last executing test programs: 11m32.682408038s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x40, 0x16}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 11m30.445504277s ago: executing program 2 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 11m30.283664737s ago: executing program 2 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x12, 0x20, 0x10, 0x40, 0x5ac, 0x8501, 0x9e4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0xa0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) shutdown(r0, 0x1) 11m29.835075383s ago: executing program 2 (id=21): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)={0x0, 0x15, 0x2, "3498"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x4040000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 11m29.540280872s ago: executing program 32 (id=21): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)={0x0, 0x15, 0x2, "3498"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x4040000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 34.081572381s ago: executing program 3 (id=3532): socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mlock(&(0x7f0000ff4000/0x2000)=nil, 0x2000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0x0, 0x0, 0x290, 0x2a8, 0x2a8, 0x290, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x1, 0x7, 0x2, 0x6, 0x4], 0x0, 0x6}, {0x3, [0x5, 0xc, 0x5, 0x0, 0x5, 0x1], 0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0xc, 0x1, 0x4, 0x5, 0x5], 0x3, 0x2}, {0x2, [0x4, 0x6, 0x0, 0x0, 0x0, 0x4], 0x4, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) pipe(&(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 33.839591953s ago: executing program 3 (id=3533): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 33.77551037s ago: executing program 3 (id=3534): r0 = socket(0x1, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e010203010902120001000000000904"], 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r3}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)={@val={0x0, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) epoll_pwait2(r1, &(0x7f0000001d80)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 31.759484449s ago: executing program 3 (id=3543): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x5a, 0xa, 0x0, "3205c5460400000000000000022c1e04f4bf40070700000200"}) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020150ff", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000240)={{r3}, 0x2, &(0x7f00000001c0)=[0xfffffffffffffe00, 0x9], 0xffff, 0x14, 0x1}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xb, &(0x7f0000000080)={0xfffffffffffffff8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 30.44760199s ago: executing program 3 (id=3547): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$sndmidi(&(0x7f0000000000), 0x80, 0x80100) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 30.257215448s ago: executing program 3 (id=3548): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x200) 29.927932685s ago: executing program 33 (id=3548): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x200) 12.957504451s ago: executing program 1 (id=3595): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) (fail_nth: 1) 12.530029187s ago: executing program 0 (id=3597): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x24ffffff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x11, r3, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000040)) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41a}}]}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x9) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[], 0x20}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r7, 0x0, 0x0) close(0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 12.379426105s ago: executing program 1 (id=3599): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000007d1000000000000", @ANYRES32=0x1, @ANYBLOB="0f000000000d0003002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b5, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r7, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) 11.332142873s ago: executing program 1 (id=3601): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x40}, 0x0, &(0x7f0000000800)={0x20, 0x87, 0x2, 0xc4df}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) 10.446339964s ago: executing program 4 (id=3602): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2a, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x0, 0x20, 0x2c}, {@in=@loopback, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x7, 0x8, 0x2, 0x3, 0x40, 0x2, 0x77, 0x7fffffffffffffff}, {0x4, 0x2, 0x8, 0x7fffffff}, {0x4, 0x2}, 0x70bd2d, 0x3505, 0xa, 0x4, 0xac}, 0x2, 0x9}}, 0xf8}}, 0x10) (fail_nth: 1) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) clock_gettime(0x4, 0x0) 9.89566664s ago: executing program 4 (id=3603): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x40}, 0x0, &(0x7f0000000800)={0x20, 0x87, 0x2, 0xc4df}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) 9.749165259s ago: executing program 6 (id=3604): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) ioctl$sock_proto_private(r0, 0x89e1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x1ffffffd, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r5, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, r4, {0x7, 0x26, 0x10001, 0xfffffffff2a2764e, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0xfffffffb, 0x0, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x0, 0x0, 0x2, 0xfffffffd, 0x8000, 0x0, 0x0, r6, 0xfffffffd}}}}, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r8], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 8.189556991s ago: executing program 5 (id=3605): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.982311142s ago: executing program 5 (id=3606): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r3, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = accept4$rose(r0, &(0x7f0000000140)=@short={0xb, @dev, @rose}, &(0x7f0000000240)=0x1c, 0x0) ioctl$sock_ifreq(r4, 0x891b, &(0x7f0000000400)={'veth1_to_team\x00', @ifru_data=&(0x7f0000000380)="5cdab5340c53b17e989b565c26e403f081b47b455dfc7c65502438533f4ed551"}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff0200000007070000"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e220800"], 0x5c}}, 0x0) 7.742173449s ago: executing program 1 (id=3607): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x1, {0x2, @pix={0x204, 0x8, 0x71070474, 0x3, 0x20829, 0x4, 0x4, 0x6, 0x1, 0x0, 0x1, 0x3}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x2c004) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r4}) socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}}]}, 0x88}}, 0x20000000) syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 7.359132462s ago: executing program 0 (id=3608): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r3, r3, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c20a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x9, @local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x30}}}}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r6, 0x5608) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r8 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000001140)={&(0x7f00000007c0)={0x92c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3ff, 0x8, 0x4, 0xffff0000}, {0x3, 0x9, 0x83, 0x8b}, {0x6, 0x0, 0x1, 0xa74}, {0x7ff, 0x2, 0xcf, 0x3}, {0x8, 0x8, 0x8c, 0xc}, {0x401, 0x5, 0x2, 0x3}, {0x2, 0x0, 0x3, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x90b}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r9}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x188, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x8, 0xb, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x3, 0xeb0a}, {0x1, 0x9, 0x81, 0x2}, {0x9, 0x8, 0x1, 0x9}, {0x4, 0x0, 0x3, 0x3}]}}}]}}]}, 0x92c}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) ioctl$DRM_IOCTL_MODE_ADDFB(r10, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x5, 0x2, 0x100, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 6.994623758s ago: executing program 0 (id=3609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee01) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x110080, 0x100) r5 = open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x8000) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xba99}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="004f05c15e811ad6460000000000406310000046", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) modify_ldt$write2(0x11, &(0x7f0000000300)={0x8, 0x20000000, 0x0, 0x1, 0x2, 0x0, 0x1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6.917228803s ago: executing program 5 (id=3610): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'batadv0\x00', 0x2}, 0x18) (fail_nth: 1) 6.768814273s ago: executing program 4 (id=3611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5.721655267s ago: executing program 5 (id=3612): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000007d1000000000000", @ANYRES32=0x1, @ANYBLOB="0f000000000d0003002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b5, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r7, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) 5.720283829s ago: executing program 4 (id=3613): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a1}, [@IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_GROUP={0xfffffea8}]}, 0x30}}, 0x4000804) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e01010000000001000000060000"], 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(r0, 0x0, 0x48080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039041800000000001f0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) 5.67721622s ago: executing program 1 (id=3614): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000007d1000000000000", @ANYRES32=0x1, @ANYBLOB="0f000000000d0003002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b5, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r6, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086603, &(0x7f0000000040)) 5.565517994s ago: executing program 6 (id=3615): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x80}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180), 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x58}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) 5.335573158s ago: executing program 6 (id=3616): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.894193772s ago: executing program 6 (id=3617): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) ioctl$sock_proto_private(r0, 0x89e1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x1ffffffd, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r5, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, r4, {0x7, 0x26, 0x10001, 0xfffffffff2a2764e, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0xfffffffb, 0x0, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x0, 0x0, 0x2, 0xfffffffd, 0x8000, 0x0, 0x0, r6, 0xfffffffd}}}}, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r8], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 3.321647323s ago: executing program 6 (id=3618): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18) fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8044) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r1, 0x2, 0x12, 0x0) semop(r1, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) r2 = semget$private(0x0, 0x0, 0xc1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000280)=0x40000002) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 3.117201135s ago: executing program 1 (id=3619): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.69924034s ago: executing program 5 (id=3620): name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@ceph_nfs_fh={0x8, 0x1, {0x8001}}, &(0x7f00000000c0), 0x1000) fsopen(0x0, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) 2.682653735s ago: executing program 4 (id=3621): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r3, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = accept4$rose(r0, &(0x7f0000000140)=@short={0xb, @dev, @rose}, &(0x7f0000000240)=0x1c, 0x0) ioctl$sock_ifreq(r4, 0x891b, &(0x7f0000000400)={'veth1_to_team\x00', @ifru_data=&(0x7f0000000380)="5cdab5340c53b17e989b565c26e403f081b47b455dfc7c65502438533f4ed551"}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff0200000007070000"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e220800"], 0x5c}}, 0x0) 2.419567006s ago: executing program 0 (id=3622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x3) 1.371376565s ago: executing program 0 (id=3623): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000007d1000000000000", @ANYRES32=0x1, @ANYBLOB="0f000000000d0003002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b5, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r7, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) 1.29340611s ago: executing program 4 (id=3624): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x40}, 0x0, &(0x7f0000000800)={0x20, 0x87, 0x2, 0xc4df}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) 1.282323935s ago: executing program 5 (id=3625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x4, 0x0, &(0x7f0000000280)="f8806115"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 149.452004ms ago: executing program 0 (id=3626): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x40}, 0x0, &(0x7f0000000800)={0x20, 0x87, 0x2, 0xc4df}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) 0s ago: executing program 6 (id=3627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000040)={0x8, {0x4, 0x3, 0xe, 0xea7}}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/187}, 0x20) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}}, 0x4041080) kernel console output (not intermixed with test programs): g attributes in process `syz.3.3221'. [ 633.697325][ T5962] pwc: recv_control_msg error -32 req 02 val 2b00 [ 633.704759][ T5962] pwc: recv_control_msg error -32 req 02 val 2700 [ 633.721674][ T5962] pwc: recv_control_msg error -32 req 02 val 2c00 [ 633.734110][ T5962] pwc: recv_control_msg error -32 req 04 val 1000 [ 633.830902][T15269] Bluetooth: hci1: command tx timeout [ 633.839342][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.942714][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.991404][ T5962] pwc: recv_control_msg error -32 req 04 val 1400 [ 633.999703][ T5962] pwc: recv_control_msg error -32 req 02 val 2000 [ 634.005427][ T1012] bond0 (unregistering): Released all slaves [ 634.007380][ T5962] pwc: recv_control_msg error -32 req 02 val 2100 [ 634.022081][ T5962] pwc: recv_control_msg error -32 req 04 val 1500 [ 634.077388][T15965] chnl_net:caif_netlink_parms(): no params data found [ 634.231281][ T5962] pwc: recv_control_msg error -71 req 02 val 2400 [ 634.243595][ T5962] pwc: recv_control_msg error -71 req 02 val 2600 [ 634.250396][ T5962] pwc: recv_control_msg error -71 req 02 val 2900 [ 634.264532][ T5962] pwc: recv_control_msg error -71 req 02 val 2800 [ 634.271525][ T5962] pwc: recv_control_msg error -71 req 04 val 1100 [ 634.278288][ T5962] pwc: recv_control_msg error -71 req 04 val 1200 [ 634.307495][ T5962] pwc: Registered as video103. [ 634.334360][ T5962] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 634.357073][ T5962] usb 1-1: USB disconnect, device number 33 [ 634.618603][T15965] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.629749][T15965] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.650872][T15965] bridge_slave_0: entered allmulticast mode [ 634.658494][T15965] bridge_slave_0: entered promiscuous mode [ 634.667577][T15965] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.675014][T15965] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.686372][T15965] bridge_slave_1: entered allmulticast mode [ 634.693970][T15965] bridge_slave_1: entered promiscuous mode [ 634.738014][ T1012] hsr_slave_0: left promiscuous mode [ 634.746084][ T1012] hsr_slave_1: left promiscuous mode [ 634.757984][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.787631][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.821443][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.837477][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.893165][ T1012] veth1_macvtap: left promiscuous mode [ 634.898773][ T1012] veth0_macvtap: left promiscuous mode [ 635.705039][ T30] audit: type=1400 audit(1757029700.685:425): avc: denied { setattr } for pid=16016 comm="syz.1.3229" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 635.901204][T15269] Bluetooth: hci1: command tx timeout [ 636.181724][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 636.381195][T16026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3231'. [ 636.394580][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 