last executing test programs: 2m43.423594657s ago: executing program 2 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f00004d2000/0x4000)=nil, 0x4000, 0x3) fanotify_init(0x8, 0x8000) timer_settime(r1, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 2m40.062128386s ago: executing program 2 (id=59): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20048010}, 0x20044000) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x20, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 2m38.883457654s ago: executing program 2 (id=61): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5eb5, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) setuid(0xee01) 2m38.440334408s ago: executing program 2 (id=63): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x30a80, 0x0) poll(&(0x7f0000000140)=[{r0, 0x9040}, {r0}, {r0, 0x8248}, {r0, 0x60}, {0xffffffffffffffff, 0x10}, {r0}], 0x6, 0x5) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000002900080003000000"], 0x10}, 0x0) 2m33.792562782s ago: executing program 2 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000002090e000000f6ff00000000006c2a9dc75a228db76027a8ac6f091da8a0eb7157e264008971d512a18cf6ec958bec3c9773760f590b76ec5cc2f2a24665cea770d595830d5fb3f4626fb6a0611c5015b7709a964cd90155d56fedb9ed7f07b9f758f9c8dca1c9be28b3c98f6c0e0daeddba898f1e6711cb01eaab273d9cfbce9f2df68c9a7cd1ec3104d69315c0773235c6e5640f087ed676530b1305892d5b6aaaf815285bf6999cba580df667de8983bab9ce8ac5", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff3e, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xffffffffffffff4c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) socket$isdn(0x22, 0x3, 0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$P9_RLERROR(r4, 0x0, 0x13) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000240)={0x60000000}) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r6, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r5, &(0x7f0000000280)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8000000, 0x1}, 0xdb, 0x0}, 0x5b4}], 0x1, 0x850) 2m33.043140561s ago: executing program 2 (id=74): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x1fffffff, 0x8, 0x1, 0xb2}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 2m17.72091743s ago: executing program 32 (id=74): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x1fffffff, 0x8, 0x1, 0xb2}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 14.789432374s ago: executing program 3 (id=446): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x30a80, 0x0) poll(&(0x7f0000000140)=[{r0, 0x9040}, {r0}, {r0, 0x8248}, {r0, 0x60}, {0xffffffffffffffff, 0x10}, {r0}], 0x6, 0x5) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000002900080003000000"], 0x10}, 0x0) 13.729051812s ago: executing program 5 (id=448): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r2, 0x0, 0x24000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r2, &(0x7f0000001200), 0x0, 0x2023, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x400) bind$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x370, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48aed3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff, 0xffffff00], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@private=0xa010100, @private=0xa010100, 0xffffff00, 0xffffff00, 'caif0\x00', 'pim6reg\x00', {}, {}, 0x1, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x26}, 0xff, 0xffffff00, 'ipvlan1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x1b, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 13.490432481s ago: executing program 0 (id=449): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x9, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x24, [0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d, 0x0, 0x0, 0x0, 0x8000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x2, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x80, 0xfffffffd, 0xfffffffe, 0x8, 0x0, 0x0, 0x7, 0x3, 0xfffffca8, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x5b7d, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) 11.72463039s ago: executing program 1 (id=451): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x9, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x24, [0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d, 0x0, 0x0, 0x0, 0x8000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x2, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x80, 0xfffffffd, 0xfffffffe, 0x8, 0x0, 0x0, 0x7, 0x3, 0xfffffca8, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x5b7d, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) 11.600843482s ago: executing program 0 (id=452): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) munmap(&(0x7f000082f000/0x400000)=nil, 0x400000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open$dir(&(0x7f0000000000)='./bus\x00', 0x200000, 0x4) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000004000000000000200000000000006e000000000000000000"], 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 11.521842934s ago: executing program 3 (id=453): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x40, 0x5, 0xa2, 0x9}, 0x6) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) socket$kcm(0x10, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x101}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x80b80000, @loopback, 0x7fff}, 0x1c) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r1, &(0x7f0000006680)) 10.559455148s ago: executing program 1 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) r4 = semget$private(0x0, 0x20000000102, 0x0) ftruncate(r2, 0x10001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) link(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) 9.389865171s ago: executing program 1 (id=456): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000080)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x40, 0xf, 0x12, {0x12, 0x9, "dfaaffd3415420fd4fecf0c680e7a0af"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "256762ca1ad8d820066e9fe0f82e3c80b7c28f13bd274ac0"}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "7e9b069f2a06a871bf69a9f6dedd4f02"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x8, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x3, 0x400}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x72, 0x0, 0x80, 0xe0, "517405a2", "18ec50c7"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x0, 0xb, 0x0, 0x8, 0x7}}}, &(0x7f0000000900)={0x84, &(0x7f00000002c0)={0x20, 0x0, 0xf1, "263cea2a7bc2df14e1d5b24f6262eead0e62a53ae2c5cb789ccde9803ef201f1e3529062bcc65e5f3730e58e13cd1dccae1c2b821954326e5a42c0271cf19300b043cf5a718bb497222b7c159f85b63de0625c1bd2839d00025a0d6c4895fb3debfef6428fef8ba282b3aeda76f53870f3390dc3ae82fc8307c075bac1f469e84b8182301b828cdc67a38b817d1a19efd3eb3a40215be3ad63660956992559b1ac690279b6b3f0dc5338c66241a7ae04091130b2cb1ae7950bafc3af12997e0a26fee8c7121de089b6d1d4eeca8dd960f4ef34eb07411e569b623ded0762a7f3f32144e0ec756415bc9021df61dbeda899"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x13, 0x6, @random="6878fc0a2ddc"}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x39}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xd1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.240920251s ago: executing program 5 (id=457): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000bc0)=@bridge_getlink={0x28, 0x12, 0x201, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001b1caef8b740a84c8d9375aa8817d0752b20874b4ef1d0bfddddaf427103363c156084c7b253a166c01d0e4a3768cad9ba3b4e67f5526132c7cce9393fa6e144acb0757af1aebacce60e482ff33bf14d2ce50251b58bfcd0d8201dd8fcc4df4cfe5624379946ee86f49835f7135c97f991d64773aed4e700ef14062b70d1670ba946d3ef5cd5fbe3987071910924"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) 9.194801236s ago: executing program 3 (id=458): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0xab, {{0xa, 0x0, 0x75, @mcast1}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffff8ba2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) getrlimit(0x4, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00008b", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 8.253679818s ago: executing program 0 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) 7.958384146s ago: executing program 0 (id=460): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315852, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mincore(&(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/194) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000040), 0x0, 0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x29) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) ioctl$VIDIOC_G_PRIORITY(r6, 0x80045643, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.50679459s ago: executing program 5 (id=461): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c}, 0x4000854) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getpid() ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000006c0)={0xb6, 0x0, 0x8000000000000001}) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r0, 0x21) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000000c0), 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x200007f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x5, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454c, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0xa004, 0x5, 0xfffffff3, 0x128432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x101, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1000, 0x8, 0x86, 0x3, 0x303c, 0xfefffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x4038, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x3, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x7, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0x101, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0xa3, 0x5, 0x226, 0xffffffff, 0x2, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={r7, r8, 0x1, 0x0, 0x3}) 7.420103337s ago: executing program 3 (id=462): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c}, 0x4000854) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getpid() ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000006c0)={0xb6, 0x0, 0x8000000000000001}) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r0, 0x21) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000000c0), 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x200007f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x5, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454c, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0xa004, 0x5, 0xfffffff3, 0x128432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x101, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1000, 0x8, 0x86, 0x3, 0x303c, 0xfefffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x4038, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x3, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x7, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0x101, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0xa3, 0x5, 0x226, 0xffffffff, 0x2, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={r7, r8, 0x1, 0x0, 0x3}) 6.883744058s ago: executing program 0 (id=464): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfe}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_virt_wifi\x00', 0x0}) write$cgroup_int(r4, &(0x7f0000000340)=0x4, 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2b8180, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000008000000185400000d0000000000000000000000852000000100000018220000", @ANYRES32, @ANYBLOB="00000000007f00009500000000ad5d6be400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @sk_reuseport=0x28, r7, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x3, 0xfffffffffffffffd, &(0x7f0000000540)=[{0x2, 0x1, 0x5, 0x5}, {0x2, 0x1, 0x10, 0xb}, {0x2, 0x4, 0x7, 0x5}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r10, &(0x7f0000004100)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x7, 0x0, 0xb, 0x9, 0x3, 0xfffffffffffffffe}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x38, &(0x7f00000002c0)=""/56, 0x41000, 0x1e, '\x00', 0x0, @fallback=0x13, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x5, 0x80000001}, 0x10, r8, r0, 0x3, &(0x7f0000000440)=[r9, r10], &(0x7f0000000480)=[{0x4, 0x5, 0x0, 0x9}, {0x2, 0x3, 0x4, 0xa}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x9}, 0x94) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.301439826s ago: executing program 4 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) r4 = semget$private(0x0, 0x20000000102, 0x0) ftruncate(r2, 0x10001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) link(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) 4.844804709s ago: executing program 1 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x80b80000, @loopback, 0x7fff}, 0x1c) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r1, &(0x7f0000006680)) 3.875309103s ago: executing program 1 (id=470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket(0x2, 0x80805, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) syz_genetlink_get_family_id$fou(&(0x7f0000001100), r5) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000556147065bcc600900000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100"/25], 0x50) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="bff723662a887d35d2e00ef01af225b8a5f9a6f87f4cc727c9044dc912adc5a60dad46b778318bdb27e2b9fbae693e87d85c65afd22bcab5dfcc882a1d9e298af89d6f22a7679799cfd6281ad7dd59c52df1a5eff059c26d30e5070cff1acccc8a479738e0decd78337dbc1a346343d6632608f4a02e5e45523b90df8c226c31ec3ca687aaf3ba2e35d8161870153ee30ac373aa", 0x94}, {&(0x7f0000000200)="26016bd10808daaf58ba518e52118be3ea12f27bbf2052e039c73823a567395ca9018c27d5c8245f3bb9c8011fc9c761d85ab142fc1cf8398b3b6736f828ddb129ee1bfc6ecc9463aa0ce9de8a6576c479110ba90c4d22522f06e41d04d215723a52b0ccce3c9d20ad7e6c36dcdd3468ba856fcdad6b73ff9f1d08b584322b6cce50284bb36e49a7fa7a401602c24f70404531b1925f8e888404afdf93462eea3661239b2131286547a22418bb86273536ee721d124fa8b786f84e89e33b6a7cf7ee8e2b3edda230338a3cd41739e9127df0a0c20c4ed1bb7053917532634f3b3daab323303b7cb67fe76a7e1cdf319e", 0xf0}], 0x2, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x1, 0x0) 3.156174447s ago: executing program 1 (id=471): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000bc0)=@bridge_getlink={0x28, 0x12, 0x201, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001b1caef8b740a84c8d9375aa8817d0752b20874b4ef1d0bfddddaf427103363c156084c7b253a166c01d0e4a3768cad9ba3b4e67f5526132c7cce9393fa6e144acb0757af1aebacce60e482ff33bf14d2ce50251b58bfcd0d8201dd8fcc4df4cfe5624379946ee86f49835f7135c97f991d64773aed4e700ef14062b70d1670ba946d3ef5cd5fbe3987071910924"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) 3.13114248s ago: executing program 3 (id=472): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x9, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x24, [0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d, 0x0, 0x0, 0x0, 0x8000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x2, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x80, 0xfffffffd, 0xfffffffe, 0x8, 0x0, 0x0, 0x7, 0x3, 0xfffffca8, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x5b7d, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0xb4dc, 0xef, 0x0, 0x80}, 0x2b, [0x5, 0x0, 0x6, 0x6240, 0x7, 0x0, 0x8, 0x5, 0x7f, 0x5, 0x3, 0x0, 0x1, 0x0, 0xc62, 0x278, 0x2, 0x767d, 0x3, 0x1, 0x9, 0x87c4, 0x3, 0x6, 0xffffffe9, 0x0, 0x40, 0x1, 0x0, 0x7, 0x3, 0x6, 0xb18, 0x2, 0x5, 0x0, 0x5, 0x2, 0x8, 0x4, 0x80000000, 0x6, 0x4, 0x8, 0x9525, 0x2, 0xffffffff, 0x80000000, 0x8, 0x6, 0xb, 0x5, 0xff, 0x3, 0x2, 0x5, 0x5, 0x2, 0x100, 0x4, 0x4, 0xaec0, 0x1, 0x3], [0x401, 0x1, 0x4, 0x3, 0x7, 0x4, 0x80000000, 0xe, 0x2, 0xe155, 0x8000, 0x3, 0x8, 0x4e, 0x0, 0x80000000, 0x8, 0x2010001, 0x10001, 0x7f, 0x6, 0x7, 0x3, 0x2e8, 0x0, 0x6, 0x80000001, 0x3, 0x1ff, 0x8, 0x1, 0x9, 0x6, 0x4, 0x400, 0x2, 0x1, 0x1306, 0x1, 0xb, 0x8, 0x6, 0x4, 0x7f, 0x8, 0x9, 0xffff, 0x1ff, 0x6, 0x7, 0xe, 0x4d, 0x2, 0xfffffff9, 0xf, 0x6, 0x6, 0x2, 0x3, 0x0, 0x6c, 0x4, 0x6, 0x10000], [0x80, 0x0, 0x200, 0xa, 0x7, 0x0, 0xffffffff, 0x500, 0x1, 0x80000001, 0x9, 0x9, 0x1, 0x0, 0xffff8000, 0x82, 0x6, 0x7, 0x1, 0x2, 0x2, 0x8, 0x10200, 0x569, 0x9, 0xfd29, 0x2, 0x4, 0x4, 0x7f, 0xbe42, 0x7c, 0x80000000, 0x9, 0x2, 0x0, 0x0, 0x0, 0xf5, 0x7, 0x6, 0x7, 0x5c4, 0x8, 0x7f, 0x80000001, 0x6, 0x7, 0x7, 0x40000, 0xa1, 0x959b, 0x7, 0x1, 0xfff, 0x7, 0x706c6704, 0x7fff, 0x7fffffff, 0x4, 0x1f, 0x7e, 0x6, 0xd], [0x59f00921, 0x1ff, 0xfffffff7, 0x1, 0x4, 0x6, 0xe, 0x3, 0x3a08, 0x1, 0x401, 0x6, 0xe, 0x3, 0x1, 0x7, 0x10, 0x101, 0x0, 0x9, 0x4, 0x1ff, 0x6, 0x3ff0000, 0x4, 0x8, 0x81, 0xaf7c, 0xa34, 0x6, 0x3, 0xfbce, 0x80000000, 0x9, 0x8, 0x7fff, 0x4, 0x3ff, 0xfffffffb, 0x621, 0x7, 0xffff, 0x10001, 0x4, 0x7, 0x4, 0x6e1, 0x9, 0x9, 0x6, 0x100, 0x7, 0x9, 0x0, 0x7fffffff, 0x9, 0x400, 0x7fffffff, 0x4, 0x1000000, 0x8001, 0x1, 