last executing test programs: 2m47.807993335s ago: executing program 1 (id=186): setpgid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001800000000000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1dc) pwritev2(r4, &(0x7f0000000280)=[{&(0x7f0000000380)="efb35cafc826531eafa4b3172266a745176a6df144f1e4b90c52e50d352f24cb46e52b25c9b70587faa97d286d6e453a42daa1bfd12b3fc93736d058698a278f2f91214af73a2480637410153c958ac5ab17ee854d53cc2c53e944e5dbe8438df835eafa7ba2e4e7b9198a96a1848a6ce5db480a9159e82e8cafec7562aa7fd0667b24ea3c4468092b05e2833e42c26aeb25a4137cd50dfa79dc146f1ac05a23f567bfda2fbc", 0xa6}, {0x0}, {&(0x7f00000004c0)="a1c0d9aca27b8414d8948208a61e7d48757c14e03c4a43e5aae62d66b6ae90a633b2b847b86831f890cdac19a5d4929db8726f3c2c494b226af760d2372906026ea7dc5d8e8390d1364e62d0b5f27c767ae07e27b4469ee12f8a16f1532c0b15a7116851ebd9249619d039efcafd34843b69560c5aa114c737b62b72", 0x7c}], 0x3, 0x9, 0x1, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 2m46.884609473s ago: executing program 1 (id=187): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095dcb601020301090212000159170000090401000015cc1c00"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x10180, 0x0) r0 = socket(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bind$packet(r0, &(0x7f0000000380)={0x11, 0x1c, 0x0, 0x1, 0x4}, 0xffffffffffffff64) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x1ce) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) syz_open_dev$swradio(0x0, 0x1, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="2ec696d4ac2d2465df5a83886ee779d55747a971c7a8b77cd451954d6fdbb8efd73a1c79abbf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x164, 0x30, 0x1, 0x0, 0x0, {}, [{0x150, 0x1, [@m_bpf={0x120, 0x1d, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x5, 0x5, 0x8, 0x80009}, {0xc, 0xe6, 0xe0, 0x7f}, {0x3, 0x81, 0xf1, 0x6}, {0x5, 0x2, 0xa, 0x1}, {0xfe, 0x60, 0x0, 0x4}, {0x4, 0x4, 0x4, 0x4}, {0x8, 0x5, 0x5, 0x7}, {0x0, 0x4, 0x8, 0xf}, {0x9, 0x7, 0xac, 0x3ff}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x7, 0x61, 0x9, 0x94c2}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x3909, 0x2, 0x6, 0x940a}, {0x5, 0x7, 0x6, 0x7fffffff}, {0x400, 0x5e, 0x9}, {0x2, 0x8, 0x8, 0x2}, {0x2, 0x7, 0x7, 0x287}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xd4, 0x10, 0x1, 0x401}, {0x7, 0x7f, 0xfb, 0x4}, {0x3, 0x1, 0x4, 0x9}]}]}, {0x3b, 0x6, "eac7c8fc9e362d85411c136c5b10e4a2554eb9422d025396e5f049fc3e448afc333c8663c7a8fbf7b634caac6aef67a5581f16d1621410"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x804}, 0x8880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2m43.025190692s ago: executing program 1 (id=201): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x800, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x5}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40) 2m42.1485942s ago: executing program 1 (id=203): syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="99742bbd7000"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x0, 0x0, 0x0, 0x0, 0xdf, 0xa, 0x4, 0x0, 0x3}, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x282) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001500), 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, 0x0, 0x20008085) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 2m39.643604683s ago: executing program 1 (id=212): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000240)={0x9, 0x100, 0x4, {0x0, 0x10000000, 0x1, 0x5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0xc0001c8}, &(0x7f0000001300), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2000, 0x80) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000906010200000000004e2200020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) write(r0, &(0x7f0000000080)="03b2926dbe5e0bcf2d8f9a99ee29a235c490bd4bed8d25914d6962bef236542387eedb20a9b12ee9e62ffcc418f8bd", 0x2f) 2m39.355096939s ago: executing program 1 (id=213): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001c00)={'\x00', 0x2, 0xfffffffe, 0x1, 0x1af, 0x102}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff0000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000001c80)={{r5}, 0x0, 0x10, @unused=[0xfff, 0x9, 0x2, 0x4], @devid=r8}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r9, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1000000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 2m24.253590139s ago: executing program 32 (id=213): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001c00)={'\x00', 0x2, 0xfffffffe, 0x1, 0x1af, 0x102}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff0000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000001c80)={{r5}, 0x0, 0x10, @unused=[0xfff, 0x9, 0x2, 0x4], @devid=r8}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r9, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1000000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 12.37978523s ago: executing program 0 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x166) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0x0) fchown(r1, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={'streebog256-generic\x00'}}) fstat(0xffffffffffffffff, &(0x7f0000002280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000800000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572006c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c000140", @ANYBLOB="1b"], 0x100}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vim2m(0x0, 0x8000000000000000, 0x2) ioctl$FICLONE(r5, 0x40049409, r5) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u32=&(0x7f0000000200)=0x8}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9159, 0x6731, &(0x7f0000006680)) unshare(0x20040600) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x336, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7ff, 0x8, 0x1, {0x22, 0xdb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0xa, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7f, 0x8, 0x6}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x80, 0x3, 0xa, 0x10, 0x1}, 0x3b, &(0x7f0000000200)={0x5, 0xf, 0x3b, 0x2, [@generic={0x2c, 0x10, 0x4, "25fd771c084e8039bffadf608a5e43e109e321543dea378cd7e67e31082a6e59eceb56418d3bb80378"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x7, 0x8}]}, 0xa, [{0xdc, &(0x7f0000000400)=@string={0xdc, 0x3, "e473c30990d2393bb97a7656be208f0ad85a9ddaa822b950a49533f7589da136d38670e644ceceb88c4b9c248ff44bf21af85952f7ba0cd3c2360718e4c330b297f4614edc4403497f9d109c39404e6f03a59a9bd4f3ecbeec8ff6c755a268bf9264137a36e2bb16330489abadd63c2f2efa7e6e7593cf44f58a47ed5544932a481386ed234db8717100f6b7edb7b11ed32aa339dd64fdc2267511551e29da3976e27be2ca81a11510db1df0e7b46bbb4c4ac6d32e66b9ddacb734f35904ebc5d571ee6326be54cff40ee561bfd0420af7c49ff77874a0a62e93"}}, {0xe7, &(0x7f0000000500)=@string={0xe7, 0x3, "5a0e0bc3f4936d24cef841357a5fec1007f5dfa423cd6160d21a02ffed8b622bfb0fdba744f0c82f5fcd40e12d36f77e367cf31c9f035510791994e1947a9d97addd66e1fb4344a67e561abbb5d7911f98bae5a82460ac9e53201975c135232c1cf01137b2e7b2c8f9f2244b25813aaa43fa7226d4a0a3524758272b03f250275f5c43a39847e5cd0deb77c5853070ee7ba861c7a8d6dc0261f2c5e0837bd4e7f71e4be7fdb5b8780e91756b60075f62382c45a1ffb5c959958732fec32ff48f53a392d1a424cbe871b01a8997d11184684089193b315ac134d501c0ba02edb3a62a54e9f1"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x801}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e53601269155850ffb59df368aa9e72076d92693fcaffb114e22b219096c38724a024d13c4bbe6916dcb435d7b9c9c76f5fb75b769076e891c157b836cbb05fa2181729287eafc30fc0589f250e40dba08bb9de542bda3b8fab22bf4fee6688eeee6aa199febcce8a8e889a8ab40f4c09359ad94885b331437143ed0fbb4c3c16fd886acadcd61e892b1cc90e3c20528fb6bd7bb6a6d9df0cc1cf7ee924825bffb9f91d4bba0035"}}, {0x8d, &(0x7f00000006c0)=@string={0x8d, 0x3, "23d2a7c10119480c77a5948ead8fea7078c6c602ef779ddfb8c28c3b45988e4f233812f92d8d937e44b813d93397cf38037d6492f83e2da597108ad501a6e1de3a39d117cd5403501dec70f5395ead6d903e1ce2a0a8c35e845f0a4e41b2738b035a2bcf62d94d36b6cdc9c200ab55e11f5bbc453210cb46a3c8c1d88af3803fba70fdfd061b079bbeedd3"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x201b}}, {0x9c, &(0x7f0000000800)=@string={0x9c, 0x3, "763514067a4fe6d37fb71da5ba5ef6514bd2642ab057c8cb806a22a07f731d9ec197f9b15f3506228ac6cbc302f976c51741e9dabda7a9e5864b4571307871e7484bf1a5cd5b930b36ebca0d4aff05bb56ce83d35c7e0bb753f8a1a364f987bc2f38659bf56090617e8c8b5ed447af436b62a7aa3da8b815f9b5a822512094a5e2b713272a859281bb7e6090be0f8ace7b0c6c5461342297ff6b"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x41f}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.286127244s ago: executing program 2 (id=599): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff", @ANYRES8=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESDEC], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x846) 9.551967056s ago: executing program 4 (id=602): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0xf00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.307765972s ago: executing program 5 (id=604): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) add_key$user(&(0x7f00000000c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000280)="fdda04e458fef0e7ae24e32f4bdeec837f25852ef4d741f503d6759a4df163498574d6e755149391973e76050c9a3c516851aa7c625b1fa94f19f793131c204a8e6fa2526660ae5503ca7bbdf0b90f507b36e77304433857d1d5deee64f1367e01f6bc36", 0x64, 0xfffffffffffffffd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) read(r1, 0x0, 0x5d) write$ppp(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0x4054, 0xabe, 0xb, 0xa, 0xffffff80, 0x81}) 9.193456333s ago: executing program 0 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000000180)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd807d", 0xc1, 0xfffffffffffffffb) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}}) 8.258495331s ago: executing program 5 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r6, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x810) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r8 = socket(0x10, 0xbd0e6e190d015d52, 0x10) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xe0, 0x2, 0x1}, 0x10) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 7.877656675s ago: executing program 4 (id=607): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f0000004900), 0x4) 7.808436441s ago: executing program 2 (id=608): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x33, @multicast2, 0x4e24, 0x2, 'lblcr\x00', 0x20, 0x2, 0x5a}, 0x2c) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x6, 0x20}, 0x18) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x6, 0x2, 0x0, 0x100800}) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0x34000, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 7.807773022s ago: executing program 0 (id=609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000020104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}}, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_hwaddr=@broadcast}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000020601020000000000000000000000000c00078008001240f4050000100003"], 0x54}, 0x1, 0x0, 0x0, 0x40041}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) r7 = getpgid(r3) prlimit64(r7, 0x7, &(0x7f0000000080)={0x800, 0x8b}, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r10, 0xffffffff) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r12 = accept(r9, 0x0, 0x0) ioctl$SIOCSIFMTU(r12, 0x8923, &(0x7f0000000100)={'veth0_to_bond\x00', 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3e20, 0x0, &(0x7f0000000340), &(0x7f0000000040)) 7.439233523s ago: executing program 2 (id=611): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000300)={0x50, 0x0, 0x36b, {0x7, 0x2b, 0x10000007, 0x80000, 0xc, 0xfb, 0x3, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0xf500}}, 0x30) read$FUSE(r5, &(0x7f000000a1c0)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x2, 0x0, 0x3}, &(0x7f0000000080), 0x0) 7.438369648s ago: executing program 4 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x7, &(0x7f0000000080)=0x6e) r5 = syz_open_dev$vim2m(0x0, 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x810) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r6 = socket(0x10, 0xbd0e6e190d015d52, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 6.383429224s ago: executing program 5 (id=613): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3ff, 0x367d, 0x9, 0xb5, 0x47c, 0x7, 0x9}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x60) 5.735905134s ago: executing program 3 (id=614): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e24, 0x3, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 5.581119749s ago: executing program 4 (id=615): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) add_key$user(&(0x7f00000000c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000280)="fdda04e458fef0e7ae24e32f4bdeec837f25852ef4d741f503d6759a4df163498574d6e755149391973e76050c9a3c516851aa7c625b1fa94f19f793131c204a8e6fa2526660ae5503ca7bbdf0b90f507b36e77304433857d1d5deee64f1367e01f6bc36", 0x64, 0xfffffffffffffffd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) read(r1, 0x0, 0x5d) write$ppp(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x3c}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) sendmmsg$inet(r6, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) 5.427610681s ago: executing program 2 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x7, &(0x7f0000000080)=0x6e) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r4, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x810) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r6 = socket(0x10, 0xbd0e6e190d015d52, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 5.368745507s ago: executing program 3 (id=617): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x17, 0x800, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x5, 0x269}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01, 0x0, 0x4044000}, 0x48004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @private0}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa4}, &(0x7f0000000040)=0x20) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) 4.424059196s ago: executing program 4 (id=618): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x26a, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0xfffffffffffffe5a, 0x6, 0x1, @remote, @local, {[@hopopts={0x5c, 0xd, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0xdca7}, @hao={0xc9, 0x10, @mcast1}, @generic={0xac, 0x0, "66f1dc9f8a4c6dc89ec04c6b8a62170bb72c77d82e5e92a165cb8cb2928e2f46b9a279d8a143df1bfb0c2297800b9d7a669503de42dd86eea14c1d25136d14c15fd567a5ab9588a889f4afe7e3f49f8f2836b24f498dbea12da7f304c4147113d1dbc6b3055eecbc9bb4473a15c0cc4671bf902c59dd7b8fdb1953d1e99a75e60540c64a18476fccab5a78c792b62cd57252cc8f2a37c516ee9cd794dddd405858c9cd029466f20ea366670964ffed2a41"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}, @hao={0xc9, 0x10, @loopback}]}, @hopopts={0x21, 0x10, '\x00', [@generic={0x93, 0x77, "fc22a2a1b41b83f5626736b942d3e77750f31dcfe3e9612fc420ae584e1a3f38ac8632c89f2bb5a6efe68da2489560e9cadc39de3d4deeefe7954f83faa2c75d0920c770e0109c6d6742e8733c79a71b4f21b727b45269a36564cf350fa5b9d282c0de230c35e94751900b58d6c06c3ea7808edca633f7"}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x80000001}]}, @dstopts={0x0, 0x1f, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x0, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x8, 0x90, "f77e64f9fe1e87414c92e0bae638c945f5e74ceb9c86e7bb4b4c7444551dbe967f484fc3082c327b3b50c49aaca5e5f4f4f61e144248f04a42396c7fb2bba03f775cebfe7c5b7ffdc68b01c63bdfb828388265157f397d8d59a721a30592dcc3831a4e51be43cfe5fdb62144926a562845f55dc38406b50d5cb0cbe9a88a96dfa5aa8a74e4043f7ce473b41efd7a2a64"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x7, 0x9, [0x1000000000000, 0x8, 0x4, 0x5, 0x8, 0x9]}}]}, @hopopts={0x33, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x576e, 0x0) 3.638973253s ago: executing program 2 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000940)={0x20, 0x12, 0x3, "16dc44"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="4018a80000004f"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x80) 3.548276464s ago: executing program 4 (id=620): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040), 0x4) 3.411968116s ago: executing program 3 (id=621): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) add_key$user(&(0x7f00000000c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000280)="fdda04e458fef0e7ae24e32f4bdeec837f25852ef4d741f503d6759a4df163498574d6e755149391973e76050c9a3c516851aa7c625b1fa94f19f793131c204a8e6fa2526660ae5503ca7bbdf0b90f507b36e77304433857d1d5deee64f1367e01f6bc36", 0x64, 0xfffffffffffffffd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) read(r1, 0x0, 0x5d) write$ppp(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x3c}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) sendmmsg$inet(r6, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) 2.65627027s ago: executing program 5 (id=622): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"e50d1af80100007ea25fdd00ff00000008007effffff7f00", r1}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 2.437936533s ago: executing program 0 (id=623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r6, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x810) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r8 = socket(0x10, 0xbd0e6e190d015d52, 0x10) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xe0, 0x2, 0x1}, 0x10) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 2.436322679s ago: executing program 3 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000140)={0x0, 0x1}, 0x2) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x50, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x31, 0xb2, 0x9e, 0x20, 0x830, 0x80, 0x4bf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0x4, 0xb3, 0x59, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x8}, [@processing_unit={0xc, 0x24, 0x7, 0x3, 0x2, 0x6, "913f9fac80"}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x5, 0xf0, "5f562008de"}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x4, "29d9f08ab83e"}]}]}}]}}]}}, 0x0) 1.355443897s ago: executing program 3 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x7, &(0x7f0000000080)=0x6e) r5 = syz_open_dev$vim2m(0x0, 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x810) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r6 = socket(0x10, 0xbd0e6e190d015d52, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 1.309417275s ago: executing program 5 (id=626): socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000100), 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7fff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000300)={0xed, 0x2}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x12, 0x0, 0x6680, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc7a07fa2000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES64=r4], 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x4, 0xa8a8, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x800000, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) recvfrom(r5, 0x0, 0x0, 0x20, 0x0, 0x0) 1.295361795s ago: executing program 0 (id=627): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e24, 0x3, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 472.500222ms ago: executing program 0 (id=628): setpgid(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x27) bpf$PROG_LOAD(0x5, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1dc) pwritev2(r6, &(0x7f0000000280)=[{&(0x7f0000000380)="efb35cafc826531eafa4b3172266a745176a6df144f1e4b90c52e50d352f24cb46e52b25c9b70587faa97d286d6e453a42daa1bfd12b3fc93736d058698a278f2f91214af73a2480637410153c958ac5ab17ee854d53cc2c53e944e5dbe8438df835eafa7ba2e4e7b9198a96a1848a6ce5db480a9159e82e8cafec7562aa7fd0667b24ea3c4468092b05e2833e42c26aeb25a4137cd50dfa79dc146f1ac05a23f567bfda2fbc", 0xa6}, {0x0}], 0x2, 0x9, 0x1, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 328.041978ms ago: executing program 3 (id=629): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, 0x0) (fail_nth: 3) 2.668987ms ago: executing program 2 (id=630): socket$packet(0x11, 0x2, 0x300) chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0500"], 0x5) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 5 (id=631): setpgid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001800000000000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1dc) pwritev2(r6, &(0x7f0000000280)=[{&(0x7f0000000380)="efb35cafc826531eafa4b3172266a745176a6df144f1e4b90c52e50d352f24cb46e52b25c9b70587faa97d286d6e453a42daa1bfd12b3fc93736d058698a278f2f91214af73a2480637410153c958ac5ab17ee854d53cc2c53e944e5dbe8438df835eafa7ba2e4e7b9198a96a1848a6ce5db480a9159e82e8cafec7562aa7fd0667b24ea3c4468092b05e2833e42c26aeb25a4137cd50dfa79dc146f1ac05a23f567bfda2fbc", 0xa6}, {0x0}, {&(0x7f00000004c0)="a1c0d9aca27b8414d8948208a61e7d48757c14e03c4a43e5aae62d66b6ae90a633b2b847b86831f890cdac19a5d4929db8726f3c2c494b226af760d2372906026ea7dc5d8e8390d1364e62d0b5f27c767ae07e27b4469ee12f8a16f1532c0b15a7116851ebd9249619d039efcafd34843b69560c5aa114c737b62b72", 0x7c}], 0x3, 0x9, 0x1, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) kernel console output (not intermixed with test programs): e=1326 audit(1750326762.002:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 138.454690][ T30] audit: type=1326 audit(1750326762.012:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 138.500853][ T978] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 138.546114][ T978] usb 2-1: selecting invalid altsetting 1 [ 138.551094][ T30] audit: type=1326 audit(1750326762.012:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 138.578334][ T978] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 138.601798][ T30] audit: type=1326 audit(1750326762.012:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 138.624207][ T978] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.634123][ T30] audit: type=1326 audit(1750326762.012:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 139.328024][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 139.345770][ T978] usb 2-1: media controller created [ 139.623507][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.693123][ T30] audit: type=1326 audit(1750326762.012:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 139.849913][ T978] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 139.869365][ T978] zl10353_read_register: readreg error (reg=127, ret==-71) [ 139.880743][ T978] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 139.982803][ T42] usb 3-1: USB disconnect, device number 3 [ 139.989259][ T30] audit: type=1326 audit(1750326762.012:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 140.012472][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.114330][ T30] audit: type=1326 audit(1750326762.022:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 140.201239][ T978] usb 2-1: USB disconnect, device number 4 [ 140.210599][ T30] audit: type=1326 audit(1750326762.022:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 142.256690][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 142.341122][ T5829] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.727141][ T5829] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 142.750934][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.766586][ T5829] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 142.790362][ T5829] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 142.799234][ T5829] usb 3-1: Manufacturer: syz [ 142.939599][ T5829] usb 3-1: config 0 descriptor?? [ 142.971122][ T42] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 142.998746][ T5829] igorplugusb 3-1:0.0: incorrect number of endpoints [ 143.269036][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.283963][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 143.295476][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.308604][ T42] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 143.317870][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.394981][ T42] usb 4-1: config 0 descriptor?? [ 143.400592][ T6605] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.820172][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 143.820187][ T30] audit: type=1326 audit(1750326767.432:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 143.908043][ T42] uclogic 0003:5543:0004.0002: No inputs registered, leaving [ 143.918133][ T42] uclogic 0003:5543:0004.0002: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 143.938452][ T30] audit: type=1326 audit(1750326767.432:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 143.961656][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.982139][ T30] audit: type=1326 audit(1750326767.442:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 144.065566][ T30] audit: type=1326 audit(1750326767.442:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 144.096319][ T30] audit: type=1326 audit(1750326767.442:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 144.120591][ T30] audit: type=1326 audit(1750326767.452:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 144.153377][ T978] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.180297][ T30] audit: type=1326 audit(1750326767.452:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 144.232278][ T30] audit: type=1326 audit(1750326767.462:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 144.265824][ T30] audit: type=1326 audit(1750326767.462:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 144.290489][ T30] audit: type=1326 audit(1750326767.462:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ec98e929 code=0x7ffc0000 [ 144.331284][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 144.338767][ T978] usb 2-1: config 89 has an invalid interface number: 1 but max is 0 [ 144.348763][ T978] usb 2-1: config 89 has no interface number 0 [ 144.356762][ T978] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 144.365987][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.374799][ T978] usb 2-1: Product: syz [ 144.381313][ T978] usb 2-1: Manufacturer: syz [ 144.392866][ T978] usb 2-1: SerialNumber: syz [ 144.718518][ T6623] netlink: 'syz.1.187': attribute type 21 has an invalid length. [ 145.126425][ T6626] nvme_fabrics: missing parameter 'transport=%s' [ 145.134121][ T6626] nvme_fabrics: missing parameter 'nqn=%s' [ 145.661286][ T42] usb 3-1: USB disconnect, device number 4 [ 146.278617][ T975] usb 4-1: USB disconnect, device number 6 [ 146.678754][ T6647] siw: device registration error -23 [ 147.221632][ T978] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 147.265015][ T978] usb 2-1: selecting invalid altsetting 1 [ 147.270782][ T978] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 147.941551][ T978] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.047137][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 148.056413][ T978] usb 2-1: media controller created [ 148.637421][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.832988][ T978] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 148.862973][ T978] zl10353_read_register: readreg error (reg=127, ret==-71) [ 148.893335][ T978] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 148.906153][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 148.906169][ T30] audit: type=1400 audit(1750326772.682:385): avc: denied { write } for pid=6663 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.958501][ T30] audit: type=1400 audit(1750326772.682:386): avc: denied { getopt } for pid=6663 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.043339][ T978] usb 2-1: USB disconnect, device number 5 [ 149.074299][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.099186][ T6673] Bluetooth: MGMT ver 1.23 [ 149.230267][ T30] audit: type=1400 audit(1750326773.002:387): avc: denied { ioctl } for pid=6661 comm="syz.1.203" path="/dev/sg0" dev="devtmpfs" ino=769 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.256397][ T6662] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 149.256397][ T6662] program syz.1.203 not setting count and/or reply_len properly [ 149.343677][ T5944] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.361719][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 149.363703][ T24] usb 5-1: config 89 has an invalid interface number: 1 but max is 0 [ 149.363726][ T24] usb 5-1: config 89 has no interface number 0 [ 149.365435][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 149.365458][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.365475][ T24] usb 5-1: Product: syz [ 149.365489][ T24] usb 5-1: Manufacturer: syz [ 149.365503][ T24] usb 5-1: SerialNumber: syz [ 149.862790][ T6683] netlink: 'syz.4.202': attribute type 21 has an invalid length. [ 149.870708][ T6683] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.908448][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.972893][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.051794][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.075905][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.310824][ T30] audit: type=1400 audit(1750326773.892:388): avc: denied { write } for pid=6661 comm="syz.1.203" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.333604][ T5944] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.357059][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.399525][ T5944] usb 3-1: config 0 descriptor?? [ 150.621161][ T5981] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.898345][ T5981] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 151.484706][ T5944] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 152.217834][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.248448][ T5944] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 152.262630][ T5981] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 152.274562][ T5981] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 152.283113][ T5981] usb 4-1: Manufacturer: syz [ 152.289921][ T5981] usb 4-1: config 0 descriptor?? [ 152.297785][ T5981] igorplugusb 4-1:0.0: incorrect number of endpoints [ 152.342043][ T30] audit: type=1400 audit(1750326776.062:389): avc: denied { ioctl } for pid=6698 comm="syz.1.213" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.406881][ T5981] usb 3-1: USB disconnect, device number 5 [ 152.511318][ T30] audit: type=1400 audit(1750326776.272:390): avc: denied { append } for pid=6698 comm="syz.1.213" name="sg0" dev="devtmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.679019][ T6700] fido_id[6700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 152.932392][ T30] audit: type=1326 audit(1750326776.572:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb93f8e929 code=0x7ffc0000 [ 152.978973][ T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 153.008282][ T24] usb 5-1: selecting invalid altsetting 1 [ 153.025157][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 153.035279][ T30] audit: type=1326 audit(1750326776.582:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb93f8e929 code=0x7ffc0000 [ 153.150989][ T30] audit: type=1326 audit(1750326776.582:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcb93f8e929 code=0x7ffc0000 [ 153.172254][ T6710] warning: `syz.4.215' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.177068][ T30] audit: type=1326 audit(1750326776.582:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb93f8e929 code=0x7ffc0000 [ 153.186176][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.704690][ T6707] [U]  [ 154.001670][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 154.020353][ T24] usb 5-1: media controller created [ 154.053291][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.101653][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 154.134659][ T24] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 154.134719][ T6710] netlink: 'syz.4.215': attribute type 7 has an invalid length. [ 154.188511][ T6710] netlink: 'syz.4.215': attribute type 8 has an invalid length. [ 154.199435][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 154.204880][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 154.357810][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 154.901709][ T5981] usb 4-1: USB disconnect, device number 7 [ 155.255679][ T24] usb 5-1: USB disconnect, device number 5 [ 155.531119][ T5981] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.265521][ T6745] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 156.301278][ T5981] usb 4-1: Using ep0 maxpacket: 8 [ 156.312602][ T5981] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.361995][ T6745] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 