637.789697][T15965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.852660][T15965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.987634][T15269] Bluetooth: hci1: command tx timeout [ 638.177140][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3234'. [ 638.192467][T15965] team0: Port device team_slave_0 added [ 638.200333][T15965] team0: Port device team_slave_1 added [ 638.568854][T15995] Set syz1 is full, maxelem 65536 reached [ 638.710007][T15965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.710022][T15965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.710044][T15965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.711415][T15965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.711427][T15965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.711449][T15965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.901384][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.939303][T15965] hsr_slave_0: entered promiscuous mode [ 639.032368][T16051] 9pnet_fd: Insufficient options for proto=fd [ 639.179007][T15965] hsr_slave_1: entered promiscuous mode [ 639.250580][ T1012] IPVS: stop unused estimator thread 0... [ 640.060770][T15269] Bluetooth: hci1: command tx timeout [ 640.385526][T16064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3239'. [ 641.716326][T15965] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 641.738983][T15965] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 641.763255][T15965] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 642.276228][T15965] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 642.979718][T16109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3250'. [ 643.704088][T15965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.743709][T15965] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.790086][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.797244][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.839698][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.846781][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.882080][T15965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.200811][ T5917] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 644.259063][T15965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.340745][ T5917] usb 1-1: device descriptor read/64, error -71 [ 644.590735][ T5917] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 644.770732][ T5917] usb 1-1: device descriptor read/64, error -71 [ 644.984772][ T5917] usb usb1-port1: attempt power cycle [ 645.370018][T15965] veth0_vlan: entered promiscuous mode [ 645.396367][T15965] veth1_vlan: entered promiscuous mode [ 645.437149][T15965] veth0_macvtap: entered promiscuous mode [ 645.449712][T15965] veth1_macvtap: entered promiscuous mode [ 645.472450][T15965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.548458][T16152] netlink: 'syz.4.3261': attribute type 29 has an invalid length. [ 645.570095][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 645.587009][T15965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.630917][ T5917] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 646.017239][ T5917] usb 1-1: device descriptor read/8, error -71 [ 646.020993][ T5965] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.051187][ T5965] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.123805][ T5965] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.146289][ T5965] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.208474][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.220353][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.244543][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.254780][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.260817][ T24] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 646.272094][ T5917] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 647.399421][ T24] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 647.635890][T16161] Set syz1 is full, maxelem 65536 reached [ 647.666519][ T5917] usb 1-1: device descriptor read/8, error -71 [ 647.694337][ T24] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 647.781988][T16165] 9pnet_fd: Insufficient options for proto=fd [ 647.807855][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.832015][ T5917] usb usb1-port1: unable to enumerate USB device [ 647.948262][ T24] usb 5-1: config 0 has no interface number 0 [ 647.986934][ T24] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 648.014623][ T24] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 648.049446][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 648.182642][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.439635][ T24] usb 5-1: config 0 descriptor?? [ 648.502924][ T24] usb 5-1: can't set config #0, error -71 [ 648.558137][ T24] usb 5-1: USB disconnect, device number 79 [ 649.040804][ T5972] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 649.262887][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.386251][ T5972] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 649.400784][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.417007][ T5972] usb 2-1: config 0 descriptor?? [ 649.435653][ T5972] pwc: Askey VC010 type 2 USB webcam detected. [ 649.837868][ T5972] pwc: recv_control_msg error -32 req 02 val 2b00 [ 649.845588][ T5972] pwc: recv_control_msg error -32 req 02 val 2700 [ 649.853754][ T5972] pwc: recv_control_msg error -32 req 02 val 2c00 [ 649.860953][ T5972] pwc: recv_control_msg error -32 req 04 val 1000 [ 650.091495][ T5972] pwc: recv_control_msg error -32 req 04 val 1400 [ 650.098760][ T5972] pwc: recv_control_msg error -32 req 02 val 2000 [ 650.107109][ T5972] pwc: recv_control_msg error -32 req 02 val 2100 [ 650.114898][ T5972] pwc: recv_control_msg error -71 req 04 val 1500 [ 650.122133][ T5972] pwc: recv_control_msg error -71 req 02 val 2500 [ 650.129018][ T5972] pwc: recv_control_msg error -71 req 02 val 2400 [ 650.136156][ T5972] pwc: recv_control_msg error -71 req 02 val 2600 [ 650.144472][ T5972] pwc: recv_control_msg error -71 req 02 val 2900 [ 650.155525][ T5972] pwc: recv_control_msg error -71 req 02 val 2800 [ 650.184512][ T5972] pwc: recv_control_msg error -71 req 04 val 1100 [ 650.193890][ T5972] pwc: recv_control_msg error -71 req 04 val 1200 [ 650.201507][ T5972] pwc: Registered as video103. [ 650.207998][ T5972] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input56 [ 650.246511][ T5971] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 650.273739][ T5972] usb 2-1: USB disconnect, device number 68 [ 650.404572][ T5971] usb 4-1: no configurations [ 650.409324][ T5971] usb 4-1: can't read configurations, error -22 [ 650.540894][ T5971] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 650.700580][ T5971] usb 4-1: no configurations [ 650.706870][ T5971] usb 4-1: can't read configurations, error -22 [ 650.713736][ T5971] usb usb4-port1: attempt power cycle [ 651.075537][ T5917] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 651.121300][ T5971] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 651.342322][ T5971] usb 4-1: no configurations [ 651.346938][ T5971] usb 4-1: can't read configurations, error -22 [ 651.380731][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 651.387063][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.399479][ T5917] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 651.504043][ T5971] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 651.562332][ T5971] usb 4-1: no configurations [ 651.577943][ T5971] usb 4-1: can't read configurations, error -22 [ 651.605634][ T5971] usb usb4-port1: unable to enumerate USB device [ 651.840845][ T5917] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 651.849914][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.859700][ T5917] usb 2-1: Product: syz [ 651.863909][ T5917] usb 2-1: Manufacturer: syz [ 651.868500][ T5917] usb 2-1: SerialNumber: syz [ 651.898953][ T5917] usb 2-1: config 0 descriptor?? [ 652.421243][ T5972] usb 2-1: USB disconnect, device number 69 [ 653.734082][T16249] 9pnet_fd: Insufficient options for proto=fd [ 658.483163][ T1012] Bluetooth: (null): Invalid header checksum [ 658.489200][ T1012] Bluetooth: (null): Invalid header checksum [ 659.835424][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3308'. [ 661.784955][ T975] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 661.822268][T16343] FAULT_INJECTION: forcing a failure. [ 661.822268][T16343] name failslab, interval 1, probability 0, space 0, times 1 [ 661.880851][T16343] CPU: 0 UID: 0 PID: 16343 Comm: syz.3.3316 Not tainted syzkaller #0 PREEMPT(full) [ 661.880878][T16343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.880888][T16343] Call Trace: [ 661.880894][T16343] [ 661.880901][T16343] dump_stack_lvl+0x16c/0x1f0 [ 661.880927][T16343] should_fail_ex+0x512/0x640 [ 661.880946][T16343] ? fs_reclaim_acquire+0xae/0x150 [ 661.880972][T16343] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 661.880997][T16343] should_failslab+0xc2/0x120 [ 661.881018][T16343] __kmalloc_noprof+0xd2/0x510 [ 661.881042][T16343] tomoyo_realpath_from_path+0xc2/0x6e0 [ 661.881071][T16343] ? tomoyo_profile+0x47/0x60 [ 661.881091][T16343] tomoyo_path_number_perm+0x245/0x580 [ 661.881113][T16343] ? tomoyo_path_number_perm+0x237/0x580 [ 661.881139][T16343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 661.881163][T16343] ? find_held_lock+0x2b/0x80 [ 661.881208][T16343] ? find_held_lock+0x2b/0x80 [ 661.881229][T16343] ? hook_file_ioctl_common+0x145/0x410 [ 661.881253][T16343] ? __fget_files+0x20e/0x3c0 [ 661.881278][T16343] security_file_ioctl+0x9b/0x240 [ 661.881304][T16343] __x64_sys_ioctl+0xb7/0x210 [ 661.881333][T16343] do_syscall_64+0xcd/0x4c0 [ 661.881356][T16343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.881374][T16343] RIP: 0033:0x7fd7d078ebe9 [ 661.881388][T16343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.881405][T16343] RSP: 002b:00007fd7d15e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.881422][T16343] RAX: ffffffffffffffda RBX: 00007fd7d09c6180 RCX: 00007fd7d078ebe9 [ 661.881434][T16343] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000006 [ 661.881445][T16343] RBP: 00007fd7d15e8090 R08: 0000000000000000 R09: 0000000000000000 [ 661.881456][T16343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.881466][T16343] R13: 00007fd7d09c6218 R14: 00007fd7d09c6180 R15: 00007fffa6ebd4d8 [ 661.881491][T16343] [ 661.881498][T16343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 662.118346][ T975] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 662.135953][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.166047][ T975] usb 6-1: Product: syz [ 662.183550][ T975] usb 6-1: Manufacturer: syz [ 662.188157][ T975] usb 6-1: SerialNumber: syz [ 662.224257][ T975] usb 6-1: config 0 descriptor?? [ 663.300550][ T975] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 663.324292][ T975] asix 6-1:0.0: probe with driver asix failed with error -71 [ 663.336820][ T975] usb 6-1: USB disconnect, device number 66 [ 663.890778][ T30] audit: type=1400 audit(1757029728.855:426): avc: denied { create } for pid=16358 comm="syz.0.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 663.911125][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.941021][T12914] Bluetooth: (null): Invalid header checksum [ 663.947037][T12914] Bluetooth: (null): Invalid header checksum [ 664.099895][T12914] Bluetooth: (null): Invalid header checksum [ 665.268332][T16384] FAULT_INJECTION: forcing a failure. [ 665.268332][T16384] name failslab, interval 1, probability 0, space 0, times 0 [ 665.281348][T16384] CPU: 0 UID: 0 PID: 16384 Comm: syz.1.3326 Not tainted syzkaller #0 PREEMPT(full) [ 665.281372][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.281383][T16384] Call Trace: [ 665.281389][T16384] [ 665.281397][T16384] dump_stack_lvl+0x16c/0x1f0 [ 665.281423][T16384] should_fail_ex+0x512/0x640 [ 665.281443][T16384] ? __kvmalloc_node_noprof+0x124/0x620 [ 665.281464][T16384] should_failslab+0xc2/0x120 [ 665.281483][T16384] __kvmalloc_node_noprof+0x137/0x620 [ 665.281500][T16384] ? finish_task_switch.isra.0+0x221/0xc10 [ 665.281524][T16384] ? seq_read_iter+0x826/0x12c0 [ 665.281548][T16384] ? seq_read_iter+0x826/0x12c0 [ 665.281565][T16384] seq_read_iter+0x826/0x12c0 [ 665.281588][T16384] ? register_lock_class+0x41/0x4c0 [ 665.281611][T16384] seq_read+0x3a3/0x570 [ 665.281625][T16384] ? __pfx_seq_read+0x10/0x10 [ 665.281653][T16384] ? __pfx_seq_read+0x10/0x10 [ 665.281667][T16384] proc_reg_read+0x23d/0x330 [ 665.281688][T16384] ? __pfx_proc_reg_read+0x10/0x10 [ 665.281709][T16384] vfs_read+0x1e1/0xcf0 [ 665.281732][T16384] ? __pfx___mutex_lock+0x10/0x10 [ 665.281749][T16384] ? __pfx_vfs_read+0x10/0x10 [ 665.281769][T16384] ? __fget_files+0x20e/0x3c0 [ 665.281791][T16384] ksys_read+0x12a/0x250 [ 665.281805][T16384] ? __pfx_ksys_read+0x10/0x10 [ 665.281820][T16384] ? __secure_computing+0x28e/0x3b0 [ 665.281845][T16384] do_syscall_64+0xcd/0x4c0 [ 665.281863][T16384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.281878][T16384] RIP: 0033:0x7f099c98ebe9 [ 665.281890][T16384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.281904][T16384] RSP: 002b:00007f099abd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 665.281918][T16384] RAX: ffffffffffffffda RBX: 00007f099cbc6180 RCX: 00007f099c98ebe9 [ 665.281928][T16384] RDX: 0000000000002024 RSI: 0000200000000180 RDI: 0000000000000000 [ 665.281936][T16384] RBP: 00007f099abd5090 R08: 0000000000000000 R09: 0000000000000000 [ 665.281944][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.281953][T16384] R13: 00007f099cbc6218 R14: 00007f099cbc6180 R15: 00007ffd15fdc118 [ 665.281972][T16384] [ 667.608781][ T9418] bond0: (slave syz_tun): Releasing backup interface [ 667.878382][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 667.896537][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 667.924969][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.979489][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.005875][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.014775][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 668.545514][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.490960][T16422] Set syz1 is full, maxelem 65536 reached [ 670.063127][T15269] Bluetooth: hci3: command tx timeout [ 670.173579][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.341680][ T36] Bluetooth: (null): Invalid header checksum [ 670.347768][ T30] audit: type=1400 audit(1757029735.325:427): avc: denied { read write } for pid=16437 comm="syz.1.3340" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 670.368776][ T24] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 670.391675][ T36] Bluetooth: (null): Invalid header checksum [ 670.406216][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.411299][ T24] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 670.426578][ T30] audit: type=1400 audit(1757029735.335:428): avc: denied { open } for pid=16437 comm="syz.1.3340" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 670.451486][ T1333] Bluetooth: (null): Invalid header checksum [ 670.951081][T16413] chnl_net:caif_netlink_parms(): no params data found [ 671.300831][ T30] audit: type=1400 audit(1757029736.235:429): avc: denied { write } for pid=16449 comm="syz.4.3343" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 671.391071][ T24] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 671.398899][ T13] bridge_slave_1: left allmulticast mode [ 671.428494][ T13] bridge_slave_1: left promiscuous mode [ 671.437768][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.659455][ T13] bridge_slave_0: left allmulticast mode [ 671.666343][ T13] bridge_slave_0: left promiscuous mode [ 671.672460][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.680495][ T30] audit: type=1400 audit(1757029736.655:430): avc: denied { read write } for pid=16458 comm="syz.1.3344" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 671.705823][ T30] audit: type=1400 audit(1757029736.655:431): avc: denied { open } for pid=16458 comm="syz.1.3344" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 671.711117][ T24] usb 6-1: device descriptor read/64, error -71 [ 671.730238][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.755135][ T13] bond_slave_0: left promiscuous mode [ 671.761786][ T13] bond_slave_1: left promiscuous mode [ 671.768838][ T13] team_slave_0: left promiscuous mode [ 671.774417][ T13] team_slave_1: left promiscuous mode [ 671.790974][ T5971] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 671.902622][ T975] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 671.944235][ T5971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.955234][ T5971] usb 5-1: config 0 has no interfaces? [ 671.964689][ T5971] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 671.991809][ T24] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 