscuous mode [ 81.571862][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 81.571882][ T5605] Cannot create hsr debugfs directory [ 81.684689][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.689881][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.713921][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.718151][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.742423][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.750005][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.763463][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.770986][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.850401][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.879719][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.991789][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.994071][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.033879][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.034029][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.060526][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.060583][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.080471][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.080562][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.083003][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.083099][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.170613][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.173391][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.194544][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.198476][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.206214][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.229652][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.232322][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.250965][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.253455][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.297676][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.317056][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.352402][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.352504][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.398960][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.399059][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.402188][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.432021][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.432181][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.485890][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.485985][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.686148][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.780007][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.816418][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.816522][ T626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.857459][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.857564][ T626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.214796][ T5602] Bluetooth: hci0: command tx timeout [ 83.294896][ T5602] Bluetooth: hci1: command tx timeout [ 83.294929][ T5602] Bluetooth: hci2: command tx timeout [ 83.318714][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.375522][ T5598] Bluetooth: hci3: command tx timeout [ 83.375556][ T5598] Bluetooth: hci4: command tx timeout [ 83.499052][ T5596] veth0_vlan: entered promiscuous mode [ 83.560023][ T5596] veth1_vlan: entered promiscuous mode [ 83.582994][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.728693][ T5596] veth0_macvtap: entered promiscuous mode [ 83.736995][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.763541][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.771575][ T5606] veth0_vlan: entered promiscuous mode [ 83.781693][ T5596] veth1_macvtap: entered promiscuous mode [ 83.841433][ T5606] veth1_vlan: entered promiscuous mode [ 83.868314][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.888995][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.989515][ T1008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.989717][ T1008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.989757][ T1008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.989794][ T1008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.050894][ T5604] veth0_vlan: entered promiscuous mode [ 84.053823][ T5606] veth0_macvtap: entered promiscuous mode [ 84.086233][ T5604] veth1_vlan: entered promiscuous mode [ 84.091702][ T5606] veth1_macvtap: entered promiscuous mode [ 84.189670][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.229369][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.275786][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.276782][ T626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.276816][ T626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.345675][ T114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.356782][ T5604] veth0_macvtap: entered promiscuous mode [ 84.361285][ T5604] veth1_macvtap: entered promiscuous mode [ 84.365538][ T114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.366255][ T1008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.366315][ T1008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.383679][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.383702][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.458541][ T30] audit: type=1400 audit(1792655432.485:159): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.QcfgUg/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.463285][ T30] audit: type=1400 audit(1792655432.485:160): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.473838][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.478685][ T30] audit: type=1400 audit(1792655432.495:161): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.QcfgUg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.484078][ T30] audit: type=1400 audit(1792655432.495:162): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.508560][ T5597] veth0_vlan: entered promiscuous mode [ 84.517682][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.522229][ T30] audit: type=1400 audit(1792655432.525:163): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.QcfgUg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.526252][ T30] audit: type=1400 audit(1792655432.545:164): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.QcfgUg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.540845][ T30] audit: type=1400 audit(1792655432.545:165): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.553082][ T30] audit: type=1400 audit(1792655432.585:166): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.563233][ T30] audit: type=1400 audit(1792655432.585:167): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="gadgetfs" ino=6873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.581438][ T30] audit: type=1400 audit(1792655432.615:168): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.616648][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.616712][ T626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.616753][ T626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.616791][ T626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.638636][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.638660][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.681317][ T5605] veth0_vlan: entered promiscuous mode [ 84.722170][ T5596] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.728666][ T5597] veth1_vlan: entered promiscuous mode [ 84.772689][ T5605] veth1_vlan: entered promiscuous mode [ 84.901340][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.901363][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.959429][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.959449][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.011267][ T5597] veth0_macvtap: entered promiscuous mode [ 85.082830][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.082855][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.089269][ T5597] veth1_macvtap: entered promiscuous mode [ 85.121273][ T5605] veth0_macvtap: entered promiscuous mode [ 85.136327][ T5810] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 85.179764][ T5605] veth1_macvtap: entered promiscuous mode [ 85.262293][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.272975][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.295097][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.296750][ T5602] Bluetooth: hci0: command tx timeout [ 85.327212][ T5814] batman_adv: batadv0: Adding interface: syzkaller0 [ 85.327229][ T5814] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.327257][ T5814] batman_adv: batadv0: Interface activated: syzkaller0 [ 85.333181][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.747048][ T5602] Bluetooth: hci2: command tx timeout [ 85.747082][ T5602] Bluetooth: hci1: command tx timeout [ 85.747103][ T5602] Bluetooth: hci4: command tx timeout [ 85.747123][ T5602] Bluetooth: hci3: command tx timeout [ 85.775625][ T114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.775676][ T114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.775714][ T114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.775751][ T114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.785187][ T114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.785241][ T114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.785280][ T114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.785318][ T114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.880751][ T5813] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 85.912613][ T5813] batman_adv: batadv0: Removing interface: syzkaller0 [ 86.079752][ T5826] FAULT_INJECTION: forcing a failure. [ 86.079752][ T5826] name failslab, interval 1, probability 0, space 0, times 1 [ 86.079816][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 86.079846][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.079867][ T5826] Call Trace: [ 86.079875][ T5826] [ 86.079888][ T5826] dump_stack_lvl+0x100/0x190 [ 86.079935][ T5826] should_fail_ex.cold+0x5/0xa [ 86.079972][ T5826] should_failslab+0xc2/0x120 [ 86.080007][ T5826] __kmalloc_noprof+0xfc/0x840 [ 86.080037][ T5826] ? ima_alloc_init_template+0xb6/0x6d0 [ 86.080081][ T5826] ima_alloc_init_template+0xb6/0x6d0 [ 86.080137][ T5826] process_buffer_measurement+0x471/0x800 [ 86.080182][ T5826] ? __pfx_process_buffer_measurement+0x10/0x10 [ 86.080223][ T5826] ? mark_held_locks+0x40/0x70 [ 86.080250][ T5826] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.080288][ T5826] ? irqentry_exit+0x202/0xab0 [ 86.080343][ T5826] ? lock_acquire+0x5e/0x380 [ 86.080395][ T5826] ? __pfx___mutex_lock+0x10/0x10 [ 86.080416][ T5826] ? __might_fault+0xc5/0x140 [ 86.080472][ T5826] ima_measure_raw_policy+0x59/0x80 [ 86.080512][ T5826] ima_write_policy+0x20d/0x480 [ 86.080541][ T5826] ? __pfx_ima_write_policy+0x10/0x10 [ 86.080568][ T5826] ? ksys_write+0x12a/0x250 [ 86.080607][ T5826] vfs_write+0x2aa/0x1050 [ 86.080632][ T5826] ? __pfx_ima_write_policy+0x10/0x10 [ 86.080655][ T5826] ? lock_acquire+0x1d1/0x380 [ 86.080676][ T5826] ? __fget_files+0x34/0x3d0 [ 86.080709][ T5826] ? __pfx_vfs_write+0x10/0x10 [ 86.080734][ T5826] ? find_held_lock+0x2b/0x80 [ 86.080767][ T5826] ? __fget_files+0x215/0x3d0 [ 86.080805][ T5826] ? __fget_files+0x21f/0x3d0 [ 86.080848][ T5826] ksys_write+0x12a/0x250 [ 86.080875][ T5826] ? __pfx_ksys_write+0x10/0x10 [ 86.080914][ T5826] do_syscall_64+0x123/0x790 [ 86.080956][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.080980][ T5826] RIP: 0033:0x7f0b69f9f559 [ 86.081001][ T5826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.081034][ T5826] RSP: 002b:00007f0b6aec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.081065][ T5826] RAX: ffffffffffffffda RBX: 00007f0b6a225fa0 RCX: 00007f0b69f9f559 [ 86.081082][ T5826] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 86.081098][ T5826] RBP: 00007f0b6a036b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.081121][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.081136][ T5826] R13: 00007f0b6a226038 R14: 00007f0b6a225fa0 R15: 00007ffe12627678 [ 86.081174][ T5826] [ 86.190228][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.190253][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.229024][ T5825] ima: policy update failed [ 86.368175][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.368196][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.448345][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.448378][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.590034][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.590056][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.740268][ T189] cfg80211: failed to load regulatory.db [ 86.796575][ T5835] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.995502][ T5835] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 87.826111][ T5708] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.974690][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 87.976914][ T5708] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 87.980991][ T5708] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.981017][ T5708] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.983199][ T5708] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 87.983217][ T5708] usb 3-1: Product: syz [ 87.983227][ T5708] usb 3-1: Manufacturer: syz [ 88.037633][ T5708] hub 3-1:4.0: USB hub found [ 88.237083][ T5708] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 88.322708][ T5708] usb 3-1: USB disconnect, device number 2 [ 88.390873][ T189] hid-generic 0009:046D:C082.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 88.616522][ T5878] veth1_macvtap: left promiscuous mode [ 88.637278][ T5876] fido_id[5876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.710525][ T43] tipc: Subscription rejected, illegal request [ 88.804746][ T5708] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.954632][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 88.956196][ T5708] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 88.960293][ T5708] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.960330][ T5708] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.966774][ T5708] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 88.966807][ T5708] usb 3-1: Product: syz [ 88.966824][ T5708] usb 3-1: Manufacturer: syz [ 89.005173][ T5708] hub 3-1:4.0: USB hub found [ 89.138865][ T5739] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.227635][ T5708] hub 3-1:4.0: 1 port detected [ 89.509441][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 89.509460][ T30] audit: type=1400 audit(1792655437.535:369): avc: denied { ioctl } for pid=5911 comm="syz.3.31" path="socket:[8900]" dev="sockfs" ino=8900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.512596][ T30] audit: type=1400 audit(1792655437.535:370): avc: denied { write } for pid=5896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.512929][ T30] audit: type=1400 audit(1792655437.535:371): avc: denied { add_name } for pid=5896 comm="dhcpcd-run-hook" name="resolv.conf.rxe_eth0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.558264][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 89.561527][ T30] audit: type=1400 audit(1792655437.585:372): avc: denied { read } for pid=5914 comm="syz.1.32" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.561583][ T30] audit: type=1400 audit(1792655437.585:373): avc: denied { open } for pid=5914 comm="syz.1.32" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.563209][ T30] audit: type=1400 audit(1792655437.585:374): avc: denied { ioctl } for pid=5914 comm="syz.1.32" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.687479][ T30] audit: type=1400 audit(1792655437.715:375): avc: denied { write } for pid=5914 comm="syz.1.32" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.757354][ T30] audit: type=1400 audit(1792655437.785:376): avc: denied { write } for pid=5919 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.757491][ T30] audit: type=1400 audit(1792655437.785:377): avc: denied { remove_name } for pid=5919 comm="rm" name="resolv.conf.rxe_eth0.ipv4ll" dev="tmpfs" ino=1895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.907661][ T30] audit: type=1400 audit(1792655437.935:378): avc: denied { execute } for pid=5924 comm="syz.1.34" path="/10/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.051107][ T5739] hub 3-1:4.0: activate --> -90 [ 90.064625][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.214577][ T5708] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.215778][ T29] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 90.216709][ T29] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.216734][ T29] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.216750][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.216770][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.219278][ T29] usb 4-1: config 0 descriptor?? [ 90.367451][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 90.368768][ T5708] usb 1-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.00 [ 90.370098][ T5708] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 90.370134][ T5708] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.370190][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 90.370221][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.439201][ T5708] usb 1-1: config 0 descriptor?? [ 90.482361][ T5739] usb 3-1-port1: cannot disable (err = -71) [ 90.495503][ T43] usb 3-1: Failed to suspend device, error -71 [ 90.508315][ T189] usb 3-1: USB disconnect, device number 3 [ 90.658503][ T29] playstation 0003:054C:09CC.0002: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 90.671608][ T5944] FAULT_INJECTION: forcing a failure. [ 90.671608][ T5944] name failslab, interval 1, probability 0, space 0, times 0 [ 90.671645][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(full) [ 90.671673][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.671688][ T5944] Call Trace: [ 90.671695][ T5944] [ 90.671704][ T5944] dump_stack_lvl+0x100/0x190 [ 90.671746][ T5944] should_fail_ex.cold+0x5/0xa [ 90.671780][ T5944] should_failslab+0xc2/0x120 [ 90.671812][ T5944] __kmalloc_noprof+0xfc/0x840 [ 90.671839][ T5944] ? alloc_pipe_info+0x1e7/0x590 [ 90.671877][ T5944] alloc_pipe_info+0x1e7/0x590 [ 90.671905][ T5944] ? futex_hash+0x311/0x400 [ 90.671935][ T5944] splice_direct_to_actor+0x78b/0xa30 [ 90.671970][ T5944] ? __lock_acquire+0x5c0/0x1f40 [ 90.671993][ T5944] ? __pfx_direct_splice_actor+0x10/0x10 [ 90.672025][ T5944] ? plist_check_list+0x1b8/0x280 [ 90.672066][ T5944] ? find_held_lock+0x2b/0x80 [ 90.672100][ T5944] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 90.672140][ T5944] ? lock_acquire+0x1d1/0x380 [ 90.672168][ T5944] do_splice_direct+0x174/0x240 [ 90.672224][ T5944] ? __pfx_do_splice_direct+0x10/0x10 [ 90.672259][ T5944] ? selinux_file_permission+0x30/0x6a0 [ 90.672297][ T5944] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 90.672335][ T5944] ? rw_verify_area+0xce/0x6d0 [ 90.672360][ T5944] do_sendfile+0xadc/0xe20 [ 90.672390][ T5944] ? __pfx_do_sendfile+0x10/0x10 [ 90.672419][ T5944] ? __x64_sys_futex+0x34f/0x4d0 [ 90.672448][ T5944] ? __x64_sys_futex+0x358/0x4d0 [ 90.672481][ T5944] __x64_sys_sendfile64+0x1d8/0x220 [ 90.672513][ T5944] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 90.672553][ T5944] do_syscall_64+0x123/0x790 [ 90.672591][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.672618][ T5944] RIP: 0033:0x7fb852f9f559 [ 90.672637][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.672658][ T5944] RSP: 002b:00007fb853dfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 90.672681][ T5944] RAX: ffffffffffffffda RBX: 00007fb853225fa0 RCX: 00007fb852f9f559 [ 90.672695][ T5944] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 90.672709][ T5944] RBP: 00007fb853036b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.672724][ T5944] R10: 0001200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.672739][ T5944] R13: 00007fb853226038 R14: 00007fb853225fa0 R15: 00007ffc50410568 [ 90.672771][ T5944] [ 90.953753][ T29] playstation 0003:054C:09CC.0002: Failed to retrieve feature with reportID 18: -32 [ 90.953811][ T29] playstation 0003:054C:09CC.0002: Failed to retrieve DualShock4 pairing info: -32 [ 90.953862][ T29] playstation 0003:054C:09CC.0002: Failed to get MAC address from DualShock4 [ 90.953882][ T29] playstation 0003:054C:09CC.0002: Failed to create dualshock4. [ 90.968260][ T29] playstation 0003:054C:09CC.0002: probe with driver playstation failed with error -32 [ 90.978889][ T29] usb 4-1: USB disconnect, device number 2 [ 91.007081][ T5708] input: HID 0b05:196b as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0B05:196B.0003/input/input5 [ 91.207935][ T5708] asus 0003:0B05:196B.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:196b] on usb-dummy_hcd.0-1/input0 [ 91.414577][ T189] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.550789][ T5960] ip_tables: iptables: counters copy to user failed while replacing table [ 91.567025][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 91.567749][ T189] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 91.569000][ T189] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 91.571491][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.571519][ T189] usb 3-1: Product: syz [ 91.571536][ T189] usb 3-1: Manufacturer: syz [ 91.571553][ T189] usb 3-1: SerialNumber: syz [ 91.632476][ T189] r8152-cfgselector 3-1: Unknown version 0x0000 [ 91.632523][ T189] r8152-cfgselector 3-1: config 0 descriptor?? [ 91.752314][ T24] usb 1-1: USB disconnect, device number 2 [ 92.054850][ T5708] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 92.204598][ T189] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.355548][ T189] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 92.357237][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 92.357261][ T189] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.357286][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.359295][ T189] usb 4-1: config 0 descriptor?? [ 92.415934][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.544820][ T5708] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.564589][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 92.567169][ T24] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 92.568087][ T24] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.568115][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 92.568128][ T24] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 92.569797][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.569820][ T24] usb 2-1: Product: syz [ 92.569836][ T24] usb 2-1: Manufacturer: syz [ 92.569852][ T24] usb 2-1: SerialNumber: syz [ 92.685889][ T5977] ======================================================= [ 92.685889][ T5977] WARNING: The mand mount option has been deprecated and [ 92.685889][ T5977] and is ignored by this kernel. Remove the mand [ 92.685889][ T5977] option from the mount to silence this warning. [ 92.685889][ T5977] ======================================================= [ 92.735050][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 92.736365][ T5708] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 92.738286][ T5708] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 92.738307][ T5708] usb 1-1: config 1 has no interface number 0 [ 