last executing test programs: 4m16.692527917s ago: executing program 3 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x840) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x10000000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) 4m16.416985387s ago: executing program 3 (id=454): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f00000016c0)='./file0\x00', 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f000062d000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r4}, 0x68) r6 = syz_open_dev$mouse(0x0, 0x0, 0x2042) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) 4m11.021236922s ago: executing program 3 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x4c}}, 0x0) 4m10.261974877s ago: executing program 3 (id=463): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000200)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2a, 0x1, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x40030000000000}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x4, 0x80000000, 0x200}}, {0x10, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @time}], 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x20060400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4m3.734502662s ago: executing program 3 (id=481): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8042, 0xa5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000+00010000,user_id=', @ANYRESDEC=0x0]) 4m0.286354575s ago: executing program 3 (id=489): socket$packet(0x11, 0x2, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x1e00) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r7, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000140)={0x1d, r9}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x23, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000000080)={@remote, @multicast1, 0x0, "2634784b05261d78b0920120000000000000000000002000", 0x0, 0x0, 0x6, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000000280)={@loopback, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x8000000, 0x0, 0x0, 0x21}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000200)={@dev, @multicast1, 0x0, "05888ee9654ce5db9229e6a1f0a3c9505e2ebbbc3d341ad6ad352965b867e20b"}, 0x3c) 3m59.539897385s ago: executing program 32 (id=489): socket$packet(0x11, 0x2, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x1e00) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r7, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000140)={0x1d, r9}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x23, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000000080)={@remote, @multicast1, 0x0, "2634784b05261d78b0920120000000000000000000002000", 0x0, 0x0, 0x6, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000000280)={@loopback, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x8000000, 0x0, 0x0, 0x21}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000200)={@dev, @multicast1, 0x0, "05888ee9654ce5db9229e6a1f0a3c9505e2ebbbc3d341ad6ad352965b867e20b"}, 0x3c) 2m48.76660132s ago: executing program 2 (id=641): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x1}, 0x8) 2m40.568612814s ago: executing program 2 (id=660): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8, 0x6, 0x34325842, 0x4, 0x6bb, 0xffffffff, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5}}) 2m38.862094204s ago: executing program 2 (id=662): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="43d56e", 0x3}, {&(0x7f0000001dc0)="f2f789e3ae", 0x5}], 0x2, 0x0, 0x0, 0x24040000}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001fc0)="9b1efe", 0x3}], 0x1, 0x0, 0x0, 0x40000}}], 0x2, 0x20004801) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 2m38.462641376s ago: executing program 2 (id=663): syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, 0x0) 2m38.285600602s ago: executing program 2 (id=664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b5b004d09000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x4619, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="2ee38ec2987fab1789689dacc5ab9064480adfbccb517545b78771d6b367e846d97a92a72d651b21de1db6747e8549658b0d5ade3c1c84155853320406023b150620b8527191e71ee1ef5538251c0d176a6d6e49", 0x54, 0x48084, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @mcast1, 0x2}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x3ff, 0x4) (fail_nth: 1) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x101) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r6, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) 2m35.464279954s ago: executing program 2 (id=669): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000800)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@newtaction={0x6c, 0x30, 0xb, 0x2, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe4ff}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x4, 0x0, 0x5, 0x1000}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) (async) syz_open_pts(r3, 0x0) (async) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x0) (rerun: 64) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000080)='./file0\x00', 0x104) (async, rerun: 32) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x100000000000, 0x4000000, 0x0, 0x0, 0x4000, 0x7, 0xffffffffffffffff, r7, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x21, 0xffffffff, 0x58339298, 0x1002, 0x6, 0x3, 0x0, 0x0, 0x0, 0x40, 0x11}}, 0x50) (async, rerun: 64) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="403201"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r4, 0x0, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f00000002c0)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x1f, 0x3, 0x0, 0x0, "deb38c61fad0a238dafb2506d37ffe93d329df151abf96603b015a00008d9360d28cb80e41c92dd36ae19f028f60afcce8b127779aad59bf0052fc76b400"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 2m20.11641919s ago: executing program 33 (id=669): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000800)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@newtaction={0x6c, 0x30, 0xb, 0x2, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe4ff}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x4, 