672.002707][T16463] netlink: 'syz.1.3344': attribute type 21 has an invalid length. [ 672.025084][T16463] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3344'. [ 672.037295][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.053244][ T5971] usb 5-1: config 0 descriptor?? [ 672.074822][ T975] usb 1-1: config index 0 descriptor too short (expected 63186, got 210) [ 672.093596][ T975] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 672.115975][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.127212][ T24] usb 6-1: device descriptor read/64, error -71 [ 672.152352][T15269] Bluetooth: hci3: command tx timeout [ 672.152969][ T975] usb 1-1: config 0 has no interface number 0 [ 672.167409][ T975] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 672.177856][ T975] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 672.207710][ T975] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 672.414925][ T24] usb usb6-port1: attempt power cycle [ 672.423608][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.434119][ T975] usb 1-1: config 0 descriptor?? [ 672.450336][ T975] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 672.735567][ T13] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 672.750252][ T13] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 672.760814][ T24] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 672.775002][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.784304][ T24] usb 6-1: device descriptor read/8, error -71 [ 672.794141][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.804484][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 672.814706][ T13] bond0 (unregistering): Released all slaves [ 672.887232][ T13] bond1 (unregistering): Released all slaves [ 672.899028][T16451] netlink: 'syz.0.3341': attribute type 29 has an invalid length. [ 672.907113][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 672.918259][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.926258][T16413] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.933553][T16413] bridge_slave_0: entered allmulticast mode [ 672.940496][T16413] bridge_slave_0: entered promiscuous mode [ 672.950826][T16413] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.958025][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.965537][T16413] bridge_slave_1: entered allmulticast mode [ 672.978174][T16413] bridge_slave_1: entered promiscuous mode [ 672.997020][T16463] netlink: 'syz.1.3344': attribute type 4 has an invalid length. [ 673.005092][T16463] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3344'. [ 673.021814][T16464] batadv1: entered promiscuous mode [ 673.028678][T16464] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 673.041182][ T24] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 673.072592][ T24] usb 6-1: device descriptor read/8, error -71 [ 673.123364][T16413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.135494][T16413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.181596][ T24] usb usb6-port1: unable to enumerate USB device [ 673.191673][T16413] team0: Port device team_slave_0 added [ 673.199062][ T13] hsr_slave_0: left promiscuous mode [ 673.206628][ T13] hsr_slave_1: left promiscuous mode [ 673.214475][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.226113][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.234430][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.242255][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.255782][ T13] veth1_macvtap: left promiscuous mode [ 673.262864][ T13] veth0_macvtap: left promiscuous mode [ 673.276471][T16473] overlay: Unknown parameter '/' [ 673.281746][ T30] audit: type=1400 audit(1757029738.255:432): avc: denied { mounton } for pid=16470 comm="syz.1.3346" path="/49/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 673.519759][ T1012] usb 1-1: Failed to submit usb control message: -110 [ 673.530310][ T1012] usb 1-1: unable to send the bmi data to the device: -110 [ 673.539017][ T1012] usb 1-1: unable to get target info from device [ 673.545687][ T1012] usb 1-1: could not get target info (-110) [ 673.552378][ T1012] usb 1-1: could not probe fw (-110) [ 673.575698][ T13] team0 (unregistering): Port device team_slave_1 removed [ 673.604259][ T13] team0 (unregistering): Port device team_slave_0 removed [ 673.887078][T16413] team0: Port device team_slave_1 added [ 673.895150][T16472] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 673.906838][ T24] infiniband syz1: ib_query_port failed (-19) [ 673.952431][T16413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.959522][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.990918][T16413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.015926][ T30] audit: type=1400 audit(1757029738.995:433): avc: denied { unmount } for pid=15523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 674.040421][T16413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.049845][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.075768][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.266844][T15269] Bluetooth: hci3: command tx timeout [ 674.267113][T16413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.449616][ T5888] usb 5-1: USB disconnect, device number 80 [ 674.549471][ T24] usb 1-1: USB disconnect, device number 38 [ 674.578901][T16488] FAULT_INJECTION: forcing a failure. [ 674.578901][T16488] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 674.592221][T16488] CPU: 0 UID: 0 PID: 16488 Comm: syz.1.3350 Not tainted syzkaller #0 PREEMPT(full) [ 674.592237][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 674.592244][T16488] Call Trace: [ 674.592249][T16488] [ 674.592253][T16488] dump_stack_lvl+0x16c/0x1f0 [ 674.592269][T16488] should_fail_ex+0x512/0x640 [ 674.592284][T16488] _copy_from_user+0x2e/0xd0 [ 674.592299][T16488] copy_msghdr_from_user+0x98/0x160 [ 674.592312][T16488] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 674.592330][T16488] ___sys_sendmsg+0xfe/0x1d0 [ 674.592343][T16488] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.592370][T16488] __sys_sendmsg+0x16d/0x220 [ 674.592383][T16488] ? __pfx___sys_sendmsg+0x10/0x10 [ 674.592405][T16488] do_syscall_64+0xcd/0x4c0 [ 674.592419][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.592432][T16488] RIP: 0033:0x7f099c98ebe9 [ 674.592441][T16488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.592452][T16488] RSP: 002b:00007f099d72a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.592463][T16488] RAX: ffffffffffffffda RBX: 00007f099cbc5fa0 RCX: 00007f099c98ebe9 [ 674.592470][T16488] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 674.592477][T16488] RBP: 00007f099d72a090 R08: 0000000000000000 R09: 0000000000000000 [ 674.592483][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.592489][T16488] R13: 00007f099cbc6038 R14: 00007f099cbc5fa0 R15: 00007ffd15fdc118 [ 674.592503][T16488] [ 674.755840][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.830546][T16413] hsr_slave_0: entered promiscuous mode [ 674.839210][T16413] hsr_slave_1: entered promiscuous mode [ 674.845567][T16413] debugfs: 'hsr0' already exists in 'hsr' [ 674.930752][ T5962] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 676.195583][T16413] Cannot create hsr debugfs directory [ 676.270797][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 676.277164][ T5962] usb 6-1: too many configurations: 31, using maximum allowed: 8 [ 676.286395][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 676.294803][ T5962] usb 6-1: can't read configurations, error -61 [ 676.303077][T15269] Bluetooth: hci3: command tx timeout [ 676.426346][ T13] IPVS: stop unused estimator thread 0... [ 676.451344][ T5962] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 676.675513][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 676.706636][ T5962] usb 6-1: too many configurations: 31, using maximum allowed: 8 [ 676.736971][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 676.746193][ T5962] usb 6-1: can't read configurations, error -61 [ 676.756824][ T5962] usb usb6-port1: attempt power cycle [ 678.073672][ T30] audit: type=1400 audit(1757029742.105:434): avc: denied { ioctl } for pid=16508 comm="syz.1.3356" path="socket:[64601]" dev="sockfs" ino=64601 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 678.388484][T16520] 9pnet_fd: Insufficient options for proto=fd [ 678.437845][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 678.487969][T16523] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3358'. [ 678.562112][ T30] audit: type=1400 audit(1757029743.545:435): avc: denied { name_bind } for pid=16517 comm="syz.1.3358" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 678.690757][ T30] audit: type=1400 audit(1757029743.545:436): avc: denied { node_bind } for pid=16517 comm="syz.1.3358" saddr=806:cdc:300:0:7f1b:e300:: src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 678.733416][T16413] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 678.771035][T16413] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 678.847852][ T30] audit: type=1400 audit(1757029743.805:437): avc: denied { listen } for pid=16526 comm="syz.4.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 678.923779][T16413] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 678.943291][T16413] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 680.039183][ T30] audit: type=1400 audit(1757029744.965:438): avc: denied { create } for pid=16521 comm="syz.5.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 680.117890][T16413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.251348][ T30] audit: type=1400 audit(1757029744.965:439): avc: denied { connect } for pid=16521 comm="syz.5.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 680.323168][T16413] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.327761][ T30] audit: type=1400 audit(1757029744.965:440): avc: denied { write } for pid=16521 comm="syz.5.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 680.431939][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.439051][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.574726][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.581875][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.654796][T16550] fuse: Bad value for 'user_id' [ 680.659652][T16550] fuse: Bad value for 'user_id' [ 681.303224][T16413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.498119][T16413] veth0_vlan: entered promiscuous mode [ 681.966663][T16413] veth1_vlan: entered promiscuous mode [ 682.035533][T16413] veth0_macvtap: entered promiscuous mode [ 682.069707][T16413] veth1_macvtap: entered promiscuous mode [ 682.135082][T16413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.192034][T16413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.229680][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.382140][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.396235][ T30] audit: type=1400 audit(1757029747.375:441): avc: denied { create } for pid=16569 comm="syz.5.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 682.421581][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.441456][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3370'. [ 682.464533][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.473582][ T30] audit: type=1400 audit(1757029747.395:442): avc: denied { setopt } for pid=16569 comm="syz.5.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 682.575538][ T30] audit: type=1400 audit(1757029747.555:443): avc: denied { ioctl } for pid=16569 comm="syz.5.3370" path="socket:[64496]" dev="sockfs" ino=64496 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 682.658554][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.668448][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.694640][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.841655][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.731419][T16587] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3374'. [ 684.411942][T16591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.463339][T16591] FAULT_INJECTION: forcing a failure. [ 684.463339][T16591] name failslab, interval 1, probability 0, space 0, times 0 [ 684.476500][T16591] CPU: 0 UID: 0 PID: 16591 Comm: syz.0.3375 Not tainted syzkaller #0 PREEMPT(full) [ 684.476526][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 684.476537][T16591] Call Trace: [ 684.476541][T16591] [ 684.476546][T16591] dump_stack_lvl+0x16c/0x1f0 [ 684.476562][T16591] should_fail_ex+0x512/0x640 [ 684.476576][T16591] ? fs_reclaim_acquire+0xae/0x150 [ 684.476593][T16591] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 684.476611][T16591] should_failslab+0xc2/0x120 [ 684.476623][T16591] __kmalloc_noprof+0xd2/0x510 [ 684.476638][T16591] tomoyo_realpath_from_path+0xc2/0x6e0 [ 684.476659][T16591] tomoyo_path_number_perm+0x245/0x580 [ 684.476672][T16591] ? tomoyo_path_number_perm+0x237/0x580 [ 684.476691][T16591] ? io_schedule_timeout+0x84/0x150 [ 684.476703][T16591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 684.476730][T16591] ? hook_file_ioctl_common+0x36/0x410 [ 684.476741][T16591] ? hook_file_ioctl_common+0xc5/0x410 [ 684.476753][T16591] ? hook_file_ioctl_common+0x145/0x410 [ 684.476767][T16591] ? __x64_sys_ioctl+0x94/0x210 [ 684.476784][T16591] ? security_file_ioctl+0x18/0x240 [ 684.476801][T16591] security_file_ioctl+0x9b/0x240 [ 684.476817][T16591] __x64_sys_ioctl+0xb7/0x210 [ 684.476835][T16591] do_syscall_64+0xcd/0x4c0 [ 684.476849][T16591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.476860][T16591] RIP: 0033:0x7fa43078ebe9 [ 684.476870][T16591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.476881][T16591] RSP: 002b:00007fa43162e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.476892][T16591] RAX: ffffffffffffffda RBX: 00007fa4309c6090 RCX: 00007fa43078ebe9 [ 684.476899][T16591] RDX: 00002000000123c0 RSI: 0000000000003b8b RDI: 0000000000000005 [ 684.476905][T16591] RBP: 00007fa43162e090 R08: 0000000000000000 R09: 0000000000000000 [ 684.476912][T16591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.476918][T16591] R13: 00007fa4309c6128 R14: 00007fa4309c6090 R15: 00007ffffbdbfd58 [ 684.476932][T16591] [ 684.823395][T16591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 685.426699][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.435074][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.560915][T16612] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3379'. [ 686.727865][ T975] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 686.880734][ T5888] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 686.884180][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 686.884596][ T30] audit: type=1400 audit(1757029751.865:445): avc: denied { write } for pid=16617 comm="syz.4.3383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 686.892484][ T975] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 686.892512][ T975] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 686.892531][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 686.892582][ T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 686.892607][ T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 686.894165][ T975] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 686.894189][ T975] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 686.894208][ T975] usb 4-1: Product: syz [ 686.894223][ T975] usb 4-1: Manufacturer: syz [ 686.899886][ T975] cdc_wdm 4-1:1.0: skipping garbage [ 686.899904][ T975] cdc_wdm 4-1:1.0: skipping garbage [ 686.901738][ T975] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 686.901757][ T975] cdc_wdm 4-1:1.0: Unknown control protocol [ 687.058582][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.058608][ T5888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 687.058646][ T5888] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 687.064274][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 687.064297][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.064309][ T5888] usb 6-1: Product: syz [ 687.064319][ T5888] usb 6-1: Manufacturer: syz [ 687.064328][ T5888] usb 6-1: SerialNumber: syz [ 687.066767][ T5888] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 687.066789][ T5888] cdc_ncm 6-1:1.0: bind() failure [ 688.003296][T16606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.012329][T16606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.249550][T16639] binder: 16638:16639 ioctl c0306201 0 returned -14 [ 689.048287][ T975] usb 4-1: USB disconnect, device number 83 [ 689.345056][ T30] audit: type=1400 audit(1757029754.325:446): avc: denied { mounton } for pid=16649 comm="syz.1.3391" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 689.369141][T16650] ceph: Path missing in source [ 689.464448][T16653] dlm: plock device version mismatch: kernel (1.2.0), user (1.3482426078.1826777217) [ 689.483333][ T30] audit: type=1400 audit(1757029754.445:447): avc: denied { accept } for pid=16647 comm="syz.3.3390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 689.512603][ T30] audit: type=1400 audit(1757029754.495:448): avc: denied { module_request } for pid=16647 comm="syz.3.3390" kmod="tty-ldisc-8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 689.535818][ T30] audit: type=1400 audit(1757029754.515:449): avc: denied { connect } for pid=16651 comm="syz.1.