92.738339][ T5708] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 92.738361][ T5708] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 92.738411][ T5708] usb 1-1: config 1 interface 105 has no altsetting 0 [ 92.755643][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 92.755673][ T5708] usb 1-1: Product: syz [ 92.755690][ T5708] usb 1-1: Manufacturer: syz [ 92.755706][ T5708] usb 1-1: SerialNumber: syz [ 92.762076][ T5975] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 92.762217][ T5975] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 92.860559][ T189] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0B05:19B6.0004/input/input6 [ 92.906653][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.915471][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 92.970422][ T189] asus 0003:0B05:19B6.0004: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.3-1/input0 [ 93.170633][ T24] usb 2-1: USB disconnect, device number 2 [ 93.185292][ T5975] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 93.185418][ T5975] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 93.198429][ T5969] random: crng reseeded on system resumption [ 93.265884][ T5775] asus 0003:0B05:19B6.0004: Asus failed to set fn lock: -71 [ 93.267394][ T5739] usb 4-1: USB disconnect, device number 3 [ 93.304342][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.794654][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.945271][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 93.948847][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.950912][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 93.950944][ T24] usb 2-1: Product: syz [ 93.951007][ T24] usb 2-1: Manufacturer: syz [ 93.951024][ T24] usb 2-1: SerialNumber: syz [ 94.221769][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.285064][ T5739] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.445039][ T5739] usb 4-1: Using ep0 maxpacket: 16 [ 94.447179][ T5739] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 94.448963][ T5739] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.449021][ T5739] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 94.449051][ T5739] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 94.451269][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.451298][ T5739] usb 4-1: Product: syz [ 94.451315][ T5739] usb 4-1: Manufacturer: syz [ 94.451332][ T5739] usb 4-1: SerialNumber: syz [ 94.509607][ T24] usb 2-1: USB disconnect, device number 3 [ 94.511669][ C0] usblp0: nonzero write bulk status received: -71 [ 94.536988][ T24] usblp0: removed [ 94.675714][ T5739] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.675780][ T5739] usb 4-1: MIDIStreaming interface descriptor not found [ 94.731880][ T5739] usb 4-1: USB disconnect, device number 4 [ 94.789903][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.224128][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 95.224147][ T30] audit: type=1326 audit(1792655443.245:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.259446][ T30] audit: type=1326 audit(1792655443.245:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.262141][ T30] audit: type=1326 audit(1792655443.285:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.262339][ T30] audit: type=1326 audit(1792655443.285:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.262510][ T30] audit: type=1326 audit(1792655443.285:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.262877][ T30] audit: type=1326 audit(1792655443.285:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.264164][ T30] audit: type=1326 audit(1792655443.285:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.264355][ T30] audit: type=1326 audit(1792655443.285:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.284732][ T30] audit: type=1326 audit(1792655443.295:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.284794][ T30] audit: type=1326 audit(1792655443.295:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6000 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bc99f559 code=0x7ffc0000 [ 95.515369][ T5708] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 95.519392][ T5708] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 95.543714][ T5708] usb 1-1: USB disconnect, device number 3 [ 95.582781][ T6004] FAULT_INJECTION: forcing a failure. [ 95.582781][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.582815][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 95.582839][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.582851][ T6004] Call Trace: [ 95.582858][ T6004] [ 95.582867][ T6004] dump_stack_lvl+0x100/0x190 [ 95.582908][ T6004] should_fail_ex.cold+0x5/0xa [ 95.582942][ T6004] _copy_from_iter+0x1f4/0x1690 [ 95.582982][ T6004] ? trace_hrtimer_start+0x77/0x220 [ 95.583016][ T6004] ? __pfx__copy_from_iter+0x10/0x10 [ 95.583050][ T6004] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 95.583088][ T6004] ? lock_acquire+0x1d1/0x380 [ 95.583109][ T6004] ? tun_build_skb.constprop.0+0xd9/0x18f0 [ 95.583151][ T6004] copy_page_from_iter+0x238/0x300 [ 95.583188][ T6004] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 95.583222][ T6004] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 95.583248][ T6004] ? __lock_acquire+0x5c0/0x1f40 [ 95.583301][ T6004] ? find_held_lock+0x2b/0x80 [ 95.583329][ T6004] ? futex_unqueue+0x133/0x2c0 [ 95.583354][ T6004] ? futex_unqueue+0x133/0x2c0 [ 95.583386][ T6004] tun_get_user+0x17b4/0x3da0 [ 95.583424][ T6004] ? __lock_acquire+0x5c0/0x1f40 [ 95.583448][ T6004] ? __pfx_tun_get_user+0x10/0x10 [ 95.583475][ T6004] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 95.583511][ T6004] ? find_held_lock+0x2b/0x80 [ 95.583538][ T6004] ? tun_get+0x191/0x370 [ 95.583557][ T6004] ? tun_get+0x191/0x370 [ 95.583591][ T6004] tun_chr_write_iter+0xdc/0x200 [ 95.583619][ T6004] vfs_write+0x6af/0x1050 [ 95.583647][ T6004] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 95.583676][ T6004] ? __pfx_vfs_write+0x10/0x10 [ 95.583699][ T6004] ? find_held_lock+0x2b/0x80 [ 95.583745][ T6004] ksys_write+0x12a/0x250 [ 95.583771][ T6004] ? __pfx_ksys_write+0x10/0x10 [ 95.583807][ T6004] do_syscall_64+0x123/0x790 [ 95.583847][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.583871][ T6004] RIP: 0033:0x7f0b69f5fd8e [ 95.583891][ T6004] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.583913][ T6004] RSP: 002b:00007f0b6aec7fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.583936][ T6004] RAX: ffffffffffffffda RBX: 00007f0b6aec86c0 RCX: 00007f0b69f5fd8e [ 95.583951][ T6004] RDX: 0000000000000019 RSI: 0000200000000540 RDI: 00000000000000c8 [ 95.583966][ T6004] RBP: 00007f0b6a036b20 R08: 0000000000000000 R09: 0000000000000000 [ 95.583980][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.583994][ T6004] R13: 00007f0b6a226038 R14: 00007f0b6a225fa0 R15: 00007ffe12627678 [ 95.584027][ T6004] [ 96.168554][ T6015] FAULT_INJECTION: forcing a failure. [ 96.168554][ T6015] name failslab, interval 1, probability 0, space 0, times 0 [ 96.168580][ T6015] CPU: 1 UID: 0 PID: 6015 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT(full) [ 96.168595][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.168603][ T6015] Call Trace: [ 96.168608][ T6015] [ 96.168613][ T6015] dump_stack_lvl+0x100/0x190 [ 96.168641][ T6015] should_fail_ex.cold+0x5/0xa [ 96.168661][ T6015] should_failslab+0xc2/0x120 [ 96.168679][ T6015] __kvmalloc_node_noprof+0x113/0x9b0 [ 96.168714][ T6015] ? io_pin_pages+0xc3/0x1d0 [ 96.168731][ T6015] io_pin_pages+0xc3/0x1d0 [ 96.168744][ T6015] io_create_region+0x3c7/0xd20 [ 96.168760][ T6015] ? __pfx_io_create_region+0x10/0x10 [ 96.168773][ T6015] ? rcu_is_watching+0x13/0xc0 [ 96.168788][ T6015] ? cap_capable+0x107/0x430 [ 96.168804][ T6015] ? bpf_lsm_capable+0x9/0x10 [ 96.168821][ T6015] ? security_capable+0x80/0x260 [ 96.168837][ T6015] io_uring_setup.cold+0x10f6/0x1c7e [ 96.168851][ T6015] ? lock_acquire+0x1d1/0x380 [ 96.168863][ T6015] ? avc_has_perm_noaudit+0x56/0x470 [ 96.168875][ T6015] ? __pfx_io_uring_setup+0x10/0x10 [ 96.168892][ T6015] ? find_held_lock+0x2b/0x80 [ 96.168920][ T6015] ? xfd_validate_state+0x129/0x190 [ 96.168938][ T6015] __x64_sys_io_uring_setup+0xc2/0x170 [ 96.168957][ T6015] do_syscall_64+0x123/0x790 [ 96.168977][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.168990][ T6015] RIP: 0033:0x7f44bc99f559 [ 96.169001][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.169014][ T6015] RSP: 002b:00007f44bd881028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 96.169029][ T6015] RAX: ffffffffffffffda RBX: 00007f44bcc25fa0 RCX: 00007f44bc99f559 [ 96.169037][ T6015] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 96.169044][ T6015] RBP: 00007f44bca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.169051][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.169057][ T6015] R13: 00007f44bcc26038 R14: 00007f44bcc25fa0 R15: 00007fff47c00748 [ 96.169074][ T6015] [ 96.594589][ T5708] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.744617][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 96.745379][ T5708] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 96.746429][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.746465][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.746506][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.749538][ T5708] usb 4-1: config 0 descriptor?? [ 96.954664][ T189] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.044554][ T5775] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 97.105186][ T189] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 97.106122][ T189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.106153][ T189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 97.106169][ T189] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 97.106263][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.178362][ T5708] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 97.178393][ T5708] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 97.245234][ T5775] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 97.250661][ T5775] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 97.250712][ T5775] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 97.250733][ T5775] usb 2-1: config 4 has no interface number 0 [ 97.250771][ T5775] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.252671][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.252697][ T5775] usb 2-1: Product: syz [ 97.252712][ T5775] usb 2-1: Manufacturer: syz [ 97.252724][ T5775] usb 2-1: SerialNumber: syz [ 97.368795][ T5708] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 97.570207][ T5708] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 97.683353][ T5775] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 97.693517][ T5775] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 97.694319][ T5775] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 97.694357][ T5775] usb 2-1: media controller created [ 97.697830][ T5775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.739734][ T189] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 97.740359][ T189] ATM dev 0: poll status: error -71 [ 97.740402][ T189] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 97.751350][ T189] usb 3-1: USB disconnect, device number 5 [ 97.776454][ T5708] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 97.804245][ T5775] DVB: Unable to find symbol dib7000p_attach() [ 97.804266][ T5775] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 97.885902][ T5775] rc_core: IR keymap rc-dib0700-rc5 not found [ 97.885929][ T5775] Registered IR keymap rc-empty [ 97.886473][ T5775] dvb-usb: could not initialize remote control. [ 97.886504][ T5775] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 98.435083][ T24] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 99.801472][ T6045] syzkaller1: entered promiscuous mode [ 99.801500][ T6045] syzkaller1: entered allmulticast mode [ 99.826434][ T6045] 0: reclassify loop, rule prio 0, protocol 03 [ 100.097161][ T6049] ip_tables: iptables: counters copy to user failed while replacing table [ 100.109024][ T6049] syz.2.79 uses obsolete (PF_INET,SOCK_PACKET) [ 100.705887][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.854648][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 100.863731][ T29] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 100.875004][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.875036][ T29] usb 3-1: config 0 has no interface number 0 [ 100.875075][ T29] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 100.875098][ T29] usb 3-1: config 0 interface 1 has no altsetting 0 [ 100.877381][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.877411][ T29] usb 3-1: Product: syz [ 100.877428][ T29] usb 3-1: Manufacturer: syz [ 100.877468][ T29] usb 3-1: SerialNumber: syz [ 100.880716][ T29] usb 3-1: config 0 descriptor?? [ 101.101789][ T29] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 101.114188][ T29] cx231xx 3-1:0.1: Failed to read PCB config [ 101.114370][ T29] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 101.138439][ T29] usb 3-1: USB disconnect, device number 6 [ 101.615064][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.774726][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 101.778406][ T29] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 101.779732][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.779763][ T29] usb 3-1: config 0 has no interface number 0 [ 101.779827][ T29] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 101.779852][ T29] usb 3-1: config 0 interface 1 has no altsetting 0 [ 101.782249][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.782280][ T29] usb 3-1: Product: syz [ 101.782320][ T29] usb 3-1: Manufacturer: syz [ 101.782336][ T29] usb 3-1: SerialNumber: syz [ 101.826739][ T29] usb 3-1: config 0 descriptor?? [ 102.047810][ T29] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 102.050917][ T29] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 102.156592][ T29] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 102.156985][ T29] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 102.157534][ T29] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 102.157936][ T29] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 102.158302][ T29] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 102.158348][ T29] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 102.234357][ T29] i2c i2c-4: Added multiplexed i2c bus 6 [ 102.245632][ T29] i2c i2c-4: Added multiplexed i2c bus 7 [ 102.246796][ T29] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 102.246847][ T29] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 102.312628][ T29] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -32 [ 102.332334][ T29] usb 3-1: USB disconnect, device number 7 [ 102.866548][ T6055] FAULT_INJECTION: forcing a failure. [ 102.866548][ T6055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.866584][ T6055] CPU: 1 UID: 0 PID: 6055 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT(full) [ 102.866611][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.866625][ T6055] Call Trace: [ 102.866632][ T6055] [ 102.866642][ T6055] dump_stack_lvl+0x100/0x190 [ 102.866685][ T6055] should_fail_ex.cold+0x5/0xa [ 102.866716][ T6055] _copy_from_user+0x2e/0xd0 [ 102.866752][ T6055] memdup_user+0x6b/0xe0 [ 102.866778][ T6055] strndup_user+0x78/0xe0 [ 102.866803][ T6055] __x64_sys_mount+0x136/0x310 [ 102.866827][ T6055] ? __pfx___x64_sys_mount+0x10/0x10 [ 102.866858][ T6055] do_syscall_64+0x123/0x790 [ 102.866897][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.866921][ T6055] RIP: 0033:0x7f930b79f559 [ 102.866941][ T6055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.866961][ T6055] RSP: 002b:00007f930c5d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.866983][ T6055] RAX: ffffffffffffffda RB ** replaying previous printk message ** [ 102.866983][ T6055] RAX: ffffffffffffffda RBX: 00007f930ba25fa0 RCX: 00007f930b79f559 [ 102.866999][ T6055] RDX: 0000200000002600 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.867013][ T6055] RBP: 00007f930b836b20 R08: 00002000000068c0 R09: 0000000000000000 [ 102.867027][ T6055] R10: 0000000002808808 R11: 0000000000000246 R12: 0000000000000000 [ 102.867041][ T6055] R13: 00007f930ba26038 R14: 00007f930ba25fa0 R15: 00007fffefc7cfc8 [ 102.867073][ T6055] [ 103.000031][ T6019] ------------[ cut here ]------------ [ 103.000051][ T6019] usb 2-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 103.000073][ T6019] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.3.68/6019 [ 103.074097][ T6019] Modules linked in: [ 103.078216][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: syz.3.68 Not tainted syzkaller #0 PREEMPT(full) [ 103.087382][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.097555][ T6019] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 103.103329][ T6019] Code: 48 89 54 24 40 e8 13 74 79 fa 4c 89 e7 e8 cb b3 da fe 48 89 c6 48 8d 3d a1 24 c0 0a 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 e4 73 79 fa 89 ee bf ff 00 00 00 [ 103.123052][ T6019] RSP: 0018:ffffc900044bf970 EFLAGS: 00010283 [ 103.129395][ T6019] RAX: ffffffff8cc8b3a0 RBX: ffff88802d44c000 RCX: 0000000080000480 [ 103.137635][ T6019] RDX: ffff88807b0c3300 RSI: ffffffff8cc8b3a0 RDI: ffffffff92530c50 [ 103.145865][ T6019] RBP: ffff88823be96858 R08: 00000000000000c0 R09: 0000000000000000 [ 103.153860][ T6019] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88823be968b0 [ 103.162055][ T6019] R13: ffff88802d310de0 R14: ffff88802d310de6 R15: ffff88802d310de7 [ 103.170088][ T6019] FS: 