156.432905][ T5981] usb 4-1: config 0 has no interface number 0 [ 156.784707][ T6748] FAULT_INJECTION: forcing a failure. [ 156.784707][ T6748] name failslab, interval 1, probability 0, space 0, times 0 [ 156.797503][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.0.226 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 156.797526][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.797536][ T6748] Call Trace: [ 156.797543][ T6748] [ 156.797550][ T6748] dump_stack_lvl+0x16c/0x1f0 [ 156.797581][ T6748] should_fail_ex+0x512/0x640 [ 156.797604][ T6748] ? __kmalloc_noprof+0xbf/0x510 [ 156.797629][ T6748] ? kernfs_fop_write_iter+0x237/0x510 [ 156.797648][ T6748] should_failslab+0xc2/0x120 [ 156.797678][ T6748] __kmalloc_noprof+0xd2/0x510 [ 156.797709][ T6748] kernfs_fop_write_iter+0x237/0x510 [ 156.797734][ T6748] vfs_write+0x6c4/0x1150 [ 156.797758][ T6748] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 156.797780][ T6748] ? __pfx___mutex_lock+0x10/0x10 [ 156.797807][ T6748] ? __pfx_vfs_write+0x10/0x10 [ 156.797851][ T6748] ksys_write+0x12a/0x250 [ 156.797873][ T6748] ? __pfx_ksys_write+0x10/0x10 [ 156.797897][ T6748] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 156.797924][ T6748] do_syscall_64+0xcd/0x4c0 [ 156.797953][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.797971][ T6748] RIP: 0033:0x7f398fb8e929 [ 156.797985][ T6748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.798001][ T6748] RSP: 002b:00007f398d9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.798018][ T6748] RAX: ffffffffffffffda RBX: 00007f398fdb6160 RCX: 00007f398fb8e929 [ 156.798029][ T6748] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 000000000000000c [ 156.798040][ T6748] RBP: 00007f398d9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 156.798050][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.798060][ T6748] R13: 0000000000000001 R14: 00007f398fdb6160 R15: 00007fff419b89c8 [ 156.798087][ T6748] [ 157.197472][ T5981] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.304688][ T5981] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 157.330900][ T6750] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 157.351101][ T5981] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.391495][ T6750] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 157.648951][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 158.081101][ T5981] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 158.091008][ T5981] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.465246][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 158.465261][ T30] audit: type=1400 audit(1750326782.242:435): avc: denied { mount } for pid=6752 comm="syz.0.228" name="/" dev="ramfs" ino=10447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 158.510406][ T5981] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 158.556288][ T30] audit: type=1400 audit(1750326782.272:436): avc: denied { mounton } for pid=6752 comm="syz.0.228" path="/55/file0" dev="ramfs" ino=10447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 158.559572][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.578360][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.729100][ T30] audit: type=1400 audit(1750326782.502:437): avc: denied { ioctl } for pid=6760 comm="syz.2.231" path="socket:[10473]" dev="sockfs" ino=10473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.755360][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.827523][ T5981] usb 4-1: config 0 descriptor?? [ 158.979847][ T42] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.989498][ T5981] usb 4-1: can't set config #0, error -71 [ 159.078135][ T5981] usb 4-1: USB disconnect, device number 8 [ 159.141206][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.150592][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 159.170412][ T42] usb 1-1: Product: syz [ 159.175177][ T42] usb 1-1: Manufacturer: syz [ 159.179821][ T42] usb 1-1: SerialNumber: syz [ 159.225910][ T42] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.400406][ T30] audit: type=1400 audit(1750326783.022:438): avc: denied { firmware_load } for pid=5829 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 159.439315][ T5829] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 160.193245][ T42] usb 1-1: USB disconnect, device number 4 [ 160.521109][ T5829] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 160.589830][ T5829] ath9k_htc: Failed to initialize the device [ 160.651357][ T42] usb 1-1: ath9k_htc: USB layer deinitialized [ 160.957988][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.983347][ T42] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.261127][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 161.670487][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 161.683546][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.692137][ T24] usb 3-1: Product: syz [ 161.696459][ T24] usb 3-1: Manufacturer: syz [ 161.716215][ T24] usb 3-1: SerialNumber: syz [ 161.723871][ T42] usb 1-1: device descriptor read/all, error -71 [ 161.764693][ T24] usb 3-1: config 0 descriptor?? [ 161.776297][ T30] audit: type=1400 audit(1750326785.552:439): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 161.854558][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 163.422431][ T24] gspca_sonixj: reg_w1 err -110 [ 163.441209][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 163.515453][ T5981] usb 3-1: USB disconnect, device number 6 [ 163.816405][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 163.863489][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 164.159386][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 164.605901][ T6808] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 164.652998][ T6808] netlink: 'syz.0.245': attribute type 3 has an invalid length. [ 164.675349][ T6808] netlink: 224 bytes leftover after parsing attributes in process `syz.0.245'. [ 164.712925][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 164.736574][ T30] audit: type=1400 audit(1750326788.492:440): avc: denied { setopt } for pid=6812 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.930094][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 165.134566][ T30] audit: type=1400 audit(1750326788.502:441): avc: denied { create } for pid=6807 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.444994][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.453098][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.460465][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.469008][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.476833][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.501131][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.608739][ T30] audit: type=1400 audit(1750326792.362:442): avc: denied { mounton } for pid=6850 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 168.675262][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.721352][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.757749][ T42] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 168.789267][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.806578][ T30] audit: type=1400 audit(1750326792.552:443): avc: denied { setopt } for pid=6858 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.830140][ T42] usb 1-1: config 0 descriptor?? [ 169.022448][ T5884] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.093419][ T6850] lo speed is unknown, defaulting to 1000 [ 169.183721][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 169.206828][ T5884] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 169.230838][ T5884] usb 5-1: config 0 has no interface number 0 [ 169.281192][ T5884] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.401413][ T5884] usb 5-1: config 0 interface 85 has no altsetting 0 [ 169.440462][ T5884] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 169.449694][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.469696][ T42] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 169.621712][ T5884] usb 5-1: Product: syz [ 169.638496][ T42] usb 1-1: USB disconnect, device number 7 [ 169.648657][ T5884] usb 5-1: Manufacturer: syz [ 169.672248][ T5884] usb 5-1: SerialNumber: syz [ 169.748009][ T5884] usb 5-1: config 0 descriptor?? [ 169.777989][ T6850] chnl_net:caif_netlink_parms(): no params data found [ 169.978190][ T30] audit: type=1400 audit(1750326793.752:444): avc: denied { name_bind } for pid=6858 comm="syz.4.260" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 170.030831][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.078643][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.114336][ T6850] bridge_slave_0: entered allmulticast mode [ 170.174011][ T6850] bridge_slave_0: entered promiscuous mode [ 170.199389][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.206192][ T30] audit: type=1326 audit(1750326793.972:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.0.263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f398fb8e929 code=0x0 [ 170.216902][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.321517][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 170.323578][ T6850] bridge_slave_1: entered allmulticast mode [ 170.339770][ T6850] bridge_slave_1: entered promiscuous mode [ 170.441732][ T42] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.479841][ T30] audit: type=1400 audit(1750326794.252:446): avc: denied { connect } for pid=6858 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.508979][ T6877] netlink: 96 bytes leftover after parsing attributes in process `syz.0.263'. [ 170.529188][ T30] audit: type=1400 audit(1750326794.252:447): avc: denied { bind } for pid=6858 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.550967][ T30] audit: type=1400 audit(1750326794.252:448): avc: denied { write } for pid=6858 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.554009][ T6850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.572336][ T30] audit: type=1400 audit(1750326794.252:449): avc: denied { read } for pid=6858 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.610291][ T6850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.621507][ T5822] Bluetooth: hci5: command tx timeout [ 170.672486][ T6850] team0: Port device team_slave_0 added [ 170.681464][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 170.692096][ T6850] team0: Port device team_slave_1 added [ 170.699851][ T42] usb 4-1: config 89 has an invalid interface number: 1 but max is 0 [ 170.708291][ T42] usb 4-1: config 89 has no interface number 0 [ 170.716735][ T42] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 170.726458][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.752204][ T42] usb 4-1: Product: syz [ 170.764964][ T42] usb 4-1: Manufacturer: syz [ 170.781321][ T42] usb 4-1: SerialNumber: syz [ 170.787021][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.805564][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.832841][ T6850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.845679][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.852722][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.878614][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.886867][ T6850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.954122][ T6850] hsr_slave_0: entered promiscuous mode [ 170.960911][ T6850] hsr_slave_1: entered promiscuous mode [ 170.968642][ T6850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.977592][ T6850] Cannot create hsr debugfs directory [ 171.064904][ T6882] netlink: 'syz.3.262': attribute type 21 has an invalid length. [ 171.073287][ T6882] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.847146][ T5884] appletouch 5-1:0.85: Failed to request geyser raw mode [ 172.445881][ T30] audit: type=1400 audit(1750326795.812:450): avc: denied { read } for pid=6884 comm="syz.0.265" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.472904][ T5884] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 172.688523][ T5822] Bluetooth: hci5: command tx timeout [ 172.709748][ T5884] usb 5-1: USB disconnect, device number 6 [ 173.303630][ T42] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 173.358855][ T42] usb 4-1: selecting invalid altsetting 1 [ 173.368687][ T42] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 174.054301][ T6850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.070831][ T6850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.081405][ T30] audit: type=1326 audit(1750326797.852:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 174.119915][ T42] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 174.122101][ T6850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.316169][ T42] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 174.324867][ T42] usb 4-1: media controller created [ 174.621209][ T30] audit: type=1326 audit(1750326797.852:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 174.675833][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.703666][ T6850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.731362][ T30] audit: type=1326 audit(1750326797.852:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 174.732138][ T6914] FAULT_INJECTION: forcing a failure. [ 174.732138][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 174.754582][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.761967][ T5822] Bluetooth: hci5: command tx timeout [ 174.780100][ T42] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 174.792043][ T42] zl10353_read_register: readreg error (reg=127, ret==-71) [ 174.801792][ T42] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 174.887456][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.2.273 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 174.887474][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.887480][ T6914] Call Trace: [ 174.887484][ T6914] [ 174.887488][ T6914] dump_stack_lvl+0x16c/0x1f0 [ 174.887508][ T6914] should_fail_ex+0x512/0x640 [ 174.887524][ T6914] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 174.887540][ T6914] should_failslab+0xc2/0x120 [ 174.887555][ T6914] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 174.887569][ T6914] ? __alloc_skb+0x2b2/0x380 [ 174.887587][ T6914] __alloc_skb+0x2b2/0x380 [ 174.887601][ T6914] ? __pfx___alloc_skb+0x10/0x10 [ 174.887617][ T6914] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 174.887631][ T6914] netlink_alloc_large_skb+0x69/0x130 [ 174.887644][ T6914] netlink_sendmsg+0x6a1/0xdd0 [ 174.887657][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.887673][ T6914] ____sys_sendmsg+0xa95/0xc70 [ 174.887686][ T6914] ? copy_msghdr_from_user+0x10a/0x160 [ 174.887701][ T6914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.887718][ T6914] ___sys_sendmsg+0x134/0x1d0 [ 174.887735][ T6914] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.887749][ T6914] ? __lock_acquire+0x622/0x1c90 [ 174.887780][ T6914] __sys_sendmsg+0x16d/0x220 [ 174.887796][ T6914] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.887820][ T6914] do_syscall_64+0xcd/0x4c0 [ 174.887838][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.887849][ T6914] RIP: 0033:0x7f88ec98e929 [ 174.887858][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.887868][ T6914] RSP: 002b:00007f88ed823038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.887879][ T6914] RAX: ffffffffffffffda RBX: 00007f88ecbb5fa0 RCX: 00007f88ec98e929 [ 174.887885][ T6914] RDX: 0000000000040800 RSI: 00002000000003c0 RDI: 0000000000000003 [ 174.887891][ T6914] RBP: 00007f88ed823090 R08: 0000000000000000 R09: 0000000000000000 [ 174.887897][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.887903][ T6914] R13: 0000000000000000 R14: 00007f88ecbb5fa0 R15: 00007ffd8c113908 [ 174.887916][ T6914] [ 175.105006][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.199087][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 175.199109][ T30] audit: type=1326 audit(1750326798.912:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f398fb858e7 code=0x7ffc0000 [ 175.366964][ T42] usb 4-1: USB disconnect, device number 9 [ 175.560310][ T30] audit: type=1326 audit(1750326798.922:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f398fb2ab19 code=0x7ffc0000 [ 175.583492][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.440644][ T30] audit: type=1326 audit(1750326798.922:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 176.771117][ T30] audit: type=1400 audit(1750326798.962:529): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 176.791338][ T30] audit: type=1326 audit(1750326798.962:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f398fb858e7 code=0x7ffc0000 [ 176.824612][ T30] audit: type=1326 audit(1750326798.962:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f398fb2ab19 code=0x7ffc0000 [ 176.849542][ T5822] Bluetooth: hci5: command tx timeout [ 176.855199][ T30] audit: type=1326 audit(1750326798.962:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.0.