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 689.631001][ T5916] usb 6-1: USB disconnect, device number 74 [ 689.648787][T16658] tipc: Started in network mode [ 689.654133][T16658] tipc: Node identity fffffffa, cluster identity 4711 [ 689.680137][T16658] tipc: Node number set to 4294967290 [ 689.830766][ T975] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 690.668649][T16665] Bluetooth: MGMT ver 1.23 [ 690.757801][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.799934][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.813237][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 690.850716][ T975] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.875789][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.000961][ T975] usb 1-1: config 0 descriptor?? [ 691.164668][T16674] FAULT_INJECTION: forcing a failure. [ 691.164668][T16674] name failslab, interval 1, probability 0, space 0, times 0 [ 691.177514][T16674] CPU: 1 UID: 0 PID: 16674 Comm: syz.5.3396 Not tainted syzkaller #0 PREEMPT(full) [ 691.177539][T16674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 691.177550][T16674] Call Trace: [ 691.177558][T16674] [ 691.177565][T16674] dump_stack_lvl+0x16c/0x1f0 [ 691.177591][T16674] should_fail_ex+0x512/0x640 [ 691.177616][T16674] should_failslab+0xc2/0x120 [ 691.177637][T16674] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 691.177658][T16674] ? inet_bind_bucket_create+0x2d/0x280 [ 691.177690][T16674] inet_bind_bucket_create+0x2d/0x280 [ 691.177719][T16674] inet_csk_get_port+0x1178/0x2890 [ 691.177754][T16674] ? trace_inet_sock_set_state+0x194/0x220 [ 691.177782][T16674] ? __pfx_inet_csk_get_port+0x10/0x10 [ 691.177805][T16674] inet_csk_listen_start+0x161/0x390 [ 691.177828][T16674] __inet_listen_sk+0x20f/0x520 [ 691.177855][T16674] ? __pfx___inet_listen_sk+0x10/0x10 [ 691.177882][T16674] ? preempt_schedule_common+0x44/0xc0 [ 691.177903][T16674] ? preempt_schedule_thunk+0x16/0x30 [ 691.177936][T16674] inet_listen+0x93/0xd0 [ 691.177963][T16674] smc_listen+0x5ff/0xbb0 [ 691.177992][T16674] __sys_listen_socket+0x117/0x160 [ 691.178020][T16674] __sys_listen+0xa7/0x130 [ 691.178046][T16674] __x64_sys_listen+0x53/0x80 [ 691.178073][T16674] do_syscall_64+0xcd/0x4c0 [ 691.178096][T16674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.178114][T16674] RIP: 0033:0x7f7423f8ebe9 [ 691.178130][T16674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.178148][T16674] RSP: 002b:00007f7424e60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 691.178166][T16674] RAX: ffffffffffffffda RBX: 00007f74241c6180 RCX: 00007f7423f8ebe9 [ 691.178178][T16674] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 691.178189][T16674] RBP: 00007f7424e60090 R08: 0000000000000000 R09: 0000000000000000 [ 691.178200][T16674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.178210][T16674] R13: 00007f74241c6218 R14: 00007f74241c6180 R15: 00007ffc7d4f01f8 [ 691.178237][T16674] [ 691.614766][ T975] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 691.767382][ T30] audit: type=1400 audit(1757029756.745:450): avc: denied { create } for pid=16679 comm="syz.3.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 691.834883][ T30] audit: type=1400 audit(1757029756.755:451): avc: denied { connect } for pid=16679 comm="syz.3.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 691.862805][ T975] usb 1-1: USB disconnect, device number 39 [ 691.999114][T16687] binder: 16686:16687 ioctl c0306201 0 returned -14 [ 692.277302][T16693] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3399'. [ 692.346852][ T5917] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 692.552288][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.562957][ T5917] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 692.572931][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.588598][ T5917] usb 5-1: config 0 descriptor?? [ 692.771672][ T5962] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 692.773225][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 692.833404][T16701] 9pnet_fd: Insufficient options for proto=fd [ 692.995356][T16704] sp0: Synchronizing with TNC [ 693.034988][T16704] comedi comedi3: comedi_config --init_data is deprecated [ 693.055629][ T30] audit: type=1400 audit(1757029757.915:452): avc: denied { ioctl } for pid=16702 comm="syz.3.3405" path="socket:[65825]" dev="sockfs" ino=65825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 693.080399][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.098656][ T5962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.263009][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 693.279277][ T5962] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 693.279858][ T5917] pwc: recv_control_msg error -32 req 02 val 2700 [ 693.341835][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.490064][ T5962] usb 2-1: config 0 descriptor?? [ 693.540114][ T5917] pwc: recv_control_msg error -32 req 02 val 2c00 [ 693.541303][ T5962] pwc: Askey VC010 type 2 USB webcam detected. [ 693.548101][ T5917] pwc: recv_control_msg error -32 req 04 val 1000 [ 693.574022][ T5917] pwc: recv_control_msg error -71 req 04 val 1300 [ 693.607284][ T5917] pwc: recv_control_msg error -71 req 04 val 1400 [ 693.614350][ T5917] pwc: recv_control_msg error -71 req 02 val 2000 [ 693.637124][ T5917] pwc: recv_control_msg error -71 req 02 val 2100 [ 693.666841][ T5917] pwc: recv_control_msg error -71 req 04 val 1500 [ 693.701019][ T5917] pwc: recv_control_msg error -71 req 02 val 2500 [ 693.721636][ T5917] pwc: recv_control_msg error -71 req 02 val 2400 [ 693.728488][ T5917] pwc: recv_control_msg error -71 req 02 val 2600 [ 693.735997][ T5917] pwc: recv_control_msg error -71 req 02 val 2900 [ 693.747330][ T5917] pwc: recv_control_msg error -71 req 02 val 2800 [ 693.760247][ T5917] pwc: recv_control_msg error -71 req 04 val 1100 [ 693.808398][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 693.815897][ T5917] pwc: Registered as video103. [ 693.827529][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input58 [ 693.843851][ T5917] usb 5-1: USB disconnect, device number 81 [ 693.910734][ T5888] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 693.950821][ T5962] pwc: recv_control_msg error -32 req 02 val 2b00 [ 693.960053][ T5962] pwc: recv_control_msg error -32 req 02 val 2700 [ 693.968543][ T5962] pwc: recv_control_msg error -32 req 02 val 2c00 [ 693.975907][ T5962] pwc: recv_control_msg error -32 req 04 val 1000 [ 694.049565][T16715] netlink: 'syz.0.3409': attribute type 29 has an invalid length. [ 694.057542][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3409'. [ 694.109801][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 694.132429][ T5888] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 694.157140][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.177483][ T5888] usb 4-1: config 0 descriptor?? [ 694.187077][ T5962] pwc: recv_control_msg error -71 req 04 val 1400 [ 694.210406][ T5962] pwc: recv_control_msg error -71 req 02 val 2000 [ 694.276438][ T5962] pwc: recv_control_msg error -71 req 02 val 2100 [ 694.480848][ T5962] pwc: recv_control_msg error -71 req 04 val 1500 [ 694.719265][ T5962] pwc: recv_control_msg error -71 req 02 val 2500 [ 694.727756][ T5962] pwc: recv_control_msg error -71 req 02 val 2400 [ 694.736702][ T5888] zeroplus 0003:0C12:0005.0017: item fetching failed at offset 0/3 [ 694.745277][ T5888] zeroplus 0003:0C12:0005.0017: parse failed [ 694.756930][ T5888] zeroplus 0003:0C12:0005.0017: probe with driver zeroplus failed with error -22 [ 694.770507][ T5962] pwc: recv_control_msg error -71 req 02 val 2600 [ 694.779385][ T5962] pwc: recv_control_msg error -71 req 02 val 2900 [ 694.787803][ T5962] pwc: recv_control_msg error -71 req 02 val 2800 [ 694.794785][ T5962] pwc: recv_control_msg error -71 req 04 val 1100 [ 694.823381][ T5962] pwc: recv_control_msg error -71 req 04 val 1200 [ 694.871186][ T5962] pwc: Registered as video103. [ 694.902260][ T5962] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 694.945045][ T5962] usb 2-1: USB disconnect, device number 70 [ 695.008016][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.134377][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.175139][ T975] usb 4-1: USB disconnect, device number 84 [ 695.738765][T16734] binder: 16733:16734 ioctl c0306201 0 returned -14 [ 697.197850][ T30] audit: type=1400 audit(1757029762.155:453): avc: denied { ioctl } for pid=16749 comm="syz.1.3419" path="socket:[66587]" dev="sockfs" ino=66587 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 697.363027][ T30] audit: type=1400 audit(1757029762.215:454): avc: denied { ioctl } for pid=16749 comm="syz.1.3419" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 697.422568][T16752] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3417'. [ 697.487948][ T30] audit: type=1400 audit(1757029762.215:455): avc: denied { map } for pid=16749 comm="syz.1.3419" path="socket:[66587]" dev="sockfs" ino=66587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 697.645124][ T30] audit: type=1400 audit(1757029762.215:456): avc: denied { read } for pid=16749 comm="syz.1.3419" path="socket:[66587]" dev="sockfs" ino=66587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 697.894107][T16762] netlink: 'syz.0.3421': attribute type 29 has an invalid length. [ 697.902132][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 698.640791][ T5916] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 699.049426][ T5916] usb 1-1: config index 0 descriptor too short (expected 63186, got 210) [ 699.102629][ T5916] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 699.133100][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.166316][ T5916] usb 1-1: config 0 has no interface number 0 [ 699.554409][ T5916] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 699.994711][ T5916] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 700.007744][ T5916] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 700.016826][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.026528][ T5916] usb 1-1: config 0 descriptor?? [ 700.040311][ T5916] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 702.092203][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'. [ 702.103930][ T4975] usb 1-1: Failed to submit usb control message: -110 [ 702.110998][ T4975] usb 1-1: unable to send the bmi data to the device: -110 [ 702.118239][ T4975] usb 1-1: unable to get target info from device [ 702.124631][ T4975] usb 1-1: could not get target info (-110) [ 702.130557][ T4975] usb 1-1: could not probe fw (-110) [ 702.174876][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'. [ 703.135542][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 703.225856][ T24] usb 1-1: USB disconnect, device number 40 [ 703.909414][T16820] geneve2: entered promiscuous mode [ 704.470875][ T5916] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 704.812335][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.843583][ T5916] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 704.866436][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.891304][ T5916] usb 1-1: config 0 descriptor?? [ 704.914271][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 705.318607][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 705.325832][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 705.334492][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 705.599606][ T5916] pwc: recv_control_msg error -71 req 04 val 1300 [ 705.628829][ T5916] pwc: recv_control_msg error -71 req 04 val 1400 [ 705.638517][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 705.647547][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 705.680111][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 705.700916][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 705.722276][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 705.737849][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 705.757709][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 706.023163][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 706.030057][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 706.037287][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 706.045235][ T5916] pwc: Registered as video103. [ 706.051888][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 706.074552][ T5916] usb 1-1: USB disconnect, device number 41 [ 706.558243][ T5888] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 706.728854][T16852] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 706.735600][T16852] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 706.780777][T16852] vhci_hcd vhci_hcd.0: Device attached [ 706.792872][T16853] vhci_hcd: connection closed [ 706.795701][T12914] vhci_hcd: stop threads [ 706.811008][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 706.818019][T12914] vhci_hcd: release socket [ 706.840761][T12914] vhci_hcd: disconnect device [ 706.859960][ T5888] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 129, using maximum allowed: 30 [ 706.873679][ T5888] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 136, changing to 11 [ 706.885109][ T5888] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 706.899258][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 706.905930][ T5888] usb 6-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 706.969014][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.980549][ T5888] usb 6-1: config 0 descriptor?? [ 707.114019][ T30] audit: type=1326 audit(1757029771.965:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.239575][ T5916] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 707.259429][ T30] audit: type=1326 audit(1757029771.965:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.285252][ T30] audit: type=1326 audit(1757029771.965:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.310416][ T30] audit: type=1326 audit(1757029771.965:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.334243][ T30] audit: type=1326 audit(1757029771.965:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.358133][ T30] audit: type=1326 audit(1757029771.965:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.409160][ T30] audit: type=1326 audit(1757029771.975:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.433222][ T30] audit: type=1326 audit(1757029771.985:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.471478][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 707.505472][ T5916] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 707.526375][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.772969][ T5888] cypress 0003:04B4:ED81.0018: unknown main item tag 0x0 [ 707.773000][ T5888] cypress 0003:04B4:ED81.0018: unknown main item tag 0x0 [ 707.773022][ T5888] cypress 0003:04B4:ED81.0018: unknown main item tag 0x0 [ 707.796484][ T30] audit: type=1326 audit(1757029771.985:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.796529][ T30] audit: type=1326 audit(1757029771.995:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099c98ebe9 code=0x7ffc0000 [ 707.881037][ T5888] cypress 0003:04B4:ED81.0018: hidraw0: USB HID v0.03 Device [HID 04b4:ed81] on usb-dummy_hcd.5-1/input0 [ 707.906690][ T5916] usb 5-1: Product: syz [ 707.906778][ T5916] usb 5-1: Manufacturer: syz [ 707.911021][ T5916] usb 5-1: SerialNumber: syz [ 707.980050][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3442'. [ 707.981159][ T5916] usb 5-1: config 0 descriptor?? [ 707.997620][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3442'. [ 708.575508][T16877] FAULT_INJECTION: forcing a failure. [ 708.575508][T16877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.588693][T16877] CPU: 1 UID: 0 PID: 16877 Comm: syz.0.3451 Not tainted syzkaller #0 PREEMPT(full) [ 708.588717][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 708.588728][T16877] Call Trace: [ 708.588735][T16877] [ 708.588742][T16877] dump_stack_lvl+0x16c/0x1f0 [ 708.588768][T16877] should_fail_ex+0x512/0x640 [ 708.588793][T16877] _copy_from_user+0x2e/0xd0 [ 708.588818][T16877] copy_msghdr_from_user+0x98/0x160 [ 708.588839][T16877] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 708.588862][T16877] ? __lock_acquire+0xb97/0x1ce0 [ 708.588898][T16877] ___sys_sendmsg+0xfe/0x1d0 [ 708.588919][T16877] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.588970][T16877] __sys_sendmsg+0x16d/0x220 [ 