00007f44bd8816c0(0000) GS:ffff888122930000(0000) knlGS:0000000000000000 [ 103.179103][ T6019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.185766][ T6019] CR2: 00007fffefc7bbe0 CR3: 000000007b0d5000 CR4: 00000000003526f0 [ 103.193802][ T6019] Call Trace: [ 103.197137][ T6019] [ 103.200081][ T6019] ? __init_swait_queue_head+0xca/0x150 [ 103.205792][ T6019] usb_start_wait_urb+0x10e/0x580 [ 103.210899][ T6019] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 103.216594][ T6019] ? __asan_memset+0x23/0x50 [ 103.221210][ T6019] usb_control_msg+0x328/0x4b0 [ 103.226032][ T6019] ? __pfx_usb_control_msg+0x10/0x10 [ 103.231390][ T6019] dib0700_ctrl_rd+0x1b5/0x320 [ 103.236305][ T6019] dib0700_i2c_xfer+0x460/0xd90 [ 103.241268][ T6019] __i2c_transfer+0x5d4/0x1740 [ 103.246337][ T6019] ? __pfx___i2c_transfer+0x10/0x10 [ 103.251586][ T6019] i2c_transfer+0x158/0x380 [ 103.255641][ T29] usb 2-1: USB disconnect, device number 4 [ 103.262161][ T6019] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 103.267251][ T6019] i2cdev_ioctl+0x19d/0x830 [ 103.271823][ T6019] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 103.276933][ T6019] ? selinux_file_ioctl+0x1e7/0x290 [ 103.282292][ T6019] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 103.287402][ T6019] __x64_sys_ioctl+0x18e/0x210 [ 103.292198][ T6019] do_syscall_64+0x123/0x790 [ 103.296957][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.302872][ T6019] RIP: 0033:0x7f44bc99f559 [ 103.307340][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.327032][ T6019] RSP: 002b:00007f44bd881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.335533][ T6019] RAX: ffffffffffffffda RBX: 00007f44bcc25fa0 RCX: 00007f44bc99f559 [ 103.343560][ T6019] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000004 [ 103.351803][ T6019] RBP: 00007f44bca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.360076][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.368182][ T6019] R13: 00007f44bcc26038 R14: 00007f44bcc25fa0 R15: 00007fff47c00748 [ 103.376847][ T6019] [ 103.379905][ T6019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.387200][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: syz.3.68 Not tainted syzkaller #0 PREEMPT(full) [ 103.396324][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.406395][ T6019] Call Trace: [ 103.409731][ T6019] [ 103.412688][ T6019] dump_stack_lvl+0x100/0x190 [ 103.417401][ T6019] vpanic+0x553/0x970 [ 103.421481][ T6019] ? __pfx_vpanic+0x10/0x10 [ 103.426008][ T6019] panic+0xd1/0xe0 [ 103.429741][ T6019] ? __pfx_panic+0x10/0x10 [ 103.434192][ T6019] check_panic_on_warn.cold+0x19/0x34 [ 103.439584][ T6019] ? usb_submit_urb+0x15ff/0x19b0 [ 103.444629][ T6019] __warn.cold+0x191/0x318 [ 103.449118][ T6019] __report_bug+0x30f/0x440 [ 103.453638][ T6019] ? usb_submit_urb+0x15ff/0x19b0 [ 103.458734][ T6019] ? __pfx___report_bug+0x10/0x10 [ 103.463787][ T6019] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.469619][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.474860][ T6019] ? kasan_save_stack+0x3f/0x50 [ 103.479714][ T6019] report_bug_entry+0xe2/0x290 [ 103.484481][ T6019] ? usb_submit_urb+0x160d/0x19b0 [ 103.489504][ T6019] handle_bug+0x1cd/0x2a0 [ 103.493833][ T6019] exc_invalid_op+0x17/0x50 [ 103.498348][ T6019] asm_exc_invalid_op+0x1a/0x20 [ 103.503204][ T6019] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 103.508851][ T6019] Code: 48 89 54 24 40 e8 13 74 79 fa 4c 89 e7 e8 cb b3 da fe 48 89 c6 48 8d 3d a1 24 c0 0a 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 e4 73 79 fa 89 ee bf ff 00 00 00 [ 103.528471][ T6019] RSP: 0018:ffffc900044bf970 EFLAGS: 00010283 [ 103.534554][ T6019] RAX: ffffffff8cc8b3a0 RBX: ffff88802d44c000 RCX: 0000000080000480 [ 103.542585][ T6019] RDX: ffff88807b0c3300 RSI: ffffffff8cc8b3a0 RDI: ffffffff92530c50 [ 103.550568][ T6019] RBP: ffff88823be96858 R08: 00000000000000c0 R09: 0000000000000000 [ 103.558548][ T6019] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88823be968b0 [ 103.566534][ T6019] R13: ffff88802d310de0 R14: ffff88802d310de6 R15: ffff88802d310de7 [ 103.574548][ T6019] ? __init_swait_queue_head+0xca/0x150 [ 103.580117][ T6019] usb_start_wait_urb+0x10e/0x580 [ 103.585161][ T6019] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 103.590759][ T6019] ? __asan_memset+0x23/0x50 [ 103.595376][ T6019] usb_control_msg+0x328/0x4b0 [ 103.600197][ T6019] ? __pfx_usb_control_msg+0x10/0x10 [ 103.605544][ T6019] dib0700_ctrl_rd+0x1b5/0x320 [ 103.610340][ T6019] dib0700_i2c_xfer+0x460/0xd90 [ 103.615258][ T6019] __i2c_transfer+0x5d4/0x1740 [ 103.620058][ T6019] ? __pfx___i2c_transfer+0x10/0x10 [ 103.625291][ T6019] i2c_transfer+0x158/0x380 [ 103.629820][ T6019] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 103.634799][ T6019] i2cdev_ioctl+0x19d/0x830 [ 103.639333][ T6019] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 103.644378][ T6019] ? selinux_file_ioctl+0x1e7/0x290 [ 103.649601][ T6019] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 103.654663][ T6019] __x64_sys_ioctl+0x18e/0x210 [ 103.659462][ T6019] do_syscall_64+0x123/0x790 [ 103.664080][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.670017][ T6019] RIP: 0033:0x7f44bc99f559 [ 103.674450][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.694085][ T6019] RSP: 002b:00007f44bd881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.702524][ T6019] RAX: ffffffffffffffda RBX: 00007f44bcc25fa0 RCX: 00007f44bc99f559 [ 103.710515][ T6019] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000004 [ 103.718500][ T6019] RBP: 00007f44bca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.726481][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.734467][ T6019] R13: 00007f44bcc26038 R14: 00007f44bcc25fa0 R15: 00007fff47c00748 [ 103.742471][ T6019] [ 103.745783][ T6019] Kernel Offset: disabled [ 103.750117][ T6019] Rebooting in 86400 seconds..