0x8000, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 2.828214391s ago: executing program 4 (id=473): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0xab, {{0xa, 0x0, 0x75, @mcast1}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) ioctl$KVM_RUN(r1, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffff8ba2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getrlimit(0x4, 0x0) setrlimit(0xb, &(0x7f00000000c0)={0x2, 0x3}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00008b", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.806161532s ago: executing program 0 (id=474): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfe}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x4, 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2b8180, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000008000000185400000d0000000000000000000000852000000100000018220000", @ANYRES32, @ANYBLOB="00000000007f00009500000000ad5d6be400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @sk_reuseport=0x28, r7, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x3, 0xfffffffffffffffd, &(0x7f0000000540)=[{0x2, 0x1, 0x5, 0x5}, {0x2, 0x1, 0x10, 0xb}, {0x2, 0x4, 0x7, 0x5}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r10, &(0x7f0000004100)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x7, 0x0, 0xb, 0x9, 0x3, 0xfffffffffffffffe}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x38, &(0x7f00000002c0)=""/56, 0x41000, 0x1e, '\x00', 0x0, @fallback=0x13, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x5, 0x80000001}, 0x10, r8, r0, 0x3, &(0x7f0000000440)=[r9, r10], &(0x7f0000000480)=[{0x4, 0x5, 0x0, 0x9}, {0x2, 0x3, 0x4, 0xa}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x9}, 0x94) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.780307775s ago: executing program 5 (id=475): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa340e000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x70}, 0x1, 0xbb1414ac}, 0x0) 2.012364364s ago: executing program 4 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x6c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x74, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8c11}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x84) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCMIWAIT(r8, 0x5453, 0x0) 1.801312199s ago: executing program 5 (id=477): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000080)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x40, 0xf, 0x12, {0x12, 0x9, "dfaaffd3415420fd4fecf0c680e7a0af"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "256762ca1ad8d820066e9fe0f82e3c80b7c28f13bd274ac0"}}, &(0x7f00000001c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "7e9b069f2a06a871bf69a9f6dedd4f02"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x8, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x3, 0x400}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x72, 0x0, 0x80, 0xe0, "517405a2", "18ec50c7"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x0, 0xb, 0x0, 0x8, 0x7}}}, &(0x7f0000000900)={0x84, &(0x7f00000002c0)={0x20, 0x0, 0xf1, "263cea2a7bc2df14e1d5b24f6262eead0e62a53ae2c5cb789ccde9803ef201f1e3529062bcc65e5f3730e58e13cd1dccae1c2b821954326e5a42c0271cf19300b043cf5a718bb497222b7c159f85b63de0625c1bd2839d00025a0d6c4895fb3debfef6428fef8ba282b3aeda76f53870f3390dc3ae82fc8307c075bac1f469e84b8182301b828cdc67a38b817d1a19efd3eb3a40215be3ad63660956992559b1ac690279b6b3f0dc5338c66241a7ae04091130b2cb1ae7950bafc3af12997e0a26fee8c7121de089b6d1d4eeca8dd960f4ef34eb07411e569b623ded0762a7f3f32144e0ec756415bc9021df61dbeda899"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x13, 0x6, @random="6878fc0a2ddc"}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x39}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xd1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.070243054s ago: executing program 4 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f00050001000600000005000500020000000500040000001a000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf7, 0xf7, 0x9, [@enum64={0x10, 0x9, 0x0, 0x13, 0x0, 0x0, [{0xe, 0x8}, {0x5, 0x5, 0x3}, {0xa, 0x2}, {0xf, 0x7, 0xa}, {0xa, 0xfffffff7, 0x8001}, {0x6, 0x80000000, 0x8e}, {0x8, 0x6, 0xa0f8}, {0x4, 0xfffffff7, 0x8}, {0x9, 0x40, 0x1}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x2}}, @datasec={0x8, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x4, 0x2}, {0x3, 0x10000, 0x7fffffff}, {0x2, 0x9, 0x101}, {0x2, 0x9, 0x1}, {0x2, 0x8, 0x2}], 'vp7'}]}, {0x0, [0x2e, 0x5f, 0x61, 0x2e, 0x61, 0x5f, 0x2e]}}, &(0x7f00000002c0)=""/228, 0x119, 0xe4, 0x0, 0x7}, 0x28) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc4, 0xc}) 152.360975ms ago: executing program 3 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) r4 = semget$private(0x0, 0x20000000102, 0x0) ftruncate(r2, 0x10001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) link(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) 0s ago: executing program 4 (id=480): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) kernel console output (not intermixed with test programs): 3] bridge_slave_0: entered allmulticast mode [ 60.177415][ T5823] bridge_slave_0: entered promiscuous mode [ 60.185251][ T5816] team0: Port device team_slave_0 added [ 60.198143][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.205230][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.212432][ T5805] bridge_slave_0: entered allmulticast mode [ 60.219380][ T5805] bridge_slave_0: entered promiscuous mode [ 60.242932][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.250317][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.257467][ T5823] bridge_slave_1: entered allmulticast mode [ 60.264249][ T5823] bridge_slave_1: entered promiscuous mode [ 60.271497][ T5816] team0: Port device team_slave_1 added [ 60.277517][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.284641][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.291696][ T5805] bridge_slave_1: entered allmulticast mode [ 60.298327][ T5805] bridge_slave_1: entered promiscuous mode [ 60.345086][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.352177][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.359551][ T5808] bridge_slave_0: entered allmulticast mode [ 60.366718][ T5808] bridge_slave_0: entered promiscuous mode [ 60.375151][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.384288][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.391342][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.398463][ T5808] bridge_slave_1: entered allmulticast mode [ 60.405420][ T5808] bridge_slave_1: entered promiscuous mode [ 60.427492][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.438067][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.448636][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.466680][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.476948][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.483928][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.510073][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.543491][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.553177][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.560126][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.586788][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.613947][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.634066][ T5805] team0: Port device team_slave_0 added [ 60.641354][ T5807] team0: Port device team_slave_0 added [ 60.648993][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.666450][ T5823] team0: Port device team_slave_0 added [ 60.674613][ T5805] team0: Port device team_slave_1 added [ 60.681161][ T5807] team0: Port device team_slave_1 added [ 60.694614][ T5823] team0: Port device team_slave_1 added [ 60.756216][ T5808] team0: Port device team_slave_0 added [ 60.762311][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.769585][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.795951][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.813610][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.820896][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.847627][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.859045][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.866002][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.892306][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.904496][ T5808] team0: Port device team_slave_1 added [ 60.910996][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.917981][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.943921][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.955401][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.962319][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.988454][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.002520][ T5816] hsr_slave_0: entered promiscuous mode [ 61.008745][ T5816] hsr_slave_1: entered promiscuous mode [ 61.015387][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.022310][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.048383][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.087095][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.094017][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.120005][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.131756][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.139133][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.165040][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.258964][ T5805] hsr_slave_0: entered promiscuous mode [ 61.264973][ T5805] hsr_slave_1: entered promiscuous mode [ 61.270776][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 61.276717][ T5805] Cannot create hsr debugfs directory [ 61.302251][ T5823] hsr_slave_0: entered promiscuous mode [ 61.308140][ T5819] Bluetooth: hci1: command tx timeout [ 61.308286][ T5133] Bluetooth: hci2: command tx timeout [ 61.314324][ T5823] hsr_slave_1: entered promiscuous mode [ 61.319671][ T5819] Bluetooth: hci3: command tx timeout [ 61.324526][ T52] Bluetooth: hci0: command tx timeout [ 61.330804][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 61.341450][ T5823] Cannot create hsr debugfs directory [ 61.359060][ T5807] hsr_slave_0: entered promiscuous mode [ 61.365083][ T5807] hsr_slave_1: entered promiscuous mode [ 61.370900][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 61.376621][ T5807] Cannot create hsr debugfs directory [ 61.384516][ T52] Bluetooth: hci4: command tx timeout [ 61.390137][ T5808] hsr_slave_0: entered promiscuous mode [ 61.396207][ T5808] hsr_slave_1: entered promiscuous mode [ 61.402008][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 61.408007][ T5808] Cannot create hsr debugfs directory [ 61.711592][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.722743][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.731880][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.746565][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.789951][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.799091][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.816245][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.826235][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.879439][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.888700][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.901748][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.918137][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.965854][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.981750][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.990808][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.005470][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.080049][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.094067][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.101462][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.122780][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.143767][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.154764][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.177955][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.185115][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.202311][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.209396][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.248309][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.268490][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.306357][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.317472][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.348339][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.356805][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.363875][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.380815][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.387896][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.400697][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 62.400708][ T30] audit: type=1400 audit(1761722831.534:86): avc: denied { sys_module } for pid=5816 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.423049][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.440275][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.458662][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.467991][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.475079][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.485666][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.492706][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.562596][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.569720][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.611493][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.627420][ T5805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.638471][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.657682][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.664787][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.726011][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.750082][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.772429][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.779522][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.790627][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.805522][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.821634][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.828750][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.958529][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.979324][ T5823] veth0_vlan: entered promiscuous mode [ 62.991101][ T5816] veth0_vlan: entered promiscuous mode [ 63.027458][ T5823] veth1_vlan: entered promiscuous mode [ 63.037213][ T5816] veth1_vlan: entered promiscuous mode [ 63.096500][ T5805] veth0_vlan: entered promiscuous mode [ 63.108477][ T5805] veth1_vlan: entered promiscuous mode [ 63.120245][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.158971][ T5823] veth0_macvtap: entered promiscuous mode [ 63.181095][ T5823] veth1_macvtap: entered promiscuous mode [ 63.213963][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.226935][ T5816] veth0_macvtap: entered promiscuous mode [ 63.240254][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.252284][ T5805] veth0_macvtap: entered promiscuous mode [ 63.265070][ T5816] veth1_macvtap: entered promiscuous mode [ 63.283887][ T5805] veth1_macvtap: entered promiscuous mode [ 63.300622][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.352176][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.367926][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.379743][ T177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.385092][ T52] Bluetooth: hci0: command tx timeout [ 63.389853][ T5819] Bluetooth: hci3: command tx timeout [ 63.393770][ T52] Bluetooth: hci2: command tx timeout [ 63.399162][ T5133] Bluetooth: hci1: command tx timeout [ 63.399528][ T177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.420490][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.429200][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.443889][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.460553][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.469639][ T52] Bluetooth: hci4: command tx timeout [ 63.469648][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.487941][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.505786][ T177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.516012][ T177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.530766][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.550015][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.559431][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.583211][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.605902][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.616725][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.683246][ T5808] veth0_vlan: entered promiscuous mode [ 63.698415][ T5807] veth0_vlan: entered promiscuous mode [ 63.707120][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.711084][ T5808] veth1_vlan: entered promiscuous mode [ 63.722863][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.752333][ T30] audit: type=1400 audit(1761722832.884:87): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.60yb5I/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.774350][ T5807] veth1_vlan: entered promiscuous mode [ 63.778353][ T30] audit: type=1400 audit(1761722832.884:88): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.786500][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.814077][ T5808] veth0_macvtap: entered promiscuous mode [ 63.835483][ T30] audit: type=1400 audit(1761722832.884:89): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.60yb5I/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.836726][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.868636][ T30] audit: type=1400 audit(1761722832.884:90): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.868668][ T30] audit: type=1400 audit(1761722832.884:91): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.60yb5I/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.868698][ T30] audit: type=1400 audit(1761722832.884:92): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.60yb5I/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.868729][ T30] audit: type=1400 audit(1761722832.884:93): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.868758][ T30] audit: type=1400 audit(1761722832.964:94): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.868786][ T30] audit: type=1400 audit(1761722832.964:95): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="gadgetfs" ino=7781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.885022][ T5807] veth0_macvtap: entered promiscuous mode [ 64.020578][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.027812][ T5808] veth1_macvtap: entered promiscuous mode [ 64.053564][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.063505][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.077564][ T5807] veth1_macvtap: entered promiscuous mode [ 64.098282][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.141150][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.162853][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.176769][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.185215][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.217900][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.229576][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.250276][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.258730][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.258996][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.289167][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.305161][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.350978][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.375314][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.526703][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.727022][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.779250][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 64.837008][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.855716][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.961508][ T5925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.979648][ T5925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.043751][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.077294][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.098042][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.119374][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.128020][ T5924] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.153289][ T5932] FAULT_INJECTION: forcing a failure. [ 65.153289][ T5932] name failslab, interval 1, probability 0, space 0, times 1 [ 65.194516][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 65.194535][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.194545][ T5932] Call Trace: [ 65.194550][ T5932] [ 65.194556][ T5932] dump_stack_lvl+0x16c/0x1f0 [ 65.194584][ T5932] should_fail_ex+0x512/0x640 [ 65.194603][ T5932] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 65.194631][ T5932] should_failslab+0xc2/0x120 [ 65.194650][ T5932] __kmalloc_node_noprof+0xe0/0x8a0 [ 65.194663][ T5932] ? alloc_slab_obj_exts+0x43/0xf0 [ 65.194686][ T5932] ? alloc_slab_obj_exts+0x43/0xf0 [ 65.194705][ T5932] alloc_slab_obj_exts+0x43/0xf0 [ 65.194727][ T5932] __memcg_slab_post_alloc_hook+0x251/0x940 [ 65.194751][ T5932] ? kasan_save_track+0x14/0x30 [ 65.194770][ T5932] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 65.194794][ T5932] ? selinux_socket_create+0xf1/0x540 [ 65.194813][ T5932] ? sock_alloc_inode+0x25/0x1c0 [ 65.194842][ T5932] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.194863][ T5932] ? sock_alloc_inode+0x25/0x1c0 [ 65.194884][ T5932] sock_alloc_inode+0x25/0x1c0 [ 65.194907][ T5932] alloc_inode+0x64/0x240 [ 65.194929][ T5932] sock_alloc+0x40/0x280 [ 65.194952][ T5932] __sock_create+0xc1/0x8d0 [ 65.194971][ T5932] __sys_socket+0x14d/0x260 [ 65.194987][ T5932] ? __pfx___sys_socket+0x10/0x10 [ 65.195001][ T5932] ? ksys_write+0x1ac/0x250 [ 65.195016][ T5932] ? __pfx_ksys_write+0x10/0x10 [ 65.195035][ T5932] __x64_sys_socket+0x72/0xb0 [ 65.195050][ T5932] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.195075][ T5932] do_syscall_64+0xcd/0xfa0 [ 65.195099][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.195114][ T5932] RIP: 0033:0x7fece038efc9 [ 65.195128][ T5932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.195142][ T5932] RSP: 002b:00007fece125f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 65.195156][ T5932] RAX: ffffffffffffffda RBX: 00007fece05e6090 RCX: 00007fece038efc9 [ 65.195166][ T5932] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000010 [ 65.195174][ T5932] RBP: 00007fece125f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.195183][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.195192][ T5932] R13: 00007fece05e6128 R14: 00007fece05e6090 R15: 00007fff1c64a238 [ 65.195215][ T5932] [ 65.503191][ T52] Bluetooth: hci3: command tx timeout [ 65.509411][ T52] Bluetooth: hci2: command tx timeout [ 65.515641][ T52] Bluetooth: hci1: command tx timeout [ 65.521099][ T52] Bluetooth: hci0: command tx timeout [ 65.547567][ T52] Bluetooth: hci4: command tx timeout [ 65.705052][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 65.713431][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.728423][ T5924] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=5f.0a [ 65.788137][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.802453][ T5924] usb 3-1: Product: syz [ 65.824628][ T5924] usb 3-1: Manufacturer: syz [ 65.840372][ T5924] usb 3-1: SerialNumber: syz [ 65.971346][ T5924] usb 3-1: config 0 descriptor?? [ 66.175135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.185075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.349466][ T5957] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.604338][ T5924] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.616996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.964051][ T5958] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.978546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.988046][ T5958] block device autoloading is deprecated and will be removed. [ 66.996618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.026976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.035714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.058809][ T890] usb 3-1: USB disconnect, device number 2 [ 67.158898][ T5924] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 67.171227][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.236771][ T5924] usb 5-1: Product: syz [ 67.245103][ T5924] usb 5-1: Manufacturer: syz [ 67.249701][ T5924] usb 5-1: SerialNumber: syz [ 67.264728][ T5924] usb 5-1: config 0 descriptor?? [ 67.284715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.446250][ T5973] process 'syz.0.13' launched './file0' with NULL argv: empty string added [ 67.455332][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 67.455344][ T30] audit: type=1400 audit(1761722836.564:159): avc: denied { create } for pid=5966 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.485811][ T30] audit: type=1400 audit(1761722836.564:160): avc: denied { create } for pid=5966 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.505684][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.544632][ T5811] Bluetooth: hci0: command tx timeout [ 67.550208][ T52] Bluetooth: hci1: command tx timeout [ 67.558932][ T5811] Bluetooth: hci2: command tx timeout [ 67.565156][ T5819] Bluetooth: hci3: command tx timeout [ 67.574453][ T30] audit: type=1400 audit(1761722836.584:161): avc: denied { execute } for pid=5966 comm="syz.0.13" name="file0" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.599547][ T30] audit: type=1400 audit(1761722836.644:162): avc: denied { execute_no_trans } for pid=5966 comm="syz.0.13" path="/1/file0" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.622719][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.629471][ T5819] Bluetooth: hci4: command tx timeout [ 67.691603][ T30] audit: type=1400 audit(1761722836.824:163): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.743526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.824369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 67.883834][ T30] audit: type=1400 audit(1761722837.004:164): avc: denied { create } for pid=5982 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.214991][ T30] audit: type=1400 audit(1761722837.164:165): avc: denied { connect } for pid=5980 comm="syz.2.15" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.442219][ T30] audit: type=1400 audit(1761722837.194:166): avc: denied { ioctl } for pid=5982 comm="syz.3.16" path="socket:[8611]" dev="sockfs" ino=8611 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.468793][ T30] audit: type=1400 audit(1761722837.574:167): avc: denied { create } for pid=5954 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.487838][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.509946][ T30] audit: type=1400 audit(1761722837.584:168): avc: denied { create } for pid=5954 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 68.854153][ T5924] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 68.927038][ T5924] asix 5-1:0.0: probe with driver asix failed with error -71 [ 68.957699][ T5924] usb 5-1: USB disconnect, device number 2 [ 69.936389][ T5819] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 70.401778][ T6006] syz.0.20 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.769937][ T6013] netlink: 96 bytes leftover after parsing attributes in process `syz.2.22'. [ 71.238291][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.246816][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.637508][ T6000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.852182][ T6022] 9pnet_fd: Insufficient options for proto=fd [ 72.452144][ T5819] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 74.649637][ T6071] Cannot find add_set index 65532 as target [ 74.689251][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 74.689278][ T30] audit: type=1400 audit(1761722843.784:185): avc: denied { write } for pid=6063 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.054379][ T5809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.137124][ T6075] 9pnet_fd: Insufficient options for proto=fd [ 75.294314][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 75.300678][ T5809] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 75.321219][ T5809] usb 5-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=69.50 [ 75.331689][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.349811][ T5809] usb 5-1: Product: syz [ 75.355346][ T5809] usb 5-1: Manufacturer: syz [ 75.373234][ T5809] usb 5-1: SerialNumber: syz [ 75.538309][ T5819] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 75.643688][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 75.659650][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'. [ 75.668615][ T6072] netlink: 'syz.4.40': attribute type 18 has an invalid length. [ 75.683915][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 75.692619][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'. [ 75.701457][ T6072] netlink: 'syz.4.40': attribute type 18 has an invalid length. [ 75.719380][ T1333] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.733025][ T1333] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.733189][ T1333] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.734159][ T1333] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.781446][ T30] audit: type=1400 audit(1761722844.914:186): avc: denied { read write } for pid=6087 comm="syz.2.45" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.781487][ T30] audit: type=1400 audit(1761722844.914:187): avc: denied { open } for pid=6087 comm="syz.2.45" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.781520][ T30] audit: type=1400 audit(1761722844.914:188): avc: denied { ioctl } for pid=6087 comm="syz.2.45" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.906945][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.130825][ T43] cfg80211: failed to load regulatory.db [ 77.505716][ T5809] gspca_main: tv8532-2.14.0 probing 0545:808b [ 77.641640][ T5809] usb 5-1: USB disconnect, device number 3 [ 78.928545][ T6126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.53'. [ 79.257966][ T6130] Cannot find add_set index 65532 as target [ 80.964397][ T30] audit: type=1400 audit(1761722850.004:189): avc: denied { name_bind } for pid=6131 comm="syz.4.56" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 81.017672][ T30] audit: type=1400 audit(1761722850.024:190): avc: denied { setopt } for pid=6131 comm="syz.4.56" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.121625][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 81.122258][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'. [ 81.404515][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'. [ 81.808518][ T980] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.086779][ T980] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 82.104457][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.118282][ T30] audit: type=1400 audit(1761722851.234:191): avc: denied { create } for pid=6157 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.123435][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.508730][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.529380][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.547275][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.561346][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.579112][ T6167] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.66'. [ 82.599572][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 82.623734][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.632653][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.941176][ T6168] netem: incorrect ge model size [ 82.946594][ T6168] netem: change failed [ 82.950848][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.971951][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.995187][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.014282][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.057368][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.080636][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.096494][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.106560][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.116661][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.135748][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.206138][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.216289][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.233126][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.298601][ T980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.314756][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.324434][ T5809] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.347937][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.372770][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.422013][ T980] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 83.433308][ T980] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 83.442659][ T980] usb 3-1: Product: syz [ 83.452762][ T980] usb 3-1: Manufacturer: syz [ 83.457853][ T980] usb 3-1: SerialNumber: syz [ 83.465283][ T43] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 83.474839][ T5809] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 