last executing test programs: 9.216127975s ago: executing program 3 (id=271): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) futex(0x0, 0x80, 0x5, 0x0, 0x0, 0x2) listen(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001009a0c00000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a00020000000000000000000800090009000000"], 0x30}}, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) 9.088190445s ago: executing program 2 (id=272): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="8c532500"], 0x18}}], 0x2, 0x844) 8.316202851s ago: executing program 2 (id=276): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000400)={0x8, 0x4, 0x6a}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x6}}, 0x200000, 0x1, 0x3ff, 0x7ff, 0xb0, 0xfffffffc}, 0x9c) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) prctl$PR_SET_SECUREBITS(0x1c, 0x24) prctl$PR_SET_SECUREBITS(0x1c, 0x12) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$sndmidi(0x0, 0x8001, 0x523000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) read$FUSE(r5, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x40, 0xf, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x3ba, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x1a, 0xaf, 0xc9, 0x40, 0xbfd, 0x102, 0x432, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a8, 0x3, 0x4, 0x81, 0xb0, 0xef, [{{0x9, 0x4, 0x7d, 0x81, 0x1, 0x17, 0xe4, 0x9e, 0x5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "afe40c"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x800, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x8}}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, 0x4, [0x3, 0x3, 0xa, 0x4], 0x6}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x38, "91e9c395"}]}], [{{0x9, 0x5, 0x9, 0x14, 0x20, 0xff, 0xe, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x7a, 0x7f, 0x5, 0x6a, 0x23, 0x40, 0x4, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'a'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfff9, 0x0, 0x2}, [@country_functional={0x6, 0x24, 0x7, 0x4, 0x8}, @obex={0x5, 0x24, 0x15, 0x3}, @obex={0x5, 0x24, 0x15, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}]}], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x6f, 0x80, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x3, 0xe, 0xf8, [@generic={0x49, 0x2f, "2ef4c3083830589b265ab9eba552777e911e0291074dda3a3740982520e8d36f4386108d4c8c553abef6b3ec2c0049f13855f4f2d8b59f7432f6abf0908fc8644affdb16eaa8e2"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x4, 0x51, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x2}, @generic={0x1b, 0xa, "d49fd8cdcf16eff869106aa07de9e85aaa8b9b8267d295312e"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x8, 0x36, 0xa7, [@generic={0xc0, 0x30, "b142f8cef1a4bce90d8dff526b69bd567e673739b552cef30b4abe23d0fe0460b98bc6b7db0026580ce5d9141f780bf34ac8f7c8d5cfe0d6605ffaaa856ba3446e337b19d69a99526fc717b841c232e71465c9b8ae860e6f5e04562afc442197442b99d0404abb27674d2344e1eb7ca9622d810226ac9fb7d959ee4969caf36da3d6d1c4a1579e47c2f9a0aaf1f2a591d067f1110d2aef9aba54f6946637ed4e2bc10d55367a68ea97ecded5759536785eb2a43e2160eaca31f93a3f93be"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xfb, 0x80, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x5}]}}]}}, {{0x9, 0x4, 0x27, 0x3, 0x3, 0xff, 0xff, 0xff, 0x1, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x1f0}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "90eeddb773"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x4, 0x8, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x48}, @country_functional={0x6, 0x24, 0x7, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc4}, @obex={0x5, 0x24, 0x15, 0x1}, @acm={0x4, 0x24, 0x2, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x10}]}], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x1, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x81, 0x9, 0x8, [@generic={0xf1, 0x21, "fd5cfa75aa100da261ab293ed06e8a973bd5c2e3f529410b5b978774dc92364b86cf8fbca30b24e174e4eccc9452816e5bb6d478bf8fa9f1f0691b60ea71a8003d80e8d2af10b5790f4ef530fc4685a0ca4d707ef0dba9253f2816a6217e857becb073330b9ccb4c409213f56c3b68e564dadf26bbce05da3d3e9541074450209bbe88a99bacd3d243819127d6086361b54fa92f25e5103863f5b070310b23dc6b6f766f3d4705c9f4233342f0367fc98a7d1f54dbdf6c84b9341fcf04c9043a8daab2b8fa26da171899f967ef07b6cc8815932706c682cc87d41a35cba1c0710456204c580db29a9249bd7cda31e5"}, @generic={0x31, 0xa, "253a95bc9e5251ed240e80604d26d2e6a6407a3401a99d1d0181356601c9e8e5d4a1240fae49c802f819b805367d43"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0xc, 0xb, 0xeb}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x6, 0x4, 0x5, 0x20, 0x7c}, 0x109, &(0x7f0000000080)={0x5, 0xf, 0x109, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x10, 0x7, 0x7001, 0x81}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x9, 0x4, 0x5, 0x9}, @generic={0xe7, 0x10, 0x2, "497f18e94808d9bd774f46baded53bfd94ee38d33c6d3f4d1405a8410c1c9343e3ede6ebb385a88e5cb092b99a13aedb06129d70b22c93eab74986f2c509c8dec9c4c1d4ff776284ffd9259aec14d9aaac5902d7a72917cee8024c61b8194120ceca5d02dd77f8f656d6b69ec461a96aea47bbaae07cbea02df315344d1c063bb59df76835c01eb33ca8de19766c10716293ae0c2a8d82506310805c5f0a332ea285dedc73a5cb7bcd6c874c872022147cbecedf9c184e8642594c75e1dc8978edb3d66149090ffef146c8a32cf1fd282afbe7de881d99c59f0287a9a71c3d643703fa84"}]}, 0x3, [{0x8, &(0x7f00000001c0)=@string={0x8, 0x3, "7bb06a4692f0"}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "e5a087a05b75681a2f7a622090ac71dc42a93e67a59e2d616127a573bab0240c24734833e78c8dc0a7c95f31d7df6f5205f7bc6d69e188ad91d6c863b2"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81d}}]}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000005c0)={0x20, 0xe, 0x28, "f4aacec3362af1dd528df8fecdc4a32736c4c123e97d09406b8983621cf5091465fa0160441ce727"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, &(0x7f0000000380)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f0000000500)={0x20, 0xf, 0x49, "60ff6ba51ace4e3b75e9d982a643067d21931f93ca0899b57da4ddfb74b122b663cd6ab18fc853702ae77478adaae5ea609756dbb6d073f46521ff6605f70cb71443d1fd8c3b532229"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000600)={0x0, 0x8, 0xfffffffffffffec5, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.315914641s ago: executing program 3 (id=277): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$vim2m(&(0x7f0000000200), 0x5, 0x2) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffd, r8, 0x0, 0x0, 0x9}]) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) 7.9301211s ago: executing program 1 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xc}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000240000000000800014000"], 0xc0}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) socket$inet6(0xa, 0x80001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x134, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x10c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.253753278s ago: executing program 3 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r2, 0x0, 0x0, 0x2040, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000ac0)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010102, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x8, 0x4, 0xad0, 0xffffffff, 0x938, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xa38, 0xa38, 0xa38, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {[], [], 0xfc}], 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bond\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'dvmrp0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb30) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r10, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x41}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000000000006ff66008e8800001e003300980e0900080211000001080211000000652e6a9cbff91408a87b0000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.998686729s ago: executing program 4 (id=281): syz_usb_connect(0x2, 0xb7, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a500018104004f0904870609a97a37020a24010a0b06020102092403050703020496062404029cfe09050b00400080000007250181f7090009050d0000046404050725010300bfbb0905020200040a410307250103070c000725010108040009050b001000030509072501010702000905050000042703080905010c00024e090709050a0c200005010007250101e38b2095058008200000b4ac09050701ff03043b10ad1e2a583454cce640e2dc20bbab55b7eedefa40ed4a15d9e4cf79c87bd2f51a81973c851849a94dc13358867856ea97c9129f1ce44ad4a9cff970"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x19, 0x4, 0x1, {0x22, 0x8cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x7, 0xa0}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x36, 0x4}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x39, 0x81, 0x30, 0xff}, 0x20, &(0x7f0000000280)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x6, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x40, 0xae, 0xd7}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc15}}, {0xfe, &(0x7f0000000340)=@string={0xfe, 0x3, "b8cfb157005c416b89e64d62b9f6d33de84707f42ca462cbd979b6b2f97603a063e69e96a619c16a7ca7c80e91b9362573394b2234e9fa9d6a9d69ad8582fec3adc703f8c73c9469e12002fce7a52c8068d12d317361770e6ca3cedff4bd1c6e3df7248d515a7b4d9dee99bb73958ea7bb4643d4be4656f4d4b22e2a063393fda32eb0c6a30019c416db6c4ee4ef82c89f64f51ae0fbeb552a04aa37ebc5de25cb1ad6abec5fd528024e28d50fbd9797c998a2f8bfbe226fd6a45f3fcc898cb7ab87b5452a58f50881836111ab3ca9e405607081b7efcbfb0207593d2189bd4f33d0ddbdc2ebc02e0bb007f8a7e61ca5776b42004673ab599eed60a9"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x430}}, {0xf, &(0x7f0000000480)=@string={0xf, 0x3, "00f78c61318d2ae1eeea642569"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc04}}]}) 6.974048341s ago: executing program 1 (id=282): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffd, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) 6.255375739s ago: executing program 3 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xc}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000240000000000800014000"], 0xc0}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) socket$inet6(0xa, 0x80001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x150, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x128, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.686656812s ago: executing program 1 (id=284): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="9fb0b4f9e030df3db0010ffc45c9a55633bb23e6b28fedfd635560e3d84a2ed4003d041f4d8b5acbf091036274077f0d0a22d009e075375a0ab8158168f822e13ff7ca76f9535d83ab7cc49df74e3839e16628008ad20f48906b3a5761c7a1ec8c45ddf41f78205fdc61a4ae438aab697bfc225f702ab3f44615feaaa2eed719488244230e298241488b9b3191ff8c45cd8097416c9ab69c3b0cd8f20ec1934103c379cb21f81f9823a8d21eeafd3165aa0e4c302ea11c6bc1b5d5ca0a", 0xbd}, {&(0x7f0000000500)="5f2440f4bf0b12cf23ad7ff2b74c27c786bb49469b903b9504b651c8edb08e50300b849d27138ac5a46a95f24ad132e4f6351618a3cdef29ccddca36dfb96c376e3fd05828913e1a46bebdbc4c9cc81872118c7ecbf1007319b53657e67654136f08259567f5ad70aae36d2803f19d8217711e7eee9b3e57395498d4b24fe24d4f5ee207d3dfb41b124d1f88001437e734ca6f3fef3a0e76abe5883d62dd357fd9", 0xa1}], 0x2, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x68, 0x408c}}, {{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940), 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="000800000b1b6f71a382fb7c1a2d19addac4"], 0x60, 0x1}}, {{&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c00)="913e0b73e7d76cde0bff621ed9783a71d44c328a4da5e7231bf0375768ce1d77c49ea7a65f67909550ba03a626a3567073c236d5436201793be201cf05a1710726403d54d992f7a8fcfe134fc215f1cf53b799ab20aef0d0627c4d9886729ab0ecc3fc55033064825f355d0c0b6490a2fefe8bc7a657128cff6ef73d94d0b05084a5676205605ee6749a74e5a1de4768d830c56caf4fe76c720b77c18a685433cbfbfb15dc391268744d260aee05812cf7e242542eb0fe37a9998314f87ee8", 0xbf}, {&(0x7f0000002cc0)="5ee33de63f34f99f07106aece9c5f3241520b5fc39649d8d79e3035a63c649cdb9628bca787904363d99816be6a94f359c14a819c467bc809afe28b47de8fd20dc2010647819a41c8c9791f472ee5f715a1951efd8e901b775", 0x59}, {&(0x7f0000002d40)="b959057257db7cd75802650876e70c5df1432e9a134b359fa2a246cf0c8384dc7471842c25337489738db2439a73b70391f48f72c2b992b4ef8e6ff404072e4f687e4a7e346debd13d39705b9fd9333f7337b12162cb4adcb6d015008c09eb77fb64c514216cb2cf9490f805c22599aad5804f8fa1b95801a50df9e7c44409d0f08a9a989de324320580cbc950bd19a0bbb4de281808a1ba61c1f67c0e0dada3d015442231e212e51e80bf90b8ec3814f15cc87ebab7c202", 0xb8}, {&(0x7f0000002e00)="0e5193ebeb22549838d78aa6f678797e4d73d5677c614c13680d556bc40c8b859c489d8d5b1feeff922a94cc23f0cb93c5e6ac7f502016fc359e072758787746d93dcc57cd2dacf902563930a136a2a080cf61949de1bd9d8b4ff848f2438f3b96294ae741af92b1f06ec90bd8475cdf2d0ae9027ee5fdb32b", 0x79}, {&(0x7f0000000ac0)="81f95edef6c54d9572c223329ae5aa90ff93fb8dd113de8069c13cca7c098113d3f5582aa8b208a851b737d559c8c233da71068b19a7b3ac42e86f26fce964", 0x3f}, {&(0x7f0000002e80)="d072fad4c8c60ab1fbc08ce37b4c4fa9a10c0c36875afba044413443bd92140268fc1962d630b351a877da7d1b39053dc1f753881a723e45cf14d0e9d73925711defb6cd4cbce964", 0x48}], 0x6, &(0x7f0000003140)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000002000000", @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32], 0xc8, 0x10}}, {{&(0x7f0000003240)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000003300)=[{&(0x7f00000032c0)="0312f31cc528e82a12dade5ae4068068e1d594db952b5aa899c903aee3", 0x1d}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r2, r1, r5, r2, r2, r1, 0xffffffffffffffff, r4, r5, r2]}}], 0x78, 0x40}}, {{&(0x7f00000005c0)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000b40)="f70136b08518a8bf842ba9a2ca28735d4b387cae9918e85d10eb9f5f1cba99c895942a4d13d04663f82d5c62e1b9dd5b81c14389054b8c9c803b706096fa4911ca5ec652781b2d27c8cc76a2783a52364b5e557d90bd464b0e99849997b24066dec6e32de78abbb4ea98834c2d1e01b9d08f16c0557b959562bb698eebef00eda519e82577bddf0aca1f05625c1db41428b5c6a8b6", 0x95}, {&(0x7f0000000940)="0ae292f879eba182f5cef0bfdc407413f11d4507b310369ee26619eceeae1fdfcebcd90048853dc51b69e6e47c5f46fe6f2a38d925e7bf4b28750820484ebe64017f395aff6e0eefdf05b7330c7308c3288b8a71c4", 0x55}, {&(0x7f0000000c00)="5cd4a51326aecc4b9b14af246312f11a41ab0c65e88655ad001073c7a3cac1478defeaa9ab720f73ba583e7335285b2ba75cd85d6d35f13823ba21a91649eaf00a08d2d3a2111aaaf8aa4a0bdcf03f270e8d66b7d47a371276e4e1f8", 0x5c}, {&(0x7f0000000c80)="6eb74d10f541242a318cb2c5b30f86314aa73f1ca8b07caa5e2b01f4e553818b065b361fd3aa0f38ebacca6b41c0095b13a7804933b3ca773f1ac8128cb7d7da9fee76b263ff865efee4104faa79694efb137a327c1382f2c7a931277ddf", 0x5e}, {&(0x7f0000000d00)="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", 0xfc}, {&(0x7f0000000e00)="9a5968f8c33959ce01612dcbbe2f2047d2c29166e61194e554d502bf4e5b18060ae247e7efc28f24615ff303b1943b50490169480ddcf6aabcf5acb3a821fd63391304a343922770616b980ea6e27ee69631f1b84a2e908c0b5f34278debf4c0041aa7deb81f5c98a6ad050e54587f74066fb28599e0f88a10ded4dc6d6042add1354ec8cb6599e7bbaad855695d4bf2d175dce8ab03ab0a79e2630270760221", 0xa0}, {&(0x7f0000000ec0)="7922436164e7d949a512f8b4fc8e1d79a90a06c30969c29dd23605bb53d5445998aa081d5e9d079aa98ab836ae8bd95b815bebb2d1fc756c73775a8ade55296d582644be9c6adb6314093e3ac5736a3ca2ddcab552dddc5d82a15ce56fa0f20f", 0x60}, {&(0x7f0000000f40)="a85e3ad9910fc14e171647da7611a93fe3b8f90255121f40bb27a308e26411f5497f921e40448058b72cad8a2c7a9ab93ace3e29717fbb886edb3fbfb3cc47943bf58fcd45572d1170f976b44580b7", 0x4f}, {&(0x7f0000000fc0)="1a939215ee88d67b93cf3078917a98cc0b7f80723fda2548f02bb4eed7471e01221b73aa48b7fc67f42905d29d3ad3ce31612ad826bc71a0ebccc138c6e5bc22edd1d7d032ccfdaef3c9e3ca04241decf99abd3fc19297b5b07f36d1b6db1b5190f4e41ce7c1e4b9c8303afa5b95a677a56c0a165598ae7b997dc770732cc248fe987189e68eaaa7d34179eb23a13c09aa8e20985c3b8b2198bc2502ec3f908335ec8b4ad7ec8bac31b78cbc103933677ce96f987cada53bdf8ff1a5b8f43357ba702e21eb453294996ac82cd242189e03c46366b20c8bdcc2288c160802677a989b4b8e3e1ebd940297947cf9db", 0xee}], 0x9, &(0x7f00000012c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, r5, r2, 0xffffffffffffffff, r5, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r5, r2, r5, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}], 0xd8, 0x4000000}}, {{&(0x7f00000013c0)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001440)="55fbb055cc78e330ff3e3a7147ae2dfe0fa64af376ec2c1207e89f912df3d27d3c52fa415b540ff9e4c8f056479dc98e89a55a7d92003673b02089470bd4a4f30ae251bf2785848dbb58b1ae5cec35a9a9d294dbadad5f47041c2bbaa7eb89745c093642e4691d9660f97026ca50dd70b1209ace06892c4663105d12a89061bca8cda0012550fe42c884463536101496dd71414cf071ce2a152e4e530eae22511880526f33e837324b71200c79932f014ecaa720a7e4e0744500792f4a0cbca650a94d5223a6140d98c4caec23619f346c41", 0xd2}, {&(0x7f0000001540)="2745b14903a5bd2c684be909342f113d4cb39bf847a99bc8701f5169d0de004784c9c600e8e010c5548fbda3330995164c5e839c2b326df2eb4ad4bee0458741572415e88cfa4aab7b16a9e77e3fc7a11b270ba1f88d5886604a8dee6b74e5", 0x5f}, {&(0x7f00000015c0)="a964acf5c398603ccd53ec0b0d8a1ddcf99b3d369249724e3d8e567190dee51a86244fd4aa897d1f7f72fcec9c971fc2393b8cfb762eea4e4a5fdc15733b967470760d022a375ed72db81072dfded6316a6b9927e838097d03cae79c6e5905812979db27f89ca19075abfd9580d0f8b636898741fde6f33ee6302d524b935394eb22ba76ecfacfb1bd862e495ad25a78c058c72e72c3fb3508d512f477097543e465f6b3bc0098239dca6f790fe095126d2d00d881114c1fa16353aba6a883cc63833eda80a8dcee122757abc532c8ffe7762b0dcedf710b7bcb34c418f37365eb7cd27379bb9663", 0xe8}, {&(0x7f00000016c0)="7e88132a71eec04923bc1eef1840c3a323dd3c2fd931a9e208254e07794c579e50d00c48ac754f3d8cc6cc4a74fee2291bf19159e845a3383eab3d08c21519c45fc11c59b67c2e26", 0x48}, {&(0x7f0000001740)="88c431c921da1e296901688b9d591d71c74b905938666449c801ed60d2128e04df1449e28af4e033bcddfc87e51ba7c4f3de923c812b8984e5d24b3a4740d8432d303fbb53b442e9e970679bef666f36b5b0eaf4e593e1403cd83f63de21fd4fe3fea1", 0x63}, {&(0x7f00000017c0)="dad60324b8ded5751419c807b70b68ac2ce9cc152e010f0bbb6a81aec0289b7b53e630339e3721b5c2df8ee0b617d5a44b5314d8de3dddcf7853a9133c45e8ef5a58db9b185c251887e8be0881fdb047bf97da5acad0e8eec8deb058dcbbf26607502469d82274f3b4612ab23e8feeee645bad4e2a9b7ac0096dd2d0404c3f7e609561d76918834721dc18a8f79b0d5c89e37da4bc03847ec6ec952dd7fda6bfa96c97706063ad6583917eb0cfd3c2af33a48ab48e56", 0xb6}, {&(0x7f0000000400)="ef044ef7fa7330f4a76c906b1a11a1f8a5fff61ad69d1688c3f673d8b327c6205c1d801fb7418611e037bd4eba58cbbe6172da3078b3c81548aac503ebee76d454f8c376aed31bb0a15417adc4d90004992cf0a35ab6dd4d7663ef96a8877b11ab266f8f1aac93b2f82ff4bebd919942c96063e78b544bef06", 0x79}, {&(0x7f0000000000)="ac74", 0x2}], 