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 176.984234][ T6936] netlink: 128 bytes leftover after parsing attributes in process `syz.2.277'. [ 176.993930][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 177.121123][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 177.159948][ T6850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.301165][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 177.491391][ T42] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 177.550228][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.593608][ T6850] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.611231][ T42] usb 4-1: config 0 has no interface number 0 [ 177.691462][ T42] usb 4-1: config 0 interface 165 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 177.745139][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.752294][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.791147][ T42] usb 4-1: config 0 interface 165 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 177.808750][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.815901][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.831396][ T42] usb 4-1: config 0 interface 165 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 177.881794][ T42] usb 4-1: config 0 interface 165 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.911607][ T42] usb 4-1: string descriptor 0 read error: -71 [ 178.881291][ T42] usb 4-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=23.ec [ 178.899581][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.917978][ T42] usb 4-1: config 0 descriptor?? [ 179.159827][ T42] usb 4-1: can't set config #0, error -71 [ 179.170368][ T6850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.180781][ T6850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.193585][ T42] usb 4-1: USB disconnect, device number 10 [ 179.353386][ T30] audit: type=1400 audit(1750326803.112:533): avc: denied { getopt } for pid=6958 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.555025][ T6963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.285'. [ 179.591115][ T975] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 179.864343][ T30] audit: type=1400 audit(1750326803.322:534): avc: denied { read } for pid=6955 comm="syz.0.285" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.887122][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.995763][ T30] audit: type=1400 audit(1750326803.322:535): avc: denied { open } for pid=6955 comm="syz.0.285" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.018970][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.672896][ T975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.691086][ T975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.752499][ T975] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.762352][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.770316][ T975] usb 3-1: Product: syz [ 180.781118][ T975] usb 3-1: Manufacturer: syz [ 180.785798][ T975] usb 3-1: SerialNumber: syz [ 180.963133][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 180.992300][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 181.518324][ T975] usb 3-1: 0:2 : does not exist [ 181.536135][ T975] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 181.691137][ T975] usb 3-1: USB disconnect, device number 7 [ 181.852917][ T6974] /dev/nullb0: Can't open blockdev [ 181.926856][ T6850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.943320][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.029921][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 182.029936][ T30] audit: type=1326 audit(1750326805.792:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 182.131317][ T5981] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.182841][ T30] audit: type=1326 audit(1750326805.792:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 182.221581][ T6974] lo speed is unknown, defaulting to 1000 [ 182.406177][ T30] audit: type=1326 audit(1750326805.852:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 182.435341][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 182.592292][ T30] audit: type=1326 audit(1750326805.852:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 182.615526][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.647189][ T5981] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 182.724698][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.756678][ T30] audit: type=1326 audit(1750326805.882:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f398fbc11e5 code=0x7ffc0000 [ 182.816796][ T5981] usb 5-1: config 0 descriptor?? [ 182.857122][ T30] audit: type=1400 audit(1750326806.032:542): avc: denied { watch_mount watch_reads } for pid=6984 comm="syz.2.291" path="/59" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.882090][ T30] audit: type=1326 audit(1750326806.102:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 182.970279][ T5981] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 182.988804][ T30] audit: type=1326 audit(1750326806.352:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 183.012388][ T30] audit: type=1326 audit(1750326806.442:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 183.044735][ T30] audit: type=1326 audit(1750326806.442:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 183.611228][ T42] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.649284][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 183.669854][ T7001] block device autoloading is deprecated and will be removed. [ 183.768038][ T7001] ======================================================= [ 183.768038][ T7001] WARNING: The mand mount option has been deprecated and [ 183.768038][ T7001] and is ignored by this kernel. Remove the mand [ 183.768038][ T7001] option from the mount to silence this warning. [ 183.768038][ T7001] ======================================================= [ 183.840839][ T42] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.861190][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.920871][ T42] usb 1-1: Product: syz [ 184.027833][ T7004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'. [ 184.050141][ T42] usb 1-1: Manufacturer: syz [ 184.122815][ T7007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'. [ 184.169731][ T42] usb 1-1: SerialNumber: syz [ 184.242110][ T42] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 184.265509][ T6850] veth0_vlan: entered promiscuous mode [ 184.274213][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.304588][ T6850] veth1_vlan: entered promiscuous mode [ 184.552077][ T6850] veth0_macvtap: entered promiscuous mode [ 184.610984][ T6850] veth1_macvtap: entered promiscuous mode [ 184.690263][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.714796][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.729674][ T6850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.745826][ T6850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.757168][ T6850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.776148][ T6850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.049789][ T42] usb 5-1: USB disconnect, device number 7 [ 185.070021][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.129454][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.313388][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.386124][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.409259][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 185.552818][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.651514][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.400821][ T24] usb 1-1: Service connection timeout for: 256 [ 186.446448][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 186.484002][ T24] ath9k_htc: Failed to initialize the device [ 186.506196][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 187.088335][ T978] usb 1-1: USB disconnect, device number 8 [ 187.115726][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 187.115738][ T30] audit: type=1400 audit(1750326810.892:554): avc: denied { connect } for pid=7029 comm="syz.5.252" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.465693][ T7041] FAULT_INJECTION: forcing a failure. [ 187.465693][ T7041] name failslab, interval 1, probability 0, space 0, times 0 [ 187.502493][ T7033] netlink: 'syz.4.302': attribute type 11 has an invalid length. [ 188.011236][ T7041] CPU: 1 UID: 0 PID: 7041 Comm: syz.0.304 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 188.011255][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.011262][ T7041] Call Trace: [ 188.011266][ T7041] [ 188.011271][ T7041] dump_stack_lvl+0x16c/0x1f0 [ 188.011291][ T7041] should_fail_ex+0x512/0x640 [ 188.011306][ T7041] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 188.011322][ T7041] should_failslab+0xc2/0x120 [ 188.011338][ T7041] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 188.011352][ T7041] ? alloc_empty_file+0x55/0x1e0 [ 188.011364][ T7041] alloc_empty_file+0x55/0x1e0 [ 188.011374][ T7041] path_openat+0xda/0x2cb0 [ 188.011389][ T7041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.011404][ T7041] ? __pfx_path_openat+0x10/0x10 [ 188.011422][ T7041] do_filp_open+0x20b/0x470 [ 188.011437][ T7041] ? __pfx_do_filp_open+0x10/0x10 [ 188.011460][ T7041] ? _raw_spin_unlock+0x28/0x50 [ 188.011474][ T7041] ? alloc_fd+0x471/0x7d0 [ 188.011492][ T7041] do_sys_openat2+0x11b/0x1d0 [ 188.011502][ T7041] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.011513][ T7041] ? __fget_files+0x20e/0x3c0 [ 188.011531][ T7041] __x64_sys_open+0x153/0x1e0 [ 188.011541][ T7041] ? __pfx___x64_sys_open+0x10/0x10 [ 188.011553][ T7041] ? rcu_is_watching+0x12/0xc0 [ 188.011569][ T7041] do_syscall_64+0xcd/0x4c0 [ 188.011586][ T7041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.011597][ T7041] RIP: 0033:0x7f398fb8e929 [ 188.011606][ T7041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.011617][ T7041] RSP: 002b:00007f398d9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 188.011628][ T7041] RAX: ffffffffffffffda RBX: 00007f398fdb6080 RCX: 00007f398fb8e929 [ 188.011635][ T7041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 188.011641][ T7041] RBP: 00007f398d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 188.011647][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.011653][ T7041] R13: 0000000000000000 R14: 00007f398fdb6080 R15: 00007fff419b89c8 [ 188.011665][ T7041] [ 188.494437][ T30] audit: type=1400 audit(1750326812.272:555): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 188.761241][ T30] audit: type=1400 audit(1750326812.302:556): avc: denied { listen } for pid=7032 comm="syz.4.302" laddr=172.20.20.170 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.800770][ T7048] sctp: failed to load transform for md5: -4 [ 190.813344][ T30] audit: type=1400 audit(1750326813.702:557): avc: denied { write } for pid=7052 comm="syz.5.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.268809][ T7039] sctp: failed to load transform for md5: -4 [ 191.353851][ T7056] syz.2.306 (7056) used greatest stack depth: 20824 bytes left [ 191.909652][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 191.915915][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 191.922241][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 192.440675][ T7078] PKCS8: Unsupported PKCS#8 version [ 192.451060][ T30] audit: type=1400 audit(1750326816.199:558): avc: denied { bind } for pid=7073 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 192.607627][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 192.841314][ T975] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.885952][ T7085] syz.2.310: attempt to access beyond end of device [ 192.885952][ T7085] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 192.899190][ T7085] syz.2.310: attempt to access beyond end of device [ 192.899190][ T7085] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 192.956242][ T7085] Mount JFS Failure: -5 [ 193.151197][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 193.216711][ T975] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 193.279241][ T975] usb 4-1: config 0 has no interface number 0 [ 193.333569][ T975] usb 4-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=fb.b2 [ 193.366230][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.396418][ T975] usb 4-1: Product: syz [ 193.420858][ T975] usb 4-1: Manufacturer: syz [ 193.445575][ T975] usb 4-1: SerialNumber: syz [ 193.473820][ T975] usb 4-1: config 0 descriptor?? [ 193.507486][ T975] ftdi_sio 4-1:0.57: FTDI USB Serial Device converter detected [ 193.550278][ T975] ftdi_sio ttyUSB0: unknown device type: 0xfbb2 [ 193.708043][ T975] usb 4-1: USB disconnect, device number 11 [ 193.744607][ T975] ftdi_sio 4-1:0.57: device disconnected [ 193.810356][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.816771][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.552817][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 195.380322][ T7109] netlink: 128 bytes leftover after parsing attributes in process `syz.2.322'. [ 195.500946][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 199.272328][ T30] audit: type=1400 audit(1750326823.049:559): avc: denied { read } for pid=7134 comm="syz.5.