83.475724][ T980] usb 3-1: config 0 descriptor?? [ 83.485239][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.504437][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.524094][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.544786][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.564345][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.565526][ T980] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 83.571011][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.589127][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.598253][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.609911][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.619900][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.631098][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.638785][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.651955][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.661921][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.671103][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.682854][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.693929][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.703963][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.735168][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.754285][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.772637][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.793382][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.807203][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.834905][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.842666][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.852199][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.864418][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.875001][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.887635][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.894446][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.902258][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.911649][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.920699][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.932442][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.943634][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.953285][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.961338][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.972184][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.992051][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.017679][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.066103][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.072837][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.109574][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.120007][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.141660][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.148636][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.184598][ T5809] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.194657][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.208714][ T5809] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.224482][ T5809] usb 5-1: Product: syz [ 84.228783][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.245088][ T5809] usb 5-1: Manufacturer: syz [ 84.249965][ T5809] usb 5-1: SerialNumber: syz [ 84.270664][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.287980][ T43] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.391601][ T5809] usb 5-1: config 0 descriptor?? [ 84.399601][ T43] usb 2-1: Product: syz [ 84.415329][ T43] usb 2-1: Manufacturer: syz [ 84.437643][ T5809] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 84.464994][ T43] usb 2-1: SerialNumber: syz [ 84.496126][ T43] usb 2-1: config 0 descriptor?? [ 84.525722][ T43] yurex 2-1:0.0: USB YUREX device now attached to Yurex #2 [ 84.552697][ T6162] syz.0.65 (6162): drop_caches: 1 [ 84.559711][ T6158] syz.3.64 (6158): drop_caches: 1 [ 84.684721][ T43] usb 3-1: USB disconnect, device number 3 [ 84.711941][ T43] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 84.979337][ T6180] Cannot find add_set index 65532 as target [ 85.004312][ T980] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.448137][ T30] audit: type=1400 audit(1761722854.554:192): avc: denied { write } for pid=6169 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.884697][ T980] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 85.899034][ T43] usb 2-1: USB disconnect, device number 2 [ 85.917208][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.920605][ T43] yurex 2-1:0.0: USB YUREX #2 now disconnected [ 85.942623][ T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.946228][ T6185] Zero length message leads to an empty skb [ 85.972237][ T5920] usb 5-1: USB disconnect, device number 4 [ 85.997301][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.005200][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.014760][ T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.028123][ T5920] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 86.121903][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.135959][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.144185][ T30] audit: type=1400 audit(1761722855.274:193): avc: denied { name_bind } for pid=6187 comm="syz.2.72" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.150350][ T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.630280][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.637865][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.646889][ T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.657776][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.666559][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.676693][ T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.730960][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.739992][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.749459][ T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.760539][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.769266][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.834016][ T30] audit: type=1400 audit(1761722855.804:194): avc: denied { create } for pid=6187 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 86.856508][ T30] audit: type=1400 audit(1761722855.954:195): avc: denied { write } for pid=6187 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.875817][ T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.875844][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.876782][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 86.909595][ T980] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 86.923173][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.031860][ T30] audit: type=1400 audit(1761722856.154:196): avc: denied { ioctl } for pid=6190 comm="syz.2.74" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.034345][ T980] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.166879][ T6195] macvlan2: entered allmulticast mode [ 87.172296][ T6195] veth1_vlan: entered allmulticast mode [ 87.214983][ T30] audit: type=1400 audit(1761722856.264:197): avc: denied { ioctl } for pid=6191 comm="syz.3.73" path="socket:[11301]" dev="sockfs" ino=11301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.525309][ T980] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.534032][ T980] usb 1-1: Product: syz [ 87.538211][ T980] usb 1-1: Manufacturer: syz [ 87.542795][ T980] usb 1-1: SerialNumber: syz [ 87.593664][ T980] usb 1-1: config 0 descriptor?? [ 87.630416][ T980] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 88.215849][ T980] usb 1-1: USB disconnect, device number 2 [ 88.563213][ T980] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 88.639568][ T6213] evm: overlay not supported [ 89.124378][ T980] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.166123][ T6216] syz.4.80 (6216): drop_caches: 1 [ 89.625993][ T980] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 89.632271][ T6216] syz.4.80 (6216): drop_caches: 1 [ 89.685499][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.710549][ T980] usb 1-1: Product: syz [ 89.720553][ T980] usb 1-1: Manufacturer: syz [ 89.737467][ T980] usb 1-1: SerialNumber: syz [ 89.757658][ T980] usb 1-1: config 0 descriptor?? [ 89.992167][ T6226] 9pnet_fd: Insufficient options for proto=fd [ 91.170820][ T30] audit: type=1400 audit(1761722860.294:198): avc: denied { getopt } for pid=6206 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 91.609917][ T30] audit: type=1400 audit(1761722860.414:199): avc: denied { read } for pid=6235 comm="syz.3.84" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.189392][ T30] audit: type=1400 audit(1761722860.414:200): avc: denied { open } for pid=6235 comm="syz.3.84" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.335100][ T6244] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.564814][ T6247] netlink: 'syz.4.86': attribute type 12 has an invalid length. [ 92.572515][ T6247] netlink: 'syz.4.86': attribute type 29 has an invalid length. [ 92.580236][ T6247] netlink: 148 bytes leftover after parsing attributes in process `syz.4.86'. [ 92.589461][ T6247] netlink: 59 bytes leftover after parsing attributes in process `syz.4.86'. [ 93.870030][ T30] audit: type=1400 audit(1761722863.004:201): avc: denied { create } for pid=6249 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 93.892487][ T6251] input: syz1 as /devices/virtual/input/input6 [ 93.903680][ T6253] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 93.912921][ T6253] netlink: 224 bytes leftover after parsing attributes in process `syz.1.88'. [ 94.161198][ T30] audit: type=1400 audit(1761722863.004:202): avc: denied { ioctl } for pid=6249 comm="syz.1.88" path="socket:[11528]" dev="sockfs" ino=11528 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.249674][ T30] audit: type=1400 audit(1761722863.054:203): avc: denied { read } for pid=5167 comm="acpid" name="event4" dev="devtmpfs" ino=2818 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.294524][ T30] audit: type=1400 audit(1761722863.064:204): avc: denied { open } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2818 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.408077][ T5818] udevd[5818]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 94.424117][ T30] audit: type=1400 audit(1761722863.074:205): avc: denied { ioctl } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2818 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.965267][ T30] audit: type=1400 audit(1761722864.094:206): avc: denied { read write } for pid=6258 comm="syz.3.90" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.359272][ T30] audit: type=1400 audit(1761722864.094:207): avc: denied { open } for pid=6258 comm="syz.3.90" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.653362][ T980] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 95.726657][ T980] asix 1-1:0.0: probe with driver asix failed with error -71 [ 96.055192][ T980] usb 1-1: USB disconnect, device number 3 [ 96.410509][ T6274] input: syz1 as /devices/virtual/input/input7 [ 96.966725][ T6284] input: syz1 as /devices/virtual/input/input8 [ 97.789090][ T6290] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 97.801265][ T6290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.98'. [ 97.909803][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 97.909812][ T30] audit: type=1400 audit(1761722867.034:209): avc: denied { execute } for pid=6286 comm="syz.1.97" name="file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.996632][ T30] audit: type=1400 audit(1761722867.074:210): avc: denied { execute_no_trans } for pid=6286 comm="syz.1.97" path="/21/file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.724280][ T5924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.404742][ T5924] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 100.422754][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.433165][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.454524][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.475318][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.486224][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.534264][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.547777][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.557603][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.650937][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.965352][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.021633][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.124446][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.168262][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.194356][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.373793][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.381677][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.390655][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.401757][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.415304][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.424178][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.924106][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.942227][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.955026][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.984362][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.994569][ T5924] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 102.003815][ T5924] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 102.012177][ T5924] usb 1-1: Product: syz [ 102.017566][ T5924] usb 1-1: Manufacturer: syz [ 102.024451][ T5924] usb 1-1: SerialNumber: syz [ 102.042858][ T5924] usb 1-1: config 0 descriptor?? [ 102.148355][ T5924] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.504663][ T980] usb 1-1: USB disconnect, device number 4 [ 102.534704][ T6336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.110'. [ 102.544895][ T980] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 102.706933][ T30] audit: type=1400 audit(1761722871.844:211): avc: denied { read write } for pid=6342 comm="syz.3.112" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.729880][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.759467][ T30] audit: type=1400 audit(1761722871.844:212): avc: denied { open } for pid=6342 comm="syz.3.112" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.003883][ T30] audit: type=1400 audit(1761722872.134:213): avc: denied { read write } for pid=6347 comm="syz.1.114" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.027355][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.194271][ T30] audit: type=1400 audit(1761722872.134:214): avc: denied { open } for pid=6347 comm="syz.1.114" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.511992][ T30] audit: type=1400 audit(1761722872.184:215): avc: denied { read write } for pid=6342 comm="syz.3.112" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.569003][ T30] audit: type=1400 audit(1761722872.194:216): avc: denied { open } for pid=6342 comm="syz.3.112" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.593952][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.709089][ T30] audit: type=1400 audit(1761722872.844:217): avc: denied { ioctl } for pid=6362 comm="syz-executor" path="socket:[12103]" dev="sockfs" ino=12103 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.776837][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 103.785039][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.795108][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.802883][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.815655][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.928552][ T30] audit: type=1400 audit(1761722873.064:218): avc: denied { mounton } for pid=6362 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 105.539297][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 105.713045][ T6389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.122'. [ 105.844246][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.944752][ T5811] Bluetooth: hci5: command tx timeout [ 106.082946][ T5890] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 