708.588990][T16877] ? __pfx___sys_sendmsg+0x10/0x10 [ 708.589027][T16877] do_syscall_64+0xcd/0x4c0 [ 708.589050][T16877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.589068][T16877] RIP: 0033:0x7fa43078ebe9 [ 708.589083][T16877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.589100][T16877] RSP: 002b:00007fa43160d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.589118][T16877] RAX: ffffffffffffffda RBX: 00007fa4309c6180 RCX: 00007fa43078ebe9 [ 708.589130][T16877] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000006 [ 708.589142][T16877] RBP: 00007fa43160d090 R08: 0000000000000000 R09: 0000000000000000 [ 708.589153][T16877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.589163][T16877] R13: 00007fa4309c6218 R14: 00007fa4309c6180 R15: 00007ffffbdbfd58 [ 708.589188][T16877] [ 708.881600][ T5888] usb 6-1: USB disconnect, device number 75 [ 709.249115][T16884] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 709.257069][T16884] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 709.265622][T16884] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 709.273484][T16884] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 709.341967][T16886] bridge0: entered promiscuous mode [ 709.348117][T16886] macsec1: entered promiscuous mode [ 709.354219][T16886] bridge0: port 3(macsec1) entered blocking state [ 709.360786][T16886] bridge0: port 3(macsec1) entered disabled state [ 709.367285][T16886] macsec1: entered allmulticast mode [ 709.372575][T16886] bridge0: entered allmulticast mode [ 709.606412][T16886] macsec1: left allmulticast mode [ 709.611479][T16886] bridge0: left allmulticast mode [ 709.619851][T16886] bridge0: left promiscuous mode [ 709.691586][T16890] FAULT_INJECTION: forcing a failure. [ 709.691586][T16890] name failslab, interval 1, probability 0, space 0, times 0 [ 709.720815][T16890] CPU: 1 UID: 0 PID: 16890 Comm: syz.0.3454 Not tainted syzkaller #0 PREEMPT(full) [ 709.720842][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 709.720853][T16890] Call Trace: [ 709.720860][T16890] [ 709.720868][T16890] dump_stack_lvl+0x16c/0x1f0 [ 709.720892][T16890] should_fail_ex+0x512/0x640 [ 709.720911][T16890] ? fs_reclaim_acquire+0xae/0x150 [ 709.720936][T16890] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 709.720961][T16890] should_failslab+0xc2/0x120 [ 709.720982][T16890] __kmalloc_noprof+0xd2/0x510 [ 709.721008][T16890] tomoyo_realpath_from_path+0xc2/0x6e0 [ 709.721037][T16890] ? tomoyo_profile+0x47/0x60 [ 709.721057][T16890] tomoyo_path_number_perm+0x245/0x580 [ 709.721079][T16890] ? tomoyo_path_number_perm+0x237/0x580 [ 709.721104][T16890] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 709.721128][T16890] ? find_held_lock+0x2b/0x80 [ 709.721174][T16890] ? find_held_lock+0x2b/0x80 [ 709.721195][T16890] ? hook_file_ioctl_common+0x145/0x410 [ 709.721220][T16890] ? __fget_files+0x20e/0x3c0 [ 709.721244][T16890] security_file_ioctl+0x9b/0x240 [ 709.721271][T16890] __x64_sys_ioctl+0xb7/0x210 [ 709.721300][T16890] do_syscall_64+0xcd/0x4c0 [ 709.721323][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.721341][T16890] RIP: 0033:0x7fa43078ebe9 [ 709.721356][T16890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.721379][T16890] RSP: 002b:00007fa43164f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.721397][T16890] RAX: ffffffffffffffda RBX: 00007fa4309c5fa0 RCX: 00007fa43078ebe9 [ 709.721408][T16890] RDX: 0000200000000280 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 709.721419][T16890] RBP: 00007fa43164f090 R08: 0000000000000000 R09: 0000000000000000 [ 709.721430][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.721441][T16890] R13: 00007fa4309c6038 R14: 00007fa4309c5fa0 R15: 00007ffffbdbfd58 [ 709.721465][T16890] [ 709.725113][T16890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 710.709816][ T24] usb 5-1: USB disconnect, device number 82 [ 710.710873][T16910] binder: 16907:16910 ioctl 4018620d 0 returned -22 [ 711.689555][T16918] Set syz1 is full, maxelem 65536 reached [ 712.260788][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 712.260832][ T30] audit: type=1400 audit(1757029777.195:499): avc: denied { listen } for pid=16921 comm="syz.3.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 712.430707][T11237] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 712.580721][T11237] usb 5-1: Using ep0 maxpacket: 16 [ 712.648497][T11237] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 712.657650][T11237] usb 5-1: config 1 has no interface number 1 [ 712.678172][T11237] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 712.722793][T11237] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.915536][T16935] netlink: 'syz.0.3468': attribute type 29 has an invalid length. [ 712.923439][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 713.009702][T11237] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.024069][T11237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.037934][T11237] usb 5-1: Product: syz [ 713.042569][T11237] usb 5-1: Manufacturer: syz [ 713.051472][T11237] usb 5-1: SerialNumber: syz [ 713.315113][T11237] usb 5-1: 2:1 : invalid channels 0 [ 714.030987][T11237] usb 5-1: USB disconnect, device number 83 [ 714.312740][T16947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3471'. [ 714.321823][T16947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3471'. [ 714.845535][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3472'. [ 715.160750][T11237] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 716.599312][T16966] overlay: Unknown parameter '/' [ 716.610262][T16966] FAULT_INJECTION: forcing a failure. [ 716.610262][T16966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.623908][T16966] CPU: 1 UID: 0 PID: 16966 Comm: syz.3.3476 Not tainted syzkaller #0 PREEMPT(full) [ 716.623934][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 716.623944][T16966] Call Trace: [ 716.623951][T16966] [ 716.623958][T16966] dump_stack_lvl+0x16c/0x1f0 [ 716.623983][T16966] should_fail_ex+0x512/0x640 [ 716.624008][T16966] _copy_to_user+0x32/0xd0 [ 716.624034][T16966] simple_read_from_buffer+0xcb/0x170 [ 716.624055][T16966] proc_fail_nth_read+0x197/0x240 [ 716.624078][T16966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.624100][T16966] ? rw_verify_area+0xcf/0x6c0 [ 716.624127][T16966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.624148][T16966] vfs_read+0x1e1/0xcf0 [ 716.624167][T16966] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 716.624188][T16966] ? __pfx___mutex_lock+0x10/0x10 [ 716.624209][T16966] ? __pfx_vfs_read+0x10/0x10 [ 716.624229][T16966] ? __rcu_read_unlock+0x2bc/0x550 [ 716.624250][T16966] ? __fget_files+0x20e/0x3c0 [ 716.624269][T16966] ? __fput_deferred+0x440/0x480 [ 716.624306][T16966] ksys_read+0x12a/0x250 [ 716.624320][T16966] ? __pfx_ksys_read+0x10/0x10 [ 716.624344][T16966] do_syscall_64+0xcd/0x4c0 [ 716.624365][T16966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.624383][T16966] RIP: 0033:0x7fa3fdf8d5fc [ 716.624398][T16966] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 716.624415][T16966] RSP: 002b:00007fa3feea1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 716.624432][T16966] RAX: ffffffffffffffda RBX: 00007fa3fe1c6180 RCX: 00007fa3fdf8d5fc [ 716.624445][T16966] RDX: 000000000000000f RSI: 00007fa3feea10a0 RDI: 0000000000000006 [ 716.624456][T16966] RBP: 00007fa3feea1090 R08: 0000000000000000 R09: 0000000000000000 [ 716.624467][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.624478][T16966] R13: 00007fa3fe1c6218 R14: 00007fa3fe1c6180 R15: 00007fff69ee4a28 [ 716.624503][T16966] [ 717.046971][T16969] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3475'. [ 718.230894][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 718.377409][T16982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3480'. [ 719.265748][T16996] binder: 16993:16996 ioctl c0306201 0 returned -14 [ 719.276973][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3485'. [ 719.287678][T16995] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 719.305578][T11237] IPVS: starting estimator thread 0... [ 719.339334][T17000] bridge_slave_0: left allmulticast mode [ 719.346282][T16995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.346348][T17000] bridge_slave_0: left promiscuous mode [ 719.365324][T17000] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.385789][T17001] netlink: 'syz.4.3486': attribute type 10 has an invalid length. [ 719.393954][T17001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3486'. [ 719.403006][T16997] IPVS: using max 75 ests per chain, 180000 per kthread [ 719.419604][T17000] bridge_slave_1: left allmulticast mode [ 719.427812][T17000] bridge_slave_1: left promiscuous mode [ 719.435894][T17000] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.458205][T17000] bond0: (slave bond_slave_0): Releasing backup interface [ 719.478898][T17000] bond0: (slave bond_slave_1): Releasing backup interface [ 719.809005][T17000] team0: Port device team_slave_0 removed [ 719.899385][T17000] team0: Port device team_slave_1 removed [ 719.920053][T17000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.024589][T17000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.141597][T17000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.153418][T17000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.495437][T17001] batman_adv: batadv0: Adding interface: virt_wifi0 [ 720.520571][T17001] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.569710][T17001] batman_adv: batadv0: Interface activated: virt_wifi0 [ 720.878707][T13117] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 720.970687][T17014] netlink: 'syz.5.3489': attribute type 29 has an invalid length. [ 720.979122][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3489'. [ 721.251639][T13117] usb 4-1: Using ep0 maxpacket: 8 [ 721.260117][T13117] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 721.280096][T13117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.290852][T13117] usb 4-1: Product: syz [ 721.298269][T13117] usb 4-1: Manufacturer: syz [ 721.303611][T13117] usb 4-1: SerialNumber: syz [ 721.312842][T13117] usb 4-1: config 0 descriptor?? [ 721.354634][ T30] audit: type=1400 audit(1757029786.225:500): avc: denied { map } for pid=17022 comm="syz.0.3491" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 721.411199][ T30] audit: type=1400 audit(1757029786.225:501): avc: denied { execute } for pid=17022 comm="syz.0.3491" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 721.530546][T13117] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 721.561121][ T5971] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 721.620838][T17025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.665538][ T30] audit: type=1400 audit(1757029786.625:502): avc: denied { create } for pid=17022 comm="syz.0.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 721.685402][ T30] audit: type=1400 audit(1757029786.635:503): avc: denied { ioctl } for pid=17022 comm="syz.0.3491" path="socket:[66519]" dev="sockfs" ino=66519 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 721.887107][T17022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.077176][ T5971] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 722.088914][ T5971] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 722.098509][ T5971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.110438][ T5971] usb 6-1: config 0 has no interface number 0 [ 722.373493][ T5971] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 722.383886][ T5971] usb 6-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 722.397461][ T5971] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 722.406923][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.425940][ T5971] usb 6-1: config 0 descriptor?? [ 722.502119][ T5971] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 722.585245][T17038] FAULT_INJECTION: forcing a failure. [ 722.585245][T17038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.598437][T17038] CPU: 0 UID: 0 PID: 17038 Comm: syz.0.3494 Not tainted syzkaller #0 PREEMPT(full) [ 722.598462][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 722.598474][T17038] Call Trace: [ 722.598480][T17038] [ 722.598487][T17038] dump_stack_lvl+0x16c/0x1f0 [ 722.598510][T17038] should_fail_ex+0x512/0x640 [ 722.598533][T17038] _copy_from_user+0x2e/0xd0 [ 722.598557][T17038] copy_msghdr_from_user+0x98/0x160 [ 722.598576][T17038] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 722.598604][T17038] ___sys_sendmsg+0xfe/0x1d0 [ 722.598617][T17038] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.598645][T17038] __sys_sendmsg+0x16d/0x220 [ 722.598659][T17038] ? __pfx___sys_sendmsg+0x10/0x10 [ 722.598693][T17038] do_syscall_64+0xcd/0x4c0 [ 722.598714][T17038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.598731][T17038] RIP: 0033:0x7fa43078ebe9 [ 722.598745][T17038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.598757][T17038] RSP: 002b:00007fa43164f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.598768][T17038] RAX: ffffffffffffffda RBX: 00007fa4309c5fa0 RCX: 00007fa43078ebe9 [ 722.598775][T17038] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 722.598782][T17038] RBP: 00007fa43164f090 R08: 0000000000000000 R09: 0000000000000000 [ 722.598789][T17038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.598795][T17038] R13: 00007fa4309c6038 R14: 00007fa4309c5fa0 R15: 00007ffffbdbfd58 [ 722.598814][T17038] [ 722.764461][ T4975] Bluetooth: (null): Invalid header checksum [ 722.770569][ T4975] Bluetooth: (null): Invalid header checksum [ 722.830871][ T4975] Bluetooth: (null): Invalid header checksum [ 723.012961][T13117] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 723.034893][T13117] usb 4-1: USB disconnect, device number 85 [ 723.585966][ T36] usb 6-1: Failed to submit usb control message: -110 [ 723.593338][T17041] netlink: 'syz.0.3495': attribute type 1 has an invalid length. [ 723.601793][ T36] usb 6-1: unable to send the bmi data to the device: -110 [ 723.618229][ T36] usb 6-1: unable to get target info from device [ 723.625280][ T36] usb 6-1: could not get target info (-110) [ 723.658500][ T36] usb 6-1: could not probe fw (-110) [ 724.384028][ T5962] usb 6-1: USB disconnect, device number 76 [ 725.554387][T17051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3498'. [ 725.574801][ T30] audit: type=1400 audit(1757029790.515:504): avc: denied { getopt } for pid=17065 comm="syz.0.