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="e09eb31801cd075718fed4be8d86a709b51d93113f085aec5e00c88e0f50b8c5f5d953be9317d0a5257b6844985263b84798ee3e7337a24fee6464d5d035de90b42bb75250886e6fe9449e0a927bf0f92340f79d59a1a067ce446e5f64c3176f15a15d2e625e3287f38d53390d7af49ca3", @ANYBLOB="000000e10000000100002895e13c21350ee960ef457e3194064d3c36f84071cea3740635c31701c011b1fa7a1f6c5bd88e507890c78945504a283fc306afde0ccdc40000000000000000daa55d139588fe5110716a5b65ca0fcef8e9c013a1c33a4dbbbbc9d871bb6956d7c6b5cada51b397f7242ee9c993bfd1c94c6d78b5b16c938efda1e05d5187e17a08bcecccefe1ff6e31e2d92048a7abf1f4ba9a72fff35d3c3a458a2349af5b404ecb614d47e200"/190, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x4000880}}], 0x6, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x10000000, 0x0, 0x0, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x4000000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b}) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x1037fb04, 0x3, 0x4, 0x0, 0x49}) r9 = epoll_create(0x3) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000000c0)={0x18}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) syz_open_dev$vim2m(0x0, 0xc, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 4.519875126s ago: executing program 1 (id=286): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 4.515889388s ago: executing program 3 (id=287): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_io_uring_setup(0x5b6, &(0x7f0000000480)={0x0, 0xa96c, 0x400, 0x0, 0x11c}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x20008010) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c07, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xf9, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x2, "4180fbd09524"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x9, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82}}}}}}}]}}, 0x0) 3.558299733s ago: executing program 1 (id=288): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000001) ioctl$TIOCSETD(r1, 0x5412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.454818841s ago: executing program 0 (id=289): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000051a6e3f257a76b00"/27, @ANYRES32=0x1, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x4000000000000004}, 0x18) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0x1, @sdr={0x36314d59, 0x7}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0x4018aee2, &(0x7f0000000000)) brk(0x689d80000000) 3.415919694s ago: executing program 4 (id=290): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000200), 0x5, 0x2) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffd, r7, 0x0, 0x0, 0x9}]) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2000) 3.38594134s ago: executing program 2 (id=291): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x101402, 0x134) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) acct(&(0x7f0000000200)='./file0\x00') fsopen(&(0x7f0000000100)='ocfs2\x00', 0x0) 3.076208579s ago: executing program 0 (id=292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@newae={0x48, 0x1e, 0x401, 0x70bd29, 0x25dfdbfe, {{@in6=@empty, 0x4d4, 0x2, 0x33}, @in6=@mcast2, 0x0, 0x3507}, [@etimer_thresh={0x8, 0xc, 0x80}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x5}]}, {0x0, [0x2e, 0x5f, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000180)=""/189, 0x30, 0xbd, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0xf5f}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[{0x5, 0x2, 0x8, 0x2}, {0x3, 0x4, 0xe, 0x6}, {0x3, 0x4, 0x12}, {0x4, 0x3, 0xa, 0xa}, {0x3, 0x3, 0x9, 0xb}, {0x4, 0x1, 0x7, 0x9}, {0x0, 0x4, 0x4, 0x6}, {0x1, 0x2, 0xb, 0xa}], 0x10, 0xfd, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) waitid(0x1, 0x0, 0x0, 0xffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) unshare(0x1e81488c03a8ba1) timer_settime(r7, 0x1, &(0x7f00000005c0)={{0x77359400}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r8, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 2.517725375s ago: executing program 4 (id=293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) 2.488468057s ago: executing program 2 (id=294): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffd, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) 2.375219878s ago: executing program 4 (id=295): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) removexattr(0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) socket$pppoe(0x18, 0x1, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'erspan0\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r4, 0x1, 0x45, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x4) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r5) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000027c0)={0x89, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x0, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random, @random="dc5db794a392", @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4a800) recvmmsg(r7, &(0x7f0000002600)=[{{&(0x7f00000001c0), 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/202, 0xca}], 0x1, &(0x7f0000000480)=""/197, 0xc5}, 0x3bf}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/98, 0x62}, {&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f00000007c0)=""/108, 0x6c}], 0x6}, 0x2}, {{&(0x7f00000008c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/146, 0x92}, {&(0x7f0000000a00)=""/70, 0x46}, {&(0x7f0000000a80)=""/73, 0x49}, {&(0x7f0000000bc0)=""/91, 0x5b}], 0x4, &(0x7f0000000c80)=""/36, 0x24}, 0x5}, {{&(0x7f0000000cc0)=@un=@abs, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/87, 0x57}], 0x2, &(0x7f0000001e00)=""/52, 0x34}, 0x8}, {{&(0x7f0000001e40)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/62, 0x3e}, {&(0x7f0000001f00)=""/24, 0x18}, {&(0x7f0000001f40)=""/86, 0x56}, {&(0x7f0000001fc0)=""/248, 0xf8}, {&(0x7f00000020c0)=""/211, 0xd3}, {&(0x7f00000021c0)=""/195, 0xc3}], 0x6, &(0x7f0000002340)=""/182, 0xb6}, 0x4}, {{&(0x7f0000002400)=@ax25={{0x3, @netrom}, [@netrom, @bcast, @remote, @bcast, @bcast, @rose, @bcast, @rose]}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002480)=""/31, 0x1f}, {&(0x7f00000024c0)=""/8, 0x8}, {&(0x7f0000002500)=""/73, 0x49}], 0x3, &(0x7f00000025c0)=""/62, 0x3e}, 0x10}], 0x6, 0x10041, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) 2.217586674s ago: executing program 0 (id=296): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x58) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0x3, [@float={0x2, 0x0, 0x0, 0x10, 0x2}, @restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5ba000}}, @datasec={0x10, 0x7, 0x0, 0xf, 0x1, [{0x1, 0x8, 0x1}, {0x4, 0xfffffff7, 0xf}, {0x5, 0x466, 0x796e}, {0x3, 0x7, 0x4}, {0x1, 0x8}, {0x3, 0x5, 0x5}, {0x3, 0x6, 0x6}], "c3"}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/5, 0xbf, 0x5, 0x1, 0x2fb8, 0x10000, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x0, '\x00', r1, r2, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) setreuid(r3, r5) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, &(0x7f0000000500)={0x50, 0x7}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000540), 0x8) (async) write$P9_RXATTRWALK(r0, &(0x7f0000000580)={0xf, 0x1f, 0x1, 0xc773}, 0xf) (async) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getqdisc={0x48, 0x26, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0x7}, {0xe, 0xa}, {0xc, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r8 = request_key(&(0x7f0000000780)='rxrpc_s\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)=',\xfb\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r8) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000840)={0x1, 0x6}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x30, r0, 0x9b58f000) (async) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x14a7) (async) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000880)) (async) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000008c0)={0x0, 0x3, 0x1, 0x1}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000010c0)={0x0, "70e3b614eccb99e66f7b15841bc33cde"}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f00000020c0)={0x12, 0x0, {0x6, @struct={0x100, 0x100}, r9, 0x593, 0xfffffffffffffff9, 0x6, 0x40, 0x1, 0x0, @struct={0x1}, 0x9, 0xa, [0x8000000000000000, 0x0, 0x8000000000000001, 0x6, 0xa, 0x7]}, {0x80000000, @struct={0x7, 0x4}, r10, 0x1, 0x10001, 0x6, 0x400, 0xd, 0x40, @struct={0x8001, 0x3}, 0x80, 0x2, [0x0, 0x72, 0x1000, 0x80000000, 0x9, 0x10]}, {0x6, @struct={0x7, 0x6}, r11, 0x4, 0x4, 0x9, 0x9, 0x31, 0x44, @struct={0x6, 0x9}, 0x6, 0x8, [0x97, 0x7fff, 0x9, 0x6, 0x10000, 0x80000000]}, {0x2, 0x4, 0xa799}}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) pipe2(&(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000002500)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x612, @private1={0xfc, 0x1, '\x00', 0x1}, 0x48}, @in6={0xa, 0x4e23, 0x400, @loopback, 0xffff}, @in6={0xa, 0x4e20, 0x4, @remote, 0x9}, @in6={0xa, 0x4e20, 0x8, @empty, 0x101}, @in6={0xa, 0x4e23, 0x4, @remote}, @in6={0xa, 0x4e21, 0x40, @mcast1, 0x8}, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}], 0xe4) (async) socketpair(0x0, 0x6, 0xffff, &(0x7f0000002600)) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002680)=r14, 0x4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f00000026c0)) 2.172265714s ago: executing program 0 (id=297): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000002c0)="660f70db040f01d1b9640800000f320f09c4c37961c063c4c3ed5d2e07b9fb0b00000f3265660fef5489620f2331c744240000800000c744240200800000c7442406000000000f011c24", 0x4a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000140)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getpid() r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x8400, 0x40) r5 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) dup2(r5, r4) flock(r5, 0x1) flock(r5, 0x14) flock(r4, 0x2) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) tkill(r6, 0x12) tkill(r6, 0x12) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40000) ptrace(0x4208, r6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 1.826321985s ago: executing program 0 (id=298): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1.805052393s ago: executing program 0 (id=299): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_vhci(0x0, 0x17) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000076eec724129b5de8b673", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x9, 0x3, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x2, 0x20000006}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2e8502) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r3, 0x5423, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000003c0)='projid_map\x00') 1.604419796s ago: executing program 4 (id=300): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/54, 0x36}], 0x1, 0x200, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bind$netlink(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r3, 0x9}, &(0x7f00000000c0)=0x8) 1.594377153s ago: executing program 2 (id=301): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000180)=""/177, &(0x7f0000000040)=0xb1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002080)={0xf78, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/v4l-subdev#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/v4l-subdev#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '{#%/[)$\\&:\x12^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^)^{-.$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '()?@[\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xdef, 0x4, "64304361a19c0a8b6022d2aa7994334d20f47b3a31ab44b5655d6d2fc5a89b781673ed1d36c3d9c79c2224a950b34d9bb205ea6543583395972e93ef8e79d75ca49e25fd202d07f535ef1047f858d007b3436a18818dbd9c7d9c25565321064273d355e79bc2a9f7984e8549331a824eda31bcaacb8337f891d292cf794f321e1bb1780aa377cc75de4db59e4a2dfc1bd7b00e43786762c866f850c96e44ea1c1e8e2a47cc68f73f9ff1289e443783ad018310f118fc95914092646566d78ed3f42c41530e7095fbf68446670a4ff6f789feb20d7c5fa996416e09873624fbc3ecd858efa54cbedac2fa1ccd6a1f36b529a94308de76a4cfac2815175a04759f8c323ca3a972e7ac3369bfcec3b0108004f8d6c32bbe171b24969e0657767e597a8a3b51299ab9d8bd47a5204dbb9428b9da86ef190759d79ff4cb22cf55108431973c4f5d3425516e0cc6a6f0c6e990f625e3890ded1262eca5f998d70e3fe594431e19e0ecbafe77c05bf4cd6762ddf080ce102146e43be245af963caabf0035dbb97eb2b7c3af6c1be3eca52f425f9dc771cea6bae4bbfad24c495a6bfc9d220b1c8ba7da8f2ad6a25f521ed81666e135d9671a08164583d54a610391552d91d1e58abf2a347e33cda592c292835c40e4a27eed7e5ba40718a30636945d17b5c6d68177c1078eacd9f58d14ffda6629ba7a3af684fa2eb1048a20d2590ff8e578fe4aec2f3c84517993e19d69d87e6da9fdddb2f6d0e4360d1c72ae4bd1e52bbe179896ab2ba1ac168d8189d3439cc3c73641cd762658fdea57d7a806bd865eef5dc6bddb85eb0fbd9cb65c88613e2d11e18aa56c869f354e1a274e1f084dc13a87852617797385be50722c0b5b5fda107d50c525a1205be4f0219c68df7850dd9e05d3fa0e805e07eeff498a4672051f40fcd6e64d5bdd000a71657c8be7fdc3c492fcaeb019ab0b1a45a12a72afe08c239e1965770dc7fbf8b274251a8a3a371c752ac400af94091f7e7b85e02f5e4e7bb10df722c650c59d1fe2f5b09e0db8ee45f5b9f33af1bdb7ed3333af35c7c30a4fe9da8a6d86fca264d1fe1bf9f5530247a3eec39a1fd9a3cf575607117cf669164682c07d17b5dffab82c3cccabaefd0b4e48f1c6687d7527c2a5435ae3decc94f840426c0fb69ec4a6849630741bb6db8d8b51e95219b8c1f6dfbce730a1f83b3c61ab311425d5f6bbd228ee706ab48afd8c18b909f41cddd85ea00d4697fdb2433d339d0a23c5a7e8ab64d5e91662a7ea7ffe5e6701053edc31909852d7cdb70c2cd1ad752929be555a0f770a416f9e31fb37bc67a3a6fb374e0d820ce14cd1800f119cbea4a3f153e00f07f3ffa6048ad463eece23efc519d7020b0b09473ebb0e00e3f4439f5c283b85150a17cc2e69d1a68fe134b2424e24544e667f879500da75ee0d3e06115830d1d240e44fb2297904600fe54fc13ce865fd2ecfba1d50ba34476f6a3aa761ac8398e3618029417b01f44abc48a28c3b887cb14d2cea8aa9ecf9df0c84acbc20bcf821ba5f4356ffceee450543b2c480eabfebee56ad5f88b902eedd3a8b1b06d7a25f2eece46a79e6fdaba706735f935095986e476780cd714fc72567cb29a943cbcb5e30945e6fdfe0b498a54e7b2c47289c20572f1d11d7fb49bfd9ad459ab8ef88b09d8a939218e16b11df8647b7983c88ebcc140bb79b6d0a81cbf41a409ccebc946772e9f982965b0e17cffdae40e918704f6b292cf4bfd3bf448c2ef84f53e9aa0e1b38ca8f5eeae343e9e66ead8a344b13a314b62d8490eba517bfd90b52112a118343b0f421f92783a73bcbdfb25e64836817a086cc5c0897c3e656739f344b44e4e15169c8508fe9b62d41dce2e75f128e20644152bae7db2a973dda96359f9322a47de4ddb696f9b7df6c5584bc2c09491de06d55ebe86914b0e07adf13ed36fa9c2322d9db92ac91e122185398c94532672bf7fdb38aa2bf9f9b5ffc44957995af7194d9cc3c4d29706d0426a997f229d4a1dbef96535c4bd3125dbc4453fce5ba6ffa29150180d08c0282e89180ebdaec3ec42c0641079a5870a509a73d75c9a02370a562275fa353ba4de265ba46aab01c978dba20b6007b628429007a1739ea278a5cc0d8fd21bebf90a22ab6611b480a77048713a19843f5e6b7cca3ea459f4c73952736e7dd66cc5b18345efc9193544db3c59c19d7884ad3d2b104680d3c7a8e54ef4cceb19ae9627ea87c8900f3e1345e0bf0eb11f1b256e7f9b38d7b60c7f322866c2a294eec8c4015bc3593fd196cf11bbda752e8b03e96690bde32c222407d3a3aa9a6fc15dda8aecd0a86b4d06b924416390e3e65bbfbb419f387ae681f41b9fb2d2efa2818104a717f033f9b6b73e650e9094a2c6626e009db4829a39021f4d90520ccbdd148aa9b015b6d7371e9074f8d9cd663a4e2177d655653d23c6fd40db4662da9053e77efa4f596117237cbc9f2894d96851840964ea51a90fc4b255f6f322cc28a214957a9354bc123d41c998543bb77af1853c741f4ad60ece315679ae950dc326ea298b8f5fc3bba7e17f32b011d039a18ac9bd1e58a15eba9c2dd6c1686c834ec43007092393139611433d8fda9ea3c4b28b797c2ca823f1f414ed9d2809f3d8b330d56a2328d4b840e2b84ea03593f9d6b26407943f13a65189f64e21ec7629cfbec74f5d348ef9d85d2fe90fc6fb512f4f3b2ecd71e99bb212dcc664f1a48a25ac7a714ebefbada299525c46bd5be4db0dd94238123782109e008c875a0b12252ea52f82896f87b095eedb600469de536e1959d7f8f4d4d7bb4e16fbeefb73dab5db0cc814bd0effa76cc54028da64ad3f18553672aeb3f7418f362f751bd2fb033c02347f57f929e81ab42448a7fcf75453c64a546eb38d69d6912453e6040993ea22e33728df2241d01f259f6e6d9ac186158196de01ca576977fbb6ae600d2f346810221a2a5ca79dde7780bf134665b3a5abac48efa3a115597bc3a8d67028ad3dfcd4287c732e3e71dc76657092f1d52f6efa52273bbf508eab65f7273fc67b7d3ce91a400023277ec2df19a14a164f9b16f629ddee9548398795fee5e8e7ef3a6cd0c7ca5ab0d3fbe19a6014156e74207dbde12404654be74b1f716d30ae671913ded1494deb132f079b3371a2e301d141b691433b6b304e9ccdeef4cb341674a6eea229164b5c220d47aea6b569fe45e35a18d89ea27a5c77d1a9ef0bc53f4c4efd29dd28f5d213d8f5d779e398b7be9c6d717746ba4a2780016d3296a76a1a9d8172ff28863394075ea2078befe94f6006fe162ffd8832f9c5f345dc9510df76a8ca4abe69700e4154183269720986011fe6dc70439ab0aaa032c3b8c1091851cdd99aa93bf55110f6c53e02e447f8140b9259c2ecdcd37fafad5faa2e7134f31a9233966e6f725ee51771e0fcd4d42e9b93a67dd6e48feb561ddde1511f633e2a9c4b112c2512d83b6aa16162541be290d2bbdf385dfc05e5731344fad8a75952763216ccb3ec2cef09581fa4a5fb48277522d34439351b8dc503206a325f05d0a069a06b443015981f0e43f652d3f6908a644be311c113a1d1c4432feb3cf4df07cb61e10ec119c3b684ece507776e867f4a7b2972697de4080c9888c84a480bf5320d2595ba3be9dfb090b001421392564aba66ad2f82f2c28ccd56eca1641d05fdcd9cb2d86bd42aa084f4ea4752256cb19c3d9faf735d371335a5744df5691910c49af7cef9429d2a181c97536cb07166f47fdd19b4f6facec1fd172b3f3ceac49b92fbf262de0d3821203402dbc11c6c8b0fd65b38fd4524912554e50638c5e04e0bb56c109a79644394f6bb0f871a3fec367590e67111dada1e9050e00b0d45ea1dba3a726b6606052a2a3791ab89a1e1674b6f421406392e9b11e2d462778555fab30c04253f0f29600549553fbe8efee894dbc6047e07f62320cfb4be5ad5252feef35b83c5e722c75068fae6031c30add849d09b20f72343fe2b563fdfcd358e4889f4b155baffaa6a19f0e95f309d3d7432781aee9ae4b724b830c5cb7c960698aa7721a987f6bbacc00b8ce5a49047e92aaa15b32665b44129448c0285b76e5178955ad72aabfd6410bb76d05fdb0ec287c0568533d1823734d4dfbfa9fd3803e478570e76beab4c77222d530ac223d5f5c86623e9dd320fbabb960bcac60b1e17bf412fbe96aabb6604ed154633d8bc501c435e22355cad5888d911b37be1979687abbf24bf1206b45c8264c022b6e139da1fcb0034866f1d4233ef201040e9aa446985f725f37f408e6808e55c4a8a9e522203105038c34373e17acfbb140b7d1720b5ef6a5a3f1350876a3a1d731be4e8ce971ae1fb7ea9cb611819d8e499f528d9f3309bd94f4642cb62a3016ec36407c9b4761521f97fea9152ff9be16d89ca97293291479b2b48bb2a075fa7d7ac5c48e5fcb7d1f8a1af03484795af08f2fe609aa01b7d3bafafc3c67dbf29d7cf6cad577fb37447bc1ca0a8ed8560b8fe71a00715f3e2c45ac72b2a6a109a6786d74ae3cbdd9b5ca084381b10a7750c41c9e306a8eeb78951e01857a80865aa9174f66465540af8b0df1e0dd9d13ba7a5a2b97d764ecca01a18fa40163348fb4c8d827a7111d63d35e1474700632eb95407e757ec3078893ade5e907a3ff6ac12a7898e271c8ae87589445846e101b69b28cb9656b556f3d2ca8e21570630b4f1ee28fb9ffe0aab2f1e5dcd4447c7bd9e404ed4ac450c2300554512f9812443ec093f1311dbbdbc13a8ca40b8adc47ad78936d8dde62a7b5eaf992051e830bd339e389f2f55c2075fd993804f273eab3320123018b4084ae397a21f78f56df8e98e1f57bdf4099881df7f80fc0c07a3dc70b258571a1d8e38956bd1461af9933119503aebdd189b05109297b070a934eeb880d2da878a6b583d69dcbb5880afa6578d097c5d2fd0cdede2ae0f1659ee4ffc4c111062b81ba427bf7de8e8a3b367fc27fd4ef885f174f9c8a43d5e472d73a38c09292c5e4d6f633442092449147"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0xf78}, 