106.099108][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.126220][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.165343][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.207831][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.217124][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.228147][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.237596][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.247933][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.258956][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.268882][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.278508][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.310163][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.540656][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.559818][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.571185][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.578970][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.620320][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.661091][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.679427][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.688899][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.699894][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.707664][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.724351][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.754572][ T6362] bridge_slave_0: entered allmulticast mode [ 106.996114][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.005059][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.059763][ T6362] bridge_slave_0: entered promiscuous mode [ 107.071709][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.074240][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.079088][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.093519][ T6362] bridge_slave_1: entered allmulticast mode [ 107.125031][ T6362] bridge_slave_1: entered promiscuous mode [ 107.197948][ T5890] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 107.211299][ T5890] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 107.220017][ T5890] usb 2-1: Product: syz [ 107.224979][ T5890] usb 2-1: Manufacturer: syz [ 107.229645][ T5890] usb 2-1: SerialNumber: syz [ 107.265564][ T5890] usb 2-1: config 0 descriptor?? [ 107.287712][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.298381][ T5890] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 107.315354][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.984986][ T6362] team0: Port device team_slave_0 added [ 108.007003][ T6362] team0: Port device team_slave_1 added [ 108.116620][ T5811] Bluetooth: hci5: command tx timeout [ 108.483028][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.512509][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.556088][ T9] usb 2-1: USB disconnect, device number 3 [ 108.588010][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 108.643394][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.671340][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.699024][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.724917][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.818347][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.843246][ T30] audit: type=1400 audit(1761722877.974:219): avc: denied { listen } for pid=6417 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 108.961908][ T30] audit: type=1400 audit(1761722878.014:220): avc: denied { accept } for pid=6417 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.316881][ T6362] hsr_slave_0: entered promiscuous mode [ 109.355523][ T6362] hsr_slave_1: entered promiscuous mode [ 109.371165][ T6362] debugfs: 'hsr0' already exists in 'hsr' [ 109.384367][ T6362] Cannot create hsr debugfs directory [ 110.184480][ T5811] Bluetooth: hci5: command tx timeout [ 110.937442][ T30] audit: type=1400 audit(1761722880.064:221): avc: denied { ioctl } for pid=6442 comm="syz.3.135" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13420 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.938499][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.134'. [ 110.963284][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.916477][ T6362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.056007][ T6362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.254076][ T6458] Cannot find add_set index 65532 as target [ 112.304650][ T5811] Bluetooth: hci5: command tx timeout [ 112.409263][ T6362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.497058][ T6362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.617687][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.652629][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.688737][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.695897][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.724516][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.801127][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.808281][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.945192][ T5920] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 112.963888][ T30] audit: type=1400 audit(1761722882.094:222): avc: denied { sys_module } for pid=6362 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.987695][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.006580][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.035030][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.332224][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.356326][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.386972][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.404250][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.418268][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.500624][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.524106][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.551891][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.560228][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.601503][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.622107][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.641485][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.662606][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.673846][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.694276][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.765228][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.786198][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.873433][ T6490] input: syz1 as /devices/virtual/input/input12 [ 114.249782][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.274255][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.290680][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.324281][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.364547][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.395493][ T5920] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 114.404658][ T5920] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 114.413003][ T5920] usb 4-1: Product: syz [ 114.444256][ T5920] usb 4-1: Manufacturer: syz [ 114.448888][ T5920] usb 4-1: SerialNumber: syz [ 114.476650][ T5920] usb 4-1: config 0 descriptor?? [ 114.497591][ T5920] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 114.656688][ T6494] input: syz1 as /devices/virtual/input/input13 [ 114.702790][ T6362] veth0_vlan: entered promiscuous mode [ 115.006707][ T6362] veth1_vlan: entered promiscuous mode [ 115.197726][ T6362] veth0_macvtap: entered promiscuous mode [ 115.236957][ T6362] veth1_macvtap: entered promiscuous mode [ 115.243911][ T5920] usb 4-1: USB disconnect, device number 2 [ 115.561022][ T5920] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 115.580722][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.147'. [ 115.589756][ T30] audit: type=1400 audit(1761722884.714:223): avc: denied { create } for pid=6505 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.617114][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.646271][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.663705][ T30] audit: type=1400 audit(1761722884.714:224): avc: denied { ioctl } for pid=6505 comm="syz.1.147" path="socket:[13704]" dev="sockfs" ino=13704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.695652][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.738735][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.749827][ T30] audit: type=1400 audit(1761722884.714:225): avc: denied { bind } for pid=6505 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.799818][ T30] audit: type=1400 audit(1761722884.764:226): avc: denied { connect } for pid=6505 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.881143][ T30] audit: type=1400 audit(1761722884.774:227): avc: denied { write } for pid=6505 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.009461][ T6378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.064860][ T6378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.265229][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.277561][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.314340][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.787882][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 116.808419][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.827218][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.880613][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.887660][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.898848][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.912239][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.947642][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.954238][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.961766][ T30] audit: type=1400 audit(1761722886.094:228): avc: denied { mount } for pid=6362 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.014350][ T30] audit: type=1400 audit(1761722886.124:229): avc: denied { mount } for pid=6362 comm="syz-executor" name="/" dev="gadgetfs" ino=7781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 117.038368][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.047606][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.059423][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.068294][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.082011][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.093049][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.102339][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.122940][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.140774][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.150228][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.159882][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.174412][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.181966][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.194357][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.226692][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.358960][ T5809] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 117.396957][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.496453][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.520742][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.552113][ T5809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 117.552959][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 117.653939][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.751042][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 117.770106][ T5809] usb 2-1: Product: syz [ 117.788741][ T5809] usb 2-1: Manufacturer: syz [ 117.811739][ T5809] usb 2-1: SerialNumber: syz [ 117.884329][ T9] usb 4-1: Product: syz [ 117.884665][ T5809] usb 2-1: config 0 descriptor?? [ 117.888498][ T9] usb 4-1: Manufacturer: syz [ 117.888514][ T9] usb 4-1: SerialNumber: syz [ 117.893097][ T9] usb 4-1: config 0 descriptor?? [ 118.206973][ T5809] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.426044][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 118.538270][ T6534] Cannot find add_set index 65532 as target [ 119.390895][ T43] usb 4-1: USB disconnect, device number 3 [ 119.407532][ T43] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 119.631580][ T6543] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 119.639422][ T6543] netlink: 224 bytes leftover after parsing attributes in process `syz.4.156'. [ 120.300462][ T5809] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 120.337198][ T5809] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 120.378070][ T5809] usb 2-1: media controller created [ 120.452119][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.554378][ T5920] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.679442][ T5809] i2c i2c-1: Added multiplexed i2c bus 2 [ 120.712326][ T5920] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 120.727277][ T5809] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 120.742531][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.752670][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.769474][ T5809] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 120.793110][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.834784][ T5809] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 120.860257][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.874156][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.914742][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.932740][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.941805][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.184050][ T6563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.161'. [ 121.221284][ T5809] DVB: Unable to find symbol r820t_attach() [ 121.225688][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.239435][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.248533][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.263802][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.290874][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.301579][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.630691][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.656819][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.676618][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.719038][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.747221][ T5809] usb 2-1: USB disconnect, device number 4 [ 121.771821][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.790980][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.844347][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.876614][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.308597][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.334823][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.475521][ T5920] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 122.803819][ T5920] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 122.817635][ T5920] usb 4-1: Product: syz [ 122.821802][ T5920] usb 4-1: Manufacturer: syz [ 122.826670][ T5920] usb 4-1: SerialNumber: syz [ 122.870319][ T5920] usb 4-1: config 0 descriptor?? [ 122.884736][ T5920] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.193644][ T6581] netlink: 'syz.1.164': attribute type 12 has an invalid length. [ 123.201487][ T6581] netlink: 'syz.1.164': attribute type 29 has an invalid length. [ 123.209251][ T6581] netlink: 148 bytes leftover after parsing attributes in process `syz.1.164'. [ 123.218249][ T6581] netlink: 59 bytes leftover after parsing attributes in process `syz.1.164'. [ 124.907739][ T9] usb 4-1: USB disconnect, device number 4 [ 124.937707][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 125.522942][ T6601] Cannot find add_set index 65532 as target [ 126.138302][ T6610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 126.615926][ T6612] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.649061][ T6612] block device autoloading is deprecated and will be removed. [ 128.060293][ T6623] input: syz1 as /devices/virtual/input/input14 [ 129.129265][ T6635] trusted_key: encrypted_key: insufficient parameters specified [ 129.631097][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.925680][ T5809] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.957268][ T43] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 129.970239][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.399902][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.433954][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.444294][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 130.457874][ T5809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.472976][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.503738][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.534120][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.542168][ T5809] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=5f.0a [ 130.552552][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.561667][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.577784][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.591798][ T5809] usb 5-1: Product: syz [ 130.596074][ T5809] usb 5-1: Manufacturer: syz [ 130.600787][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.613274][ T5809] usb 5-1: SerialNumber: syz [ 130.624148][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.639594][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.651079][ T5809] usb 5-1: config 0 descriptor?? [ 