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 726.043552][ T72] Bluetooth: (null): Invalid header checksum [ 726.049687][ T72] Bluetooth: (null): Invalid header checksum [ 726.363280][T17084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3505'. [ 727.590950][ T5962] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 727.742991][T17105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3515'. [ 728.251031][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 728.259915][ T5962] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 728.268430][ T5962] usb 4-1: config 0 has no interface number 0 [ 728.280721][ T5962] usb 4-1: config 0 interface 41 has no altsetting 0 [ 728.303893][ T5962] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 728.316638][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.426566][ T5962] usb 4-1: Product: syz [ 728.443138][ T5962] usb 4-1: Manufacturer: syz [ 728.454550][ T5962] usb 4-1: SerialNumber: syz [ 728.478954][ T5962] usb 4-1: config 0 descriptor?? [ 728.578705][ T5962] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 729.303759][T15269] Bluetooth: hci3: Unknown advertising packet type: 0x1c [ 729.303807][T15269] Bluetooth: hci3: Malformed LE Event: 0x0d [ 729.341375][T13117] usb 4-1: USB disconnect, device number 86 [ 729.663975][T17120] FAULT_INJECTION: forcing a failure. [ 729.663975][T17120] name failslab, interval 1, probability 0, space 0, times 0 [ 729.679540][T17120] CPU: 0 UID: 0 PID: 17120 Comm: syz.4.3519 Not tainted syzkaller #0 PREEMPT(full) [ 729.679564][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 729.679571][T17120] Call Trace: [ 729.679575][T17120] [ 729.679580][T17120] dump_stack_lvl+0x16c/0x1f0 [ 729.679596][T17120] should_fail_ex+0x512/0x640 [ 729.679609][T17120] ? __kvmalloc_node_noprof+0x124/0x620 [ 729.679622][T17120] should_failslab+0xc2/0x120 [ 729.679635][T17120] __kvmalloc_node_noprof+0x137/0x620 [ 729.679646][T17120] ? sysctl_head_grab+0x51/0x70 [ 729.679662][T17120] ? proc_sys_call_handler+0x281/0x570 [ 729.679681][T17120] ? proc_sys_call_handler+0x281/0x570 [ 729.679696][T17120] proc_sys_call_handler+0x281/0x570 [ 729.679714][T17120] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 729.679731][T17120] ? __lock_acquire+0xb97/0x1ce0 [ 729.679752][T17120] do_iter_readv_writev+0x65f/0x9e0 [ 729.679771][T17120] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 729.679796][T17120] vfs_writev+0x35f/0xde0 [ 729.679810][T17120] ? __pfx_vfs_writev+0x10/0x10 [ 729.679819][T17120] ? __mutex_lock+0x1c5/0x1060 [ 729.679836][T17120] ? __pfx___mutex_lock+0x10/0x10 [ 729.679853][T17120] ? __fget_files+0x20e/0x3c0 [ 729.679865][T17120] ? __fget_files+0x150/0x3c0 [ 729.679880][T17120] ? do_writev+0x132/0x340 [ 729.679889][T17120] do_writev+0x132/0x340 [ 729.679899][T17120] ? __pfx_do_writev+0x10/0x10 [ 729.679918][T17120] do_syscall_64+0xcd/0x4c0 [ 729.679933][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.679945][T17120] RIP: 0033:0x7f9f4918ebe9 [ 729.679955][T17120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.679966][T17120] RSP: 002b:00007f9f49f38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 729.679976][T17120] RAX: ffffffffffffffda RBX: 00007f9f493c6090 RCX: 00007f9f4918ebe9 [ 729.679984][T17120] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 729.679990][T17120] RBP: 00007f9f49f38090 R08: 0000000000000000 R09: 0000000000000000 [ 729.679997][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.680003][T17120] R13: 00007f9f493c6128 R14: 00007f9f493c6090 R15: 00007ffe71a1cec8 [ 729.680018][T17120] [ 730.240746][T11237] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 730.400737][T13117] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 730.404875][T11237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.418892][T11237] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 730.429065][T11237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.440820][T11237] usb 4-1: config 0 descriptor?? [ 730.451581][T11237] pwc: Askey VC010 type 2 USB webcam detected. [ 730.558776][T13117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.580762][T13117] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 730.590158][T13117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.676619][T13117] usb 2-1: config 0 descriptor?? [ 730.711485][T13117] pwc: Askey VC010 type 2 USB webcam detected. [ 730.788617][T15269] Bluetooth: hci1: unexpected cc 0x204b length: 9 > 3 [ 730.796139][T15269] Bluetooth: Unexpected continuation frame (len 12) [ 730.853961][T11237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 730.871889][T11237] pwc: recv_control_msg error -32 req 02 val 2700 [ 730.893836][T11237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 730.901129][T11237] pwc: recv_control_msg error -71 req 04 val 1000 [ 730.908125][T11237] pwc: recv_control_msg error -71 req 04 val 1300 [ 730.922227][T11237] pwc: recv_control_msg error -71 req 04 val 1400 [ 730.941514][T11237] pwc: recv_control_msg error -71 req 02 val 2000 [ 730.954387][T11237] pwc: recv_control_msg error -71 req 02 val 2100 [ 730.966053][T11237] pwc: recv_control_msg error -71 req 04 val 1500 [ 730.981094][T11237] pwc: recv_control_msg error -71 req 02 val 2500 [ 730.990484][T11237] pwc: recv_control_msg error -71 req 02 val 2400 [ 731.022866][T11237] pwc: recv_control_msg error -71 req 02 val 2600 [ 731.032207][T11237] pwc: recv_control_msg error -71 req 02 val 2900 [ 731.041413][T11237] pwc: recv_control_msg error -71 req 02 val 2800 [ 731.049525][T11237] pwc: recv_control_msg error -71 req 04 val 1100 [ 731.077550][T11237] pwc: recv_control_msg error -71 req 04 val 1200 [ 731.086437][T11237] pwc: Registered as video103. [ 731.094782][T11237] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61 [ 731.115061][T13117] pwc: recv_control_msg error -32 req 02 val 2b00 [ 731.124387][T13117] pwc: recv_control_msg error -32 req 02 val 2700 [ 731.132495][T11237] usb 4-1: USB disconnect, device number 87 [ 731.137765][T13117] pwc: recv_control_msg error -32 req 02 val 2c00 [ 731.794094][T13117] pwc: recv_control_msg error -71 req 04 val 1300 [ 731.839980][T13117] pwc: recv_control_msg error -71 req 04 val 1400 [ 731.867370][T13117] pwc: recv_control_msg error -71 req 02 val 2000 [ 731.906092][T13117] pwc: recv_control_msg error -71 req 02 val 2100 [ 731.930134][T13117] pwc: recv_control_msg error -71 req 04 val 1500 [ 731.937577][T13117] pwc: recv_control_msg error -71 req 02 val 2500 [ 731.965745][T13117] pwc: recv_control_msg error -71 req 02 val 2400 [ 731.980126][T13117] pwc: recv_control_msg error -71 req 02 val 2600 [ 731.988334][T13117] pwc: recv_control_msg error -71 req 02 val 2900 [ 732.014938][T13117] pwc: recv_control_msg error -71 req 02 val 2800 [ 732.048142][T17146] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3528'. [ 732.263388][T13117] pwc: recv_control_msg error -71 req 04 val 1100 [ 732.338988][T13117] pwc: recv_control_msg error -71 req 04 val 1200 [ 732.438033][T13117] pwc: Registered as video103. [ 732.443750][T13117] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input62 [ 732.455631][T13117] usb 2-1: USB disconnect, device number 71 [ 732.469333][ T30] audit: type=1400 audit(1757029797.325:505): avc: denied { ioctl } for pid=17147 comm="syz.3.3529" path="cgroup:[4026532819]" dev="nsfs" ino=4026532819 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 732.857494][T17157] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3530'. [ 732.886911][ T30] audit: type=1400 audit(1757029797.855:506): avc: denied { create } for pid=17152 comm="syz.1.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 733.463694][T17128] syz.4.3523 (17128): drop_caches: 2 [ 733.640785][ T5916] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 733.827087][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 733.851495][ T5916] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 733.851582][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.851659][ T5916] usb 4-1: Product: syz [ 733.851712][ T5916] usb 4-1: Manufacturer: syz [ 733.851765][ T5916] usb 4-1: SerialNumber: syz [ 733.954373][ T5916] usb 4-1: config 0 descriptor?? [ 734.055067][ T5916] gspca_main: etoms-2.14.0 probing 102c:6251 [ 734.080906][ T5962] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 734.186893][T17176] FAULT_INJECTION: forcing a failure. [ 734.186893][T17176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.200434][T17176] CPU: 0 UID: 0 PID: 17176 Comm: syz.0.3539 Not tainted syzkaller #0 PREEMPT(full) [ 734.200462][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.200473][T17176] Call Trace: [ 734.200480][T17176] [ 734.200487][T17176] dump_stack_lvl+0x16c/0x1f0 [ 734.200513][T17176] should_fail_ex+0x512/0x640 [ 734.200537][T17176] _copy_from_user+0x2e/0xd0 [ 734.200560][T17176] do_handle_open+0xee/0xc50 [ 734.200580][T17176] ? __pfx_do_handle_open+0x10/0x10 [ 734.200604][T17176] ? ksys_write+0x1ac/0x250 [ 734.200641][T17176] ? do_syscall_64+0xcd/0x4c0 [ 734.200660][T17176] do_syscall_64+0xcd/0x4c0 [ 734.200681][T17176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.200699][T17176] RIP: 0033:0x7fa43078ebe9 [ 734.200714][T17176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.200731][T17176] RSP: 002b:00007fa43162e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 734.200749][T17176] RAX: ffffffffffffffda RBX: 00007fa4309c6090 RCX: 00007fa43078ebe9 [ 734.200762][T17176] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 734.200773][T17176] RBP: 00007fa43162e090 R08: 0000000000000000 R09: 0000000000000000 [ 734.200784][T17176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.200795][T17176] R13: 00007fa4309c6128 R14: 00007fa4309c6090 R15: 00007ffffbdbfd58 [ 734.200819][T17176] [ 734.344938][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.579260][ T5962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.656004][ T5962] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 734.696601][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.738240][ T5962] usb 5-1: config 0 descriptor?? [ 734.747513][ T5916] usb 4-1: USB disconnect, device number 88 [ 734.770956][ T5962] pwc: Askey VC010 type 2 USB webcam detected. [ 734.801861][T17184] overlay: Unknown parameter 'dont_hash' [ 734.818033][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3540'. [ 734.896092][T17188] FAULT_INJECTION: forcing a failure. [ 734.896092][T17188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.911781][T17188] CPU: 1 UID: 0 PID: 17188 Comm: syz.0.3541 Not tainted syzkaller #0 PREEMPT(full) [ 734.911806][T17188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.911816][T17188] Call Trace: [ 734.911822][T17188] [ 734.911828][T17188] dump_stack_lvl+0x16c/0x1f0 [ 734.911853][T17188] should_fail_ex+0x512/0x640 [ 734.911883][T17188] _copy_from_user+0x2e/0xd0 [ 734.911908][T17188] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 734.911937][T17188] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 734.911964][T17188] ? avc_has_perm_noaudit+0x117/0x3b0 [ 734.911990][T17188] sk_setsockopt+0x162/0x3af0 [ 734.912011][T17188] ? avc_has_perm+0x144/0x1f0 [ 734.912040][T17188] ? __pfx_sk_setsockopt+0x10/0x10 [ 734.912062][T17188] ? get_pid_task+0x106/0x250 [ 734.912080][T17188] ? proc_fail_nth_write+0x9f/0x220 [ 734.912106][T17188] ? sock_has_perm+0x259/0x2f0 [ 734.912128][T17188] ? __pfx_sock_has_perm+0x10/0x10 [ 734.912148][T17188] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 734.912175][T17188] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 734.912206][T17188] unix_setsockopt+0x104/0x340 [ 734.912225][T17188] ? __pfx_unix_setsockopt+0x10/0x10 [ 734.912247][T17188] ? selinux_socket_setsockopt+0x6a/0x80 [ 734.912270][T17188] ? __pfx_unix_setsockopt+0x10/0x10 [ 734.912288][T17188] do_sock_setsockopt+0xf3/0x1d0 [ 734.912312][T17188] __sys_setsockopt+0x1a0/0x230 [ 734.912335][T17188] __x64_sys_setsockopt+0xbd/0x160 [ 734.912352][T17188] ? do_syscall_64+0x91/0x4c0 [ 734.912373][T17188] ? lockdep_hardirqs_on+0x7c/0x110 [ 734.912392][T17188] do_syscall_64+0xcd/0x4c0 [ 734.912414][T17188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.912432][T17188] RIP: 0033:0x7fa43078ebe9 [ 734.912448][T17188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.912465][T17188] RSP: 002b:00007fa43162e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 734.912483][T17188] RAX: ffffffffffffffda RBX: 00007fa4309c6090 RCX: 00007fa43078ebe9 [ 734.912495][T17188] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 734.912506][T17188] RBP: 00007fa43162e090 R08: 0000000000000010 R09: 0000000000000000 [ 734.912517][T17188] R10: 000020000002eff0 R11: 0000000000000246 R12: 0000000000000001 [ 734.912527][T17188] R13: 00007fa4309c6128 R14: 00007fa4309c6090 R15: 00007ffffbdbfd58 [ 734.912551][T17188] [ 735.070724][T11237] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 735.353609][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 735.386487][ T5962] pwc: recv_control_msg error -32 req 02 val 2b00 [ 735.393745][ T5962] pwc: recv_control_msg error -32 req 02 val 2700 [ 735.482424][T11237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.492807][T11237] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 735.502357][T11237] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 735.520723][T11237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.548829][T11237] usb 2-1: config 0 descriptor?? [ 735.601582][ T5962] pwc: recv_control_msg error -71 req 04 val 1000 [ 735.608398][ T5962] pwc: recv_control_msg error -71 req 04 val 1300 [ 735.621415][ T5962] pwc: recv_control_msg error -71 req 04 val 1400 [ 735.641345][ T5962] pwc: recv_control_msg error -71 req 02 val 2000 [ 735.660053][ T5962] pwc: recv_control_msg error -71 req 02 val 2100 [ 735.679130][ T5962] pwc: recv_control_msg error -71 req 04 val 1500 [ 735.691094][ T5962] pwc: recv_control_msg error -71 req 02 val 2500 [ 735.708324][ T5962] pwc: recv_control_msg error -71 req 02 val 2400 [ 735.731060][ T5962] pwc: recv_control_msg error -71 req 02 val 2600 [ 735.751195][ T5962] pwc: recv_control_msg error -71 req 02 val 2900 [ 735.758041][ T5962] pwc: recv_control_msg error -71 req 02 val 2800 [ 735.770795][ T5962] pwc: recv_control_msg error -71 req 04 val 1100 [ 735.786022][ T5962] pwc: recv_control_msg error -71 req 04 val 1200 [ 735.816143][ T5962] pwc: Registered as video103. [ 735.834109][ T5962] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 735.872310][ T5962] usb 5-1: USB disconnect, device number 84 [ 736.119500][T17192] wg2: entered promiscuous mode [ 736.133229][T17192] wg2: entered allmulticast mode [ 736.177179][ T30] audit: type=1400 audit(1757029800.150:507): avc: denied { node_bind } for pid=17191 comm="syz.0.3544" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 736.288822][T17200] FAULT_INJECTION: forcing a failure. [ 736.288822][T17200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.302146][T17200] CPU: 1 UID: 0 PID: 17200 Comm: syz.4.3545 Not tainted syzkaller #0 PREEMPT(full) [ 736.302170][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 736.302179][T17200] Call Trace: [ 736.302185][T17200] [ 736.302192][T17200] dump_stack_lvl+0x16c/0x1f0 [ 736.302215][T17200] should_fail_ex+0x512/0x640 [ 736.302238][T17200] _copy_from_user+0x2e/0xd0 [ 736.302260][T17200] copy_msghdr_from_user+0x98/0x160 [ 736.302279][T17200] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 736.302302][T17200] ? __lock_acquire+0x62e/0x1ce0 [ 736.302332][T17200] ___sys_recvmsg+0xdb/0x1a0 [ 736.302351][T17200] ? __pfx____sys_recvmsg+0x10/0x10 [ 736.302371][T17200] ? find_held_lock+0x2b/0x80 [ 736.302406][T17200] do_recvmmsg+0x2fe/0x750 [ 736.302428][T17200] ? __pfx_do_recvmmsg+0x10/0x10 [ 736.302451][T17200] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 736.302478][T17200] ? __fget_files+0x20e/0x3c0 [ 736.302502][T17200] __x64_sys_recvmmsg+0x22a/0x280 [ 736.302522][T17200] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 736.302548][T17200] do_syscall_64+0xcd/0x4c0 [ 736.302569][T17200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.302586][T17200] RIP: 0033:0x7f9f4918ebe9 [ 736.302600][T17200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.302616][T17200] RSP: 002b:00007f9f49f38038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 736.302634][T17200] RAX: ffffffffffffffda RBX: 00007f9f493c6090 RCX: 00007f9f4918ebe9 [ 736.302645][T17200] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000005 [ 736.302656][T17200] RBP: 00007f9f49f38090 R08: 0000000000000000 R09: 0000000000000000 [ 736.302666][T17200] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 736.302676][T17200] R13: 00007f9f493c6128 R14: 00007f9f493c6090 R15: 00007ffe71a1cec8 [ 736.302699][T17200] [ 736.710275][T17203] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3546'. [ 736.985044][T12914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.081183][T12914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.238599][T12914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.681473][T12914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.972879][ T24] usb 2-1: USB disconnect, device number 72 [ 737.996498][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 738.005897][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.016393][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.025845][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.038426][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.637786][T17220] Set syz1 is full, maxelem 65536 reached [ 739.051121][T12914] bridge_slave_1: left allmulticast mode [ 739.077758][T12914] bridge_slave_1: left promiscuous mode [ 739.103703][T12914] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.131903][T12914] bridge_slave_0: left allmulticast mode [ 739.153175][T12914] bridge_slave_0: left promiscuous mode [ 739.167968][T12914] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.214151][ T72] Bluetooth: (null): Invalid header checksum [ 739.248109][ T72] Bluetooth: (null): Invalid header checksum [ 740.116932][T15269] Bluetooth: hci3: command tx timeout [ 740.736242][T12914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.752882][T12914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.770274][T12914] bond0 (unregistering): Released all slaves [ 741.061397][T11237] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 741.260758][T11237] usb 2-1: Using ep0 maxpacket: 32 [ 741.284518][T11237] usb 2-1: config 0 has no interfaces? [ 741.309911][T11237] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 741.359623][T11237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.399925][T11237] usb 2-1: config 0 descriptor?? [ 741.491043][T12914] hsr_slave_0: left promiscuous mode [ 741.504037][T12914] hsr_slave_1: left promiscuous mode [ 741.528363][T12914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.554669][T12914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.621969][ T30] audit: type=1400 audit(1757029805.590:508): avc: denied { read write } for pid=17262 comm="syz.5.3565" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 742.105317][ T30] audit: type=1400 audit(1757029805.590:509): avc: denied { open } for pid=17262 comm="syz.5.3565" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 