0x0, 0x5, 0x1000}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) (async) syz_open_pts(r3, 0x0) (async) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x0) (rerun: 64) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000080)='./file0\x00', 0x104) (async, rerun: 32) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x100000000000, 0x4000000, 0x0, 0x0, 0x4000, 0x7, 0xffffffffffffffff, r7, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x21, 0xffffffff, 0x58339298, 0x1002, 0x6, 0x3, 0x0, 0x0, 0x0, 0x40, 0x11}}, 0x50) (async, rerun: 64) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="403201"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r4, 0x0, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f00000002c0)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x1f, 0x3, 0x0, 0x0, "deb38c61fad0a238dafb2506d37ffe93d329df151abf96603b015a00008d9360d28cb80e41c92dd36ae19f028f60afcce8b127779aad59bf0052fc76b400"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 12.861456914s ago: executing program 5 (id=1123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)={0x34, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12.538068665s ago: executing program 5 (id=1127): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000080)={0xa, 0x4e23, 0x2, @private2, 0xa24a}, 0x1c, 0x0, 0x0, &(0x7f0000000440)}, 0x4000040) 11.65034568s ago: executing program 5 (id=1130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r1) 10.346049113s ago: executing program 5 (id=1139): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0xfff, 0x2, 0x4}) 10.170370183s ago: executing program 5 (id=1142): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 9.950610241s ago: executing program 5 (id=1145): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.454136224s ago: executing program 6 (id=1202): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a80)="9955", 0x2}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc) 4.164993985s ago: executing program 1 (id=1204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x8863}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0x8, {[@timestamp={0x8, 0xffffffffffffff7b, 0x80e, 0xbb}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e67140c89ceaaad28c"}}}}, 0xfce) 4.101231306s ago: executing program 6 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x101800, 0x0) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001cc0)={r4, 0x20, &(0x7f0000001c80)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/16, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hfs\x00', 0x1004002, &(0x7f00000002c0)='\x00') 2.944570052s ago: executing program 1 (id=1212): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='f2fs_get_victim\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 2.846017925s ago: executing program 6 (id=1214): r0 = syz_io_uring_setup(0x1cda, &(0x7f0000000080)={0x0, 0x7ded, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_complete\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 2.621100817s ago: executing program 1 (id=1216): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000640)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc) 2.25067154s ago: executing program 4 (id=1219): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48c0) 2.241007818s ago: executing program 1 (id=1220): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 1.986466415s ago: executing program 4 (id=1222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1.958250264s ago: executing program 1 (id=1223): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.945364854s ago: executing program 0 (id=1224): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) io_setup(0x10000, &(0x7f00000014c0)) 1.700524683s ago: executing program 6 (id=1225): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) brk(0x400000001000) 1.61469668s ago: executing program 1 (id=1226): creat(&(0x7f0000000800)='./file0\x00', 0x10) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)=@v1={0x1000000, [{0xfffffff9, 0x4}]}, 0xc, 0x0) r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.490643899s ago: executing program 4 (id=1227): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 1.410122421s ago: executing program 6 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.256969441s ago: executing program 0 (id=1229): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 1.113697957s ago: executing program 4 (id=1230): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000640)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc) 960.989996ms ago: executing program 6 (id=1231): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r0 = socket(0x28, 0x1, 0x0) connect$packet(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a40002"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='netlink_extack\x00', r11, 0x0, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a0000000000"], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24000840}, 0x4890) 878.437212ms ago: executing program 0 (id=1232): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000003000)=[@in6={0xa, 0x4e22, 0x2, @mcast1, 0x6}], 0x1d) 778.453817ms ago: executing program 4 (id=1233): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ip6gre0\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0x3) 630.662007ms ago: executing program 0 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 354.599713ms ago: executing program 4 (id=1235): r0 = syz_io_uring_setup(0x1cda, &(0x7f0000000080)={0x0, 0x7ded, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_complete\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 214.459179ms ago: executing program 0 (id=1236): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 0s ago: executing program 0 (id=1237): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) setreuid(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) kernel console output (not intermixed with test programs): 9.316940][ T6023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.316958][ T6023] usb 1-1: Product: syz [ 329.316971][ T6023] usb 1-1: Manufacturer: syz [ 329.316983][ T6023] usb 1-1: SerialNumber: syz [ 329.518407][ T1232] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 329.628204][ T6023] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 329.628230][ T6023] usb 1-1: no configuration chosen from 1 choice [ 329.688430][ T1232] usb 2-1: Using ep0 maxpacket: 32 [ 329.690582][ T1232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.690603][ T1232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.690627][ T1232] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 329.690641][ T1232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.728511][ T1232] usb 2-1: config 0 descriptor?? [ 330.680451][ T1232] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 330.720399][ T1232] usb 2-1: USB disconnect, device number 7 [ 332.130797][ T5910] usb 1-1: USB disconnect, device number 8 [ 332.149031][ T7895] fido_id[7895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 332.932748][ T7702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.961371][ T7702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.290852][ T7954] CUSE: info not properly terminated [ 339.292293][ T7954] netlink: 'syz.2.556': attribute type 21 has an invalid length. [ 339.527080][ T7702] team0: Port device team_slave_0 added [ 339.561928][ T7702] team0: Port device team_slave_1 added [ 339.788626][ T57] hsr_slave_0: left promiscuous mode [ 339.903372][ T57] hsr_slave_1: left promiscuous mode [ 339.904596][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.904697][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.953103][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.953138][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.205610][ T7943] input: syz1 as /devices/virtual/input/input12 [ 340.368882][ T57] veth1_macvtap: left promiscuous mode [ 340.369164][ T57] veth0_macvtap: left promiscuous mode [ 340.369481][ T57] veth1_vlan: left promiscuous mode [ 340.369834][ T57] veth0_vlan: left promiscuous mode [ 340.891993][ T38] audit: type=1326 audit(1756827298.293:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.892246][ T38] audit: type=1326 audit(1756827298.293:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.892391][ T38] audit: type=1326 audit(1756827298.293:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.892765][ T38] audit: type=1326 audit(1756827298.293:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.893384][ T38] audit: type=1326 audit(1756827298.293:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.893618][ T38] audit: type=1326 audit(1756827298.293:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.893884][ T38] audit: type=1326 audit(1756827298.293:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.895058][ T38] audit: type=1326 audit(1756827298.293:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.895255][ T38] audit: type=1326 audit(1756827298.293:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 340.897139][ T38] audit: type=1326 audit(1756827298.293:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.0.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 341.811308][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.169203][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.307013][ T7996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.566'. [ 343.010418][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.176090][ T7999] 9pnet_fd: Insufficient options for proto=fd [ 343.898855][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.110740][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.372844][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 346.666328][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 346.666345][ T38] audit: type=1326 audit(1756827304.063:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666390][ T38] audit: type=1326 audit(1756827304.063:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666431][ T38] audit: type=1326 audit(1756827304.063:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666471][ T38] audit: type=1326 audit(1756827304.063:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666511][ T38] audit: type=1326 audit(1756827304.063:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666550][ T38] audit: type=1326 audit(1756827304.063:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666589][ T38] audit: type=1326 audit(1756827304.063:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666628][ T38] audit: type=1326 audit(1756827304.063:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666668][ T38] audit: type=1326 audit(1756827304.063:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 346.666707][ T38] audit: type=1326 audit(1756827304.063:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 347.481126][ T8036] 9pnet_fd: Insufficient options for proto=fd [ 350.799225][ T57] team0 (unregistering): Port device team_slave_1 removed [ 350.999314][ T57] team0 (unregistering): Port device team_slave_0 removed [ 352.211221][ T8048] netlink: 'syz.2.581': attribute type 2 has an invalid length. [ 352.211238][ T8048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.581'. [ 352.963501][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 352.963519][ T38] audit: type=1326 audit(1756827310.363:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 352.963928][ T38] audit: type=1326 audit(1756827310.363:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 352.964167][ T38] audit: type=1326 audit(1756827310.363:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 352.964506][ T38] audit: type=1326 audit(1756827310.363:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 352.964748][ T38] audit: type=1326 audit(1756827310.363:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 352.965616][ T38] audit: type=1326 audit(1756827310.363:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 352.967293][ T38] audit: type=1326 audit(1756827310.363:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 352.968215][ T38] audit: type=1326 audit(1756827310.363:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 353.027098][ T38] audit: type=1326 audit(1756827310.423:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 353.027897][ T38] audit: type=1326 audit(1756827310.423:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2669beebe9 code=0x7ffc0000 [ 353.937506][ T8077] 9pnet_fd: Insufficient options for proto=fd [ 353.960441][ T8012] bond_slave_0: entered promiscuous mode [ 353.960495][ T8012] bond_slave_1: entered promiscuous mode [ 353.960832][ T8012] macvlan2: entered promiscuous mode [ 353.960847][ T8012] bond0: entered promiscuous mode [ 353.965139][ T8012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.384167][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.384184][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.384211][ T7702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.469378][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.469396][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.469425][ T7702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.738491][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 357.022420][ T7702] hsr_slave_0: entered promiscuous mode [ 357.024002][ T7702] hsr_slave_1: entered promiscuous mode [ 357.024983][ T7702] debugfs: 'hsr0' already exists in 'hsr' [ 357.025007][ T7702] Cannot create hsr debugfs directory [ 357.038464][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 357.043276][ T45] usb 5-1: config index 0 descriptor too short (expected 30482, got 18) [ 357.043313][ T45] usb 5-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 357.043333][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 357.045708][ T45] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 357.045735][ T45] usb 5-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 357.045756][ T45] usb 5-1: Product: syz [ 357.045770][ T45] usb 5-1: Manufacturer: syz [ 357.051262][ T45] usb 5-1: config 0 descriptor?? [ 357.061298][ T45] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 357.064114][ T45] usb 5-1: Detected FT2232C/D [ 357.268747][ T8113] FAULT_INJECTION: forcing a failure. [ 357.268747][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 357.268804][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.268824][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.268835][ T8113] Call Trace: [ 357.268843][ T8113] [ 357.268852][ T8113] dump_stack_lvl+0x189/0x250 [ 357.268886][ T8113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.268914][ T8113] ? __pfx__printk+0x10/0x10 [ 357.268947][ T8113] should_fail_ex+0x46c/0x600 [ 357.268975][ T8113] ? security_inode_alloc+0x39/0x330 [ 357.269004][ T8113] should_failslab+0xa8/0x100 [ 357.269031][ T8113] ? security_inode_alloc+0x39/0x330 [ 357.269057][ T8113] kmem_cache_alloc_noprof+0x6e/0x310 [ 357.269088][ T8113] security_inode_alloc+0x39/0x330 [ 357.269117][ T8113] inode_init_always_gfp+0x9bf/0xd70 [ 357.269149][ T8113] ? __pfx_sock_alloc_inode+0x10/0x10 [ 357.269188][ T8113] alloc_inode+0x82/0x1b0 [ 357.269215][ T8113] do_accept+0x117/0x680 [ 357.269240][ T8113] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 357.269267][ T8113] ? __pfx_do_accept+0x10/0x10 [ 357.269325][ T8113] __sys_accept4+0x11c/0x1c0 [ 357.269350][ T8113] ? __pfx___sys_accept4+0x10/0x10 [ 357.269409][ T8113] __x64_sys_accept4+0x9a/0xb0 [ 357.269436][ T8113] do_syscall_64+0xfa/0x3b0 [ 357.269465][ T8113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.269484][ T8113] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 357.269503][ T8113] ? clear_bhb_loop+0x60/0xb0 [ 357.269527][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.269547][ T8113] RIP: 0033:0x7f2669beebe9 [ 357.269564][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.269580][ T8113] RSP: 002b:00007f2667e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 357.269601][ T8113] RAX: ffffffffffffffda RBX: 00007f2669e26180 RCX: 00007f2669beebe9 [ 357.269615][ T8113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 357.269627][ T8113] RBP: 00007f2667e14090 R08: 0000000000000000 R09: 0000000000000000 [ 357.269639][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.269650][ T8113] R13: 00007f2669e26218 R14: 00007f2669e26180 R15: 00007ffebfb8be38 [ 357.269680][ T8113] [ 357.949826][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 357.955970][ T45] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 358.021151][ T45] usb 5-1: USB disconnect, device number 8 [ 358.083565][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 358.104937][ T45] ftdi_sio 5-1:0.0: device disconnected [ 358.768518][ T9] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 358.900669][ T9] usb 3-1: device descriptor read/64, error -71 [ 359.158460][ T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 359.308399][ T9] usb 3-1: device descriptor read/64, error -71 [ 359.418980][ T9] usb usb3-port1: attempt power cycle [ 359.760904][ T9] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 359.986327][ T9] usb 3-1: device descriptor read/8, error -71 [ 361.677027][ T9] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 362.320319][ T9] usb 3-1: device descriptor read/8, error -71 [ 362.430477][ T9] usb usb3-port1: unable to enumerate USB device [ 362.788962][ T7702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.897810][ T7702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.997460][ T7702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.112536][ T7702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.605357][ T7702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.441894][ T7702] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.580730][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.587170][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.613889][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.614201][ T6597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.105987][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.114984][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.117363][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.119834][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.120635][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.737484][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 