130.656227][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.735777][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.786451][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.903106][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.930503][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.961516][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.961544][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.963061][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.963097][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.963119][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.968513][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.113018][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.130856][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.131633][ T30] audit: type=1400 audit(1761722900.244:230): avc: denied { ioctl } for pid=6638 comm="syz.4.181" path="/42/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 131.170056][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 131.385541][ T43] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 131.391607][ T9] usb 5-1: USB disconnect, device number 5 [ 131.393907][ T43] usb 4-1: Product: syz [ 131.404636][ T43] usb 4-1: Manufacturer: syz [ 131.854236][ T43] usb 4-1: SerialNumber: syz [ 131.881862][ T43] usb 4-1: config 0 descriptor?? [ 131.899587][ T43] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 132.433118][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.614432][ T6668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.189'. [ 133.056022][ T43] usb 4-1: USB disconnect, device number 5 [ 133.083497][ T43] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 133.350703][ T6674] netlink: 'syz.5.190': attribute type 12 has an invalid length. [ 133.358525][ T6674] netlink: 'syz.5.190': attribute type 29 has an invalid length. [ 133.366290][ T6674] netlink: 148 bytes leftover after parsing attributes in process `syz.5.190'. [ 133.375301][ T6674] netlink: 59 bytes leftover after parsing attributes in process `syz.5.190'. [ 135.418483][ T6686] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 135.426305][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.195'. [ 135.620245][ T6692] Cannot find add_set index 65532 as target [ 137.098267][ T6708] netlink: 'syz.5.199': attribute type 1 has an invalid length. [ 137.106033][ T6708] netlink: 224 bytes leftover after parsing attributes in process `syz.5.199'. [ 138.314137][ T6718] syz.0.203 (6718): drop_caches: 1 [ 138.733123][ T6731] netlink: 'syz.3.205': attribute type 12 has an invalid length. [ 138.741036][ T6731] netlink: 'syz.3.205': attribute type 29 has an invalid length. [ 138.748980][ T6731] netlink: 148 bytes leftover after parsing attributes in process `syz.3.205'. [ 138.757979][ T6731] netlink: 59 bytes leftover after parsing attributes in process `syz.3.205'. [ 140.399216][ T6718] syz.0.203 (6718): drop_caches: 1 [ 143.071418][ T6776] netlink: 'syz.0.216': attribute type 12 has an invalid length. [ 143.079218][ T6776] netlink: 'syz.0.216': attribute type 29 has an invalid length. [ 143.087004][ T6776] netlink: 148 bytes leftover after parsing attributes in process `syz.0.216'. [ 143.096003][ T6776] netlink: 59 bytes leftover after parsing attributes in process `syz.0.216'. [ 143.947682][ T6771] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 143.957823][ T6771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.215'. [ 144.502420][ T30] audit: type=1400 audit(1761722913.534:231): avc: denied { ioctl } for pid=6780 comm="syz.4.221" path="socket:[15859]" dev="sockfs" ino=15859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.037972][ T5811] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 145.600206][ T5924] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.842948][ T5924] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 146.028370][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.042419][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.261014][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.398967][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.528736][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.681694][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.804685][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.896275][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.961729][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.097341][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.127620][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.139898][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.167223][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.180664][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.203289][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.354517][ T6813] Cannot find add_set index 65532 as target [ 147.414775][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.424735][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.479638][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.487309][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.496486][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.508762][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.517911][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.527388][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.552913][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.578783][ T5811] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 147.590675][ T5924] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 147.658338][ T6823] trusted_key: encrypted_key: insufficient parameters specified [ 147.676453][ T5924] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 147.699514][ T5924] usb 4-1: Product: syz [ 147.712590][ T5924] usb 4-1: Manufacturer: syz [ 147.724083][ T5924] usb 4-1: SerialNumber: syz [ 147.732954][ T5924] usb 4-1: config 0 descriptor?? [ 147.752041][ T5924] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 148.463569][ T5924] usb 4-1: USB disconnect, device number 6 [ 148.615670][ T5924] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 149.280565][ T6841] 9pnet_fd: Insufficient options for proto=fd [ 150.313257][ T6860] Cannot find add_set index 65532 as target [ 150.511856][ T5811] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 150.544445][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 150.956534][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 150.966198][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.995873][ T9] usb 2-1: Product: syz [ 151.000049][ T9] usb 2-1: Manufacturer: syz [ 151.004952][ T9] usb 2-1: SerialNumber: syz [ 151.026333][ T9] usb 2-1: config 0 descriptor?? [ 151.128347][ T6870] syz.3.248 (6870): drop_caches: 1 [ 151.268715][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 152.172710][ T6870] syz.3.248 (6870): drop_caches: 1 [ 152.604024][ T6887] 9pnet_fd: Insufficient options for proto=fd [ 153.244094][ T6893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.253'. [ 153.330949][ T9] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 153.370860][ T9] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 153.407092][ T9] usb 2-1: media controller created [ 153.466537][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.557893][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.254'. [ 154.371394][ T6912] Cannot find add_set index 65532 as target [ 155.026895][ T9] i2c i2c-1: Added multiplexed i2c bus 2 [ 155.032570][ T9] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 155.315179][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 155.324164][ T9] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 155.756093][ T9] DVB: Unable to find symbol r820t_attach() [ 156.332578][ T9] usb 2-1: USB disconnect, device number 5 [ 158.387679][ T6957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'. [ 158.907705][ T6965] netlink: 'syz.1.263': attribute type 12 has an invalid length. [ 158.932110][ T6965] netlink: 'syz.1.263': attribute type 29 has an invalid length. [ 159.011318][ T6965] netlink: 148 bytes leftover after parsing attributes in process `syz.1.263'. [ 159.024268][ T6965] netlink: 59 bytes leftover after parsing attributes in process `syz.1.263'. [ 159.092699][ T6968] trusted_key: encrypted_key: insufficient parameters specified [ 159.707632][ T890] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 159.946424][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 159.997232][ T890] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.008829][ T890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.062590][ T890] usb 6-1: Product: syz [ 160.074212][ T890] usb 6-1: Manufacturer: syz [ 160.078827][ T890] usb 6-1: SerialNumber: syz [ 160.154273][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 160.159847][ T890] usb 6-1: config 0 descriptor?? [ 160.175392][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.208050][ T9] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=5f.0a [ 160.229992][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.254220][ T9] usb 5-1: Product: syz [ 160.291467][ T9] usb 5-1: Manufacturer: syz [ 160.314925][ T9] usb 5-1: SerialNumber: syz [ 160.352581][ T9] usb 5-1: config 0 descriptor?? [ 160.398687][ T890] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.724404][ T6977] md: array md2 already initialised! [ 160.776982][ T5890] usb 5-1: USB disconnect, device number 6 [ 162.165677][ T890] usb 6-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 162.215053][ T890] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 162.240372][ T890] usb 6-1: media controller created [ 162.273950][ T890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.656950][ T890] i2c i2c-1: Added multiplexed i2c bus 2 [ 162.662640][ T890] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 162.751781][ T7006] 9pnet_fd: Insufficient options for proto=fd [ 162.864997][ T890] usb 6-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 162.905441][ T890] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 162.985694][ T7011] 9pnet_fd: Insufficient options for proto=fd [ 163.371084][ T890] DVB: Unable to find symbol r820t_attach() [ 163.882444][ T890] usb 6-1: USB disconnect, device number 2 [ 164.249542][ T5811] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 164.760869][ T7038] input: syz1 as /devices/virtual/input/input19 [ 167.074792][ T7070] 9pnet_fd: Insufficient options for proto=fd [ 167.517824][ T5811] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 167.597456][ T7072] syz.3.297 (7072): drop_caches: 1 [ 167.654649][ T7076] syz.0.299 (7076): drop_caches: 1 [ 167.769465][ T7076] syz.0.299 (7076): drop_caches: 1 [ 168.038688][ T7072] syz.3.297 (7072): drop_caches: 1 [ 168.334365][ T7086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.301'. [ 168.639031][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'. [ 169.565960][ T7104] fuse: Bad value for 'fd' [ 171.227553][ T7115] 9pnet_fd: Insufficient options for proto=fd [ 171.376334][ T5811] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 173.089546][ T7137] syz.3.316 (7137): drop_caches: 1 [ 173.360561][ T7137] syz.3.316 (7137): drop_caches: 1 [ 175.493279][ T7157] syz.3.321 (7157): drop_caches: 1 [ 175.524477][ T7166] Cannot find add_set index 65532 as target [ 175.734743][ T7170] 9pnet_fd: Insufficient options for proto=fd [ 176.323872][ T7176] netlink: 'syz.4.325': attribute type 12 has an invalid length. [ 176.331691][ T7176] netlink: 'syz.4.325': attribute type 29 has an invalid length. [ 176.339467][ T7176] netlink: 148 bytes leftover after parsing attributes in process `syz.4.325'. [ 176.348464][ T7176] netlink: 59 bytes leftover after parsing attributes in process `syz.4.325'. [ 177.314549][ T7157] syz.3.321 (7157): drop_caches: 1 [ 178.235494][ T5811] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 178.892250][ T7189] syz.4.330 (7189): drop_caches: 1 [ 179.753927][ T7189] syz.4.330 (7189): drop_caches: 1 [ 179.949506][ T7188] syz.3.329 (7188): drop_caches: 1 [ 180.265663][ T7206] fuse: Bad value for 'fd' [ 181.156379][ T7215] 9pnet_fd: Insufficient options for proto=fd [ 181.972758][ T7229] Cannot find add_set index 65532 as target [ 182.368776][ T5811] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 182.664332][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 183.444246][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 183.595792][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.633424][ T43] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=5f.0a [ 183.662116][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.749623][ T43] usb 6-1: Product: syz [ 183.774240][ T43] usb 6-1: Manufacturer: syz [ 183.790755][ T43] usb 6-1: SerialNumber: syz [ 183.808988][ T43] usb 6-1: config 0 descriptor?? [ 185.554313][ T7231] md: array md2 already initialised! [ 185.682989][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 185.690544][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 185.697836][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 185.703885][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 185.704239][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 185.751946][ T890] usb 6-1: USB disconnect, device number 3 [ 186.420278][ T7268] 9pnet_fd: Insufficient options for proto=fd [ 188.646675][ T7293] netlink: 'syz.0.354': attribute type 1 has an invalid length. [ 188.654897][ T7293] netlink: 224 bytes leftover after parsing attributes in process `syz.0.354'. [ 188.973544][ T7299] Cannot find add_set index 65532 as target [ 189.404289][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.644253][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 189.680194][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.728601][ T9] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=5f.0a [ 190.384338][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.392357][ T9] usb 5-1: Product: syz [ 190.396786][ T9] usb 5-1: Manufacturer: syz [ 190.402033][ T9] usb 5-1: SerialNumber: syz [ 190.412190][ T9] usb 5-1: config 0 descriptor?? [ 191.167015][ T7297] md: array md2 already initialised! [ 191.243151][ T9] usb 5-1: USB disconnect, device number 7 [ 192.938281][ T7324] syz.1.366 (7324): drop_caches: 1 [ 193.074367][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 193.306036][ T7324] syz.1.366 (7324): drop_caches: 1 [ 194.022360][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.033544][ T43] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 194.040265][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.040309][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.040335][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.041391][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.041429][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.041454][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.042513][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.042552][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.042577][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.043705][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.043743][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.043767][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.044917][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.044956][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.044980][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.045829][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.045857][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.045870][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.046652][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.046686][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.046704][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.047468][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.047501][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.047521][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.160154][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 194.160171][ T43] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 194.160182][ T43] usb 5-1: Product: syz [ 194.160190][ T43] usb 5-1: Manufacturer: syz [ 194.160199][ T43] usb 5-1: SerialNumber: syz [ 194.161322][ T43] usb 5-1: config 0 descriptor?? [ 194.166397][ T43] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 194.447699][ T7344] Cannot find add_set index 65532 as target [ 195.385553][ T43] usb 5-1: USB disconnect, device number 8 [ 195.386596][ T43] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 198.513455][ T7373] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 198.521182][ T7373] netlink: 224 bytes leftover after parsing attributes in process `syz.3.377'. [ 199.050896][ T5809] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 199.115829][ T7385] Cannot find add_set index 65532 as target [ 