742.141160][T15269] Bluetooth: hci3: command tx timeout [ 742.267849][T17248] binder: BINDER_SET_CONTEXT_MGR already set [ 742.334470][T17248] binder: 17247:17248 ioctl 4018620d 2000000001c0 returned -16 [ 742.548754][T11237] usb 2-1: string descriptor 0 read error: -71 [ 743.455663][T12914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.532948][T12914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.755658][T12914] veth1_macvtap: left promiscuous mode [ 743.803925][T12914] veth0_macvtap: left promiscuous mode [ 743.854642][T11237] usb 2-1: USB disconnect, device number 73 [ 743.856180][T12914] veth1_vlan: left promiscuous mode [ 743.941716][T12914] veth0_vlan: left promiscuous mode [ 744.234173][T15269] Bluetooth: hci3: command tx timeout [ 745.001153][T17282] FAULT_INJECTION: forcing a failure. [ 745.001153][T17282] name failslab, interval 1, probability 0, space 0, times 0 [ 745.080746][T17282] CPU: 0 UID: 0 PID: 17282 Comm: syz.0.3569 Not tainted syzkaller #0 PREEMPT(full) [ 745.080827][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.080838][T17282] Call Trace: [ 745.080845][T17282] [ 745.080853][T17282] dump_stack_lvl+0x16c/0x1f0 [ 745.080880][T17282] should_fail_ex+0x512/0x640 [ 745.080900][T17282] ? __kvmalloc_node_noprof+0x124/0x620 [ 745.080927][T17282] should_failslab+0xc2/0x120 [ 745.080949][T17282] __kvmalloc_node_noprof+0x137/0x620 [ 745.080967][T17282] ? __pfx___mutex_lock+0x10/0x10 [ 745.080987][T17282] ? traverse.part.0.constprop.0+0x392/0x640 [ 745.081012][T17282] ? traverse.part.0.constprop.0+0x392/0x640 [ 745.081032][T17282] traverse.part.0.constprop.0+0x392/0x640 [ 745.081051][T17282] ? _kstrtoull+0x145/0x200 [ 745.081067][T17282] ? __pfx__kstrtoull+0x10/0x10 [ 745.081087][T17282] seq_read_iter+0x932/0x12c0 [ 745.081118][T17282] seq_read+0x3a3/0x570 [ 745.081136][T17282] ? __pfx_seq_read+0x10/0x10 [ 745.081159][T17282] ? get_pid_task+0xfc/0x250 [ 745.081179][T17282] ? avc_policy_seqno+0x9/0x20 [ 745.081203][T17282] ? __pfx_seq_read+0x10/0x10 [ 745.081220][T17282] proc_reg_read+0x23d/0x330 [ 745.081246][T17282] ? __pfx_proc_reg_read+0x10/0x10 [ 745.081273][T17282] vfs_read+0x1e1/0xcf0 [ 745.081297][T17282] ? __pfx_vfs_read+0x10/0x10 [ 745.081312][T17282] ? find_held_lock+0x2b/0x80 [ 745.081335][T17282] ? __fget_files+0x204/0x3c0 [ 745.081359][T17282] ? __fget_files+0x20e/0x3c0 [ 745.081377][T17282] ? __fget_files+0x150/0x3c0 [ 745.081403][T17282] __x64_sys_pread64+0x1eb/0x250 [ 745.081430][T17282] ? __pfx___x64_sys_pread64+0x10/0x10 [ 745.081458][T17282] do_syscall_64+0xcd/0x4c0 [ 745.081481][T17282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.081499][T17282] RIP: 0033:0x7fa43078ebe9 [ 745.081514][T17282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.081531][T17282] RSP: 002b:00007fa43160d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 745.081549][T17282] RAX: ffffffffffffffda RBX: 00007fa4309c6180 RCX: 00007fa43078ebe9 [ 745.081561][T17282] RDX: 000000000000003b RSI: 0000200000000c00 RDI: 0000000000000005 [ 745.081572][T17282] RBP: 00007fa43160d090 R08: 0000000000000000 R09: 0000000000000000 [ 745.081583][T17282] R10: 0000000000000545 R11: 0000000000000246 R12: 0000000000000001 [ 745.081594][T17282] R13: 00007fa4309c6218 R14: 00007fa4309c6180 R15: 00007ffffbdbfd58 [ 745.081620][T17282] [ 745.333399][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.300722][T15269] Bluetooth: hci3: command tx timeout [ 746.411469][T12914] team0 (unregistering): Port device team_slave_1 removed [ 746.529309][T12914] team0 (unregistering): Port device team_slave_0 removed [ 746.865519][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.865597][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.329706][T17303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3575'. [ 747.736048][T17308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3576'. [ 748.058216][ T30] audit: type=1400 audit(1757029812.030:510): avc: denied { connect } for pid=17311 comm="syz.5.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 748.088125][T17312] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3577'. [ 748.109725][T17216] chnl_net:caif_netlink_parms(): no params data found [ 748.214698][ T30] audit: type=1400 audit(1757029812.200:511): avc: denied { read } for pid=17311 comm="syz.5.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 748.471658][T17216] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.478973][T17216] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.486659][T17216] bridge_slave_0: entered allmulticast mode [ 748.494071][T17216] bridge_slave_0: entered promiscuous mode [ 748.502416][T17216] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.509607][T17216] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.516854][T17216] bridge_slave_1: entered allmulticast mode [ 748.525173][T17216] bridge_slave_1: entered promiscuous mode [ 748.628346][T17216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.641700][T17216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.679507][T17216] team0: Port device team_slave_0 added [ 748.695914][T17216] team0: Port device team_slave_1 added [ 748.734829][T17216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.741867][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.767990][T17216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.786739][T17216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.795931][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.830869][ T5971] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 748.864944][T17216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.914267][T17216] hsr_slave_0: entered promiscuous mode [ 748.921596][T17216] hsr_slave_1: entered promiscuous mode [ 748.928971][T17216] debugfs: 'hsr0' already exists in 'hsr' [ 748.935429][T17216] Cannot create hsr debugfs directory [ 749.053556][ T30] audit: type=1400 audit(1757029813.000:512): avc: denied { read } for pid=17337 comm="syz.5.3584" path="socket:[68437]" dev="sockfs" ino=68437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 749.106887][ T5971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.119336][ T30] audit: type=1400 audit(1757029813.010:513): avc: denied { bind } for pid=17337 comm="syz.5.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 749.119345][ T5971] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 749.119372][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.255160][ T5971] usb 1-1: config 0 descriptor?? [ 749.287240][ T5971] pwc: Askey VC010 type 2 USB webcam detected. [ 749.694454][ T5971] pwc: recv_control_msg error -32 req 02 val 2b00 [ 749.719172][ T5971] pwc: recv_control_msg error -32 req 02 val 2700 [ 749.746454][ T5971] pwc: recv_control_msg error -32 req 02 val 2c00 [ 749.772516][ T5971] pwc: recv_control_msg error -32 req 04 val 1000 [ 749.805615][ T5971] pwc: recv_control_msg error -32 req 04 val 1300 [ 749.863421][ T5971] pwc: recv_control_msg error -32 req 04 val 1400 [ 749.871161][ T5971] pwc: recv_control_msg error -32 req 02 val 2000 [ 749.878298][ T5971] pwc: recv_control_msg error -32 req 02 val 2100 [ 749.885222][ T5971] pwc: recv_control_msg error -32 req 04 val 1500 [ 749.892247][ T5971] pwc: recv_control_msg error -32 req 02 val 2500 [ 750.100476][ T5971] pwc: recv_control_msg error -71 req 02 val 2600 [ 750.675835][T17216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 750.897123][T17216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 750.910776][ T5971] pwc: recv_control_msg error -71 req 02 val 2900 [ 751.633144][T17216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 751.866544][T17352] Set syz1 is full, maxelem 65536 reached [ 751.977573][T17216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 752.470730][ T5971] pwc: recv_control_msg error -71 req 02 val 2800 [ 752.488020][ T5971] pwc: recv_control_msg error -71 req 04 val 1100 [ 752.501017][ T5971] pwc: recv_control_msg error -71 req 04 val 1200 [ 752.520806][ T5971] pwc: Registered as video103. [ 752.527088][ T5971] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input64 [ 752.554965][ T5971] usb 1-1: USB disconnect, device number 43 [ 752.582056][ T12] Bluetooth: (null): Invalid header checksum [ 752.611153][ T12] Bluetooth: (null): Invalid header checksum [ 752.775783][T17216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.352895][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3590'. [ 753.402812][T17216] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.550364][T12914] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.557525][T12914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.689967][T12914] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.697340][T12914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.082783][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 754.342584][T17386] FAULT_INJECTION: forcing a failure. [ 754.342584][T17386] name failslab, interval 1, probability 0, space 0, times 0 [ 754.342625][T17386] CPU: 0 UID: 0 PID: 17386 Comm: syz.1.3595 Not tainted syzkaller #0 PREEMPT(full) [ 754.342647][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.342658][T17386] Call Trace: [ 754.342665][T17386] [ 754.342672][T17386] dump_stack_lvl+0x16c/0x1f0 [ 754.342696][T17386] should_fail_ex+0x512/0x640 [ 754.342716][T17386] ? fs_reclaim_acquire+0xae/0x150 [ 754.342742][T17386] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 754.342768][T17386] should_failslab+0xc2/0x120 [ 754.342787][T17386] __kmalloc_noprof+0xd2/0x510 [ 754.342811][T17386] tomoyo_realpath_from_path+0xc2/0x6e0 [ 754.342840][T17386] ? tomoyo_profile+0x47/0x60 [ 754.342859][T17386] tomoyo_path_number_perm+0x245/0x580 [ 754.342879][T17386] ? tomoyo_path_number_perm+0x237/0x580 [ 754.342904][T17386] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 754.342927][T17386] ? find_held_lock+0x2b/0x80 [ 754.342972][T17386] ? find_held_lock+0x2b/0x80 [ 754.342991][T17386] ? hook_file_ioctl_common+0x145/0x410 [ 754.343022][T17386] ? __fget_files+0x20e/0x3c0 [ 754.343047][T17386] security_file_ioctl+0x9b/0x240 [ 754.343074][T17386] __x64_sys_ioctl+0xb7/0x210 [ 754.343102][T17386] do_syscall_64+0xcd/0x4c0 [ 754.343125][T17386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.343144][T17386] RIP: 0033:0x7f099c98ebe9 [ 754.343158][T17386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.343176][T17386] RSP: 002b:00007f099d72a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.343194][T17386] RAX: ffffffffffffffda RBX: 00007f099cbc5fa0 RCX: 00007f099c98ebe9 [ 754.343206][T17386] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 754.343217][T17386] RBP: 00007f099d72a090 R08: 0000000000000000 R09: 0000000000000000 [ 754.343228][T17386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.343240][T17386] R13: 00007f099cbc6038 R14: 00007f099cbc5fa0 R15: 00007ffd15fdc118 [ 754.343265][T17386] [ 754.343272][T17386] ERROR: Out of memory at tomoyo_realpath_from_path. [ 754.343843][T17386] loop2: detected capacity change from 0 to 7 [ 754.352435][T17386] Dev loop2: unable to read RDB block 7 [ 754.642839][T17386] loop2: unable to read partition table [ 754.648734][T17386] loop2: partition table beyond EOD, truncated [ 754.657087][T17386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 754.676234][T17216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.843249][T17400] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3598'. [ 754.910687][ T24] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 755.052778][ T5971] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 755.053070][ T24] usb 1-1: device descriptor read/64, error -71 [ 755.234274][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 755.249369][ T5971] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 755.258964][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.268917][ T5971] usb 6-1: Product: syz [ 755.277381][ T5971] usb 6-1: Manufacturer: syz [ 755.287893][ T5971] usb 6-1: SerialNumber: syz [ 755.305655][ T5971] usb 6-1: config 0 descriptor?? [ 755.340931][ T24] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 755.394520][T17216] veth0_vlan: entered promiscuous mode [ 755.449527][T17216] veth1_vlan: entered promiscuous mode [ 755.480930][ T24] usb 1-1: device descriptor read/64, error -71 [ 755.645808][ T24] usb usb1-port1: attempt power cycle [ 755.687966][T17216] veth0_macvtap: entered promiscuous mode [ 755.792179][T17216] veth1_macvtap: entered promiscuous mode [ 755.819606][T17216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.849326][T17216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.885684][ T5965] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.896146][ T5965] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.913490][ T5965] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.929960][ T5965] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.996989][ T4975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.010072][ T4975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.020813][ T24] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 756.034258][ T4975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.043530][ T24] usb 1-1: device descriptor read/8, error -71 [ 756.045957][ T4975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.068837][ T30] audit: type=1400 audit(1757029820.040:514): avc: denied { mounton } for pid=17216 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 756.121620][ T5916] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 756.291099][ T24] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 756.300262][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.312952][ T24] usb 1-1: device descriptor read/8, error -71 [ 756.319295][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 756.329951][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.343878][ T5916] usb 2-1: config 0 descriptor?? [ 756.352937][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 756.426909][ T24] usb usb1-port1: unable to enumerate USB device [ 756.481471][ T30] audit: type=1400 audit(1757029820.430:515): avc: denied { sqpoll } for pid=17414 comm="syz.6.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 756.756650][T17421] FAULT_INJECTION: forcing a failure. [ 756.756650][T17421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.771851][T17421] CPU: 0 UID: 0 PID: 17421 Comm: syz.4.3602 Not tainted syzkaller #0 PREEMPT(full) [ 756.771878][T17421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 756.771889][T17421] Call Trace: [ 756.771895][T17421] [ 756.771902][T17421] dump_stack_lvl+0x16c/0x1f0 [ 756.771926][T17421] should_fail_ex+0x512/0x640 [ 756.771951][T17421] _copy_from_user+0x2e/0xd0 [ 756.771974][T17421] copy_msghdr_from_user+0x98/0x160 [ 756.771994][T17421] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 756.772012][T17421] ? trace_sched_exit_tp+0xd1/0x120 [ 756.772046][T17421] ___sys_sendmsg+0xfe/0x1d0 [ 756.772066][T17421] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.772118][T17421] __sys_sendmsg+0x16d/0x220 [ 756.772138][T17421] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.772174][T17421] do_syscall_64+0xcd/0x4c0 [ 756.772196][T17421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.772215][T17421] RIP: 0033:0x7f9f4918ebe9 [ 756.772229][T17421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.772246][T17421] RSP: 002b:00007f9f49f38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.772263][T17421] RAX: ffffffffffffffda RBX: 00007f9f493c6090 RCX: 00007f9f4918ebe9 [ 756.772275][T17421] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000006 [ 756.772286][T17421] RBP: 00007f9f49f38090 R08: 0000000000000000 R09: 0000000000000000 [ 756.772296][T17421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.772307][T17421] R13: 00007f9f493c6128 R14: 00007f9f493c6090 R15: 00007ffe71a1cec8 [ 756.772330][T17421] [ 756.940751][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.147885][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 757.179596][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 757.193352][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 757.470786][ T975] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 758.800138][ T5916] pwc: recv_control_msg error -71 req 04 val 1300 [ 758.820758][ T5916] pwc: recv_control_msg error -71 req 04 val 1400 [ 758.828657][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 758.835630][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 758.842526][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 758.849443][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 758.861500][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 758.870264][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 758.877700][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 758.885620][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 