0x1, 0x0, 0x0, 0x480c1}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000950000814c1296b883384f3cb894d3b800c5a06981eac71df3e426af6de4e61b4ea3459984f244f50bab3850561b906bf2d38272dcaae8ef205fddac8dbe452c573fbf62a32df01e604171d708d400172c74bbd7f7d42c4728198795f2d493e009000000000000002ae4f3c0b5b95e6dfbc51c558d2438fe2f087babdf5810a8fc939632b7b87d3dba79816735eb691508f795b525b3687e0d088885d2b9785cbb4edfec18dd83d7102eb95993ce02e135e069b75c280a9c648b0f02e2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, &(0x7f0000000100)={0x2, 0x1d000, 0x1}) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x3, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x10006, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0x800000b, 0x1, 0x9, 0x6, 0x1, 0x6, 0x909, 0x5, 0x4d, 0x5, 0x65a, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0x1, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x101, 0x8, 0x5, 0x0, 0x0, 0x34f1, 0x1ff, 0x7, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x0, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0x10001, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0x8, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x1, 0x60a, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x3, 0x8, 0x7, 0x8, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x7, 0x1, 0x4, 0x15}, 0x31, [0x0, 0x1, 0x7, 0x2, 0x9, 0x5, 0x0, 0x858, 0x5, 0x2, 0xcdb9, 0xc8c, 0x4, 0x9, 0x3, 0x5, 0x6, 0x3b8, 0xfffffff8, 0x7, 0x8000, 0x82, 0x10001, 0x1, 0xe, 0x8, 0x8, 0x1, 0x0, 0x4b0e880e, 0x80000000, 0xb, 0xbd92, 0x81, 0x7, 0x2, 0x6, 0x3e18b6be, 0x2, 0x7, 0x5b98, 0x1ff, 0x4, 0x6, 0x1, 0x1, 0x7ff, 0xffffff01, 0x8001, 0x8000, 0x2, 0xf8000000, 0x654, 0x729e4a8b, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0x3, 0xfffffffe, 0xffff43d0, 0x5, 0x400], [0x4, 0x4, 0x70, 0x3, 0x1, 0x6, 0x1, 0x5, 0x454, 0x80, 0x1, 0x6, 0x10000, 0x7, 0x9, 0x9, 0xffffff7f, 0x9, 0x6, 0x3, 0x5, 0x8, 0x2, 0x80000001, 0x1ff, 0x411, 0x201, 0x3, 0x9, 0x8001, 0x8, 0x100, 0x3, 0x3099, 0x374, 0x0, 0x40, 0x7ff, 0x3, 0x8, 0x9, 0xfa, 0x5, 0xce81, 0xd, 0x9, 0x1, 0x0, 0x7f, 0x10, 0x4f3b7fa9, 0x6, 0x4a8, 0x6, 0x0, 0x2, 0xeb, 0x0, 0x9, 0x7fff, 0xf, 0x1001, 0x401, 0x1], [0x81, 0x6, 0xd, 0x9, 0x1, 0x9, 0xfffff23f, 0x2, 0x401, 0x8, 0x2, 0xa9, 0x622, 0xb, 0x8, 0x3ff, 0xfffffffa, 0x7, 0x8, 0xffff8000, 0x200, 0x1, 0x0, 0x4, 0x3, 0x200, 0x1a40, 0xac22, 0x4, 0xe, 0xffffffff, 0x9, 0x4, 0x81, 0x6, 0xff, 0x4, 0x3, 0x3, 0x6, 0x5, 0x5b04a85a, 0x1, 0x5, 0x9, 0xfffffff7, 0x6, 0x1, 0xfffffffb, 0xffff, 0x8, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0xfffff939, 0x2, 0x2, 0xb3, 0x9], [0x1, 0x2, 0x7fff, 0x3f1, 0x7, 0x8ba8, 0x40, 0x0, 0xfffffffd, 0xf4, 0x4, 0xdee, 0x5, 0x1, 0x1c, 0xa9bf, 0xffff8000, 0x0, 0x8, 0x40, 0xe, 0xfffffffd, 0x8, 0x3290, 0x5, 0x1, 0x0, 0x6, 0x4, 0x2, 0x4, 0xf, 0x4, 0x4dc, 0x6, 0xfffffff8, 0x200, 0x72, 0x4, 0xfffffffc, 0x3, 0xb, 0x37f, 0x4, 0x9, 0x3, 0x20, 0xfa91, 0x7, 0x401, 0x5, 0x81, 0x20000000, 0x603, 0x0, 0x2, 0x2, 0xd, 0xa, 0x7, 0x5, 0x627b6092, 0x6, 0x6]}, 0x45c) 443.537574ms ago: executing program 4 (id=302): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000200), 0x5, 0x2) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffd, r7, 0x0, 0x0, 0x9}]) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2000) 432.057575ms ago: executing program 3 (id=303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x1002}], 0x1, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r1, &(0x7f00000000c0)=@unlock_all, 0xb) chdir(&(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r3, 0x4b44, 0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 429.838514ms ago: executing program 1 (id=304): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000200), 0x5, 0x2) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffd, r7, 0x0, 0x0, 0x9}]) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2000) 0s ago: executing program 2 (id=305): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x140) r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffff9, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="3a00f6399e", 0x5, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect(0x5, 0x0, 0x0, 0x0) eventfd2(0x400000, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xdc) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0xffffffffffffff64) shutdown(r1, 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000700)={0xfffffc8c, 0xb, 0x36c4f94e1651b841, {0x3, @win={{0x7, 0xf, 0x5, 0xfff}, 0x4, 0x9, &(0x7f0000000500)={{0x4, 0x5, 0x2, 0xb78}, &(0x7f00000004c0)={{0x101, 0x83, 0x7f, 0x6}}}, 0x1, &(0x7f0000000640)="e2ab7ab6019a3a1cdd3348dc3df1c49148cf8e1af52ed363157859b94d70d9004a7c403a59bf522ecebd06fa96c0dd6eddd52a1744b0b1eca7876ed8c8971847b5b0f482b47ecae4b8d511c61ca34eda387dba162648f738a9383dfe41346b6b48c2bb51c7466748e32d3dd9337d27458a12fd8a5aac1b1699fbe4621274a09ea582530732286b95bbeeb65eb785f721857205fb005fdba35cf17c807b1722a68199e36892fa345d7a74d81c3d3757da8a3b3c66195f5105232c744119", 0xf0}}, 0x8000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="5dc00008000080050017000100000008001d000100"/36], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = getpid() syz_pidfd_open(r6, 0x0) kernel console output (not intermixed with test programs): : hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.195040][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.207345][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.215090][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.222868][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.230555][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.235790][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.237905][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.245292][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.259169][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.261424][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.276002][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.286952][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.645657][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 54.744494][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 54.761796][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 54.843599][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 54.877535][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.885091][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.892582][ T5818] bridge_slave_0: entered allmulticast mode [ 54.899966][ T5818] bridge_slave_0: entered promiscuous mode [ 54.932711][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.939936][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.946998][ T5818] bridge_slave_1: entered allmulticast mode [ 54.954537][ T5818] bridge_slave_1: entered promiscuous mode [ 54.961320][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 55.007968][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.015246][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.022844][ T5819] bridge_slave_0: entered allmulticast mode [ 55.029360][ T5819] bridge_slave_0: entered promiscuous mode [ 55.050792][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.072257][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.079348][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.086947][ T5823] bridge_slave_0: entered allmulticast mode [ 55.094655][ T5823] bridge_slave_0: entered promiscuous mode [ 55.101321][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.108402][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.115836][ T5819] bridge_slave_1: entered allmulticast mode [ 55.122420][ T5819] bridge_slave_1: entered promiscuous mode [ 55.131050][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.162440][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.169749][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.176811][ T5823] bridge_slave_1: entered allmulticast mode [ 55.183612][ T5823] bridge_slave_1: entered promiscuous mode [ 55.213940][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.221240][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.228384][ T5824] bridge_slave_0: entered allmulticast mode [ 55.235124][ T5824] bridge_slave_0: entered promiscuous mode [ 55.259094][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.281879][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.288955][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.296294][ T5824] bridge_slave_1: entered allmulticast mode [ 55.303333][ T5824] bridge_slave_1: entered promiscuous mode [ 55.319774][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.332257][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.343295][ T5818] team0: Port device team_slave_0 added [ 55.373625][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.384311][ T5818] team0: Port device team_slave_1 added [ 55.415633][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.426603][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.452680][ T5819] team0: Port device team_slave_0 added [ 55.459295][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.466276][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.492254][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.504018][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.511359][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.518447][ T5826] bridge_slave_0: entered allmulticast mode [ 55.526618][ T5826] bridge_slave_0: entered promiscuous mode [ 55.555430][ T5819] team0: Port device team_slave_1 added [ 55.562078][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.568994][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.595159][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.612244][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.619279][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.626538][ T5826] bridge_slave_1: entered allmulticast mode [ 55.633867][ T5826] bridge_slave_1: entered promiscuous mode [ 55.641750][ T5824] team0: Port device team_slave_0 added [ 55.657005][ T5823] team0: Port device team_slave_0 added [ 55.675078][ T5824] team0: Port device team_slave_1 added [ 55.688642][ T5823] team0: Port device team_slave_1 added [ 55.703369][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.710331][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.736230][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.756246][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.767778][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.793142][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.800336][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.828247][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.848541][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.855518][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.881746][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.914891][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.921952][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.947975][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.962978][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.970836][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.997423][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.008853][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.016081][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.042114][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.059278][ T5826] team0: Port device team_slave_0 added [ 56.076254][ T5818] hsr_slave_0: entered promiscuous mode [ 56.082576][ T5818] hsr_slave_1: entered promiscuous mode [ 56.104739][ T5826] team0: Port device team_slave_1 added [ 56.178424][ T5823] hsr_slave_0: entered promiscuous mode [ 56.184607][ T5823] hsr_slave_1: entered promiscuous mode [ 56.190706][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.198355][ T5823] Cannot create hsr debugfs directory [ 56.206756][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.213777][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.239885][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.253900][ T5819] hsr_slave_0: entered promiscuous mode [ 56.260487][ T5819] hsr_slave_1: entered promiscuous mode [ 56.266314][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.273882][ T5819] Cannot create hsr debugfs directory [ 56.290581][ T5830] Bluetooth: hci1: command tx timeout [ 56.290584][ T5822] Bluetooth: hci2: command tx timeout [ 56.290722][ T5822] Bluetooth: hci0: command tx timeout [ 56.317216][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.324521][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.350452][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.369639][ T5822] Bluetooth: hci4: command tx timeout [ 56.369644][ T5825] Bluetooth: hci3: command tx timeout [ 56.388930][ T5824] hsr_slave_0: entered promiscuous mode [ 56.394994][ T5824] hsr_slave_1: entered promiscuous mode [ 56.401601][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.409135][ T5824] Cannot create hsr debugfs directory [ 56.481534][ T5826] hsr_slave_0: entered promiscuous mode [ 56.487484][ T5826] hsr_slave_1: entered promiscuous mode [ 56.493678][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.501239][ T5826] Cannot create hsr debugfs directory [ 56.751950][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.766238][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.776617][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.792114][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.821970][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.831971][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.841798][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.854425][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.912698][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.924810][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.948182][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.957845][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.012108][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.022512][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.045433][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.071117][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.122963][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.133145][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.142864][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.163021][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.169895][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.209460][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.222447][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.246990][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.254163][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.277195][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.284340][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.342611][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.361659][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.381467][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.400987][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.408689][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.415814][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.438260][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.445327][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.468683][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.475774][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.493844][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.511835][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.518938][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.528798][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 57.528809][ T30] audit: type=1400 audit(1743692518.270:111): avc: denied { sys_module } for pid=5818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.590916][ T2213] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.598081][ T2213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.607745][ T2213] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.614877][ T2213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.645215][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.711292][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.742298][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.763359][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.787074][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.794203][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.807965][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.815102][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.888962][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.926837][ T5818] veth0_vlan: entered promiscuous mode [ 57.998381][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.022474][ T5818] veth1_vlan: entered promiscuous mode [ 58.032145][ T5819] veth0_vlan: entered promiscuous mode [ 58.075056][ T5819] veth1_vlan: entered promiscuous mode [ 58.126212][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.172319][ T5818] veth0_macvtap: entered promiscuous mode [ 58.181180][ T5823] veth0_vlan: entered promiscuous mode [ 58.194578][ T5818] veth1_macvtap: entered promiscuous mode [ 58.216441][ T5824] veth0_vlan: entered promiscuous mode [ 58.233225][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.244258][ T5823] veth1_vlan: entered promiscuous mode [ 58.258098][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.267870][ T5824] veth1_vlan: entered promiscuous mode [ 58.277110][ T5819] veth0_macvtap: entered promiscuous mode [ 58.292488][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.307523][ T5819] veth1_macvtap: entered promiscuous mode [ 58.323563][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.332521][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.342564][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.351443][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.371813][ T5822] Bluetooth: hci1: command tx timeout [ 58.371825][ T5825] Bluetooth: hci2: command tx timeout [ 58.377190][ T5822] Bluetooth: hci0: command tx timeout [ 58.428842][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.440529][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.451257][ T5822] Bluetooth: hci3: command tx timeout [ 58.456707][ T5822] Bluetooth: hci4: command tx timeout [ 58.463208][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.484607][ T5823] veth0_macvtap: entered promiscuous mode [ 58.495006][ T5824] veth0_macvtap: entered promiscuous mode [ 58.503790][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.514834][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.526449][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.542554][ T5823] veth1_macvtap: entered promiscuous mode [ 58.556406][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.566664][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.577314][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.586830][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.618440][ T5824] veth1_macvtap: entered promiscuous mode [ 58.636366][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.647514][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.659084][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.671276][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.682030][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.717651][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.728399][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.739173][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.749731][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.760540][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.774561][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.785320][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.795670][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.806175][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.816199][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.826875][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.837579][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.867776][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.877147][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.887715][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.896500][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.917958][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.928472][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.941078][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.951795][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.961841][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.972506][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.983814][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.992073][ T2213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.003900][ T2213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.006939][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.020433][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.027670][ T5826] veth0_vlan: entered promiscuous mode [ 59.055760][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.064539][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.073527][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.082686][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.116809][ T5826] veth1_vlan: entered promiscuous mode [ 59.140300][ T2213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.148121][ T2213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.188950][ T30] audit: type=1400 audit(1743692519.930:112): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.Q57j5T/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.217293][ T30] audit: type=1400 audit(1743692519.930:113): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.242990][ T30] audit: type=1400 audit(1743692519.930:114): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.Q57j5T/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.253765][ T5826] veth0_macvtap: entered promiscuous mode [ 59.280553][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.282489][ T5826] veth1_macvtap: entered promiscuous mode [ 59.294530][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.305187][ T30] audit: type=1400 audit(1743692519.960:115): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.327436][ T30] audit: type=1400 audit(1743692519.960:116): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.Q57j5T/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.354898][ T30] audit: type=1400 audit(1743692519.960:117): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.Q57j5T/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.374664][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.404338][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.404582][ T30] audit: type=1400 audit(1743692519.990:118): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.436071][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.459677][ T30] audit: type=1400 audit(1743692520.040:119): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.460531][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.483807][ T30] audit: type=1400 audit(1743692520.040:120): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=6815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 59.503060][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.531048][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.541571][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.551464][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.561888][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.572026][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.582445][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.594096][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.613187][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.621347][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.636925][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.647499][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.658029][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.668476][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.678310][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.688730][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.698956][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.711512][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.722122][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.732565][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.741396][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.750757][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.759447][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.817432][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.837529][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.857358][ T2213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.866379][ T2213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.941293][ T5822] Bluetooth: hci2: command tx timeout [ 60.946706][ T5822] Bluetooth: hci1: command tx timeout [ 60.952380][ T5830] Bluetooth: hci0: command tx timeout [ 60.957770][ T5830] Bluetooth: hci4: command tx timeout [ 60.963888][ T5825] Bluetooth: hci3: command tx timeout [ 61.139604][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.157311][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.271843][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.296436][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.669872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.186798][ T5913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.255094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.440461][ T5834] Bluetooth: hci1: command tx timeout [ 63.445878][ T5834] Bluetooth: hci4: command tx timeout [ 63.452045][ T5822] Bluetooth: hci3: command tx timeout [ 63.457481][ T5822] Bluetooth: hci0: command tx timeout [ 63.459304][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 63.462994][ T5830] Bluetooth: hci2: command tx timeout [ 63.893415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.321125][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.331848][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.659616][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 64.659653][ T30] audit: type=1400 audit(1743692525.400:147): avc: denied { bind } for pid=5932 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.726078][ T5937] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 64.735130][ T5937] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 65.429539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 65.467672][ T30] audit: type=1400 audit(1743692525.820:148): avc: denied { allowed } for pid=5938 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.578947][ T30] audit: type=1400 audit(1743692525.820:149): avc: denied { create } for pid=5938 comm="syz.1.9" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.741507][ T30] audit: type=1400 audit(1743692525.840:150): avc: denied { node_bind } for pid=5938 comm="syz.1.9" saddr=::ffff:224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 65.942135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.288490][ T30] audit: type=1400 audit(1743692525.850:151): avc: denied { append } for pid=5938 comm="syz.1.9" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.528534][ T30] audit: type=1400 audit(1743692525.850:152): avc: denied { open } for pid=5938 comm="syz.1.9" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.521491][ T30] audit: type=1400 audit(1743692525.860:153): avc: denied { ioctl } for pid=5938 comm="syz.1.9" path="/dev/sg0" dev="devtmpfs" ino=747 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.556029][ T30] audit: type=1400 audit(1743692526.360:154): avc: denied { read write } for pid=5943 comm="syz.4.5" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.771059][ T5828] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.829605][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.914583][ T30] audit: type=1400 audit(1743692526.360:155): avc: denied { open } for pid=5943 comm="syz.4.5" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.991349][ T30] audit: type=1400 audit(1743692526.520:156): avc: denied { setopt } for pid=5932 comm="syz.2.8" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.145508][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 68.185476][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.274032][ T5828] usb 4-1: config 1 interface 1 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 68.298136][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.328387][ T5828] usb 4-1: config 1 interface 1 has no altsetting 0 [ 68.338703][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.352104][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.361713][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.419568][ T5828] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.484974][ T9] usb 5-1: config 0 descriptor?? [ 68.490083][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.508264][ T5828] usb 4-1: Product: Й [ 68.518365][ T5828] usb 4-1: Manufacturer: Ф [ 68.526148][ T5828] usb 4-1: SerialNumber: ࠬ [ 68.597467][ T5973] Zero length message leads to an empty skb [ 68.950912][ T5898] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.997393][ T5828] usb 4-1: can't set config #1, error -71 [ 69.007628][ T5828] usb 4-1: USB disconnect, device number 2 [ 69.031451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.116978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.129500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 69.257182][ T9] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 69.275819][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 69.288953][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.308790][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 69.317936][ T5898] usb 2-1: config 0 has no interface number 0 [ 69.340243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.352620][ T5898] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 69.374170][ T5975] xt_hashlimit: max too large, truncated to 1048576 [ 69.379719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.396177][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 69.599555][ T5898] usb 2-1: config 0 interface 1 has no altsetting 0 [ 69.620039][ T5898] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 69.637688][ T5985] SELinux: ebitmap: truncated map [ 69.646631][ T5985] SELinux: failed to load policy [ 69.688290][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 69.688302][ T30] audit: type=1400 audit(1743692530.430:182): avc: denied { ioctl } for pid=5979 comm="syz.3.18" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.719840][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.727829][ T5898] usb 2-1: Product: syz [ 69.734898][ T9] usb 5-1: USB disconnect, device number 2 [ 69.749379][ T5898] usb 2-1: Manufacturer: syz [ 69.762850][ T5898] usb 2-1: SerialNumber: syz [ 69.777873][ T5898] usb 2-1: config 0 descriptor?? [ 69.805840][ T30] audit: type=1400 audit(1743692530.550:183): avc: denied { ioctl } for pid=5989 comm="syz.2.20" path="/dev/radio9" dev="devtmpfs" ino=1010 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.946544][ T30] audit: type=1400 audit(1743692530.690:184): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 69.993905][ T30] audit: type=1400 audit(1743692530.740:185): avc: denied { create } for pid=5992 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.032989][ T5898] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 70.049449][ T5898] cx231xx 2-1:0.1: Failed to read PCB config [ 70.096929][ T5898] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 70.297746][ T5898] usb 2-1: USB disconnect, device number 2 [ 70.527887][ T30] audit: type=1400 audit(1743692530.860:186): avc: denied { map } for pid=5989 comm="syz.2.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.586116][ T30] audit: type=1400 audit(1743692530.870:187): avc: denied { read write } for pid=5989 comm="syz.2.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.610519][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.627843][ T30] audit: type=1400 audit(1743692531.300:188): avc: denied { write } for pid=5992 comm="syz.3.21" name="ptype" dev="proc" ino=4026532814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.679532][ T30] audit: type=1400 audit(1743692531.420:189): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 70.724555][ T30] audit: type=1400 audit(1743692531.440:190): avc: denied { ioctl } for pid=5998 comm="syz.0.22" path="socket:[8409]" dev="sockfs" ino=8409 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.765350][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 70.783859][ T6004] bridge_slave_1: left allmulticast mode [ 70.789863][ T6004] bridge_slave_1: left promiscuous mode [ 70.796088][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.816094][ T6004] bridge_slave_0: left allmulticast mode [ 70.822518][ T6004] bridge_slave_0: left promiscuous mode [ 70.828724][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.887794][ T5898] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.915739][ T6008] SELinux: policydb magic number 0x2f2e0000 does not match expected magic number 0xf97cff8c [ 70.926142][ T6008] SELinux: failed to load policy [ 70.962127][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.972655][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.983878][ T30] audit: type=1400 audit(1743692531.660:191): avc: denied { create } for pid=6002 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.303195][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 71.362240][ T5898] usb 2-1: device descriptor read/all, error -71 [ 72.486541][ T5828] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.520586][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 74.534259][ T5828] usb 1-1: device descriptor read/all, error -71 [ 74.868487][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 74.868500][ T30] audit: type=1400 audit(1743692535.610:209): avc: denied { connect } for pid=6025 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.164736][ T6032] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 75.823931][ T30] audit: type=1400 audit(1743692536.570:210): avc: denied { create } for pid=6039 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.885022][ T30] audit: type=1400 audit(1743692536.590:211): avc: denied { write } for pid=6039 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.186183][ T970] cfg80211: failed to load regulatory.db [ 76.229572][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.826103][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 76.876790][ T10] usb 4-1: config 1 interface 1 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 76.904049][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 76.940445][ T30] audit: type=1400 audit(1743692537.690:212): avc: denied { write } for pid=6018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.979769][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.005084][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.023338][ T10] usb 4-1: Product: Й [ 77.026666][ T30] audit: type=1400 audit(1743692537.690:213): avc: denied { add_name } for pid=6018 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.037556][ T10] usb 4-1: Manufacturer: Ф [ 77.105259][ T10] usb 4-1: SerialNumber: ࠬ [ 77.121204][ T30] audit: type=1400 audit(1743692537.690:214): avc: denied { create } for pid=6018 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.181896][ T30] audit: type=1400 audit(1743692537.690:215): avc: denied { write } for pid=6018 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=1944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.207789][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.349848][ T10] usb 4-1: found format II with max.bitrate = 8, frame size=1 [ 77.371005][ T10] usb 4-1: found format II with max.bitrate = 8, frame size=1 [ 77.373215][ T6079] warning: `syz.4.