199.208222][ T5809] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 199.428702][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.598590][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.664904][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 199.831107][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.894596][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.949819][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 199.978004][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.216024][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.325888][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.353205][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.440814][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.478692][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.530293][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.572940][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.736819][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.212895][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.227424][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.249748][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.263522][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.272439][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.285632][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.348871][ T5809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.478480][ T5809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.498149][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.811384][ T5809] usb 5-1: string descriptor 0 read error: -71 [ 201.848049][ T5809] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 201.894283][ T5809] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 202.268517][ T5809] usb 5-1: config 0 descriptor?? [ 202.287473][ T5809] usb 5-1: can't set config #0, error -71 [ 202.358247][ T5809] usb 5-1: USB disconnect, device number 9 [ 202.370586][ T7407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.388'. [ 203.382694][ T7421] input: syz1 as /devices/virtual/input/input22 [ 204.282595][ T7430] Cannot find add_set index 65532 as target [ 206.721190][ T7453] FAULT_INJECTION: forcing a failure. [ 206.721190][ T7453] name failslab, interval 1, probability 0, space 0, times 0 [ 206.804237][ T7453] CPU: 1 UID: 0 PID: 7453 Comm: syz.4.399 Not tainted syzkaller #0 PREEMPT(full) [ 206.804259][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.804269][ T7453] Call Trace: [ 206.804275][ T7453] [ 206.804282][ T7453] dump_stack_lvl+0x16c/0x1f0 [ 206.804312][ T7453] should_fail_ex+0x512/0x640 [ 206.804332][ T7453] ? __kmalloc_cache_noprof+0x5f/0x780 [ 206.804359][ T7453] should_failslab+0xc2/0x120 [ 206.804379][ T7453] __kmalloc_cache_noprof+0x72/0x780 [ 206.804401][ T7453] ? __pfx_find_ucounts+0x10/0x10 [ 206.804425][ T7453] ? alloc_ucounts+0x13d/0x440 [ 206.804458][ T7453] ? alloc_ucounts+0x13d/0x440 [ 206.804482][ T7453] alloc_ucounts+0x13d/0x440 [ 206.804505][ T7453] ? __pfx_alloc_ucounts+0x10/0x10 [ 206.804537][ T7453] set_cred_ucounts+0xcd/0x200 [ 206.804556][ T7453] __sys_setuid+0x2b6/0x440 [ 206.804577][ T7453] do_syscall_64+0xcd/0xfa0 [ 206.804604][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.804620][ T7453] RIP: 0033:0x7fcda878efc9 [ 206.804634][ T7453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.804650][ T7453] RSP: 002b:00007fcda964f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 206.804666][ T7453] RAX: ffffffffffffffda RBX: 00007fcda89e5fa0 RCX: 00007fcda878efc9 [ 206.804676][ T7453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 206.804686][ T7453] RBP: 00007fcda964f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.804696][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.804706][ T7453] R13: 00007fcda89e6038 R14: 00007fcda89e5fa0 R15: 00007fff5ea05ed8 [ 206.804729][ T7453] [ 206.982636][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.656720][ T7473] input: syz1 as /devices/virtual/input/input23 [ 208.057233][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.403'. [ 208.231011][ T30] audit: type=1400 audit(1761722977.364:232): avc: denied { setopt } for pid=7465 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.969101][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 209.428248][ T5920] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 209.463057][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.695281][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.734687][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.863569][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.925754][ T7496] Cannot find add_set index 65532 as target [ 210.367418][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.437479][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.471017][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.553043][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.605552][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.641563][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.664528][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.714510][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.751574][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.865959][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.894200][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.929100][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.946743][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.004199][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 211.019669][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.044463][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.105989][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 211.193690][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.218014][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.323416][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 211.368003][ T5920] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 211.400418][ T5920] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 211.510348][ T5920] usb 4-1: Product: syz [ 211.551041][ T5920] usb 4-1: Manufacturer: syz [ 211.567048][ T5920] usb 4-1: SerialNumber: syz [ 211.661884][ T5920] usb 4-1: config 0 descriptor?? [ 211.824587][ T5920] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 212.389954][ T5920] usb 4-1: USB disconnect, device number 7 [ 212.397658][ T5920] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 214.223196][ T7518] netlink: 'syz.1.416': attribute type 12 has an invalid length. [ 214.238342][ T7518] netlink: 'syz.1.416': attribute type 29 has an invalid length. [ 214.256414][ T7518] netlink: 148 bytes leftover after parsing attributes in process `syz.1.416'. [ 214.295580][ T7518] netlink: 59 bytes leftover after parsing attributes in process `syz.1.416'. [ 215.824908][ T30] audit: type=1326 audit(1761722984.814:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 216.237218][ T30] audit: type=1326 audit(1761722984.814:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 216.397842][ T30] audit: type=1326 audit(1761722984.814:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 216.544236][ T30] audit: type=1326 audit(1761722984.814:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 216.704242][ T30] audit: type=1326 audit(1761722984.814:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 216.839339][ T30] audit: type=1326 audit(1761722984.824:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 216.962675][ T7566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.429'. [ 217.071035][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 217.104265][ T30] audit: type=1326 audit(1761722984.824:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 217.565136][ T30] audit: type=1326 audit(1761722984.824:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4a098d810 code=0x7ffc0000 [ 217.588353][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.613662][ T30] audit: type=1326 audit(1761722984.824:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 217.636896][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.643736][ T30] audit: type=1326 audit(1761722984.824:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4a098efc9 code=0x7ffc0000 [ 217.674483][ T43] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 217.687470][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.697337][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.708652][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.717312][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.726477][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.749434][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.757172][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.774328][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.794234][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.899214][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.913526][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.959986][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.140260][ T7570] syz.4.430 (7570): drop_caches: 1 [ 218.164285][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.204362][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.234267][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.255240][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.265057][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.296613][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.318955][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.459076][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.571460][ T7570] syz.4.430 (7570): drop_caches: 1 [ 218.642449][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.674355][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 218.684706][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.730018][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.846316][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 218.874040][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.882969][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.894333][ T43] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.902685][ T43] usb 4-1: Product: syz [ 218.908185][ T43] usb 4-1: Manufacturer: syz [ 218.917209][ T43] usb 4-1: SerialNumber: syz [ 218.917770][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.934750][ T43] usb 4-1: config 0 descriptor?? [ 218.946184][ T9] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=5f.0a [ 218.977489][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.372168][ T43] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 219.854414][ T9] usb 6-1: Product: syz [ 219.858944][ T9] usb 6-1: Manufacturer: syz [ 219.863532][ T9] usb 6-1: SerialNumber: syz [ 219.900379][ T9] usb 6-1: config 0 descriptor?? [ 220.043601][ T43] usb 4-1: USB disconnect, device number 8 [ 220.069224][ T43] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 220.541725][ T7575] md: array md2 already initialised! [ 221.261138][ T7596] Cannot find add_set index 65532 as target [ 222.112644][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 222.112773][ T30] audit: type=1400 audit(1761722991.244:247): avc: denied { append } for pid=7603 comm="syz.0.438" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 222.876143][ T24] usb 6-1: USB disconnect, device number 4 [ 222.935757][ T7609] Cannot find add_set index 65532 as target [ 223.891873][ T7611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.440'. [ 225.504935][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.994872][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 226.003531][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.012522][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.168338][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.224754][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.244408][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.277920][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.326722][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.344417][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.375030][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.437228][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.478031][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.526310][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.564224][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.590911][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 226.603920][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.615144][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.622859][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.632029][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.643300][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.656795][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.774621][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.895553][ T7647] input: syz1 as /devices/virtual/input/input25 [ 227.247291][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.280795][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.320855][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 227.352119][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.186013][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.259385][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.361183][ T9] usb 4-1: Product: syz [ 228.374688][ T9] usb 4-1: Manufacturer: syz [ 228.379537][ T9] usb 4-1: SerialNumber: syz [ 228.396726][ T9] usb 4-1: config 0 descriptor?? [ 228.412330][ T9] usb 4-1: can't set config #0, error -71 [ 228.437764][ T9] usb 4-1: USB disconnect, device number 9 [ 228.841762][ T7663] input: syz1 as /devices/virtual/input/input26 [ 229.359816][ T7661] Cannot find add_set index 65532 as target [ 230.168700][ T7657] syz.3.453 (7657): drop_caches: 1 [ 230.458664][ T7669] 9pnet_fd: Insufficient options for proto=fd [ 230.533190][ T7657] syz.3.453 (7657): drop_caches: 1 [ 231.164460][ T5809] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 231.595363][ T5809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.614218][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.644360][ T5809] usb 2-1: Product: syz [ 231.648880][ T5809] usb 2-1: Manufacturer: syz [ 231.653472][ T5809] usb 2-1: SerialNumber: syz [ 231.705035][ T5809] usb 2-1: config 0 descriptor?? [ 231.927058][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.459'. [ 231.958008][ T5809] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.104904][ T5811] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 232.160484][ T30] audit: type=1400 audit(1761723001.294:248): avc: denied { ioctl } for pid=7687 comm="syz.0.460" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 232.289958][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 232.297580][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 232.624607][ T9] libceph: connect (1)[c::]:6789 error -101 [ 232.639846][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 232.874392][ T7688] ceph: No mds server is up or the cluster is laggy [ 233.256080][ T7703] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 233.263850][ T7703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.464'. [ 233.723009][ T5809] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 234.508726][ T5809] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 234.612677][ T5809] usb 2-1: media controller created [ 234.641240][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.865498][ T7714] 9pnet_fd: Insufficient options for proto=fd [ 235.191998][ T5809] i2c i2c-1: Added multiplexed i2c bus 2 [ 235.310755][ T5809] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 235.561732][ T5809] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 235.632352][ T5809] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 235.958248][ T7716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.467'. [ 236.754420][ T5809] DVB: Unable to find symbol r820t_attach() [ 237.115824][ T5809] usb 2-1: USB disconnect, device number 6 [ 237.663915][ T7746] netlink: 'syz.0.474': attribute type 1 has an invalid length. [ 237.717875][ T7746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.474'. [ 238.944227][ T5809] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 239.577377][ T5809] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 239.629755][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.665913][ T5809] usb 6-1: Product: syz [ 239.682509][ T5809] usb 6-1: Manufacturer: syz [ 239.702880][ T5809] usb 6-1: SerialNumber: syz [ 239.764316][ T5809] usb 6-1: config 0 descriptor?? [ 239.865715][ T31] INFO: task syz.2.74:6196 blocked for more than 143 seconds. [ 239.873198][ T31] Not tainted syzkaller #0 [ 239.886025][ T6193] syz.2.74: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 