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.565753][ T7145] netlink: 128 bytes leftover after parsing attributes in process `syz.2.335'. [ 199.591901][ T7146] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 199.891164][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 202.221435][ T975] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 202.951423][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 202.963878][ T975] usb 4-1: config 89 has an invalid interface number: 1 but max is 0 [ 202.980815][ T975] usb 4-1: config 89 has no interface number 0 [ 203.061621][ T975] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 203.131578][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.139643][ T975] usb 4-1: Product: syz [ 203.271439][ T975] usb 4-1: Manufacturer: syz [ 203.281268][ T975] usb 4-1: SerialNumber: syz [ 203.401303][ T5146] Bluetooth: hci5: command 0x0405 tx timeout [ 203.753459][ T7187] netlink: 'syz.3.340': attribute type 21 has an invalid length. [ 205.796885][ T7194] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 205.984352][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 206.087050][ T975] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 206.354163][ T975] usb 4-1: selecting invalid altsetting 1 [ 206.861305][ T975] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 206.926250][ T975] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.971329][ T978] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 207.103289][ T975] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 207.191251][ T975] usb 4-1: media controller created [ 207.214163][ T978] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 207.261152][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.302620][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.347437][ T978] usb 5-1: config 0 descriptor?? [ 207.532283][ T975] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 207.539315][ T975] zl10353_read_register: readreg error (reg=127, ret==-71) [ 207.907924][ T975] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 208.220675][ T30] audit: type=1400 audit(1750326831.969:560): avc: denied { name_connect } for pid=7206 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 208.655573][ T975] usb 4-1: USB disconnect, device number 12 [ 209.128146][ T30] audit: type=1400 audit(1750326832.859:561): avc: denied { create } for pid=7206 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.250679][ T30] audit: type=1400 audit(1750326832.869:562): avc: denied { write } for pid=7206 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.479260][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 209.865605][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'. [ 210.139748][ T978] pegasus 5-1:0.0: probe with driver pegasus failed with error -110 [ 212.161739][ T978] usb 5-1: USB disconnect, device number 8 [ 212.282347][ T30] audit: type=1400 audit(1750326836.049:563): avc: denied { append } for pid=7241 comm="syz.3.364" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 212.646729][ T30] audit: type=1400 audit(1750326836.419:564): avc: denied { getopt } for pid=7241 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.732419][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 215.396135][ T7084] syz.3.314 (7084) used greatest stack depth: 20552 bytes left [ 217.457922][ T30] audit: type=1400 audit(1750326840.269:565): avc: denied { kexec_image_load } for pid=7289 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 218.669804][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 218.703876][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 218.802836][ T30] audit: type=1400 audit(1750326842.579:566): avc: denied { ioctl } for pid=7303 comm="syz.4.382" path="socket:[13049]" dev="sockfs" ino=13049 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.020961][ T30] audit: type=1400 audit(1750326842.609:567): avc: denied { read write } for pid=7303 comm="syz.4.382" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.111321][ T5944] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.119261][ T30] audit: type=1400 audit(1750326842.609:568): avc: denied { open } for pid=7303 comm="syz.4.382" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.791372][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 219.910442][ T5944] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 219.926966][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 219.949015][ T30] audit: type=1400 audit(1750326842.629:569): avc: denied { ioctl } for pid=7303 comm="syz.4.382" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.067377][ T5944] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.085368][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.097907][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.124181][ T5944] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 220.154086][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 220.171466][ T5944] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.293359][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.319756][ T7321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.386'. [ 220.328985][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.330795][ T5944] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 220.784717][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 220.807093][ T5944] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.820306][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.960705][ T7325] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 220.971271][ T30] audit: type=1400 audit(1750326844.669:570): avc: denied { sqpoll } for pid=7316 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 221.126293][ T5944] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 221.343282][ T5944] usb 5-1: string descriptor 0 read error: -22 [ 221.350636][ T5944] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 221.381500][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.531370][ T5944] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 222.351073][ T42] usb 5-1: USB disconnect, device number 9 [ 223.432497][ T7354] netlink: 'syz.0.394': attribute type 21 has an invalid length. [ 223.675612][ T7352] netlink: 'syz.2.393': attribute type 21 has an invalid length. [ 223.900762][ T7362] capability: warning: `syz.3.397' uses 32-bit capabilities (legacy support in use) [ 224.013050][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 224.511486][ T42] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 224.557759][ T7371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.606631][ T30] audit: type=1400 audit(1750326848.359:571): avc: denied { create } for pid=7367 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.626125][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.970280][ T30] audit: type=1400 audit(1750326848.369:572): avc: denied { listen } for pid=7367 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.012184][ T30] audit: type=1400 audit(1750326848.369:573): avc: denied { setopt } for pid=7367 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.103041][ T30] audit: type=1400 audit(1750326848.369:574): avc: denied { read } for pid=7367 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.622372][ T42] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 225.645103][ T42] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 225.667711][ T42] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.739131][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.248417][ T7384] sg_write: data in/out 980397155/32 bytes for SCSI command 0x82-- guessing data in; [ 226.248417][ T7384] program syz.5.402 not setting count and/or reply_len properly [ 226.694816][ T30] audit: type=1400 audit(1750326850.449:575): avc: denied { setopt } for pid=7382 comm="syz.5.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.740513][ T7384] IPVS: set_ctl: invalid protocol: 32294 172.30.1.6:20003 [ 227.291714][ T5877] usb 4-1: USB disconnect, device number 13 [ 227.688979][ T7407] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 227.803629][ T7406] netlink: 'syz.3.409': attribute type 12 has an invalid length. [ 227.830300][ T7406] netlink: 'syz.3.409': attribute type 29 has an invalid length. [ 227.858177][ T7406] netlink: 148 bytes leftover after parsing attributes in process `syz.3.409'. [ 227.893404][ T7406] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 227.999159][ T7406] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 228.007291][ T7406] netlink: 39 bytes leftover after parsing attributes in process `syz.3.409'. [ 228.965918][ T30] audit: type=1400 audit(1750326852.739:576): avc: denied { append } for pid=7415 comm="syz.3.412" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.150437][ T30] audit: type=1400 audit(1750326853.919:577): avc: denied { create } for pid=7427 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 231.223021][ T30] audit: type=1400 audit(1750326854.999:578): avc: denied { bind } for pid=7427 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 231.761245][ T30] audit: type=1400 audit(1750326855.449:579): avc: denied { map } for pid=7436 comm="syz.4.416" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 231.920457][ T30] audit: type=1400 audit(1750326855.449:580): avc: denied { execute } for pid=7436 comm="syz.4.416" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 232.761933][ T30] audit: type=1400 audit(1750326856.519:581): avc: denied { execute_no_trans } for pid=7452 comm="syz.0.421" path="/94/file0" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.874957][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.5.422'. [ 232.890110][ T30] audit: type=1400 audit(1750326856.659:582): avc: denied { create } for pid=7452 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.915226][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.5.422'. [ 232.960985][ T7457] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 233.224428][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.422'. [ 233.253334][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.422'. [ 233.407711][ T7456] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 235.289908][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 235.298912][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 236.133903][ T30] audit: type=1400 audit(1750326859.909:583): avc: denied { read write } for pid=7494 comm="syz.0.436" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 236.138496][ T7497] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 236.168474][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.191100][ T30] audit: type=1400 audit(1750326859.909:584): avc: denied { open } for pid=7494 comm="syz.0.436" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 237.841220][ T978] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 238.752650][ T7514] binder: 7506:7514 ioctl c018620c 200000000000 returned -1 [ 239.091316][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 239.103969][ T978] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 239.124220][ T978] usb 6-1: can't read configurations, error -22 [ 239.302649][ T978] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 239.901082][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 239.947869][ T978] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 240.080631][ T978] usb 6-1: can't read configurations, error -22 [ 240.131425][ T978] usb usb6-port1: attempt power cycle [ 240.281731][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 240.327035][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 240.533839][ T978] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 240.954184][ T978] usb 6-1: device not accepting address 4, error -71 [ 240.978358][ T7537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.985833][ T7537] IPv6: NLM_F_CREATE should be set when creating new route [ 241.035200][ T7537] lo: entered allmulticast mode [ 241.048123][ T7537] tunl0: entered allmulticast mode [ 241.196693][ T7537] gre0: entered allmulticast mode [ 242.075857][ T7537] gretap0: entered allmulticast mode [ 242.194303][ T7537] erspan0: entered allmulticast mode [ 242.234053][ T7537] ip_vti0: entered allmulticast mode [ 242.326776][ T7537] ip6_vti0: entered allmulticast mode [ 242.372127][ T7537] sit0: entered allmulticast mode [ 242.398476][ T7537] ip6tnl0: entered allmulticast mode [ 242.425092][ T7537] ip6gre0: entered allmulticast mode [ 242.475362][ T7558] loop2: detected capacity change from 0 to 7 [ 242.488831][ T7537] syz_tun: entered allmulticast mode [ 242.523767][ T7537] ip6gretap0: entered allmulticast mode [ 242.539662][ T30] audit: type=1400 audit(1750326866.309:585): avc: denied { mount } for pid=7557 comm="syz.4.457" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 242.579601][ T5827] Dev loop2: unable to read RDB block 7 [ 242.589032][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.596780][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.620034][ T5827] loop2: unable to read partition table [ 242.633272][ T5827] loop2: partition table beyond EOD, truncated [ 242.651939][ T7537] bridge0: entered allmulticast mode [ 242.667782][ T30] audit: type=1400 audit(1750326866.439:586): avc: denied { setopt } for pid=7557 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.691702][ T7537] vcan0: entered allmulticast mode [ 242.717246][ T7537] bond0: entered allmulticast mode [ 242.727908][ T7537] bond_slave_0: entered allmulticast mode [ 242.741197][ T975] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 242.755412][ T7537] bond_slave_1: entered allmulticast mode [ 242.782324][ T7537] team0: entered allmulticast mode [ 242.797881][ T7537] team_slave_0: entered allmulticast mode [ 242.803862][ T7558] Dev loop2: unable to read RDB block 7 [ 242.810014][ T7558] loop2: unable to read partition table [ 242.832862][ T7558] loop2: partition table beyond EOD, truncated [ 242.839133][ T7537] team_slave_1: entered allmulticast mode [ 242.848604][ T7558] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.866030][ T7537] dummy0: entered allmulticast mode [ 242.894183][ T7537] nlmon0: entered allmulticast mode [ 242.902458][ T975] usb 1-1: Invalid ep0 maxpacket: 16 [ 242.912580][ T7537] caif0: entered allmulticast mode [ 242.991460][ T7537] batadv0: entered allmulticast mode [ 243.008078][ T30] audit: type=1400 audit(1750326866.779:587): avc: denied { mount } for pid=7562 comm="syz.2.458" name="/" dev="autofs" ino=14734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 243.086044][ T7537] vxcan0: entered allmulticast mode [ 243.100021][ T7537] vxcan1: entered allmulticast mode [ 243.105335][ T975] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 243.133920][ T7537] veth0: entered allmulticast mode [ 243.205896][ T7537] veth1: entered allmulticast mode [ 243.250346][ T7537] wg0: entered allmulticast mode [ 243.259963][ T7537] wg1: entered allmulticast mode [ 243.281986][ T975] usb 1-1: Invalid ep0 maxpacket: 16 [ 243.301811][ T975] usb usb1-port1: attempt power cycle [ 243.318914][ T7537] wg2: entered allmulticast mode [ 243.392150][ T7537] veth0_to_bridge: entered allmulticast mode [ 243.460010][ T7537] veth1_to_bridge: entered allmulticast mode [ 243.524478][ T7537] veth0_to_bond: entered allmulticast mode [ 243.566163][ T7537] veth1_to_bond: entered allmulticast mode [ 243.601578][ T7537] veth0_to_team: entered allmulticast mode [ 243.632404][ T7537] veth1_to_team: entered allmulticast mode [ 243.691682][ T975] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 243.704678][ T7537] veth0_to_batadv: entered allmulticast mode [ 243.723056][ T30] audit: type=1400 audit(1750326867.489:588): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 243.732767][ T975] usb 1-1: Invalid ep0 maxpacket: 16 [ 243.758909][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.807658][ T7537] batadv_slave_0: entered allmulticast mode [ 243.839762][ T7537] veth1_to_batadv: entered allmulticast mode [ 243.877383][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.900613][ T7537] batadv_slave_1: entered allmulticast mode [ 243.927575][ T7537] xfrm0: entered allmulticast mode [ 243.933120][ T975] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 243.961595][ T7537] veth0_to_hsr: entered allmulticast mode [ 243.971909][ T975] usb 1-1: Invalid ep0 maxpacket: 16 [ 243.981774][ T975] usb usb1-port1: unable to enumerate USB device [ 244.012065][ T42] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 244.022703][ T7537] hsr_slave_0: entered allmulticast mode [ 244.049594][ T7537] veth1_to_hsr: entered allmulticast mode [ 244.063244][ T7537] hsr_slave_1: entered allmulticast mode [ 244.089251][ T7537] hsr0: entered allmulticast mode [ 244.112097][ T7537] veth1_virt_wifi: entered allmulticast mode [ 244.141221][ T5829] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 244.170364][ T7537] veth0_virt_wifi: entered allmulticast mode [ 244.208653][ T42] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 244.219831][ T42] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 244.228549][ T7537] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 244.246651][ T42] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.248683][ T7537] veth1_vlan: entered allmulticast mode [ 244.276160][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.301408][ T7537] veth0_vlan: entered allmulticast mode [ 244.306200][ T5829] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 244.317575][ T5829] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 244.347782][ T5829] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.348589][ T7537] vlan0: entered allmulticast mode [ 244.379739][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.405293][ T7537] vlan1: entered allmulticast mode [ 244.425611][ T7537] macvlan0: entered allmulticast mode [ 244.471141][ T7537] macvlan1: entered allmulticast mode [ 244.493365][ T7537] ipvlan0: entered allmulticast mode [ 244.517091][ T7537] ipvlan1: entered allmulticast mode [ 244.532084][ T7537] veth1_macvtap: entered allmulticast mode [ 244.561934][ T7537] veth0_macvtap: entered allmulticast mode [ 244.608043][ T7537] macvtap0: entered allmulticast mode [ 244.636746][ T7537] macsec0: entered allmulticast mode [ 244.657017][ T7537] geneve0: entered allmulticast mode [ 244.683417][ T7537] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.721513][ T7537] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.746449][ T7537] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.771229][ T7537] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.800977][ T7537] geneve1: entered allmulticast mode [ 244.822084][ T7537] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 