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.409588][ T30] audit: type=1400 audit(1743692537.690:216): avc: denied { append } for pid=6018 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=1944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.420793][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 77.620720][ T30] audit: type=1400 audit(1743692537.750:217): avc: denied { read write } for pid=6067 comm="syz.2.38" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.731948][ T30] audit: type=1400 audit(1743692537.750:218): avc: denied { open } for pid=6067 comm="syz.2.38" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.746109][ T10] usb 4-1: USB disconnect, device number 3 [ 77.754756][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.242919][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.089823][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.448291][ T6125] FAULT_INJECTION: forcing a failure. [ 79.448291][ T6125] name failslab, interval 1, probability 0, space 0, times 1 [ 79.482076][ T6125] CPU: 1 UID: 0 PID: 6125 Comm: syz.4.50 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 79.482100][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.482110][ T6125] Call Trace: [ 79.482115][ T6125] [ 79.482122][ T6125] dump_stack_lvl+0x16c/0x1f0 [ 79.482146][ T6125] should_fail_ex+0x512/0x640 [ 79.482162][ T6125] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 79.482182][ T6125] should_failslab+0xc2/0x120 [ 79.482201][ T6125] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 79.482217][ T6125] ? d_instantiate+0x77/0x90 [ 79.482235][ T6125] ? alloc_empty_file+0x55/0x1e0 [ 79.482259][ T6125] alloc_empty_file+0x55/0x1e0 [ 79.482280][ T6125] alloc_file_pseudo+0x13a/0x230 [ 79.482301][ T6125] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 79.482322][ T6125] ? do_raw_spin_unlock+0x172/0x230 [ 79.482346][ T6125] __anon_inode_getfile+0xf7/0x370 [ 79.482367][ T6125] anon_inode_getfd+0x52/0xb0 [ 79.482385][ T6125] __x64_sys_fsopen+0x18b/0x240 [ 79.482407][ T6125] do_syscall_64+0xcd/0x260 [ 79.482428][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.482444][ T6125] RIP: 0033:0x7ff47b38d169 [ 79.482457][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.482472][ T6125] RSP: 002b:00007ff4791f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 79.482488][ T6125] RAX: ffffffffffffffda RBX: 00007ff47b5a5fa0 RCX: 00007ff47b38d169 [ 79.482497][ T6125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 79.482506][ T6125] RBP: 00007ff4791f6090 R08: 0000000000000000 R09: 0000000000000000 [ 79.482515][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.482524][ T6125] R13: 0000000000000001 R14: 00007ff47b5a5fa0 R15: 00007fff7486eee8 [ 79.482545][ T6125] [ 79.671724][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.678706][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 79.686731][ T6127] mmap: syz.0.51 (6127) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.900435][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 79.909952][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.418460][ T9] usb 3-1: config 0 descriptor?? [ 80.447710][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 80.447724][ T30] audit: type=1400 audit(1743692541.190:241): avc: denied { write } for pid=6137 comm="syz.0.54" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.485079][ T30] audit: type=1400 audit(1743692541.210:242): avc: denied { open } for pid=6137 comm="syz.0.54" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.519540][ T30] audit: type=1400 audit(1743692541.210:243): avc: denied { read } for pid=6137 comm="syz.0.54" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.555464][ T30] audit: type=1400 audit(1743692541.210:244): avc: denied { ioctl } for pid=6137 comm="syz.0.54" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.659865][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 80.674928][ T9] asix 3-1:0.0: probe with driver asix failed with error -61 [ 80.682774][ T30] audit: type=1400 audit(1743692541.300:245): avc: denied { create } for pid=6140 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.739597][ T30] audit: type=1400 audit(1743692541.300:246): avc: denied { setopt } for pid=6140 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.180525][ T6151] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 81.189963][ T6151] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.388682][ T30] audit: type=1400 audit(1743692541.300:247): avc: denied { ioctl } for pid=6140 comm="syz.0.55" path="socket:[8703]" dev="sockfs" ino=8703 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.429294][ T5836] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 81.443596][ T30] audit: type=1400 audit(1743692541.300:248): avc: denied { write } for pid=6140 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.470164][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.479692][ T30] audit: type=1400 audit(1743692541.450:249): avc: denied { create } for pid=6142 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.367416][ T6164] SELinux: policydb magic number 0x2f2e0000 does not match expected magic number 0xf97cff8c [ 82.377868][ T6164] SELinux: failed to load policy [ 82.421807][ T30] audit: type=1400 audit(1743692541.480:250): avc: denied { create } for pid=6144 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.736457][ T10] usb 3-1: USB disconnect, device number 2 [ 82.916450][ T5836] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 83.101972][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.123989][ T6184] syz.1.68 uses obsolete (PF_INET,SOCK_PACKET) [ 83.419723][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 83.438829][ T24] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 83.448019][ T24] usb 5-1: config 0 has no interface number 0 [ 83.456310][ T24] usb 5-1: config 0 interface 183 has no altsetting 0 [ 83.475610][ T24] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=57.f2 [ 83.507051][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.519598][ T24] usb 5-1: Product: syz [ 83.523880][ T24] usb 5-1: Manufacturer: syz [ 83.528558][ T24] usb 5-1: SerialNumber: syz [ 83.559124][ T24] usb 5-1: config 0 descriptor?? [ 83.874278][ T5911] usb 5-1: USB disconnect, device number 3 [ 83.970081][ T6193] netlink: 96 bytes leftover after parsing attributes in process `syz.1.72'. [ 83.979184][ T6193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.72'. [ 84.151427][ T6201] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 84.159900][ T6201] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.762204][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 84.771569][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 85.783611][ T6234] netlink: 830 bytes leftover after parsing attributes in process `syz.2.75'. [ 86.429555][ T5898] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.641104][ T6235] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 86.650128][ T6235] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.815245][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.826328][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.008237][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.195926][ T5898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.208512][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.234666][ T5898] usb 1-1: config 0 descriptor?? [ 87.404482][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 87.404497][ T30] audit: type=1400 audit(1743692548.150:282): avc: denied { write } for pid=6249 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.507856][ T30] audit: type=1400 audit(1743692548.250:283): avc: denied { unlink } for pid=6257 comm="syz.2.89" name="#1" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.529861][ T30] audit: type=1400 audit(1743692548.270:284): avc: denied { mount } for pid=6257 comm="syz.2.89" name="/" dev="overlay" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.532659][ T6259] FAULT_INJECTION: forcing a failure. [ 87.532659][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 87.583497][ T6259] CPU: 0 UID: 0 PID: 6259 Comm: syz.2.89 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 87.583524][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.583534][ T6259] Call Trace: [ 87.583539][ T6259] [ 87.583545][ T6259] dump_stack_lvl+0x16c/0x1f0 [ 87.583570][ T6259] should_fail_ex+0x512/0x640 [ 87.583586][ T6259] ? fs_reclaim_acquire+0xae/0x150 [ 87.583612][ T6259] should_failslab+0xc2/0x120 [ 87.583631][ T6259] __kmalloc_cache_noprof+0x6a/0x3e0 [ 87.583655][ T6259] ? do_raw_spin_lock+0x12c/0x2b0 [ 87.583674][ T6259] ? inode_doinit_use_xattr+0x54/0x410 [ 87.583696][ T6259] inode_doinit_use_xattr+0x54/0x410 [ 87.583716][ T6259] inode_doinit_with_dentry+0x51e/0x12e0 [ 87.583743][ T6259] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 87.583771][ T6259] selinux_d_instantiate+0x26/0x30 [ 87.583791][ T6259] security_d_instantiate+0x142/0x1a0 [ 87.583815][ T6259] d_splice_alias+0x93/0xf80 [ 87.583835][ T6259] ? ovl_lookup+0xd16/0x2270 [ 87.583856][ T6259] ovl_lookup+0xd2e/0x2270 [ 87.583881][ T6259] ? __pfx_ovl_lookup+0x10/0x10 [ 87.583897][ T6259] ? selinux_determine_inode_label+0x238/0x330 [ 87.583924][ T6259] ? may_create+0x205/0x380 [ 87.583962][ T6259] ? bpf_lsm_inode_permission+0x9/0x10 [ 87.583983][ T6259] ? security_inode_permission+0xbf/0x260 [ 87.584008][ T6259] ? __pfx_ovl_lookup+0x10/0x10 [ 87.584023][ T6259] lookup_open.isra.0+0x4d7/0x1580 [ 87.584053][ T6259] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 87.584091][ T6259] ? __pfx_down_write+0x10/0x10 [ 87.584109][ T6259] ? mnt_get_write_access+0x20c/0x300 [ 87.584136][ T6259] path_openat+0x905/0x2d40 [ 87.584160][ T6259] ? __pfx_path_openat+0x10/0x10 [ 87.584184][ T6259] do_filp_open+0x20b/0x470 [ 87.584201][ T6259] ? __pfx_do_filp_open+0x10/0x10 [ 87.584235][ T6259] ? _raw_spin_unlock+0x28/0x50 [ 87.584250][ T6259] ? alloc_fd+0x471/0x7d0 [ 87.584273][ T6259] do_sys_openat2+0x11b/0x1d0 [ 87.584294][ T6259] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.584315][ T6259] ? __fget_files+0x20e/0x3c0 [ 87.584338][ T6259] __x64_sys_creat+0xcc/0x120 [ 87.584360][ T6259] ? __pfx___x64_sys_creat+0x10/0x10 [ 87.584380][ T6259] ? __pfx_ksys_write+0x10/0x10 [ 87.584398][ T6259] ? rcu_is_watching+0x12/0xc0 [ 87.584419][ T6259] ? do_syscall_64+0x91/0x260 [ 87.584438][ T6259] do_syscall_64+0xcd/0x260 [ 87.584458][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.584475][ T6259] RIP: 0033:0x7f416478d169 [ 87.584488][ T6259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.584501][ T6259] RSP: 002b:00007f41655c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 87.584515][ T6259] RAX: ffffffffffffffda RBX: 00007f41649a5fa0 RCX: 00007f416478d169 [ 87.584526][ T6259] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0 [ 87.584535][ T6259] RBP: 00007f41655c3090 R08: 0000000000000000 R09: 0000000000000000 [ 87.584544][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.584553][ T6259] R13: 0000000000000000 R14: 00007f41649a5fa0 R15: 00007ffc00b26ab8 [ 87.584576][ T6259] [ 87.588937][ T6259] evm: overlay not supported [ 87.922061][ T5898] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 87.937674][ T5898] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 87.980175][ T6264] netlink: 100 bytes leftover after parsing attributes in process `syz.1.91'. [ 88.011261][ T6264] netlink: 'syz.1.91': attribute type 62 has an invalid length. [ 88.193693][ T30] audit: type=1400 audit(1743692548.940:285): avc: denied { setopt } for pid=6268 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.253223][ T30] audit: type=1400 audit(1743692549.000:286): avc: denied { read } for pid=6271 comm="syz.1.95" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.309382][ T30] audit: type=1400 audit(1743692549.000:287): avc: denied { open } for pid=6271 comm="syz.1.95" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.333219][ T30] audit: type=1400 audit(1743692549.000:288): avc: denied { ioctl } for pid=6271 comm="syz.1.95" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.357872][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.364471][ T30] audit: type=1400 audit(1743692549.080:289): avc: denied { map } for pid=6279 comm="syz.2.97" path="socket:[8094]" dev="sockfs" ino=8094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 88.387056][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.861595][ T9] usb 1-1: USB disconnect, device number 4 [ 89.117875][ T30] audit: type=1400 audit(1743692549.860:290): avc: denied { setopt } for pid=6286 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.224360][ T30] audit: type=1400 audit(1743692549.970:291): avc: denied { write } for pid=6295 comm="syz.0.101" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.570885][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.799559][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 89.809655][ T9] usb 1-1: config 1 interface 0 altsetting 112 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.836273][ T9] usb 1-1: config 1 interface 0 altsetting 112 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.854526][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 89.878187][ T9] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.40 [ 90.131647][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.139771][ T9] usb 1-1: Product: syz [ 90.143970][ T9] usb 1-1: Manufacturer: syz [ 90.157021][ T9] usb 1-1: SerialNumber: syz [ 90.388718][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 90.396442][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 90.444071][ T9] usb 1-1: USB disconnect, device number 5 [ 91.571433][ T6336] SELinux: failed to load policy [ 91.778764][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.010059][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 92.024035][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 92.289384][ T5911] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 92.298926][ T5911] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 92.319126][ T5911] usb 2-1: Product: syz [ 92.327498][ T5911] usb 2-1: Manufacturer: syz [ 92.341350][ T5911] usb 2-1: SerialNumber: syz [ 92.582104][ T5911] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 92.642779][ T5911] visor 2-1:1.0: probe with driver visor failed with error -71 [ 92.691807][ T6362] ip_vti0: entered promiscuous mode [ 92.693519][ T5911] usb 2-1: USB disconnect, device number 5 [ 92.774312][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 92.774326][ T30] audit: type=1400 audit(1743692553.520:301): avc: denied { setopt } for pid=6364 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.184929][ T5898] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.185213][ T5836] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 93.200896][ T5836] Bluetooth: hci3: Injecting HCI hardware error event [ 93.208562][ T5822] Bluetooth: hci3: hardware error 0x00 [ 93.359418][ T6372] support for the xor transformation has been removed. [ 93.381130][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.127'. [ 93.390906][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 93.449596][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 93.466029][ T5898] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 93.485395][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.559782][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.611078][ T6383] SELinux: failed to load policy [ 93.620640][ T5898] usb 4-1: Product: syz [ 93.632211][ T5898] usb 4-1: Manufacturer: syz [ 93.636805][ T5898] usb 4-1: SerialNumber: syz [ 93.951537][ T5898] usb 4-1: config 0 descriptor?? [ 93.959308][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 94.032132][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.043130][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.058751][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.073158][ T30] audit: type=1400 audit(1743692554.810:302): avc: denied { setopt } for pid=6385 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.078691][ T24] IPVS: starting estimator thread 0... [ 94.094792][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.128208][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.142835][ T9] usb 2-1: config 0 descriptor?? [ 94.196743][ T30] audit: type=1400 audit(1743692554.940:303): avc: denied { connect } for pid=6389 comm="syz.0.133" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.209602][ T6388] IPVS: using max 47 ests per chain, 112800 per kthread [ 94.218465][ T30] audit: type=1400 audit(1743692554.940:304): avc: denied { name_connect } for pid=6389 comm="syz.0.133" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 94.402109][ T30] audit: type=1400 audit(1743692555.150:305): avc: denied { read } for pid=6394 comm="syz.4.135" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.427171][ T30] audit: type=1400 audit(1743692555.150:306): avc: denied { open } for pid=6394 comm="syz.4.135" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.451879][ T30] audit: type=1400 audit(1743692555.150:307): avc: denied { ioctl } for pid=6394 comm="syz.4.135" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.509551][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.562533][ T9] plantronics 0003:047F:FFFF.0003: unknown global tag 0xc [ 94.579903][ T9] plantronics 0003:047F:FFFF.0003: item 0 1 1 12 parsing failed [ 94.592600][ T9] plantronics 0003:047F:FFFF.0003: parse failed [ 94.606588][ T9] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 94.629940][ T6400] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.669551][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 94.672370][ T30] audit: type=1400 audit(1743692555.410:308): avc: denied { bind } for pid=6396 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.675960][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.708015][ T24] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.726853][ T30] audit: type=1400 audit(1743692555.410:309): avc: denied { read } for pid=6396 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.751818][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.775678][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 94.782540][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.786483][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.794109][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.821429][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.833968][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.850535][ T9] usb 2-1: USB disconnect, device number 6 [ 94.861688][ T24] usb 1-1: config 0 descriptor?? [ 95.199643][ T30] audit: type=1400 audit(1743692555.910:310): avc: denied { write } for pid=6405 comm="syz.2.140" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.370511][ T24] hid (null): report_id 3291754556 is invalid [ 95.419765][ T5822] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 95.478111][ T24] wacom 0003:056A:032A.0004: report_id 3291754556 is invalid [ 95.487129][ T24] wacom 0003:056A:032A.0004: item 0 4 1 8 parsing failed [ 95.491832][ T5871] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.501464][ T24] wacom 0003:056A:032A.0004: parse failed [ 95.507486][ T24] wacom 0003:056A:032A.0004: probe with driver wacom failed with error -22 [ 95.739743][ T6413] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 95.802957][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.819204][ T6413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 95.905398][ T5871] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.017826][ T9] usb 1-1: USB disconnect, device number 6 [ 96.070825][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.169860][ T5898] gspca_sonixj: reg_r err -71 [ 96.200765][ T5898] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 96.234069][ T6417] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 96.242808][ T6417] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 96.294238][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.371492][ T5898] usb 4-1: USB disconnect, device number 4 [ 96.386278][ T6404] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 96.407518][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.892853][ T6428] tmpfs: Bad value for 'nr_inodes' [ 96.901018][ T5871] usb 5-1: USB disconnect, device number 4 [ 96.912582][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'. [ 97.000440][ T5898] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.149511][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 97.163306][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.179247][ T5898] usb 2-1: config 0 has no interfaces? [ 97.193660][ T5898] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 97.204752][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.214040][ T5898] usb 2-1: Product: syz [ 97.218189][ T5898] usb 2-1: Manufacturer: syz [ 97.243006][ T5898] usb 2-1: SerialNumber: syz [ 97.271784][ T5898] usb 2-1: config 0 descriptor?? [ 97.540339][ T5898] usb 2-1: USB disconnect, device number 7 [ 98.514110][ T6457] netlink: 'syz.3.154': attribute type 4 has an invalid length. [ 98.556932][ T6459] netlink: 'syz.3.154': attribute type 4 has an invalid length. [ 98.789554][ T970] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 98.989280][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 98.989294][ T30] audit: type=1400 audit(1743692559.730:322): avc: denied { watch watch_reads } for pid=6465 comm="syz.2.156" path="/30" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.007333][ T6467] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 99.031676][ T30] audit: type=1400 audit(1743692559.730:323): avc: denied { getopt } for pid=6462 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.035301][ T6467] fuse: Unknown parameter '017777777777777777777770000000000000000000600000000000000000000006' [ 99.200815][ T970] usb 2-1: config 9 has an invalid interface number: 211 but max is 3 [ 99.209009][ T970] usb 2-1: config 9 has an invalid interface number: 217 but max is 3 [ 99.217642][ T970] usb 2-1: config 9 has an invalid interface number: 239 but max is 3 [ 99.226693][ T970] usb 2-1: config 9 has an invalid interface number: 246 but max is 3 [ 99.235174][ T970] usb 2-1: config 9 has an invalid interface number: 86 but max is 3 [ 99.720182][ T970] usb 2-1: config 9 has an invalid descriptor of length 124, skipping remainder of the config [ 99.731190][ T970] usb 2-1: config 9 has 5 interfaces, different from the descriptor's value: 4 [ 99.740877][ T970] usb 2-1: config 9 has no interface number 0 [ 99.747044][ T970] usb 2-1: config 9 has no interface number 1 [ 99.753268][ T970] usb 2-1: config 9 has no interface number 2 [ 99.759417][ T970] usb 2-1: config 9 has no interface number 3 [ 99.766118][ T970] usb 2-1: config 9 has no interface number 4 [ 99.774614][ T970] usb 2-1: config 9 interface 211 altsetting 179 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 99.786240][ T970] usb 2-1: config 9 interface 211 altsetting 179 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 99.797596][ T970] usb 2-1: config 9 interface 211 altsetting 179 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 99.852201][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.862631][ T970] usb 2-1: config 9 interface 211 altsetting 179 endpoint 0x1 has an invalid bInterval 79, changing to 7 [ 99.889324][ T970] usb 2-1: config 9 interface 211 altsetting 179 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 99.942345][ T970] usb 2-1: too many endpoints for config 9 interface 217 altsetting 190: 180, using maximum allowed: 30 [ 99.955008][ T970] usb 2-1: config 9 interface 217 altsetting 190 has a duplicate endpoint with address 0x3, skipping [ 99.966351][ T970] usb 2-1: config 9 interface 217 altsetting 190 has a duplicate endpoint with address 0x1, skipping [ 99.977947][ T970] usb 2-1: config 9 interface 217 altsetting 190 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 99.989697][ T970] usb 2-1: config 9 interface 217 altsetting 190 bulk endpoint 0xC has invalid maxpacket 959 [ 100.000261][ T970] usb 2-1: config 9 interface 217 altsetting 190 has a duplicate endpoint with address 0xD, skipping [ 100.011672][ T970] usb 2-1: config 9 interface 217 altsetting 190 has a duplicate endpoint with address 0x3, skipping [ 100.022851][ T970] usb 2-1: config 9 interface 217 altsetting 190 has 8 endpoint descriptors, different from the interface descriptor's value: 180 [ 100.036837][ T970] usb 2-1: config 9 interface 239 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 100.049633][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 100.053016][ T970] usb 2-1: config 9 interface 239 altsetting 2 endpoint 0x6 has invalid maxpacket 60864, setting to 64 [ 100.066143][ T970] usb 2-1: config 9 interface 246 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 100.080326][ T30] audit: type=1400 audit(1743692560.820:324): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.087616][ T9] usb 4-1: config 1 interface 1 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 100.110698][ T970] usb 2-1: config 9 interface 246 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 100.126748][ T30] audit: type=1400 audit(1743692560.820:325): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.152786][ T970] usb 2-1: config 9 interface 86 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 100.159525][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 100.166675][ T30] audit: type=1400 audit(1743692560.820:326): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.193551][ T970] usb 2-1: config 9 interface 211 has no altsetting 0 [ 100.197199][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.211348][ T970] usb 2-1: config 9 interface 217 has no altsetting 0 [ 100.219989][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.228043][ T9] usb 4-1: Product: Й [ 100.229332][ T970] usb 2-1: config 9 interface 239 has no altsetting 0 [ 100.239001][ T9] usb 4-1: Manufacturer: Ф [ 100.239605][ T970] usb 2-1: config 9 interface 246 has no altsetting 0 [ 100.244324][ T9] usb 4-1: SerialNumber: ࠬ [ 100.251448][ T970] usb 2-1: config 9 interface 86 has no altsetting 0 [ 100.265510][ T970] usb 2-1: New USB device found, idVendor=0df6, idProduct=9075, bcdDevice=c9.e7 [ 100.274949][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.305096][ T970] usb 2-1: Product: ❃ꢲₘ⨮뜆瘢䚆띾눔㨚♽㥉냎骟ꑪ☦㒶酪套⁤忇ݸ뜻궅莟茈ꏞ蕐㜿䢯᠍믶貣ઠ쾻琭弤凉ᘈꧫ螘䘘톄萡霱᩾ꑲ斉⹾ꮹ扎뾯﨣늄件ꍼ쓑ꡠ吃섭숄綑棨虡⓪䮝뎆턡ཇꎮ瘙땶묹 [ 100.333009][ T970] usb 2-1: Manufacturer: 㠊 [ 100.337739][ T970] usb 2-1: SerialNumber: Й [ 100.342901][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.428975][ T30] audit: type=1400 audit(1743692561.170:327): avc: denied { append } for pid=6481 comm="syz.2.162" name="media8" dev="devtmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.499542][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 100.524826][ T9] usb 4-1: found format II with max.bitrate = 8, frame size=1 [ 100.528410][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.539993][ T6484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6484 comm=syz.2.163 [ 100.561419][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.566916][ T9] usb 4-1: found format II with max.bitrate = 8, frame size=1 [ 100.596585][ T9] usb 4-1: failed to enable PITCH for EP 0x82 [ 100.607271][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.631929][ T970] usb 2-1: USB disconnect, device number 8 [ 100.641792][ T24] usb 5-1: Product: syz [ 100.645961][ T24] usb 5-1: Manufacturer: syz [ 100.662578][ T24] usb 5-1: SerialNumber: syz [ 100.667468][ T9] usb 4-1: USB disconnect, device number 5 [ 100.694757][ T6487] Failed to initialize the IGMP autojoin socket (err -2) [ 100.733958][ T24] usb 5-1: config 0 descriptor?? [ 100.771510][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.784617][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 100.918706][ T6492] SELinux: failed to load policy [ 101.111641][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.740358][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 101.750206][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.946575][ T30] audit: type=1400 audit(1743692562.690:328): avc: denied { sqpoll } for pid=6510 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.982451][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 102.010517][ T24] em28xx 5-1:0.0: board has no eeprom [ 102.069677][ T970] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.116215][ T30] audit: type=1400 audit(1743692562.860:329): avc: denied { bind } for pid=6513 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.148904][ T30] audit: type=1400 audit(1743692562.860:330): avc: denied { create } for pid=6513 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.229590][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 102.249546][ T970] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 102.250167][ T30] audit: type=1400 audit(1743692563.000:331): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.259596][ T970] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 102.291144][ T970] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.300021][ T5898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 102.307042][ T970] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.322821][ T970] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.337582][ T970] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.350070][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.443515][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.646392][ T5871] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.668890][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.008746][ T970] usb 2-1: usb_control_msg returned -32 [ 103.018144][ T5871] usb 3-1: config 0 descriptor?? [ 103.029726][ T5871] cp210x 3-1:0.0: cp210x converter detected [ 103.030302][ T970] usbtmc 2-1:16.0: can't read capabilities [ 103.161248][ T6473] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 103.239551][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 103.247401][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 103.301254][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.355131][ T970] em28xx 5-1:0.0: Binding DVB extension [ 103.443844][ T5871] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 103.470238][ T5871] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 103.477842][ T5871] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 103.497644][ T6507] usbtmc 2-1:16.0: Unable to send data, error -71 [ 103.507773][ T5871] usb 3-1: cp210x converter now attached to ttyUSB0 [ 103.540960][ T5871] usb 2-1: USB disconnect, device number 9 [ 103.599062][ T970] em28xx 5-1:0.0: Registering input extension [ 103.610435][ T5898] usb 5-1: USB disconnect, device number 5 [ 103.616719][ T5898] em28xx 5-1:0.0: Disconnecting em28xx [ 103.636078][ T5898] em28xx 5-1:0.0: Closing input extension [ 103.651646][ T6530] block device autoloading is deprecated and will be removed. [ 103.678248][ T5828] usb 3-1: USB disconnect, device number 3 [ 103.696183][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 103.730037][ T5898] em28xx 5-1:0.0: Freeing device [ 103.738542][ T5828] cp210x 3-1:0.0: device disconnected [ 103.836302][ T6531] Bluetooth: MGMT ver 1.23 [ 103.938725][ T6537] ufs: Invalid option: "@" or missing value [ 103.944924][ T6537] ufs: wrong mount options [ 104.183298][ T6543] SELinux: failed to load policy [ 104.505992][ T6558] netlink: 'syz.2.182': attribute type 30 has an invalid length. [ 104.532542][ T6558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.182'. [ 104.597561][ T6561] bond0: entered promiscuous mode [ 104.605895][ T6561] bond_slave_0: entered promiscuous mode [ 104.624381][ T6561] bond_slave_1: entered promiscuous mode [ 104.645776][ T6561] batadv0: entered promiscuous mode [ 104.675755][ T6561] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 104.726211][ T6561] bond0: left promiscuous mode [ 104.757341][ T6561] bond_slave_0: left promiscuous mode [ 104.784031][ T6561] bond_slave_1: left promiscuous mode [ 104.799610][ T6561] batadv0: left promiscuous mode [ 104.852035][ T30] audit: type=1400 audit(1743692565.600:332): avc: denied { map } for pid=6568 comm="syz.4.183" path="socket:[9751]" dev="sockfs" ino=9751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.932125][ T30] audit: type=1400 audit(1743692565.600:333): avc: denied { read } for pid=6568 comm="syz.4.183" path="socket:[9751]" dev="sockfs" ino=9751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.324097][ T6576] capability: warning: `syz.3.185' uses deprecated v2 capabilities in a way that may be insecure [ 105.327932][ T30] audit: type=1400 audit(1743692565.990:334): avc: denied { read write } for pid=6574 comm="syz.3.185" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.341745][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.397303][ T30] audit: type=1400 audit(1743692565.990:335): avc: denied { open } for pid=6574 comm="syz.3.185" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.411318][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.481973][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.513967][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.544475][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.568008][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.577972][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.585897][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.594105][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.602033][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.610020][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.691796][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.711551][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.730271][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.738019][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.755594][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.785036][ T6603] netlink: 'syz.2.192': attribute type 13 has an invalid length. [ 105.789965][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.819515][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.827262][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.849568][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.857310][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.899725][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 105.941637][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.013309][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.021744][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.257276][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.269201][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.283966][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.359556][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.510452][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.519318][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.530120][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.615837][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.624943][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.632790][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.640545][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.648263][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.669443][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.695754][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.730766][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.738740][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.747827][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.760942][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 106.791362][ T5898] hid-generic 0000:007F:FFFFFFFE.