239.937682][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.965459][ T31] task:syz.2.74 state:D stack:29096 pid:6196 tgid:6190 ppid:5805 task_flags:0x400040 flags:0x00080002 [ 239.982011][ T5809] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.000381][ T6193] CPU: 1 UID: 0 PID: 6193 Comm: syz.2.74 Not tainted syzkaller #0 PREEMPT(full) [ 240.000395][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.000401][ T6193] Call Trace: [ 240.000405][ T6193] [ 240.000409][ T6193] dump_stack_lvl+0x16c/0x1f0 [ 240.000428][ T6193] warn_alloc+0x248/0x3a0 [ 240.000445][ T6193] ? __pfx_warn_alloc+0x10/0x10 [ 240.000466][ T6193] ? relay_open_buf.part.0+0x194/0xc40 [ 240.000477][ T6193] ? __vmalloc_node_noprof+0xad/0xf0 [ 240.000492][ T6193] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 240.000513][ T6193] ? relay_open_buf.part.0+0x194/0xc40 [ 240.000527][ T6193] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.000542][ T6193] ? ___kmalloc_large_node+0xed/0x160 [ 240.000557][ T6193] __kvmalloc_node_noprof+0x431/0x9c0 [ 240.000568][ T6193] ? relay_open_buf.part.0+0x194/0xc40 [ 240.000578][ T6193] ? trace_kmalloc+0x2b/0xd0 [ 240.000588][ T6193] ? __kmalloc_noprof+0x34f/0x880 [ 240.000601][ T6193] ? relay_open_buf.part.0+0x194/0xc40 [ 240.000612][ T6193] ? relay_open_buf.part.0+0xf9/0xc40 [ 240.000633][ T6193] ? relay_open_buf.part.0+0x194/0xc40 [ 240.000650][ T6193] relay_open_buf.part.0+0x194/0xc40 [ 240.000676][ T6193] relay_open+0x653/0xad0 [ 240.000689][ T6193] ? debugfs_create_file_full+0x41/0x60 [ 240.000702][ T6193] do_blk_trace_setup+0x4c5/0xb00 [ 240.000721][ T6193] blk_trace_setup+0xed/0x1b0 [ 240.000736][ T6193] ? __pfx_blk_trace_setup+0x10/0x10 [ 240.000758][ T6193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.000772][ T6193] sg_ioctl+0x7d7/0x2880 [ 240.000788][ T6193] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.000803][ T6193] ? __pfx_sg_ioctl+0x10/0x10 [ 240.000818][ T6193] ? hook_file_ioctl_common+0x145/0x410 [ 240.000836][ T6193] ? selinux_file_ioctl+0x180/0x270 [ 240.000847][ T6193] ? selinux_file_ioctl+0xb4/0x270 [ 240.000858][ T6193] ? __pfx_sg_ioctl+0x10/0x10 [ 240.000873][ T6193] __x64_sys_ioctl+0x18e/0x210 [ 240.000889][ T6193] do_syscall_64+0xcd/0xfa0 [ 240.000906][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.000916][ T6193] RIP: 0033:0x7fe7e9f8efc9 [ 240.000929][ T6193] Code: Unable to access opcode bytes at 0x7fe7e9f8ef9f. [ 240.000934][ T6193] RSP: 002b:00007fe7ead76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.000944][ T6193] RAX: ffffffffffffffda RBX: 00007fe7ea1e5fa0 RCX: 00007fe7e9f8efc9 [ 240.000950][ T6193] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000003 [ 240.000956][ T6193] RBP: 00007fe7ea011f91 R08: 0000000000000000 R09: 0000000000000000 [ 240.000962][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.000968][ T6193] R13: 00007fe7ea1e6038 R14: 00007fe7ea1e5fa0 R15: 00007ffcdc863cd8 [ 240.000982][ T6193] [ 240.000998][ T6193] Mem-Info: [ 240.171874][ T7761] 9pnet_fd: Insufficient options for proto=fd [ 240.284305][ T31] Call Trace: [ 240.288364][ T31] [ 240.292035][ T31] __schedule+0x1190/0x5de0 [ 240.298853][ T31] ? check_path.constprop.0+0x24/0x50 [ 240.314227][ T31] ? __lock_acquire+0x622/0x1c90 [ 240.319190][ T31] ? __pfx___schedule+0x10/0x10 [ 240.324081][ T31] ? find_held_lock+0x2b/0x80 [ 240.333385][ T31] ? schedule+0x2d7/0x3a0 [ 240.337758][ T31] ? blk_trace_startstop+0x7f/0x480 [ 240.342974][ T31] schedule+0xe7/0x3a0 [ 240.347181][ T31] schedule_preempt_disabled+0x13/0x30 [ 240.352641][ T31] __mutex_lock+0x818/0x1060 [ 240.357481][ T31] ? blk_trace_startstop+0x7f/0x480 [ 240.362728][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 240.367820][ T31] ? find_held_lock+0x2b/0x80 [ 240.372531][ T31] ? blk_trace_startstop+0x7f/0x480 [ 240.377831][ T31] blk_trace_startstop+0x7f/0x480 [ 240.382878][ T31] ? __pfx_blk_trace_startstop+0x10/0x10 [ 240.388669][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.395053][ T31] sg_ioctl+0xa3a/0x2880 [ 240.399305][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 240.433433][ T6193] active_anon:6282 inactive_anon:4 isolated_anon:0 [ 240.433433][ T6193] active_file:4940 inactive_file:200 isolated_file:0 [ 240.433433][ T6193] unevictable:768 dirty:206 writeback:0 [ 240.433433][ T6193] slab_reclaimable:8516 slab_unreclaimable:101751 [ 240.433433][ T6193] mapped:35937 shmem:3642 pagetables:3621 [ 240.433433][ T6193] sec_pagetables:0 bounce:0 [ 240.433433][ T6193] kernel_misc_reclaimable:0 [ 240.433433][ T6193] free:143184 free_pcp:37190 free_cma:0 [ 240.478461][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 240.484451][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 240.490065][ T31] ? selinux_file_ioctl+0x180/0x270 [ 240.497624][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 240.502055][ T6193] Node 0 active_anon:64kB inactive_anon:16kB active_file:216kB inactive_file:52kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122948kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12112kB pagetables:4100kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 240.502830][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 240.536892][ T6193] Node 1 active_anon:25064kB inactive_anon:0kB active_file:19544kB inactive_file:748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20900kB dirty:800kB writeback:0kB shmem:13032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:428kB pagetables:10384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.538741][ T31] __x64_sys_ioctl+0x18e/0x210 [ 240.573202][ T6193] Node 0 DMA free:10096kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 240.574894][ T31] do_syscall_64+0xcd/0xfa0 [ 240.605905][ T6193] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 240.617239][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.617525][ T6193] Node 0 [ 240.623183][ T31] RIP: 0033:0x7fe7e9f8efc9 [ 240.623177][ T6193] DMA32 free:42492kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:16kB active_file:216kB inactive_file:52kB unevictable:1536kB writepending:24kB zspages:0kB present:3129332kB managed:2544884kB mlocked:0kB bounce:0kB free_pcp:4076kB local_pcp:2260kB free_cma:0kB [ 240.626212][ T31] RSP: 002b:00007fe7ead55038 EFLAGS: 00000246 [ 240.631041][ T6193] lowmem_reserve[]: [ 240.662222][ T31] ORIG_RAX: 0000000000000010 [ 240.662235][ T31] RAX: ffffffffffffffda RBX: 00007fe7ea1e6090 RCX: 00007fe7e9f8efc9 [ 240.662249][ T31] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003 [ 240.662260][ T31] RBP: 00007fe7ea011f91 R08: 0000000000000000 R09: 0000000000000000 [ 240.662274][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.669767][ T6193] 0 [ 240.672337][ T31] R13: 00007fe7ea1e6128 R14: 00007fe7ea1e6090 R15: 00007ffcdc863cd8 [ 240.680077][ T6193] 0 [ 240.684987][ T31] [ 240.693129][ T6193] 1 [ 240.702258][ T31] [ 240.702258][ T31] Showing all locks held in the system: [ 240.711964][ T6193] 1 [ 240.722223][ T31] 1 lock held by khungtaskd/31: [ 240.743288][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 240.758319][ T31] 5 locks held by kworker/u8:5/177: [ 240.764629][ T31] 2 locks held by getty/5571: [ 240.769390][ T31] #0: ffff8880357130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 240.771966][ T6193] 1 [ 240.782663][ T6193] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.798827][ T31] #1: [ 240.813565][ T6193] lowmem_reserve[]: 0 0 0 0 0 [ 240.817974][ T31] ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 240.822606][ T6193] Node 1 Normal free:519948kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24964kB inactive_anon:0kB active_file:19544kB inactive_file:748kB unevictable:1536kB writepending:800kB zspages:6564kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:145396kB local_pcp:34232kB free_cma:0kB [ 240.835676][ T31] 6 locks held by kworker/1:3/5809: [ 240.866070][ T6193] lowmem_reserve[]: 0 0 0 0 0 [ 240.871624][ T31] #0: [ 240.876382][ T6193] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB [ 240.879232][ T31] ffff88802369f948 ((wq_completion)usb_hub_wq [ 240.885615][ T6193] (U) [ 240.886000][ T31] ){+.+.}-{0:0} [ 240.891711][ T6193] 1*64kB [ 240.894390][ T31] , at: process_one_work+0x12a2/0x1b70 [ 240.898321][ T6193] (U) [ 240.900789][ T31] #1: [ 240.907219][ T6193] 0*128kB [ 240.911479][ T31] ffffc900043afd00 [ 240.912494][ T6193] 1*256kB [ 240.915573][ T31] ( [ 240.921681][ T6193] (U) [ 240.922289][ T31] (work_completion)(&hub->events) [ 240.924973][ T6193] 1*512kB [ 240.928078][ T31] ){+.+.}-{0:0} [ 240.932486][ T6193] (U) [ 240.935540][ T31] , at: process_one_work+0x929/0x1b70 [ 240.939436][ T6193] 1*1024kB [ 240.941621][ T31] #2: [ 240.947148][ T6193] (U) [ 240.950166][ T31] ffff888144fb9198 [ 240.952890][ T6193] 2*2048kB [ 240.955569][ T31] ( [ 240.959629][ T6193] (UM) [ 240.962415][ T31] &dev->mutex [ 240.965092][ T6193] 1*4096kB [ 240.967655][ T31] ){....}-{4:4} [ 240.970931][ T6193] (M) [ 240.974060][ T31] , at: hub_event+0x1c0/0x4fe0 [ 240.977945][ T6193] = 10096kB [ 240.980802][ T31] #3: [ 240.985131][ T6193] Node 0 DMA32: 55*4kB (ME) 118*8kB (ME) 97*16kB (UME) [ 240.990963][ T31] ffff88803090b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 240.998404][ T6193] 113*32kB (ME) 67*64kB (UME) 37*128kB (UME) 26*256kB (UME) 22*512kB (UM) 7*1024kB (UM) 1*2048kB (M) 0*4096kB = 42492kB [ 241.021804][ T31] #4: ffff88802e13e160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 241.022657][ T6193] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.033070][ T31] #5: ffff8881755600d0 (&d->usb_mutex){+.+.}-{4:4}, at: rtl28xxu_ctrl_msg+0x5d/0x780 [ 241.043935][ T6193] Node 1 Normal: 384*4kB (UME) 149*8kB (ME) 81*16kB (M) 52*32kB (UME) 24*64kB (UM) 8*128kB (UME) 7*256kB (UM) 2*512kB (ME) 1*1024kB (U) 0*2048kB 124*4096kB (M) = 519992kB [ 241.053175][ T31] 4 locks held by udevd/5965: [ 241.069991][ T6193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.074480][ T31] #0: ffff8881ac67a540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 241.084313][ T6193] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.093482][ T31] #1: ffff888058cb5088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 241.102414][ T6193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.113691][ T31] #2: ffff8881d207c5a8 [ 241.122412][ T6193] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.126869][ T6193] 10596 total pagecache pages [ 241.140756][ T31] (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 241.141743][ T6193] 1818 pages in swap cache [ 241.155883][ T31] #3: ffff88803090b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 241.165271][ T31] 2 locks held by syz.2.74/6193: [ 241.170241][ T31] 1 lock held by syz.2.74/6196: [ 241.175174][ T31] #0: ffff888142be6178 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x7f/0x480 [ 241.185374][ T31] [ 241.187731][ T31] ============================================= [ 241.187731][ T31] [ 241.201196][ T31] NMI backtrace for cpu 0 [ 241.201209][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 241.201228][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.201238][ T31] Call Trace: [ 241.201244][ T31] [ 241.201250][ T31] dump_stack_lvl+0x116/0x1f0 [ 241.201278][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 241.201298][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 241.201325][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 241.201346][ T31] watchdog+0xf3f/0x1170 [ 241.201372][ T31] ? rcu_is_watching+0x12/0xc0 [ 241.201394][ T31] ? __pfx_watchdog+0x10/0x10 [ 241.201414][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 241.201439][ T31] ? __kthread_parkme+0x19e/0x250 [ 241.201465][ T31] ? __pfx_watchdog+0x10/0x10 [ 241.201485][ T31] kthread+0x3c5/0x780 [ 241.201502][ T31] ? __pfx_kthread+0x10/0x10 [ 241.201520][ T31] ? rcu_is_watching+0x12/0xc0 [ 241.201541][ T31] ? __pfx_kthread+0x10/0x10 [ 241.201557][ T31] ret_from_fork+0x675/0x7d0 [ 241.201571][ T31] ? __pfx_kthread+0x10/0x10 [ 241.201588][ T31] ret_from_fork_asm+0x1a/0x30 [ 241.201625][ T31] [ 241.201631][ T31] Sending NMI from CPU 0 to CPUs 1: [ 241.226321][ T6193] Free swap = 92280kB [ 241.226331][ T6193] Total swap = 124996kB [ 241.226339][ T6193] 2097051 pages RAM [ 241.226346][ T6193] 0 pages HighMem/MovableOnly [ 241.226352][ T6193] 428740 pages reserved [ 241.226359][ T6193] 0 pages cma reserved [ 241.350670][ C1] NMI backtrace for cpu 1 [ 241.350687][ C1] CPU: 1 UID: 0 PID: 6193 Comm: syz.2.74 Not tainted syzkaller #0 PREEMPT(full) [ 241.350704][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.350712][ C1] RIP: 0010:lockdep_hardirqs_on+0x87/0x110 [ 241.350735][ C1] Code: d2 75 10 48 8b 83 20 0b 00 00 48 39 83 08 0b 00 00 75 3a 48 c7 c7 87 a2 a2 8d e8 44 19 00 00 65 c7 05 75 5c 41 08 01 00 00 00 <8b> 83 c8 0a 00 00 48 89 ab d0 0a 00 00 83 c0 01 89 83 c8 0a 00 00 [ 241.350747][ C1] RSP: 0018:ffffc9000b7b7950 EFLAGS: 00000096 [ 241.350759][ C1] RAX: 0000000000000001 RBX: ffff8880342f0000 RCX: 0000000000000006 [ 241.350768][ C1] RDX: 0000000000000000 RSI: ffffffff8da2a287 RDI: ffffffff8bf06e40 [ 241.350776][ C1] RBP: ffffffff8b62fac2 R08: 0000000000000001 R09: 0000000000000001 [ 241.350784][ C1] R10: ffffffff9081f6d7 R11: 0000000000000001 R12: dffffc0000000000 [ 241.350792][ C1] R13: 000000000004a8f9 R14: 0000000000000000 R15: ffffc9001ee89000 [ 241.350801][ C1] FS: 00007fe7ead766c0(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000 [ 241.350815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.350824][ C1] CR2: 00007fcda89b3ad8 CR3: 0000000074ae1000 CR4: 00000000003526f0 [ 241.350832][ C1] Call Trace: [ 241.350837][ C1] [ 241.350843][ C1] _raw_spin_unlock_irqrestore+0x52/0x80 [ 241.350862][ C1] debug_check_no_obj_freed+0x31f/0x600 [ 241.350885][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 241.350904][ C1] ? find_unlink_vmap_area+0x301/0x3f0 [ 241.350919][ C1] ? _raw_spin_unlock+0x28/0x50 [ 241.350934][ C1] ? find_unlink_vmap_area+0x306/0x3f0 [ 241.350948][ C1] remove_vm_area+0x1ae/0x3f0 [ 241.350963][ C1] vunmap+0x55/0xa0 [ 241.350977][ C1] relay_destroy_buf+0x72/0x3e0 [ 241.350991][ C1] ? mntput+0x6b/0x90 [ 241.351010][ C1] relay_close_buf+0x144/0x1a0 [ 241.351023][ C1] relay_open+0x765/0xad0 [ 241.351035][ C1] ? debugfs_create_file_full+0x41/0x60 [ 241.351056][ C1] do_blk_trace_setup+0x4c5/0xb00 [ 241.351077][ C1] blk_trace_setup+0xed/0x1b0 [ 241.351096][ C1] ? __pfx_blk_trace_setup+0x10/0x10 [ 241.351118][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.351135][ C1] sg_ioctl+0x7d7/0x2880 [ 241.351154][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 241.351172][ C1] ? __pfx_sg_ioctl+0x10/0x10 [ 241.351190][ C1] ? hook_file_ioctl_common+0x145/0x410 [ 241.351210][ C1] ? selinux_file_ioctl+0x180/0x270 [ 241.351223][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 241.351236][ C1] ? __pfx_sg_ioctl+0x10/0x10 [ 241.351254][ C1] __x64_sys_ioctl+0x18e/0x210 [ 241.351273][ C1] do_syscall_64+0xcd/0xfa0 [ 241.351292][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.351306][ C1] RIP: 0033:0x7fe7e9f8efc9 [ 241.351321][ C1] Code: Unable to access opcode bytes at 0x7fe7e9f8ef9f. [ 241.351327][ C1] RSP: 002b:00007fe7ead76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.351340][ C1] RAX: ffffffffffffffda RBX: 00007fe7ea1e5fa0 RCX: 00007fe7e9f8efc9 [ 241.351349][ C1] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000003 [ 241.351357][ C1] RBP: 00007fe7ea011f91 R08: 0000000000000000 R09: 0000000000000000 [ 241.351365][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.351373][ C1] R13: 00007fe7ea1e6038 R14: 00007fe7ea1e5fa0 R15: 00007ffcdc863cd8 [ 241.351387][ C1] [ 242.097023][ T5809] usb 6-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 242.109382][ T5809] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 242.119660][ T5809] usb 6-1: media controller created [ 242.132847][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.175700][ T5809] i2c i2c-1: Added multiplexed i2c bus 2 [ 242.181339][ T5809] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 242.189656][ T5809] usb 6-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 242.202642][ T5809] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 242.245776][ T5809] DVB: Unable to find symbol r820t_attach() [ 242.734369][ T5809] usb 6-1: USB disconnect, device number 5 [ 249.405147][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.473706][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.530624][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.581169][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.694977][ T36] bridge_slave_1: left allmulticast mode [ 249.700726][ T36] bridge_slave_1: left promiscuous mode [ 249.711674][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.722258][ T36] bridge_slave_0: left allmulticast mode [ 249.727911][ T36] bridge_slave_0: left promiscuous mode [ 249.733519][ T36] bridge0: port 1(bridge_slave_0) entered disabled state