244.854045][ T7537] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 244.880546][ T7537] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 244.906221][ T7537] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 244.962788][ T7537] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 245.000895][ T7537] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 245.023010][ T7537] syzkaller0: entered allmulticast mode [ 245.118281][ T30] audit: type=1400 audit(1750326868.889:589): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 245.169197][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 245.471329][ T975] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 246.002739][ T975] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 246.020073][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.091865][ T975] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.114682][ T975] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.169659][ T975] usb 1-1: Manufacturer: syz [ 246.188853][ T975] usb 1-1: config 0 descriptor?? [ 246.193929][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 246.351266][ T975] rc_core: IR keymap rc-hauppauge not found [ 246.364912][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 246.378990][ T975] Registered IR keymap rc-empty [ 246.388214][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.402296][ T975] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 246.428062][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.453427][ T975] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 246.471097][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.484340][ T10] usb 5-1: Manufacturer: syz [ 246.576669][ T10] usb 5-1: config 0 descriptor?? [ 246.618214][ T30] audit: type=1400 audit(1750326870.389:590): avc: denied { read } for pid=5180 comm="acpid" name="event4" dev="devtmpfs" ino=2910 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.694893][ T24] usb 4-1: USB disconnect, device number 14 [ 246.707640][ T30] audit: type=1400 audit(1750326870.389:591): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2910 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.839176][ T30] audit: type=1400 audit(1750326870.389:592): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2910 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.874915][ T10] rc_core: IR keymap rc-hauppauge not found [ 246.880836][ T10] Registered IR keymap rc-empty [ 246.899536][ T5829] usb 3-1: USB disconnect, device number 8 [ 246.952179][ T10] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 247.043255][ T30] audit: type=1326 audit(1750326870.609:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 247.172960][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input9 [ 247.189013][ T30] audit: type=1326 audit(1750326870.609:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398fb8e929 code=0x7ffc0000 [ 247.276326][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 248.513891][ T7605] lo speed is unknown, defaulting to 1000 [ 248.599053][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 248.599085][ T30] audit: type=1326 audit(1750326872.369:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 248.695243][ T10] usb 1-1: USB disconnect, device number 13 [ 248.979195][ T30] audit: type=1326 audit(1750326872.469:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 249.188955][ T30] audit: type=1326 audit(1750326872.469:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 249.357487][ T30] audit: type=1326 audit(1750326872.469:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 249.518243][ T30] audit: type=1326 audit(1750326872.509:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 249.544082][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 249.622438][ T7617] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.470'. [ 249.669764][ T30] audit: type=1326 audit(1750326872.519:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 249.805520][ T30] audit: type=1326 audit(1750326872.519:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 249.909287][ T30] audit: type=1400 audit(1750326872.639:630): avc: denied { read } for pid=7608 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 249.941135][ T5944] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 249.993414][ T30] audit: type=1326 audit(1750326872.769:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 250.331328][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 250.370508][ T5944] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 250.468033][ T30] audit: type=1326 audit(1750326872.769:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8b78e929 code=0x7ffc0000 [ 250.517252][ T5944] usb 6-1: New USB device strings: Mfr=63, Product=2, SerialNumber=3 [ 250.526362][ T5944] usb 6-1: Product: syz [ 250.530766][ T5944] usb 6-1: Manufacturer: syz [ 250.538095][ T5944] usb 6-1: SerialNumber: syz [ 250.552113][ T5944] usb 6-1: config 0 descriptor?? [ 250.612194][ T5944] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 250.730386][ T978] usb 5-1: USB disconnect, device number 10 [ 250.849157][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.471'. [ 251.015841][ T5944] pwc: Failed to set LED on/off time (-71) [ 251.048619][ T5944] pwc: send_video_command error -71 [ 251.097052][ T5944] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 251.175074][ T5944] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 251.232590][ T5944] usb 6-1: USB disconnect, device number 6 [ 251.303362][ T7627] bridge_slave_0: left allmulticast mode [ 251.342703][ T7638] netlink: 'syz.2.474': attribute type 10 has an invalid length. [ 251.396115][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 251.446157][ T7627] bridge_slave_0: left promiscuous mode [ 251.482365][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.540211][ T7627] bridge_slave_1: left allmulticast mode [ 251.649293][ T7627] bridge_slave_1: left promiscuous mode [ 251.817545][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.874818][ T7627] bond0: (slave bond_slave_0): Releasing backup interface [ 251.949360][ T7627] bond0: (slave bond_slave_1): Releasing backup interface [ 252.031103][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 252.087415][ T7627] team0: Port device team_slave_0 removed [ 252.148168][ T7627] team0: Port device team_slave_1 removed [ 252.154845][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.182532][ T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 252.200363][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.224157][ T24] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 252.235165][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.266488][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.287301][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.328048][ T7629] team0: Mode changed to "loadbalance" [ 252.351326][ T5877] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 252.364044][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.452642][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.488953][ T7638] team0: Port device bond0 added [ 252.521620][ T5877] usb 6-1: Invalid ep0 maxpacket: 16 [ 252.661274][ T5877] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 252.861264][ T5877] usb 6-1: Invalid ep0 maxpacket: 16 [ 253.004075][ T5877] usb usb6-port1: attempt power cycle [ 253.063735][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 253.872368][ T5877] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 253.892673][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 253.931822][ T5877] usb 6-1: Invalid ep0 maxpacket: 16 [ 254.422302][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 254.529236][ T5877] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 254.570482][ T5877] usb 6-1: Invalid ep0 maxpacket: 16 [ 254.587055][ T5877] usb usb6-port1: unable to enumerate USB device [ 255.081311][ T5828] Bluetooth: hci5: command 0x0405 tx timeout [ 255.121642][ T978] usb 1-1: USB disconnect, device number 14 [ 255.244677][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.250982][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.014157][ T7694] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 257.366255][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 257.532401][ T7683] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 257.821095][ T5944] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 258.442530][ T5944] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 258.451849][ T5944] usb 6-1: config 0 has no interface number 0 [ 258.499995][ T5944] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 258.557901][ T5944] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.559240][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 258.559252][ T30] audit: type=1400 audit(1750326882.329:655): avc: denied { append } for pid=7704 comm="syz.2.495" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 258.604572][ T5944] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 258.634526][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.667322][ T5944] usb 6-1: Product: syz [ 258.682302][ T5944] usb 6-1: Manufacturer: syz [ 258.697811][ T5944] usb 6-1: SerialNumber: syz [ 259.014431][ T5944] usb 6-1: config 0 descriptor?? [ 259.020055][ T7695] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 259.063860][ T5944] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 259.084838][ T5944] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 259.168112][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 259.828120][ T30] audit: type=1400 audit(1750326883.599:656): avc: denied { read } for pid=7719 comm="syz.4.500" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 259.865374][ T30] audit: type=1400 audit(1750326883.629:657): avc: denied { open } for pid=7719 comm="syz.4.500" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 259.986780][ T24] usb 6-1: USB disconnect, device number 11 [ 260.010075][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 260.037864][ T24] cyberjack 6-1:0.69: device disconnected [ 260.624778][ T7720] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.658311][ T7720] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 260.780131][ T7720] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.800029][ T30] audit: type=1400 audit(1750326884.569:658): avc: denied { create } for pid=7736 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.839153][ T7720] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.882110][ T30] audit: type=1400 audit(1750326884.569:659): avc: denied { listen } for pid=7736 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.901489][ T30] audit: type=1400 audit(1750326884.569:660): avc: denied { ioctl } for pid=7736 comm="syz.3.503" path="socket:[15785]" dev="sockfs" ino=15785 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 261.076141][ T7720] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 261.394934][ T7720] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.408192][ T7720] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 261.586107][ T7720] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 261.604203][ T7720] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.671229][ T7720] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 261.864920][ T7720] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 261.877083][ T7720] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 261.961188][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 262.841091][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 263.084202][ T7720] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 263.401204][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 263.671229][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 263.761103][ T5877] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 263.866619][ T7770] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 263.931275][ T5828] Bluetooth: hci5: command 0x0405 tx timeout [ 263.951207][ T5877] usb 6-1: Invalid ep0 maxpacket: 16 [ 263.976001][ T7764] cgroup: fork rejected by pids controller in /syz2 [ 264.061124][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 264.449243][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 264.491180][ T30] audit: type=1400 audit(1750326888.259:661): avc: denied { bind } for pid=7878 comm="syz.5.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 264.673715][ T24] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 264.871116][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.879282][ T24] usb 5-1: Product: syz [ 264.931633][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 264.934994][ T24] usb 5-1: Manufacturer: syz [ 264.973321][ T24] usb 5-1: SerialNumber: syz [ 265.034782][ T24] usb 5-1: config 0 descriptor?? [ 265.721188][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 265.961107][ T5828] Bluetooth: hci5: command 0x0405 tx timeout [ 265.962405][ T7769] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 266.251576][ T978] usb 5-1: USB disconnect, device number 11 [ 266.378616][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 266.388146][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 266.477741][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.757798][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 267.156815][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 267.363792][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.413514][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 267.481542][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 267.651387][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 267.721672][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 267.840739][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.882542][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 267.892715][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 267.902806][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 267.962226][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 267.972418][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.273707][ T5146] Bluetooth: hci5: command 0x0405 tx timeout [ 268.337611][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.346542][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.354659][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.362531][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.369804][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.465975][ T24] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=24 comm=kworker/1:0 [ 268.499783][ T7923] lo speed is unknown, defaulting to 1000 [ 268.699221][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.281791][ T5146] Bluetooth: hci5: command 0x0405 tx timeout [ 270.442172][ T5146] Bluetooth: hci2: command tx timeout [ 270.501136][ T978] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 270.712275][ T978] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 270.752431][ T978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 270.760053][ T978] usb 1-1: can't read configurations, error -61 [ 270.983620][ T978] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 271.002045][ C0] sctp_transport_update_pmtu: 63 callbacks suppressed [ 271.002063][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.019074][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.082160][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.092466][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.171547][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.241544][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.321873][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.402019][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.482457][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.492639][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 271.562872][ T978] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 271.582472][ T978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 271.614415][ T978] usb 1-1: can't read configurations, error -61 [ 271.623708][ T978] usb usb1-port1: attempt power cycle [ 272.270754][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 272.521273][ T5146] Bluetooth: hci2: command tx timeout [ 272.675931][ T978] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 272.715523][ T978] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 272.729869][ T54] team0: Port device bond0 removed [ 272.740660][ T978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 272.753339][ T54] bond0 (unregistering): Released all slaves [ 272.767785][ T978] usb 1-1: can't read configurations, error -61 [ 272.926679][ T978] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 272.934394][ T30] audit: type=1400 audit(1750326896.699:662): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.093177][ T30] audit: type=1400 audit(1750326896.749:663): avc: denied { search } for pid=5490 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.133045][ T978] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 273.619904][ T30] audit: type=1400 audit(1750326896.749:664): avc: denied { search } for pid=5490 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.645042][ T30] audit: type=1400 audit(1750326896.749:665): avc: denied { read } for pid=5490 comm="dhcpcd" name="n100" dev="tmpfs" ino=3996 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.683766][ T30] audit: type=1400 audit(1750326896.749:666): avc: denied { open } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3996 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.764087][ T30] audit: type=1400 audit(1750326896.749:667): avc: denied { getattr } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3996 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.767793][ T978] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 274.346465][ T978] usb 1-1: can't read configurations, error -71 [ 274.495370][ T30] audit: type=1400 audit(1750326898.269:668): avc: denied { create } for pid=7977 comm="syz.5.