758.892635][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 758.899434][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 758.920712][ T5971] usb 6-1: USB disconnect, device number 77 [ 758.929968][ T5916] pwc: Registered as video103. [ 758.938104][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.951350][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 758.961096][ T975] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.972206][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.982945][ T5916] usb 2-1: USB disconnect, device number 74 [ 758.998162][ T975] usb 5-1: config 0 descriptor?? [ 759.008906][ T975] pwc: Askey VC010 type 2 USB webcam detected. [ 759.324329][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3606'. [ 759.413281][ T975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 759.421695][ T975] pwc: recv_control_msg error -32 req 02 val 2700 [ 759.631561][ T975] pwc: recv_control_msg error -71 req 04 val 1000 [ 759.647933][ T975] pwc: recv_control_msg error -71 req 04 val 1300 [ 759.696170][ T975] pwc: recv_control_msg error -71 req 04 val 1400 [ 759.709391][ T975] pwc: recv_control_msg error -71 req 02 val 2000 [ 759.717011][ T975] pwc: recv_control_msg error -71 req 02 val 2100 [ 759.725891][ T975] pwc: recv_control_msg error -71 req 04 val 1500 [ 759.734238][ T975] pwc: recv_control_msg error -71 req 02 val 2500 [ 759.741517][ T975] pwc: recv_control_msg error -71 req 02 val 2400 [ 759.748992][ T975] pwc: recv_control_msg error -71 req 02 val 2600 [ 759.757938][ T975] pwc: recv_control_msg error -71 req 02 val 2900 [ 759.767744][ T975] pwc: recv_control_msg error -71 req 02 val 2800 [ 759.783243][ T975] pwc: recv_control_msg error -71 req 04 val 1100 [ 759.792971][ T975] pwc: recv_control_msg error -71 req 04 val 1200 [ 760.066201][ T975] pwc: Registered as video103. [ 760.072803][ T975] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input66 [ 760.123492][ T975] usb 5-1: USB disconnect, device number 85 [ 760.435451][T17455] FAULT_INJECTION: forcing a failure. [ 760.435451][T17455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.470573][T17455] CPU: 0 UID: 0 PID: 17455 Comm: syz.5.3610 Not tainted syzkaller #0 PREEMPT(full) [ 760.470599][T17455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 760.470613][T17455] Call Trace: [ 760.470619][T17455] [ 760.470626][T17455] dump_stack_lvl+0x16c/0x1f0 [ 760.470651][T17455] should_fail_ex+0x512/0x640 [ 760.470674][T17455] _copy_from_user+0x2e/0xd0 [ 760.470705][T17455] do_ip_vs_set_ctl+0xdfa/0x11d0 [ 760.470726][T17455] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 760.470743][T17455] ? __pfx___might_resched+0x10/0x10 [ 760.470757][T17455] ? rcu_is_watching+0x12/0xc0 [ 760.470774][T17455] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 760.470789][T17455] ? find_held_lock+0x2b/0x80 [ 760.470803][T17455] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 760.470828][T17455] ? nf_setsockopt+0x8a/0xf0 [ 760.470841][T17455] nf_setsockopt+0x8a/0xf0 [ 760.470855][T17455] ip_setsockopt+0xcb/0xf0 [ 760.470871][T17455] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 760.470887][T17455] do_sock_setsockopt+0xf3/0x1d0 [ 760.470903][T17455] __sys_setsockopt+0x1a0/0x230 [ 760.470917][T17455] __x64_sys_setsockopt+0xbd/0x160 [ 760.470927][T17455] ? do_syscall_64+0x91/0x4c0 [ 760.470941][T17455] ? lockdep_hardirqs_on+0x7c/0x110 [ 760.470953][T17455] do_syscall_64+0xcd/0x4c0 [ 760.470966][T17455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.470978][T17455] RIP: 0033:0x7f7423f8ebe9 [ 760.470987][T17455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.470998][T17455] RSP: 002b:00007f7424e60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 760.471010][T17455] RAX: ffffffffffffffda RBX: 00007f74241c6180 RCX: 00007f7423f8ebe9 [ 760.471017][T17455] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000006 [ 760.471024][T17455] RBP: 00007f7424e60090 R08: 0000000000000018 R09: 0000000000000000 [ 760.471030][T17455] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 760.471037][T17455] R13: 00007f74241c6218 R14: 00007f74241c6180 R15: 00007ffc7d4f01f8 [ 760.471050][T17455] [ 760.676013][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.356392][T17457] Set syz1 is full, maxelem 65536 reached [ 761.586502][T17464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3613'. [ 765.509009][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3621'. [ 765.652531][T17501] 9pnet_fd: Insufficient options for proto=fd [ 766.970899][ T975] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 767.123397][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.141732][ T975] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 767.159396][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.218323][ T975] usb 5-1: config 0 descriptor?? [ 767.304810][ T5971] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 767.306249][ T975] pwc: Askey VC010 type 2 USB webcam detected. [ 767.341059][ C1] ------------[ cut here ]------------ [ 767.346891][ C1] ODEBUG: free active (active state 0) object: ffff8880347de890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 767.360240][ C1] WARNING: CPU: 1 PID: 12 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 767.369593][ C1] Modules linked in: [ 767.373719][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 767.382990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.393042][ C1] Workqueue: bat_events batadv_nc_worker [ 767.398675][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 767.404493][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 3b 16 8c 4c 89 e6 48 c7 c7 60 30 16 8c e8 1f 60 8f fc 90 <0f> 0b 90 90 58 83 05 86 c1 c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 767.424104][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010286 [ 767.430152][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3388 [ 767.438119][ C1] RDX: ffff88801e2cc880 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 767.446080][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 767.454054][ C1] R10: 0000000000000000 R11: fffffffffffd6b00 R12: ffffffff8c163700 [ 767.462013][ C1] R13: ffffffff8bafedc0 R14: ffffffff8a81a5e0 R15: ffffc90000a08b28 [ 767.469974][ C1] FS: 0000000000000000(0000) GS:ffff8881247b6000(0000) knlGS:0000000000000000 [ 767.478917][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.485507][ C1] CR2: 0000200000025000 CR3: 0000000056d27000 CR4: 00000000003526f0 [ 767.493474][ C1] Call Trace: [ 767.496733][ C1] [ 767.499638][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 767.505291][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 767.511097][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 767.516639][ C1] ? look_up_lock_class+0x59/0x150 [ 767.521752][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 767.527822][ C1] kfree+0x28f/0x4d0 [ 767.531733][ C1] ? lock_acquire+0x179/0x350 [ 767.536416][ C1] ? rose_timer_expiry+0x53f/0x630 [ 767.541565][ C1] rose_timer_expiry+0x53f/0x630 [ 767.546507][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 767.551963][ C1] call_timer_fn+0x197/0x620 [ 767.556539][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 767.561657][ C1] ? mark_held_locks+0x49/0x80 [ 767.566411][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 767.571873][ C1] __run_timers+0x6ef/0x960 [ 767.576380][ C1] ? __pfx___run_timers+0x10/0x10 [ 767.581433][ C1] run_timer_base+0x114/0x190 [ 767.586102][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 767.591316][ C1] run_timer_softirq+0x1a/0x40 [ 767.596067][ C1] handle_softirqs+0x219/0x8e0 [ 767.600830][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 767.606114][ C1] __irq_exit_rcu+0x109/0x170 [ 767.610814][ C1] irq_exit_rcu+0x9/0x30 [ 767.615042][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 767.620679][ C1] [ 767.623599][ C1] [ 767.626508][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 767.632489][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 767.638885][ C1] Code: fb 09 00 00 44 8b 05 b9 88 22 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 9f 6a 3a 00 fb 65 48 8b 1d 5e 95 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 767.658495][ C1] RSP: 0018:ffffc90000117838 EFLAGS: 00000206 [ 767.664560][ C1] RAX: 00000000006c9655 RBX: ffff88801e2cc880 RCX: 0000000000000006 [ 767.672519][ C1] RDX: 0000000000000000 RSI: ffffffff8de514d0 RDI: ffffffff8c162b00 [ 767.680469][ C1] RBP: ffffc90000117880 R08: 0000000000000001 R09: 0000000000000001 [ 767.688428][ C1] R10: ffffffff90ab6197 R11: 0000000000000000 R12: ffff8880b853a300 [ 767.696390][ C1] R13: ffff8880281fc880 R14: ffff8880b843a300 R15: ffff8880b853b170 [ 767.704362][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 767.710165][ C1] ? __switch_to+0x7a5/0x11a0 [ 767.714845][ C1] __schedule+0x1198/0x5de0 [ 767.719352][ C1] ? __pfx___schedule+0x10/0x10 [ 767.724207][ C1] ? mark_held_locks+0x49/0x80 [ 767.728966][ C1] preempt_schedule_irq+0x51/0x90 [ 767.733978][ C1] irqentry_exit+0x36/0x90 [ 767.738371][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 767.743816][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 767.749164][ C1] Code: db 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 57 18 1b 12 <65> 8b 05 68 18 1b 12 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 767.768801][ C1] RSP: 0018:ffffc90000117b20 EFLAGS: 00000246 [ 767.774855][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8b613557 [ 767.782824][ C1] RDX: ffff88801e2cc880 RSI: 0000000000000000 RDI: 0000000000000005 [ 767.790818][ C1] RBP: 0000000000000109 R08: 0000000000000005 R09: 0000000000000000 [ 767.798784][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 767.806769][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 767.814742][ C1] ? batadv_nc_worker+0x877/0x1030 [ 767.819841][ C1] batadv_nc_worker+0x877/0x1030 [ 767.824778][ C1] ? rcu_is_watching+0x12/0xc0 [ 767.829521][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 767.834889][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 767.840247][ C1] process_one_work+0x9cc/0x1b70 [ 767.845172][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 767.850521][ C1] ? __pfx_process_one_work+0x10/0x10 [ 767.855880][ C1] ? assign_work+0x1a0/0x250 [ 767.860449][ C1] worker_thread+0x6c8/0xf10 [ 767.865031][ C1] ? __pfx_worker_thread+0x10/0x10 [ 767.870120][ C1] kthread+0x3c2/0x780 [ 767.874172][ C1] ? __pfx_kthread+0x10/0x10 [ 767.878734][ C1] ? rcu_is_watching+0x12/0xc0 [ 767.883483][ C1] ? __pfx_kthread+0x10/0x10 [ 767.888046][ C1] ret_from_fork+0x5d4/0x6f0 [ 767.892623][ C1] ? __pfx_kthread+0x10/0x10 [ 767.897186][ C1] ret_from_fork_asm+0x1a/0x30 [ 767.901945][ C1] [ 767.904949][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 767.912202][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 767.921466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.931491][ C1] Workqueue: bat_events batadv_nc_worker [ 767.937107][ C1] Call Trace: [ 767.940361][ C1] [ 767.943180][ C1] dump_stack_lvl+0x3d/0x1f0 [ 767.947743][ C1] vpanic+0x6e8/0x7a0 [ 767.951718][ C1] ? __pfx_vpanic+0x10/0x10 [ 767.956205][ C1] ? debug_print_object+0x1a2/0x2b0 [ 767.961384][ C1] panic+0xca/0xd0 [ 767.965083][ C1] ? __pfx_panic+0x10/0x10 [ 767.969486][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 767.974577][ C1] check_panic_on_warn+0xab/0xb0 [ 767.979503][ C1] __warn+0xf6/0x3c0 [ 767.983399][ C1] ? debug_print_object+0x1a2/0x2b0 [ 767.988619][ C1] report_bug+0x3c3/0x580 [ 767.992952][ C1] ? debug_print_object+0x1a2/0x2b0 [ 767.998164][ C1] handle_bug+0x184/0x210 [ 768.002500][ C1] exc_invalid_op+0x17/0x50 [ 768.006982][ C1] asm_exc_invalid_op+0x1a/0x20 [ 768.011808][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 768.017604][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 3b 16 8c 4c 89 e6 48 c7 c7 60 30 16 8c e8 1f 60 8f fc 90 <0f> 0b 90 90 58 83 05 86 c1 c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 768.037207][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010286 [ 768.043250][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3388 [ 768.051197][ C1] RDX: ffff88801e2cc880 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 768.059145][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 768.067106][ C1] R10: 0000000000000000 R11: fffffffffffd6b00 R12: ffffffff8c163700 [ 768.075051][ C1] R13: ffffffff8bafedc0 R14: ffffffff8a81a5e0 R15: ffffc90000a08b28 [ 768.083004][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 768.089062][ C1] ? __warn_printk+0x198/0x350 [ 768.093812][ C1] ? __warn_printk+0x1a5/0x350 [ 768.098591][ C1] ? debug_print_object+0x1a1/0x2b0 [ 768.103817][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 768.109442][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 768.115250][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 768.120784][ C1] ? look_up_lock_class+0x59/0x150 [ 768.125897][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 768.131962][ C1] kfree+0x28f/0x4d0 [ 768.135836][ C1] ? lock_acquire+0x179/0x350 [ 768.140491][ C1] ? rose_timer_expiry+0x53f/0x630 [ 768.145583][ C1] rose_timer_expiry+0x53f/0x630 [ 768.150535][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 768.155996][ C1] call_timer_fn+0x197/0x620 [ 768.160577][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 768.165693][ C1] ? mark_held_locks+0x49/0x80 [ 768.170508][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 768.175966][ C1] __run_timers+0x6ef/0x960 [ 768.180475][ C1] ? __pfx___run_timers+0x10/0x10 [ 768.185493][ C1] run_timer_base+0x114/0x190 [ 768.190152][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 768.195344][ C1] run_timer_softirq+0x1a/0x40 [ 768.200106][ C1] handle_softirqs+0x219/0x8e0 [ 768.204862][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 768.210156][ C1] __irq_exit_rcu+0x109/0x170 [ 768.214823][ C1] irq_exit_rcu+0x9/0x30 [ 768.219049][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 768.224665][ C1] [ 768.227576][ C1] [ 768.230484][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 768.236442][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 768.242834][ C1] Code: fb 09 00 00 44 8b 05 b9 88 22 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 9f 6a 3a 00 fb 65 48 8b 1d 5e 95 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 768.262438][ C1] RSP: 0018:ffffc90000117838 EFLAGS: 00000206 [ 768.268493][ C1] RAX: 00000000006c9655 RBX: ffff88801e2cc880 RCX: 0000000000000006 [ 768.276447][ C1] RDX: 0000000000000000 RSI: ffffffff8de514d0 RDI: ffffffff8c162b00 [ 768.284393][ C1] RBP: ffffc90000117880 R08: 0000000000000001 R09: 0000000000000001 [ 768.292349][ C1] R10: ffffffff90ab6197 R11: 0000000000000000 R12: ffff8880b853a300 [ 768.300305][ C1] R13: ffff8880281fc880 R14: ffff8880b843a300 R15: ffff8880b853b170 [ 768.308272][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 768.314074][ C1] ? __switch_to+0x7a5/0x11a0 [ 768.318755][ C1] __schedule+0x1198/0x5de0 [ 768.323279][ C1] ? __pfx___schedule+0x10/0x10 [ 768.328128][ C1] ? mark_held_locks+0x49/0x80 [ 768.332892][ C1] preempt_schedule_irq+0x51/0x90 [ 768.337915][ C1] irqentry_exit+0x36/0x90 [ 768.342316][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 768.347779][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 768.353139][ C1] Code: db 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 57 18 1b 12 <65> 8b 05 68 18 1b 12 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 768.372827][ C1] RSP: 0018:ffffc90000117b20 EFLAGS: 00000246 [ 768.378884][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8b613557 [ 768.386925][ C1] RDX: ffff88801e2cc880 RSI: 0000000000000000 RDI: 0000000000000005 [ 768.394919][ C1] RBP: 0000000000000109 R08: 0000000000000005 R09: 0000000000000000 [ 768.402887][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 768.410854][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 768.418812][ C1] ? batadv_nc_worker+0x877/0x1030 [ 768.424001][ C1] batadv_nc_worker+0x877/0x1030 [ 768.428919][ C1] ? rcu_is_watching+0x12/0xc0 [ 768.433672][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 768.439037][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 768.444414][ C1] process_one_work+0x9cc/0x1b70 [ 768.449345][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 768.454708][ C1] ? __pfx_process_one_work+0x10/0x10 [ 768.460065][ C1] ? assign_work+0x1a0/0x250 [ 768.464635][ C1] worker_thread+0x6c8/0xf10 [ 768.469212][ C1] ? __pfx_worker_thread+0x10/0x10 [ 768.474293][ C1] kthread+0x3c2/0x780 [ 768.478333][ C1] ? __pfx_kthread+0x10/0x10 [ 768.482897][ C1] ? rcu_is_watching+0x12/0xc0 [ 768.487639][ C1] ? __pfx_kthread+0x10/0x10 [ 768.492208][ C1] ret_from_fork+0x5d4/0x6f0 [ 768.496767][ C1] ? __pfx_kthread+0x10/0x10 [ 768.501326][ C1] ret_from_fork_asm+0x1a/0x30 [ 768.506071][ C1] [ 768.509272][ C1] Kernel Offset: disabled [ 768.513566][ C1] Rebooting in 86400 seconds..