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.827000][ T6620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6620 comm=syz.2.196 [ 107.673253][ T6641] SELinux: failed to load policy [ 107.689539][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.520786][ T6649] SELinux: policydb magic number 0x2f2e0000 does not match expected magic number 0xf97cff8c [ 108.531049][ T6649] SELinux: failed to load policy [ 108.544119][ T6651] SELinux: policydb magic number 0x2f2e0000 does not match expected magic number 0xf97cff8c [ 108.554546][ T6651] SELinux: failed to load policy [ 108.893886][ T30] audit: type=1400 audit(1743692569.640:336): avc: denied { mount } for pid=6653 comm="syz.0.208" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.096912][ T30] audit: type=1400 audit(1743692569.800:337): avc: denied { bind } for pid=6653 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.470304][ T30] audit: type=1326 audit(1743692570.180:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 109.590437][ T5822] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 109.599376][ T5822] Bluetooth: hci2: Injecting HCI hardware error event [ 109.608255][ T5836] Bluetooth: hci2: hardware error 0x00 [ 109.735884][ T30] audit: type=1326 audit(1743692570.180:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 109.779181][ T30] audit: type=1326 audit(1743692570.190:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 109.890828][ T30] audit: type=1326 audit(1743692570.190:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 110.324153][ T30] audit: type=1326 audit(1743692570.190:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 110.355094][ T5858] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 110.409002][ T30] audit: type=1326 audit(1743692570.190:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 110.616454][ T30] audit: type=1326 audit(1743692570.190:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 110.649510][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 110.656544][ T5858] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.663997][ T30] audit: type=1326 audit(1743692570.190:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 110.673315][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.691185][ T30] audit: type=1326 audit(1743692570.190:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 110.731665][ T30] audit: type=1326 audit(1743692570.190:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 111.108695][ T30] audit: type=1326 audit(1743692570.190:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 111.133232][ T30] audit: type=1326 audit(1743692570.190:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 111.147141][ T5858] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.156697][ T30] audit: type=1326 audit(1743692570.190:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47b38d169 code=0x7ffc0000 [ 111.207169][ T5858] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 111.271439][ T5858] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.286885][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.295276][ T5858] usb 2-1: SerialNumber: syz [ 111.316371][ T5858] cdc_acm 2-1:1.0: skipping garbage [ 111.652326][ T6699] SELinux: failed to load policy [ 111.693042][ T5858] usb 2-1: USB disconnect, device number 10 [ 111.824332][ T5836] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 112.609553][ T5871] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.773217][ T3004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.791443][ T6741] FAULT_INJECTION: forcing a failure. [ 112.791443][ T6741] name failslab, interval 1, probability 0, space 0, times 0 [ 112.804528][ T6741] CPU: 0 UID: 0 PID: 6741 Comm: syz.0.235 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 112.804547][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.804561][ T6741] Call Trace: [ 112.804566][ T6741] [ 112.804572][ T6741] dump_stack_lvl+0x16c/0x1f0 [ 112.804595][ T6741] should_fail_ex+0x512/0x640 [ 112.804610][ T6741] ? fs_reclaim_acquire+0xae/0x150 [ 112.804636][ T6741] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 112.804664][ T6741] should_failslab+0xc2/0x120 [ 112.804683][ T6741] __kmalloc_noprof+0xd2/0x510 [ 112.804706][ T6741] tomoyo_realpath_from_path+0xc2/0x6e0 [ 112.804732][ T6741] ? tomoyo_profile+0x47/0x60 [ 112.804759][ T6741] tomoyo_path_number_perm+0x245/0x580 [ 112.804776][ T6741] ? tomoyo_path_number_perm+0x237/0x580 [ 112.804797][ T6741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.804817][ T6741] ? find_held_lock+0x2b/0x80 [ 112.804860][ T6741] ? find_held_lock+0x2b/0x80 [ 112.804880][ T6741] ? hook_file_ioctl_common+0x145/0x410 [ 112.804911][ T6741] ? __fget_files+0x20e/0x3c0 [ 112.804931][ T6741] security_file_ioctl+0x9b/0x240 [ 112.804954][ T6741] __x64_sys_ioctl+0xb7/0x200 [ 112.804979][ T6741] do_syscall_64+0xcd/0x260 [ 112.805000][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.805016][ T6741] RIP: 0033:0x7f49ca38d169 [ 112.805029][ T6741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.805043][ T6741] RSP: 002b:00007f49cb2cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.805058][ T6741] RAX: ffffffffffffffda RBX: 00007f49ca5a5fa0 RCX: 00007f49ca38d169 [ 112.805068][ T6741] RDX: 0000200000000100 RSI: 00000000000007a6 RDI: 0000000000000003 [ 112.805077][ T6741] RBP: 00007f49cb2cc090 R08: 0000000000000000 R09: 0000000000000000 [ 112.805086][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.805094][ T6741] R13: 0000000000000000 R14: 00007f49ca5a5fa0 R15: 00007ffd9b4c9af8 [ 112.805118][ T6741] [ 113.008226][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.054487][ T6741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.273674][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 113.283616][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 113.301443][ T5871] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=46.8b [ 113.310522][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.330190][ T5898] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 113.349628][ T5871] usb 5-1: Product: syz [ 113.355126][ T5871] usb 5-1: Manufacturer: syz [ 113.369067][ T5871] usb 5-1: SerialNumber: syz [ 113.391431][ T5871] usb 5-1: config 0 descriptor?? [ 113.491125][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.501324][ T5898] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 113.510746][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.521996][ T5898] usb 2-1: config 0 descriptor?? [ 113.534084][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 113.635480][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.732681][ T5898] pwc: send_video_command error -71 [ 113.759172][ T5898] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 113.772729][ T5898] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 113.793950][ T5898] usb 2-1: USB disconnect, device number 11 [ 114.029568][ T5858] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.041366][ T5871] usb 5-1: USB disconnect, device number 6 [ 114.048227][ T5871] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -19 [ 114.063769][ T5871] f81534a_ctrl 5-1:0.0: failed to enable ports: -19 [ 114.224295][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.235305][ T5858] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.244401][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.286227][ T5858] usb 4-1: config 0 descriptor?? [ 114.360826][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 114.549560][ T5898] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 114.554841][ T5858] pwc: send_video_command error -71 [ 114.567980][ T5858] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 114.575974][ T5858] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 114.594158][ T5858] usb 4-1: USB disconnect, device number 6 [ 114.721743][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.732266][ T5898] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.752931][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.765659][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.781701][ T5898] usb 2-1: config 0 descriptor?? [ 114.814057][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.814868][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 115.090689][ T6774] Failed to initialize the IGMP autojoin socket (err -2) [ 115.157020][ T6774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.246'. [ 115.179610][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 115.179625][ T30] audit: type=1400 audit(1743692575.920:414): avc: denied { ioctl } for pid=6775 comm="syz.0.247" path="socket:[10161]" dev="sockfs" ino=10161 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.210545][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 115.212380][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.219388][ T6774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.246'. [ 115.232592][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.239587][ T5858] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.254498][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.263616][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 115.273467][ T5898] pwc: recv_control_msg error -32 req 04 val 1300 [ 115.279735][ T6774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.246'. [ 115.280684][ T5898] pwc: recv_control_msg error -32 req 04 val 1400 [ 115.469851][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.577503][ T5858] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 115.717997][ T5898] pwc: recv_control_msg error -32 req 02 val 2000 [ 115.720195][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.734768][ T5898] pwc: recv_control_msg error -32 req 02 val 2100 [ 115.750940][ T5898] pwc: recv_control_msg error -32 req 04 val 1500 [ 115.754407][ T5858] usb 4-1: config 0 descriptor?? [ 115.771118][ T5898] pwc: recv_control_msg error -32 req 02 val 2500 [ 115.775442][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 115.792373][ T5898] pwc: recv_control_msg error -32 req 02 val 2400 [ 115.806597][ T5898] pwc: recv_control_msg error -32 req 02 val 2600 [ 116.042228][ T30] audit: type=1326 audit(1743692576.790:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a718d169 code=0x7ffc0000 [ 116.069740][ T970] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.099762][ T30] audit: type=1326 audit(1743692576.810:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a718d169 code=0x7ffc0000 [ 116.126419][ T5898] pwc: recv_control_msg error -71 req 02 val 2800 [ 116.132393][ T30] audit: type=1326 audit(1743692576.820:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f19a718d169 code=0x7ffc0000 [ 116.157875][ T30] audit: type=1326 audit(1743692576.820:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a718d169 code=0x7ffc0000 [ 116.183216][ T5858] pwc: recv_control_msg error -32 req 02 val 2b00 [ 116.190352][ T5898] pwc: recv_control_msg error -71 req 04 val 1100 [ 116.190725][ T30] audit: type=1326 audit(1743692576.830:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19a718bad0 code=0x7ffc0000 [ 116.220900][ T5858] pwc: recv_control_msg error -32 req 02 val 2700 [ 116.222012][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.228105][ T5858] pwc: recv_control_msg error -32 req 02 val 2c00 [ 116.241009][ T5858] pwc: recv_control_msg error -32 req 04 val 1000 [ 116.248153][ T5858] pwc: recv_control_msg error -32 req 04 val 1300 [ 116.248860][ T5898] pwc: Registered as video103. [ 116.256139][ T30] audit: type=1326 audit(1743692576.830:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a718d169 code=0x7ffc0000 [ 116.259444][ T5828] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.282972][ T5858] pwc: recv_control_msg error -32 req 04 val 1400 [ 116.296894][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 116.302856][ T5858] pwc: recv_control_msg error -32 req 02 val 2000 [ 116.310661][ T970] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 116.318933][ T5858] pwc: recv_control_msg error -32 req 02 val 2100 [ 116.356770][ T970] usb 3-1: config 0 has no interface number 0 [ 116.363573][ T5858] pwc: recv_control_msg error -32 req 04 val 1500 [ 116.373363][ T5858] pwc: recv_control_msg error -32 req 02 val 2500 [ 116.380977][ T970] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 116.390402][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.392587][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 116.398675][ T5858] pwc: recv_control_msg error -32 req 02 val 2400 [ 116.415807][ T970] usb 3-1: Product: syz [ 116.420082][ T970] usb 3-1: Manufacturer: syz [ 116.425275][ T970] usb 3-1: SerialNumber: syz [ 116.432041][ T30] audit: type=1326 audit(1743692576.870:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f19a718d169 code=0x7ffc0000 [ 116.459649][ T970] usb 3-1: config 0 descriptor?? [ 116.469404][ T5898] usb 2-1: USB disconnect, device number 12 [ 116.470055][ T30] audit: type=1326 audit(1743692576.870:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a718d169 code=0x7ffc0000 [ 116.500782][ T970] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 116.522961][ T30] audit: type=1326 audit(1743692576.870:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6728 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a718d169 code=0x7ffc0000 [ 116.609584][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 116.624860][ T5828] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 116.634394][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 116.642857][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 116.651100][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 116.664413][ T5828] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 116.678113][ T5828] usb 5-1: config 0 has no interface number 0 [ 116.688774][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 116.708967][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 116.714779][ T970] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 116.748605][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.764868][ T5828] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.782650][ T5828] usb 5-1: config 0 interface 125 has no altsetting 0 [ 116.788017][ T970] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 116.795183][ T5828] usb 5-1: config 0 interface 125 has no altsetting 2 [ 116.878490][ T5828] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 116.892322][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.901616][ T5828] usb 5-1: Product: syz [ 116.916081][ T5828] usb 5-1: Manufacturer: syz [ 116.929539][ T5828] usb 5-1: SerialNumber: syz [ 116.943265][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 70 [ 116.961577][ T5828] usb 5-1: config 0 descriptor?? [ 117.006815][ T5828] usb 5-1: selecting invalid altsetting 2 [ 117.153631][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 117.153870][ T9] usb 3-1: USB disconnect, device number 4 [ 117.213590][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 117.462726][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 117.586056][ T9] quatech2 3-1:0.51: device disconnected [ 117.780796][ T5858] pwc: recv_control_msg error -71 req 02 val 2900 [ 117.787588][ T5858] pwc: recv_control_msg error -71 req 02 val 2800 [ 117.797182][ T5858] pwc: recv_control_msg error -71 req 04 val 1100 [ 117.804577][ T5858] pwc: recv_control_msg error -71 req 04 val 1200 [ 117.814880][ C0] usb 5-1: async_complete: urb error -71 [ 117.820559][ C0] usb 5-1: async_complete: urb error -71 [ 117.826209][ C0] usb 5-1: async_complete: urb error -71 [ 117.854971][ T5858] pwc: Registered as video103. [ 117.868553][ T5858] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 117.878020][ T5828] get_1284_register: usb error -71 [ 117.878096][ T5828] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 117.937220][ T5828] usb 5-1: USB disconnect, device number 7 [ 117.938409][ T5858] usb 4-1: USB disconnect, device number 7 [ 118.096360][ T6812] netlink: 'syz.2.257': attribute type 12 has an invalid length. [ 118.344312][ T3004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 118.925847][ T6832] FAULT_INJECTION: forcing a failure. [ 118.925847][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 118.938884][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.0.262 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 118.938898][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.938904][ T6832] Call Trace: [ 118.938907][ T6832] [ 118.938911][ T6832] dump_stack_lvl+0x16c/0x1f0 [ 118.938926][ T6832] should_fail_ex+0x512/0x640 [ 118.938936][ T6832] ? __kmalloc_noprof+0xbf/0x510 [ 118.938948][ T6832] ? __alloc_workqueue+0xd5c/0x1810 [ 118.938964][ T6832] should_failslab+0xc2/0x120 [ 118.938976][ T6832] __kmalloc_noprof+0xd2/0x510 [ 118.938985][ T6832] ? vsnprintf+0x318/0x1160 [ 118.938997][ T6832] __alloc_workqueue+0xd5c/0x1810 [ 118.939012][ T6832] ? __pfx_vsnprintf+0x10/0x10 [ 118.939022][ T6832] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.939034][ T6832] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 118.939045][ T6832] alloc_workqueue+0xd2/0x200 [ 118.939060][ T6832] ? __pfx_alloc_workqueue+0x10/0x10 [ 118.939079][ T6832] ? __pfx___debug_object_init+0x10/0x10 [ 118.939095][ T6832] nci_register_device+0x21e/0xb80 [ 118.939105][ T6832] ? __pfx_nci_register_device+0x10/0x10 [ 118.939116][ T6832] ? lockdep_init_map_type+0x5c/0x280 [ 118.939129][ T6832] virtual_ncidev_open+0x141/0x220 [ 118.939141][ T6832] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 118.939150][ T6832] misc_open+0x35a/0x420 [ 118.939162][ T6832] ? __pfx_misc_open+0x10/0x10 [ 118.939173][ T6832] chrdev_open+0x231/0x6a0 [ 118.939184][ T6832] ? __pfx_chrdev_open+0x10/0x10 [ 118.939195][ T6832] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 118.939214][ T6832] do_dentry_open+0x741/0x1c10 [ 118.939223][ T6832] ? __pfx_chrdev_open+0x10/0x10 [ 118.939236][ T6832] vfs_open+0x82/0x3f0 [ 118.939250][ T6832] path_openat+0x1e5e/0x2d40 [ 118.939264][ T6832] ? __pfx_path_openat+0x10/0x10 [ 118.939277][ T6832] do_filp_open+0x20b/0x470 [ 118.939287][ T6832] ? __pfx_do_filp_open+0x10/0x10 [ 118.939306][ T6832] ? alloc_fd+0x471/0x7d0 [ 118.939319][ T6832] do_sys_openat2+0x11b/0x1d0 [ 118.939331][ T6832] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.939345][ T6832] ? __fget_files+0x20e/0x3c0 [ 118.939356][ T6832] __x64_sys_openat+0x174/0x210 [ 118.939369][ T6832] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.939381][ T6832] ? ksys_write+0x1b9/0x240 [ 118.939390][ T6832] ? rcu_is_watching+0x12/0xc0 [ 118.939406][ T6832] do_syscall_64+0xcd/0x260 [ 118.939418][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.939429][ T6832] RIP: 0033:0x7f49ca38d169 [ 118.939436][ T6832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.939447][ T6832] RSP: 002b:00007f49cb2cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.939464][ T6832] RAX: ffffffffffffffda RBX: 00007f49ca5a5fa0 RCX: 00007f49ca38d169 [ 118.939475][ T6832] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 118.939485][ T6832] RBP: 00007f49cb2cc090 R08: 0000000000000000 R09: 0000000000000000 [ 118.939494][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.939502][ T6832] R13: 0000000000000000 R14: 00007f49ca5a5fa0 R15: 00007ffd9b4c9af8 [ 118.939523][ T6832] [ 120.194408][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 120.194422][ T30] audit: type=1400 audit(1743692580.940:452): avc: denied { map } for pid=6852 comm="syz.2.267" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 120.366083][ T30] audit: type=1326 audit(1743692581.110:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416478d169 code=0x7ffc0000 [ 120.393413][ T30] audit: type=1326 audit(1743692581.110:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416478d169 code=0x7ffc0000 [ 120.425558][ T30] audit: type=1326 audit(1743692581.110:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f416478d169 code=0x7ffc0000 [ 120.453220][ T30] audit: type=1326 audit(1743692581.110:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416478d169 code=0x7ffc0000 [ 120.477484][ T6847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.483772][ T6847] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.496452][ T6847] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.505394][ T6847] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.512061][ T6847] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 120.521608][ T6847] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 120.577935][ T30] audit: type=1326 audit(1743692581.110:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416478d169 code=0x7ffc0000 [ 120.601851][ T30] audit: type=1326 audit(1743692581.140:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f416478d169 code=0x7ffc0000 [ 120.626579][ T30] audit: type=1326 audit(1743692581.140:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416478d169 code=0x7ffc0000 [ 120.649886][ T30] audit: type=1326 audit(1743692581.140:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416478d169 code=0x7ffc0000 [ 121.445505][ T30] audit: type=1400 audit(1743692582.170:461): avc: denied { bind } for pid=6869 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.554836][ T3004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.621545][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.645289][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 122.069805][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.251128][ T970] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 122.286777][ T6885] FAULT_INJECTION: forcing a failure. [ 122.286777][ T6885] name failslab, interval 1, probability 0, space 0, times 0 [ 122.299419][ T6885] CPU: 1 UID: 0 PID: 6885 Comm: syz.1.275 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 122.299433][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.299439][ T6885] Call Trace: [ 122.299442][ T6885] [ 122.299450][ T6885] dump_stack_lvl+0x16c/0x1f0 [ 122.299472][ T6885] should_fail_ex+0x512/0x640 [ 122.299488][ T6885] ? fs_reclaim_acquire+0xae/0x150 [ 122.299512][ T6885] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 122.299535][ T6885] should_failslab+0xc2/0x120 [ 122.299553][ T6885] __kmalloc_noprof+0xd2/0x510 [ 122.299583][ T6885] tomoyo_realpath_from_path+0xc2/0x6e0 [ 122.299608][ T6885] ? tomoyo_profile+0x47/0x60 [ 122.299636][ T6885] tomoyo_path_number_perm+0x245/0x580 [ 122.299654][ T6885] ? tomoyo_path_number_perm+0x237/0x580 [ 122.299676][ T6885] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.299725][ T6885] ? find_held_lock+0x2b/0x80 [ 122.299745][ T6885] ? hook_file_ioctl_common+0x145/0x410 [ 122.299776][ T6885] ? __fget_files+0x20e/0x3c0 [ 122.299797][ T6885] security_file_ioctl+0x9b/0x240 [ 122.299821][ T6885] __x64_sys_ioctl+0xb7/0x200 [ 122.299847][ T6885] do_syscall_64+0xcd/0x260 [ 122.299869][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.299885][ T6885] RIP: 0033:0x7f19a718d169 [ 122.299899][ T6885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.299912][ T6885] RSP: 002b:00007f19a8089038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.299927][ T6885] RAX: ffffffffffffffda RBX: 00007f19a73a5fa0 RCX: 00007f19a718d169 [ 122.299936][ T6885] RDX: 0000200000000100 RSI: 000000004010ae68 RDI: 0000000000000005 [ 122.299945][ T6885] RBP: 00007f19a8089090 R08: 0000000000000000 R09: 0000000000000000 [ 122.299954][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.299962][ T6885] R13: 0000000000000000 R14: 00007f19a73a5fa0 R15: 00007ffc7fdd1878 [ 122.299982][ T6885] [ 122.394186][ T6888] capability: warning: `syz.1.275' uses 32-bit capabilities (legacy support in use) [ 122.395385][ T6885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.518595][ T6886] SELinux: failed to load policy [ 122.539620][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.592488][ T970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.603049][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 122.623171][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.633583][ T970] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 122.646685][ T5911] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.656286][ T970] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 122.665529][ T970] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 122.675676][ T970] usb 1-1: Manufacturer: syz [ 122.691138][ T970] usb 1-1: config 0 descriptor?? [ 122.809554][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 122.816057][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.824601][ T5911] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 122.833834][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.842189][ T5911] usb 3-1: Product: syz [ 122.846358][ T5911] usb 3-1: Manufacturer: syz [ 122.853310][ T5911] usb 3-1: SerialNumber: syz [ 122.876775][ T5911] usb 3-1: config 0 descriptor?? [ 123.341654][ T970] rc_core: IR keymap rc-hauppauge not found [ 123.347699][ T970] Registered IR keymap rc-empty [ 123.353608][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.380317][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.418155][ T970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 123.423783][ T6904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.280'. [ 123.606679][ T970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 123.778681][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.850060][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.880122][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 123.929908][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.031237][ T6913] SELinux: failed to load policy [ 124.032191][ T5911] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 124.051129][ T2213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.059604][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.089840][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.129703][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.169511][ T5858] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 124.272325][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.297489][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.315189][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.502773][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.529833][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.609616][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 124.779949][ T970] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.796202][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.809940][ T5858] usb 5-1: not running at top speed; connect to a high speed hub [ 124.825695][ T970] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 124.916253][ T5858] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 124.930938][ T970] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.947024][ T5858] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 124.975369][ T5858] usb 5-1: config 129 descriptor has 1 excess byte, ignoring [ 124.985318][ T5858] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 125.007768][ T5858] usb 5-1: config 129 has no interface number 0 [ 125.057813][ T6874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.119717][ T9] usb 1-1: USB disconnect, device number 7 [ 125.166496][ T5858] usb 5-1: config 129 has no interface number 1 [ 125.179991][ T5858] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 125.193512][ T5858] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 125.204948][ T5858] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 125.218390][ T5858] usb 5-1: config 129 interface 135 has no altsetting 0 [ 125.225381][ T5858] usb 5-1: config 129 interface 5 has no altsetting 0 [ 125.245302][ T5858] usb 5-1: string descriptor 0 read error: -22 [ 125.259703][ T5858] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 125.263884][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.271893][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.366259][ T5858] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.388516][ T5858] usb 5-1: MIDIStreaming interface descriptor not found [ 125.900153][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.909657][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.921535][ T5828] usb 5-1: USB disconnect, device number 8 [ 126.212102][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.688424][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.032127][ T5911] usb 3-1: USB disconnect, device number 5 [ 127.096041][ T6941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6941 comm=syz.1.288 [ 127.245148][ T2213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.371765][ T6946] SELinux: failed to load policy [ 127.502329][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.079398][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 128.090848][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.101509][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.122402][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 128.133196][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.152488][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.160937][ T9] usb 4-1: Product: syz [ 128.168430][ T9] usb 4-1: Manufacturer: syz [ 128.173126][ T9] usb 4-1: SerialNumber: syz [ 128.208190][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 128.208216][ T30] audit: type=1400 audit(1743692817.958:498): avc: denied { write } for pid=6958 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.284813][ T6961] SELinux: failed to load policy [ 128.362677][ T30] audit: type=1400 audit(1743692818.129:499): avc: denied { connect } for pid=6963 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.566596][ T9] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 128.607369][ T9] usb 4-1: USB disconnect, device number 8 [ 128.814347][ T6056] udevd[6056]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.936294][ T30] audit: type=1326 audit(1743692818.703:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff47b38d169 code=0x0 [ 129.036790][ T6984] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 129.060899][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 129.067774][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 129.145732][ T6985] input: syz1 as /devices/virtual/input/input11 [ 130.149936][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.456669][ T6989] SELinux: failed to load policy [ 130.613968][ T6996] SELinux: policydb magic number 0x2f2e0000 does not match expected magic number 0xf97cff8c [ 130.624936][ T6996] SELinux: failed to load policy [ 236.085252][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 236.092219][ C0] rcu: 1-...!: (1 ticks this GP) idle=2e6c/1/0x4000000000000000 softirq=21005/21005 fqs=0 [ 236.102743][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5824/1:b..l [ 236.110680][ C0] rcu: (detected by 0, t=10502 jiffies, g=12581, q=1266 ncpus=2) [ 236.118474][ C0] Sending NMI from CPU 0 to CPUs 1: [ 236.118496][ C1] NMI backtrace for cpu 1 [ 236.118507][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 236.118523][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.118532][ C1] Workqueue: bat_events batadv_nc_worker [ 236.118548][ C1] RIP: 0010:kasan_check_range+0x14f/0x1a0 [ 236.118567][ C1] Code: 83 c0 01 49 89 d3 48 39 d0 74 11 80 38 00 74 ef 4d 8d 1c 2c 48 89 c2 48 85 c0 75 93 48 89 da 4c 89 d8 4c 29 da e9 2c ff ff ff <5b> b8 01 00 00 00 5d 41 5c c3 cc cc cc cc b8 01 00 00 00 c3 cc cc [ 236.118579][ C1] RSP: 0018:ffffc90000a08d00 EFLAGS: 00000046 [ 236.118588][ C1] RAX: ffffed10063ef411 RBX: ffffed10063ef411 RCX: ffffffff8980fa10 [ 236.118597][ C1] RDX: ffffed10063ef411 RSI: 0000000000000004 RDI: ffff888031f7a080 [ 236.118605][ C1] RBP: ffffed10063ef410 R08: 0000000000000001 R09: ffffed10063ef410 [ 236.118612][ C1] R10: ffff888031f7a083 R11: 0000000000000000 R12: 0000000000000000 [ 236.118620][ C1] R13: ffff888031f7a000 R14: 0000000000000000 R15: dffffc0000000000 [ 236.118628][ C1] FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 236.118641][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.118649][ C1] CR2: 0000001b2fa00ff8 CR3: 00000000330fa000 CR4: 00000000003526f0 [ 236.118657][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.118664][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.118672][ C1] Call Trace: [ 236.118676][ C1] [ 236.118682][ C1] taprio_set_budgets+0x1a0/0x310 [ 236.118703][ C1] advance_sched+0x5f6/0xc80 [ 236.118725][ C1] ? __pfx_advance_sched+0x10/0x10 [ 236.118740][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 236.118758][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 236.118771][ C1] ? read_tsc+0x9/0x20 [ 236.118792][ C1] hrtimer_interrupt+0x397/0x8e0 [ 236.118812][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 236.118828][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 236.118841][ C1] [ 236.118845][ C1] [ 236.118850][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.118863][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 236.118877][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 0c 24 f6 48 89 df e8 fe 5f 24 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 cd 14 f6 65 8b 05 4e 44 32 08 85 c0 74 16 5b [ 236.118888][ C1] RSP: 0018:ffffc90000ad7ae8 EFLAGS: 00000246 [ 236.118897][ C1] RAX: 0000000000000006 RBX: ffffffff8e3ccbc0 RCX: 0000000000000006 [ 236.118905][ C1] RDX: 0000000000000000 RSI: ffffffff8dbeb34f RDI: ffffffff8bf45860 [ 236.118912][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 236.118920][ C1] R10: ffffffff90862617 R11: 0000000000000000 R12: 0000000000000246 [ 236.118927][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: dffffc0000000000 [ 236.118942][ C1] __rcu_read_unlock+0x2b4/0x580 [ 236.118955][ C1] batadv_nc_worker+0x89f/0x1030 [ 236.118968][ C1] ? try_to_wake_up+0x157/0x1680 [ 236.118984][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 236.118998][ C1] ? rcu_is_watching+0x12/0xc0 [ 236.119015][ C1] process_one_work+0x9cc/0x1b70 [ 236.119033][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 236.119050][ C1] ? __pfx_process_one_work+0x10/0x10 [ 236.119067][ C1] ? assign_work+0x1a0/0x250 [ 236.119080][ C1] worker_thread+0x6c8/0xf10 [ 236.119097][ C1] ? __kthread_parkme+0x19e/0x250 [ 236.119115][ C1] ? __pfx_worker_thread+0x10/0x10 [ 236.119128][ C1] kthread+0x3c2/0x780 [ 236.119141][ C1] ? __pfx_kthread+0x10/0x10 [ 236.119151][ C1] ? __pfx_kthread+0x10/0x10 [ 236.119163][ C1] ? __pfx_kthread+0x10/0x10 [ 236.119174][ C1] ? __pfx_kthread+0x10/0x10 [ 236.119185][ C1] ? rcu_is_watching+0x12/0xc0 [ 236.119200][ C1] ? __pfx_kthread+0x10/0x10 [ 236.119212][ C1] ret_from_fork+0x45/0x80 [ 236.119224][ C1] ? __pfx_kthread+0x10/0x10 [ 236.119236][ C1] ret_from_fork_asm+0x1a/0x30 [ 236.119259][ C1] [ 236.119491][ C0] task:syz-executor state:R running task stack:23752 pid:5824 tgid:5824 ppid:5815 task_flags:0x400140 flags:0x00004000 [ 236.523876][ C0] Call Trace: [ 236.527404][ C0] [ 236.530335][ C0] __schedule+0x116f/0x5de0 [ 236.534842][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 236.539785][ C0] ? __pfx___schedule+0x10/0x10 [ 236.544629][ C0] ? page_table_check_set+0x96f/0xb50 [ 236.549999][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 236.555019][ C0] ? find_held_lock+0x2b/0x80 [ 236.559692][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 236.565059][ C0] preempt_schedule_common+0x44/0xc0 [ 236.570337][ C0] preempt_schedule_thunk+0x16/0x30 [ 236.575539][ C0] _raw_spin_unlock+0x3e/0x50 [ 236.580209][ C0] copy_page_range+0x1918/0x5ec0 [ 236.585204][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 236.590497][ C0] ? __pfx___might_resched+0x10/0x10 [ 236.595781][ C0] ? __pfx_mas_store+0x10/0x10 [ 236.600539][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 236.605737][ C0] ? copy_process+0x85dd/0x91a0 [ 236.610586][ C0] ? down_write+0x14d/0x200 [ 236.615085][ C0] ? up_write+0x1b2/0x520 [ 236.619409][ C0] copy_process+0x862b/0x91a0 [ 236.624099][ C0] ? __pfx_copy_process+0x10/0x10 [ 236.629131][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 236.634167][ C0] kernel_clone+0xfc/0x960 [ 236.638585][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 236.643615][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 236.648903][ C0] __do_sys_clone+0xce/0x120 [ 236.653490][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 236.658700][ C0] ? do_user_addr_fault+0x843/0x1370 [ 236.663986][ C0] do_syscall_64+0xcd/0x260 [ 236.668489][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.674377][ C0] RIP: 0033:0x7f41647839d3 [ 236.678784][ C0] RSP: 002b:00007ffc00b26d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 236.687186][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41647839d3 [ 236.695147][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 236.703106][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 236.711069][ C0] R10: 000055557ba3a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 236.719031][ C0] R13: 00000000000927c0 R14: 000000000001fc84 R15: 00007ffc00b26ed0 [ 236.727526][ C0] [ 236.730537][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g12581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 236.742848][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=7463 [ 236.750636][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g12581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 236.761988][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 236.771943][ C0] rcu: RCU grace-period kthread stack dump: [ 236.777814][ C0] task:rcu_preempt state:I stack:27688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 236.789723][ C0] Call Trace: [ 236.792990][ C0] [ 236.795913][ C0] __schedule+0x116f/0x5de0 [ 236.800419][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 236.805353][ C0] ? __pfx___schedule+0x10/0x10 [ 236.810204][ C0] ? find_held_lock+0x2b/0x80 [ 236.814875][ C0] ? schedule+0x2d7/0x3a0 [ 236.819200][ C0] schedule+0xe7/0x3a0 [ 236.823260][ C0] schedule_timeout+0x123/0x290 [ 236.828110][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 236.833483][ C0] ? __pfx_process_timeout+0x10/0x10 [ 236.838768][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 236.844566][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 236.850020][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 236.854780][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 236.860056][ C0] ? rcu_gp_init+0xc76/0x15a0 [ 236.864726][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 236.869574][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 236.875379][ C0] rcu_gp_kthread+0x270/0x380 [ 236.880047][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 236.885233][ C0] ? rcu_is_watching+0x12/0xc0 [ 236.890007][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.895208][ C0] ? __kthread_parkme+0x19e/0x250 [ 236.900238][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 236.905433][ C0] kthread+0x3c2/0x780 [ 236.909511][ C0] ? __pfx_kthread+0x10/0x10 [ 236.914099][ C0] ? __pfx_kthread+0x10/0x10 [ 236.918683][ C0] ? __pfx_kthread+0x10/0x10 [ 236.923280][ C0] ? __pfx_kthread+0x10/0x10 [ 236.927882][ C0] ? rcu_is_watching+0x12/0xc0 [ 236.932655][ C0] ? __pfx_kthread+0x10/0x10 [ 236.937245][ C0] ret_from_fork+0x45/0x80 [ 236.941657][ C0] ? __pfx_kthread+0x10/0x10 [ 236.946252][ C0] ret_from_fork_asm+0x1a/0x30 [ 236.951027][ C0]