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.533629][ T978] usb usb1-port1: unable to enumerate USB device [ 274.577833][ T30] audit: type=1400 audit(1750326898.269:669): avc: denied { write } for pid=7977 comm="syz.5.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.763001][ T5146] Bluetooth: hci2: command tx timeout [ 275.009162][ T7923] chnl_net:caif_netlink_parms(): no params data found [ 275.140236][ T30] audit: type=1400 audit(1750326898.899:670): avc: denied { read open } for pid=7991 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.402057][ T30] audit: type=1400 audit(1750326898.899:671): avc: denied { getattr } for pid=7991 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.211633][ C0] sctp_transport_update_pmtu: 48 callbacks suppressed [ 276.211646][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.362362][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.372488][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.443172][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.511213][ T54] hsr_slave_0: left promiscuous mode [ 276.521741][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.602714][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.662361][ T8018] block device autoloading is deprecated and will be removed. [ 276.673400][ T54] hsr_slave_1: left promiscuous mode [ 276.783303][ T8018] input: syz0 as /devices/virtual/input/input11 [ 276.841128][ T5146] Bluetooth: hci2: command tx timeout [ 277.003887][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 277.014064][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 277.024446][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 277.164026][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 277.343797][ T54] veth1_macvtap: left promiscuous mode [ 277.349449][ T54] veth0_macvtap: left promiscuous mode [ 277.381229][ T54] veth1_vlan: left promiscuous mode [ 277.399020][ T54] veth0_vlan: left promiscuous mode [ 278.336432][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 278.336442][ T30] audit: type=1400 audit(1750326902.109:676): avc: denied { remove_name } for pid=8030 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4080 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.514118][ T30] audit: type=1400 audit(1750326902.149:677): avc: denied { unlink } for pid=8030 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4080 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.740492][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 278.824671][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 279.163973][ T8040] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 280.521222][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 281.491778][ C0] sctp_transport_update_pmtu: 32 callbacks suppressed [ 281.491791][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.509499][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.122056][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.762225][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.772391][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.782539][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 283.402484][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 283.412866][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 283.755559][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.787808][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.810631][ T7923] bridge_slave_0: entered allmulticast mode [ 283.819730][ T7923] bridge_slave_0: entered promiscuous mode [ 283.874935][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.004065][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.017256][ T7923] bridge_slave_1: entered allmulticast mode [ 284.024869][ T7923] bridge_slave_1: entered promiscuous mode [ 284.042243][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 284.052385][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 284.321422][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.392993][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.468635][ T7923] team0: Port device team_slave_0 added [ 284.526422][ T7923] team0: Port device team_slave_1 added [ 284.692664][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.706296][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.743256][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.765558][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.773085][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.961333][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.642500][ T7923] hsr_slave_0: entered promiscuous mode [ 285.749394][ T7923] hsr_slave_1: entered promiscuous mode [ 285.865750][ T8104] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 286.601586][ C0] sctp_transport_update_pmtu: 10 callbacks suppressed [ 286.601603][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 286.829183][ T30] audit: type=1400 audit(1750326910.559:678): avc: denied { map } for pid=8114 comm="syz.5.570" path="/dev/video1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 287.241812][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 287.251881][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 287.321639][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 287.882378][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 287.892663][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 287.903420][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 288.523419][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 288.533734][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 288.543995][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 288.554224][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 288.856564][ T7923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.981303][ T7923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.048905][ T7923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.058580][ T7923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.131343][ T5944] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 289.253809][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.304604][ T5944] usb 4-1: Invalid ep0 maxpacket: 16 [ 289.319959][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.402942][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.410916][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.478796][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.481461][ T5944] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 289.485995][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.861163][ T5944] usb 4-1: Invalid ep0 maxpacket: 16 [ 290.256285][ T5944] usb usb4-port1: attempt power cycle [ 290.745126][ T5944] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 290.815047][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.826233][ T5944] usb 4-1: Invalid ep0 maxpacket: 16 [ 291.061375][ T7923] veth0_vlan: entered promiscuous mode [ 291.091120][ T5944] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 291.381411][ T7923] veth1_vlan: entered promiscuous mode [ 291.542041][ T5944] usb 4-1: Invalid ep0 maxpacket: 16 [ 291.552511][ T5944] usb usb4-port1: unable to enumerate USB device [ 291.677239][ T7923] veth0_macvtap: entered promiscuous mode [ 291.709245][ T7923] veth1_macvtap: entered promiscuous mode [ 291.722970][ C0] sctp_transport_update_pmtu: 12 callbacks suppressed [ 291.722987][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 291.739934][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 291.750030][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.362847][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.373093][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.383304][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.493480][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.524256][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.589308][ T6699] syz.1.213: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 292.631150][ T6699] CPU: 1 UID: 0 PID: 6699 Comm: syz.1.213 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 292.631176][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.631184][ T6699] Call Trace: [ 292.631188][ T6699] [ 292.631193][ T6699] dump_stack_lvl+0x16c/0x1f0 [ 292.631215][ T6699] warn_alloc+0x248/0x3a0 [ 292.631232][ T6699] ? __pfx_warn_alloc+0x10/0x10 [ 292.631252][ T6699] ? relay_open_buf.part.0+0x194/0xc80 [ 292.631270][ T6699] ? __vmalloc_node_noprof+0xad/0xf0 [ 292.631286][ T6699] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 292.631303][ T6699] ? relay_open_buf.part.0+0x194/0xc80 [ 292.631325][ T6699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.631338][ T6699] ? __alloc_pages_noprof+0xb/0x1b0 [ 292.631352][ T6699] ? ___kmalloc_large_node+0x84/0x1e0 [ 292.631367][ T6699] __kvmalloc_node_noprof+0x30a/0x620 [ 292.631381][ T6699] ? relay_open_buf.part.0+0x194/0xc80 [ 292.631399][ T6699] ? trace_kmalloc+0x2b/0xd0 [ 292.631414][ T6699] ? __kmalloc_noprof+0x242/0x510 [ 292.631428][ T6699] ? relay_open_buf.part.0+0x194/0xc80 [ 292.631448][ T6699] ? relay_open_buf.part.0+0x194/0xc80 [ 292.631466][ T6699] relay_open_buf.part.0+0x194/0xc80 [ 292.631489][ T6699] relay_open+0x653/0xad0 [ 292.631507][ T6699] ? debugfs_create_file_full+0x41/0x60 [ 292.631526][ T6699] do_blk_trace_setup+0x503/0xb50 [ 292.631545][ T6699] blk_trace_setup+0xed/0x1b0 [ 292.631561][ T6699] ? __pfx_blk_trace_setup+0x10/0x10 [ 292.631577][ T6699] ? __pfx_snprintf+0x10/0x10 [ 292.631606][ T6699] blk_trace_ioctl+0x146/0x280 [ 292.631622][ T6699] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 292.631642][ T6699] ? hook_file_ioctl_common+0x145/0x410 [ 292.631655][ T6699] blkdev_ioctl+0x108/0x6d0 [ 292.631668][ T6699] ? __pfx_blkdev_ioctl+0x10/0x10 [ 292.631678][ T6699] ? selinux_file_ioctl+0x180/0x270 [ 292.631694][ T6699] ? selinux_file_ioctl+0xb4/0x270 [ 292.631710][ T6699] ? __pfx_blkdev_ioctl+0x10/0x10 [ 292.631722][ T6699] __x64_sys_ioctl+0x18b/0x210 [ 292.631736][ T6699] do_syscall_64+0xcd/0x4c0 [ 292.631754][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.631766][ T6699] RIP: 0033:0x7f475718e929 [ 292.631780][ T6699] Code: Unable to access opcode bytes at 0x7f475718e8ff. [ 292.631785][ T6699] RSP: 002b:00007f475802e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.631796][ T6699] RAX: ffffffffffffffda RBX: 00007f47573b5fa0 RCX: 00007f475718e929 [ 292.631803][ T6699] RDX: 0000200000001c00 RSI: 00000000c0481273 RDI: 0000000000000003 [ 292.631810][ T6699] RBP: 00007f4757210b39 R08: 0000000000000000 R09: 0000000000000000 [ 292.631816][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.631822][ T6699] R13: 0000000000000000 R14: 00007f47573b5fa0 R15: 00007ffcb45d2838 [ 292.631837][ T6699] [ 292.631841][ T6699] Mem-Info: [ 292.645330][ T7923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.666390][ T6699] active_anon:3963 inactive_anon:24 isolated_anon:0 [ 292.666390][ T6699] active_file:12907 inactive_file:333 isolated_file:0 [ 292.666390][ T6699] unevictable:768 dirty:196 writeback:0 [ 292.666390][ T6699] slab_reclaimable:7143 slab_unreclaimable:102731 [ 292.666390][ T6699] mapped:34903 shmem:810 pagetables:3531 [ 292.666390][ T6699] sec_pagetables:0 bounce:0 [ 292.666390][ T6699] kernel_misc_reclaimable:0 [ 292.666390][ T6699] free:141271 free_pcp:32682 free_cma:0 [ 292.756579][ T7923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.984907][ T6699] Node 0 active_anon:1072kB inactive_anon:92kB active_file:1296kB inactive_file:56kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113060kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11984kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 293.036025][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.046417][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.056751][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.067210][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.408104][ T6699] Node 1 active_anon:17596kB inactive_anon:4kB active_file:50332kB inactive_file:1276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28624kB dirty:792kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:844kB pagetables:10424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.457710][ T6699] Node 0 DMA free:10116kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 293.524248][ T6699] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 294.301119][ T6699] Node 0 DMA32 free:42400kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:4096KB free_highatomic:32KB active_anon:4684kB inactive_anon:88kB active_file:1296kB inactive_file:56kB unevictable:1536kB writepending:20kB present:3129332kB managed:2540628kB mlocked:0kB bounce:0kB free_pcp:25696kB local_pcp:12336kB free_cma:0kB [ 294.471103][ T6699] lowmem_reserve[]: 0 0 1 1 1 [ 294.475847][ T6699] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:4kB free_cma:0kB [ 294.486671][ T7923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.828980][ T7923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.838770][ T6699] lowmem_reserve[]: 0 0 0 0 0 [ 294.848314][ T6699] Node 1 Normal free:513120kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25324kB inactive_anon:4kB active_file:50332kB inactive_file:1276kB unevictable:1536kB writepending:960kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:82720kB local_pcp:27596kB free_cma:0kB [ 294.926850][ T6699] lowmem_reserve[]: 0 0 0 0 0 [ 295.072674][ T6699] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10116kB [ 295.154276][ T6699] Node 0 DMA32: 3*4kB (E) 37*8kB (E) 84*16kB (UME) 200*32kB (UMEH) 107*64kB (UME) 50*128kB (UME) 36*256kB (UM) 11*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 0*4096kB = 42292kB [ 295.278705][ T6699] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 295.507146][ T6699] Node 1 Normal: 73*4kB (UME) 36*8kB (UM) 27*16kB (UM) 68*32kB (UM) 24*64kB (UME) 17*128kB (UME) 11*256kB (UME) 8*512kB (UME) 4*1024kB (UE) 2*2048kB (UM) 123*4096kB (M) = 525812kB [ 295.652049][ T6699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.663556][ T6699] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.673389][ T6699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.685196][ T6699] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.695741][ T6699] 19778 total pagecache pages [ 295.700438][ T6699] 1840 pages in swap cache [ 295.705154][ T6699] Free swap = 98032kB [ 295.709362][ T6699] Total swap = 124996kB [ 295.713849][ T6699] 2097051 pages RAM [ 295.717658][ T6699] 0 pages HighMem/MovableOnly [ 295.723167][ T6699] 429916 pages reserved [ 295.727332][ T6699] 0 pages cma reserved [ 296.755116][ T6246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.763273][ T6246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.842267][ C0] sctp_transport_update_pmtu: 8 callbacks suppressed [ 296.842286][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 296.859235][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 296.997307][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.591'. [ 297.482066][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 297.492322][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 297.696907][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.732750][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.826389][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.592'. [ 298.125026][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.135414][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.145734][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.674721][ T30] audit: type=1400 audit(1750326922.419:679): avc: denied { execute } for pid=8272 comm="syz.2.595" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 298.762053][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 298.771102][ T42] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 298.951100][ T42] usb 1-1: Invalid ep0 maxpacket: 16 [ 299.401533][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 300.021145][ T42] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 300.042191][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 300.187426][ T42] usb 1-1: Invalid ep0 maxpacket: 16 [ 300.252354][ T42] usb usb1-port1: attempt power cycle [ 300.411283][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 300.578184][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 300.647899][ T42] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 300.681265][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.701569][ T42] usb 1-1: Invalid ep0 maxpacket: 16 [ 300.770294][ T24] usb 3-1: config 0 descriptor?? [ 300.834079][ T42] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 300.883718][ T42] usb 1-1: Invalid ep0 maxpacket: 16 [ 300.894087][ T42] usb usb1-port1: unable to enumerate USB device [ 301.247796][ T24] usb 3-1: string descriptor 0 read error: -71 [ 301.257416][ T24] usb 3-1: USB disconnect, device number 9 [ 302.373005][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.606'. [ 302.522815][ T8316] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 302.549874][ T30] audit: type=1400 audit(1750326926.319:680): avc: denied { setopt } for pid=8313 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.612826][ T8317] netlink: 'syz.0.609': attribute type 7 has an invalid length. [ 302.646425][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.609'. [ 302.682035][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 302.736127][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.609'. [ 302.843314][ T8319] : renamed from veth0_to_bond (while UP) [ 304.970652][ T30] audit: type=1400 audit(1750326928.739:681): avc: denied { create } for pid=8341 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 307.512192][ T5944] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 307.682812][ T5944] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 307.722206][ C0] sctp_transport_update_pmtu: 4 callbacks suppressed [ 307.722223][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 307.811057][ T5944] usb 3-1: config 0 has no interface number 0 [ 307.829122][ T5944] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 307.838889][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.868958][ T5944] usb 3-1: Product: syz [ 307.873395][ T5944] usb 3-1: Manufacturer: syz [ 307.888328][ T5944] usb 3-1: SerialNumber: syz [ 307.897252][ T5944] usb 3-1: config 0 descriptor?? [ 308.138497][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 308.315630][ T5944] usb 3-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 308.524968][ T5944] usb 3-1: Read permanent extended address 00:00:00:00:00:00:00:4f from device [ 308.534981][ T5944] usb 3-1: atusb_probe: initialization failed, error = -524 [ 308.560498][ T5944] atusb 3-1:0.128: probe with driver atusb failed with error -524 [ 308.871070][ T5829] usb 3-1: USB disconnect, device number 10 [ 310.121359][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 310.260135][ T8388] FAULT_INJECTION: forcing a failure. [ 310.260135][ T8388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 310.282654][ T31] INFO: task syz.1.213:6707 blocked for more than 143 seconds. [ 310.290236][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 310.331196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.341351][ T8388] CPU: 1 UID: 0 PID: 8388 Comm: syz.3.629 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 310.341378][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.341395][ T8388] Call Trace: [ 310.341402][ T8388] [ 310.341409][ T8388] dump_stack_lvl+0x16c/0x1f0 [ 310.341440][ T8388] should_fail_ex+0x512/0x640 [ 310.341468][ T8388] _copy_from_user+0x2e/0xd0 [ 310.341495][ T8388] sock_ioctl_inout+0x59/0x170 [ 310.341518][ T8388] ipmr_sk_ioctl+0xf4/0x1b0 [ 310.341539][ T8388] ? __pfx_ipmr_sk_ioctl+0x10/0x10 [ 310.341574][ T8388] sk_ioctl+0x278/0x360 [ 310.341593][ T8388] ? __pfx_sk_ioctl+0x10/0x10 [ 310.341614][ T8388] ? avc_has_extended_perms+0x47c/0x1090 [ 310.341635][ T8388] inet_ioctl+0x1ed/0x3f0 [ 310.341658][ T8388] ? __pfx_inet_ioctl+0x10/0x10 [ 310.341693][ T8388] ? tomoyo_path_number_perm+0x18d/0x580 [ 310.341718][ T8388] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.341741][ T8388] sock_do_ioctl+0x115/0x280 [ 310.341761][ T8388] ? __pfx_sock_do_ioctl+0x10/0x10 [ 310.341785][ T8388] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 310.341811][ T8388] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 310.341836][ T8388] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 310.341866][ T8388] sock_ioctl+0x227/0x6b0 [ 310.341886][ T8388] ? __pfx_sock_ioctl+0x10/0x10 [ 310.341904][ T8388] ? hook_file_ioctl_common+0x145/0x410 [ 310.341927][ T8388] ? selinux_file_ioctl+0x180/0x270 [ 310.341949][ T8388] ? selinux_file_ioctl+0xb4/0x270 [ 310.341975][ T8388] ? __pfx_sock_ioctl+0x10/0x10 [ 310.341996][ T8388] __x64_sys_ioctl+0x18b/0x210 [ 310.342019][ T8388] do_syscall_64+0xcd/0x4c0 [ 310.342048][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.342066][ T8388] RIP: 0033:0x7fcb93f8e929 [ 310.342081][ T8388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.342098][ T8388] RSP: 002b:00007fcb94d88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.342116][ T8388] RAX: ffffffffffffffda RBX: 00007fcb941b5fa0 RCX: 00007fcb93f8e929 [ 310.342128][ T8388] RDX: 0000000000000000 RSI: 00000000000089e1 RDI: 0000000000000003 [ 310.342138][ T8388] RBP: 00007fcb94d88090 R08: 0000000000000000 R09: 0000000000000000 [ 310.342149][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.342159][ T8388] R13: 0000000000000000 R14: 00007fcb941b5fa0 R15: 00007fff542f3998 [ 310.342183][ T8388] [ 310.342298][ T31] task:syz.1.213 state:D [ 310.688136][ T5146] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 310.701306][ T31] stack:28768 pid:6707 tgid:6698 ppid:5826 task_flags:0x400040 flags:0x00004004 [ 310.710780][ T31] Call Trace: [ 310.714116][ T31] [ 310.717050][ T31] __schedule+0x116a/0x5de0 [ 310.721715][ T31] ? __lock_acquire+0x622/0x1c90 [ 310.726675][ T31] ? __pfx___schedule+0x10/0x10 [ 310.731567][ T31] ? find_held_lock+0x2b/0x80 [ 310.736251][ T31] ? schedule+0x2d7/0x3a0 [ 310.740592][ T31] schedule+0xe7/0x3a0 [ 310.745698][ T31] schedule_preempt_disabled+0x13/0x30 [ 310.785554][ T31] __mutex_lock+0x6c7/0xb90 [ 310.790121][ T31] ? blk_trace_startstop+0x7f/0x480 [ 310.795473][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 310.800528][ T31] ? avc_has_extended_perms+0x33a/0x1090 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 310.881059][ T31] ? blk_trace_startstop+0x7f/0x480 [ 310.886310][ T31] blk_trace_startstop+0x7f/0x480 [ 310.929466][ T31] ? __pfx_blk_trace_startstop+0x10/0x10 [ 310.941518][ T31] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 310.948557][ T31] ? kasan_quarantine_put+0x10a/0x240 [ 310.971090][ T31] blk_trace_ioctl+0x1b5/0x280 [ 310.976475][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 310.995794][ T31] blkdev_common_ioctl+0x176a/0x2480 [ 311.012868][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 311.018795][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 311.026102][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 311.031179][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 311.042584][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 311.049086][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 311.071270][ T31] blkdev_ioctl+0x1cb/0x6d0 [ 311.075785][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 311.080784][ T31] ? selinux_file_ioctl+0x180/0x270 [ 311.091067][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 311.102641][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 311.107659][ T31] __x64_sys_ioctl+0x18b/0x210 [ 311.112579][ T31] do_syscall_64+0xcd/0x4c0 [ 311.124432][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.130331][ T31] RIP: 0033:0x7f475718e929 [ 311.134779][ T31] RSP: 002b:00007f4757f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.144820][ T31] RAX: ffffffffffffffda RBX: 00007f47573b6240 RCX: 00007f475718e929 [ 311.166568][ T31] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003 [ 311.174624][ T31] RBP: 00007f4757210b39 R08: 0000000000000000 R09: 0000000000000000 [ 311.182762][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.190719][ T31] R13: 0000000000000000 R14: 00007f47573b6240 R15: 00007ffcb45d2838 [ 311.231508][ T31] [ 311.246741][ T31] [ 311.246741][ T31] Showing all locks held in the system: [ 311.254504][ T31] 1 lock held by khungtaskd/31: [ 311.260337][ T31] #0: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 311.270292][ T31] 3 locks held by klogd/5184: [ 311.275029][ T31] 2 locks held by getty/5585: [ 311.279721][ T31] #0: ffff8880329070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 311.293942][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 311.304134][ T31] 2 locks held by syz.1.213/6699: [ 311.309155][ T31] 1 lock held by syz.1.213/6707: [ 311.381111][ T31] #0: ffff888026bce128 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0x7f/0x480 [ 311.391333][ T31] 2 locks held by syz.0.628/8389: [ 311.403054][ T31] #0: ffffffff9034d228 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 311.412099][ T31] #1: ffffffff8e5cfe78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 311.423778][ T31] 2 locks held by syz.2.630/8393: [ 311.428798][ T31] #0: ffff88805829b208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 311.439404][ T31] #1: ffffffff8e5cfe78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 311.456249][ T31] [ 311.458603][ T31] ============================================= [ 311.458603][ T31] [ 311.563875][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 311.616035][ T31] NMI backtrace for cpu 1 [ 311.616052][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 311.616073][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.616083][ T31] Call Trace: [ 311.616089][ T31] [ 311.616096][ T31] dump_stack_lvl+0x116/0x1f0 [ 311.616127][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 311.616147][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 311.616172][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 311.616197][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 311.616221][ T31] watchdog+0xf70/0x12c0 [ 311.616247][ T31] ? __pfx_watchdog+0x10/0x10 [ 311.616264][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.616292][ T31] ? __kthread_parkme+0x19e/0x250 [ 311.616318][ T31] ? __pfx_watchdog+0x10/0x10 [ 311.616338][ T31] kthread+0x3c2/0x780 [ 311.616354][ T31] ? __pfx_kthread+0x10/0x10 [ 311.616371][ T31] ? rcu_is_watching+0x12/0xc0 [ 311.616393][ T31] ? __pfx_kthread+0x10/0x10 [ 311.616410][ T31] ret_from_fork+0x5d4/0x6f0 [ 311.616433][ T31] ? __pfx_kthread+0x10/0x10 [ 311.616450][ T31] ret_from_fork_asm+0x1a/0x30 [ 311.616484][ T31] [ 311.616490][ T31] Sending NMI from CPU 1 to CPUs 0: [ 311.741272][ C0] NMI backtrace for cpu 0 [ 311.741285][ C0] CPU: 0 UID: 0 PID: 1156 Comm: kworker/u8:7 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 311.741303][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.741313][ C0] Workqueue: bat_events batadv_nc_worker [ 311.741334][ C0] RIP: 0010:check_preemption_disabled+0x24/0xe0 [ 311.741357][ C0] Code: 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 85 bc 4c 08 65 8b 05 7a bc 4c 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b <5d> 41 5c e9 94 de 02 00 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 [ 311.741370][ C0] RSP: 0018:ffffc9000403fa28 EFLAGS: 00000292 [ 311.741381][ C0] RAX: 0000000000000000 RBX: ffff888035485f58 RCX: ffffffff8198c6bc [ 311.741390][ C0] RDX: ffff88802860c880 RSI: ffffffff8c157960 RDI: ffffffff8c1579a0 [ 311.741399][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: fffff52000807f48 [ 311.741408][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8b4d2294 [ 311.741416][ C0] R13: ffff888035485f40 R14: ffff88802583cd80 R15: 0000000000000000 [ 311.741425][ C0] FS: 0000000000000000(0000) GS:ffff888124753000(0000) knlGS:0000000000000000 [ 311.741439][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.741448][ C0] CR2: 00005600d0448c70 CR3: 00000000260b7000 CR4: 00000000003526f0 [ 311.741457][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.741464][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.741473][ C0] Call Trace: [ 311.741478][ C0] [ 311.741484][ C0] ? batadv_nc_purge_paths+0x1d4/0x3a0 [ 311.741500][ C0] rcu_is_watching+0x12/0xc0 [ 311.741518][ C0] lock_release+0x201/0x2f0 [ 311.741538][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 311.741556][ C0] _raw_spin_unlock_bh+0x16/0x30 [ 311.741574][ C0] batadv_nc_purge_paths+0x1d4/0x3a0 [ 311.741600][ C0] batadv_nc_worker+0x921/0x1030 [ 311.741617][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 311.741636][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 311.741655][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.741671][ C0] process_one_work+0x9cc/0x1b70 [ 311.741688][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 311.741705][ C0] ? __pfx_process_one_work+0x10/0x10 [ 311.741721][ C0] ? assign_work+0x1a0/0x250 [ 311.741741][ C0] worker_thread+0x6c8/0xf10 [ 311.741758][ C0] ? __pfx_worker_thread+0x10/0x10 [ 311.741771][ C0] kthread+0x3c2/0x780 [ 311.741784][ C0] ? __pfx_kthread+0x10/0x10 [ 311.741796][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.741811][ C0] ? __pfx_kthread+0x10/0x10 [ 311.741823][ C0] ret_from_fork+0x5d4/0x6f0 [ 311.741841][ C0] ? __pfx_kthread+0x10/0x10 [ 311.741853][ C0] ret_from_fork_asm+0x1a/0x30 [ 311.741871][ C0] [ 312.016478][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.212798][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 312.463489][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 312.470385][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 312.482189][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.492250][ T31] Call Trace: [ 312.495526][ T31] [ 312.498451][ T31] dump_stack_lvl+0x3d/0x1f0 [ 312.503052][ T31] panic+0x71c/0x800 [ 312.506956][ T31] ? __pfx_panic+0x10/0x10 [ 312.511381][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 312.516748][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 312.522707][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 312.528057][ T31] ? watchdog+0xdda/0x12c0 [ 312.532460][ T31] ? watchdog+0xdcd/0x12c0 [ 312.536853][ T31] watchdog+0xdeb/0x12c0 [ 312.541085][ T31] ? __pfx_watchdog+0x10/0x10 [ 312.545735][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.550911][ T31] ? __kthread_parkme+0x19e/0x250 [ 312.555914][ T31] ? __pfx_watchdog+0x10/0x10 [ 312.560567][ T31] kthread+0x3c2/0x780 [ 312.564614][ T31] ? __pfx_kthread+0x10/0x10 [ 312.569176][ T31] ? rcu_is_watching+0x12/0xc0 [ 312.573918][ T31] ? __pfx_kthread+0x10/0x10 [ 312.578480][ T31] ret_from_fork+0x5d4/0x6f0 [ 312.583047][ T31] ? __pfx_kthread+0x10/0x10 [ 312.587613][ T31] ret_from_fork_asm+0x1a/0x30 [ 312.592358][ T31] [ 312.595555][ T31] Kernel Offset: disabled [ 312.599857][ T31] Rebooting in 86400 seconds..