371.695825][ T5839] Bluetooth: hci5: command tx timeout [ 373.787284][ T5839] Bluetooth: hci5: command tx timeout [ 374.088414][ T5680] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 374.238795][ T5680] usb 3-1: Using ep0 maxpacket: 16 [ 374.244236][ T5680] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.244261][ T5680] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.277712][ T5680] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.277741][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.277760][ T5680] usb 3-1: Product: syz [ 374.277775][ T5680] usb 3-1: Manufacturer: syz [ 374.277789][ T5680] usb 3-1: SerialNumber: syz [ 375.482717][ T8284] sch_fq: defrate 4 ignored. [ 375.555814][ T5680] usb 3-1: 0:2 : does not exist [ 375.555916][ T5680] usb 3-1: usbmixer: too many channels (33) in unit 5 [ 375.616323][ T5680] usb 3-1: USB disconnect, device number 15 [ 375.716604][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 375.716623][ T38] audit: type=1804 audit(1756827333.093:177): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.637" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=18179 res=1 errno=0 [ 375.842147][ T8291] udevd[8291]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.864203][ T5839] Bluetooth: hci5: command tx timeout [ 376.587108][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.587268][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.587469][ T8237] bridge_slave_0: entered allmulticast mode [ 376.593866][ T8237] bridge_slave_0: entered promiscuous mode [ 376.617247][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.628911][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.629154][ T8237] bridge_slave_1: entered allmulticast mode [ 376.661256][ T8237] bridge_slave_1: entered promiscuous mode [ 377.938397][ T5839] Bluetooth: hci5: command tx timeout [ 378.717616][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.214902][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.227700][ T8316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.227724][ T8316] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 379.313562][ T8338] input: syz0 as /devices/virtual/input/input13 [ 379.350142][ T8316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.350166][ T8316] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 379.607280][ T8336] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 379.651151][ T8316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.651177][ T8316] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 379.947689][ T8316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 379.947705][ T8316] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 381.390026][ T8352] netlink: 156 bytes leftover after parsing attributes in process `syz.0.650'. [ 381.399447][ T8352] netlink: 14220 bytes leftover after parsing attributes in process `syz.0.650'. [ 383.419520][ T8237] team0: Port device team_slave_0 added [ 383.650075][ T8316] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 383.650103][ T8316] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 383.674523][ T8237] team0: Port device team_slave_1 added [ 383.948306][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.991884][ T8409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.489346][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.489363][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.489390][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.644852][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.644868][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.644892][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.112011][ T8420] FAULT_INJECTION: forcing a failure. [ 388.112011][ T8420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.112054][ T8420] CPU: 0 UID: 0 PID: 8420 Comm: syz.2.664 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 388.112079][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.112110][ T8420] Call Trace: [ 388.112116][ T8420] [ 388.112123][ T8420] dump_stack_lvl+0x189/0x250 [ 388.112151][ T8420] ? __pfx____ratelimit+0x10/0x10 [ 388.112172][ T8420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.112194][ T8420] ? __pfx__printk+0x10/0x10 [ 388.112210][ T8420] ? __might_fault+0xb0/0x130 [ 388.112240][ T8420] should_fail_ex+0x46c/0x600 [ 388.112264][ T8420] _copy_from_user+0x2d/0xb0 [ 388.112281][ T8420] mptcp_setsockopt+0x17b6/0x35b0 [ 388.112296][ T8420] ? __lock_acquire+0xab9/0xd20 [ 388.112322][ T8420] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 388.112344][ T8420] ? __fget_files+0x2a/0x420 [ 388.112368][ T8420] ? sock_common_setsockopt+0x36/0xc0 [ 388.112385][ T8420] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 388.112404][ T8420] do_sock_setsockopt+0x17c/0x1b0 [ 388.112429][ T8420] __x64_sys_setsockopt+0x145/0x1b0 [ 388.112454][ T8420] do_syscall_64+0xfa/0x3b0 [ 388.112474][ T8420] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.112493][ T8420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.112508][ T8420] ? clear_bhb_loop+0x60/0xb0 [ 388.112526][ T8420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.112548][ T8420] RIP: 0033:0x7f2669beebe9 [ 388.112562][ T8420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.112575][ T8420] RSP: 002b:00007f2667e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 388.112590][ T8420] RAX: ffffffffffffffda RBX: 00007f2669e25fa0 RCX: 00007f2669beebe9 [ 388.112602][ T8420] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000007 [ 388.112610][ T8420] RBP: 00007f2667e56090 R08: 0000000000000004 R09: 0000000000000000 [ 388.112620][ T8420] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 388.112629][ T8420] R13: 00007f2669e26038 R14: 00007f2669e25fa0 R15: 00007ffebfb8be38 [ 388.112652][ T8420] [ 388.280522][ T8428] trusted_key: encrypted_key: insufficient parameters specified [ 388.651628][ T8237] hsr_slave_0: entered promiscuous mode [ 388.665300][ T8237] hsr_slave_1: entered promiscuous mode [ 388.666177][ T8237] debugfs: 'hsr0' already exists in 'hsr' [ 388.666200][ T8237] Cannot create hsr debugfs directory [ 388.690363][ T13] bridge_slave_1: left allmulticast mode [ 388.691195][ T13] bridge_slave_1: left promiscuous mode [ 388.691444][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.912421][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 389.131131][ T45] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 389.131158][ T45] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 389.131176][ T45] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 389.131194][ T45] usb 2-1: config 220 has no interface number 2 [ 389.131262][ T45] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 389.131287][ T45] usb 2-1: config 220 interface 0 has no altsetting 0 [ 389.131303][ T45] usb 2-1: config 220 interface 76 has no altsetting 0 [ 389.131320][ T45] usb 2-1: config 220 interface 1 has no altsetting 0 [ 389.134202][ T45] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 389.134228][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.134247][ T45] usb 2-1: Product: syz [ 389.134260][ T45] usb 2-1: Manufacturer: syz [ 389.134273][ T45] usb 2-1: SerialNumber: syz [ 390.049913][ T13] bridge_slave_0: left allmulticast mode [ 390.049946][ T13] bridge_slave_0: left promiscuous mode [ 390.050189][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.089904][ T45] usb 2-1: can't set config #220, error -71 [ 390.095433][ T45] usb 2-1: USB disconnect, device number 8 [ 392.404693][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.439092][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.175278][ T13] bond0 (unregistering): Released all slaves [ 395.934618][ T8491] bridge_slave_0: left allmulticast mode [ 395.935705][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.994646][ T8494] syz.4.677 uses old SIOCAX25GETINFO [ 396.063899][ T8492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.677'. [ 396.218505][ T13] hsr_slave_0: left promiscuous mode [ 396.254644][ T13] hsr_slave_1: left promiscuous mode [ 396.266401][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.288444][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 396.329314][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.442717][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.442754][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 396.442785][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 396.442824][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 396.442870][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.442895][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.451643][ T10] usb 5-1: config 0 descriptor?? [ 396.504162][ T8494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.319289][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 397.319420][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 397.388527][ T10] usb 5-1: USB disconnect, device number 9 [ 397.858460][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 398.018471][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 398.020886][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.022436][ T10] usb 5-1: config 0 has an invalid interface number: 149 but max is 0 [ 398.022462][ T10] usb 5-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 398.022482][ T10] usb 5-1: config 0 has no interface number 0 [ 398.022531][ T10] usb 5-1: config 0 interface 149 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 398.022560][ T10] usb 5-1: config 0 interface 149 has no altsetting 0 [ 398.025646][ T10] usb 5-1: New USB device found, idVendor=04ca, idProduct=4605, bcdDevice=5b.55 [ 398.025672][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.025691][ T10] usb 5-1: Product: syz [ 398.025706][ T10] usb 5-1: Manufacturer: syz [ 398.025719][ T10] usb 5-1: SerialNumber: syz [ 398.043379][ T10] usb 5-1: config 0 descriptor?? [ 398.629606][ T10] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 399.588588][ T10] usb 5-1: USB disconnect, device number 10 [ 400.121225][ T13] team0 (unregistering): Port device team_slave_1 removed [ 401.578428][ T13] team0 (unregistering): Port device team_slave_0 removed [ 405.712352][ T8537] veth1_to_bond: entered allmulticast mode [ 405.712791][ T8539] veth1_to_bond: entered promiscuous mode [ 406.068470][ T8539] veth1_to_bond: left promiscuous mode [ 406.070209][ T8539] veth1_to_bond: left allmulticast mode [ 408.947739][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.972329][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.973653][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.975326][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.010267][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.296450][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.296878][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.297269][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.320300][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.321135][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.531168][ T38] audit: type=1804 audit(1756827366.933:178): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=18774 res=1 errno=0 [ 409.648937][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 409.798478][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 409.801213][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.801239][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.804439][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.804466][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.804485][ T10] usb 5-1: Product: syz [ 409.804499][ T10] usb 5-1: Manufacturer: syz [ 409.804513][ T10] usb 5-1: SerialNumber: syz [ 409.818378][ T5925] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 409.999229][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 410.007178][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.007209][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.007303][ T5925] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 410.007326][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.156836][ T5925] usb 1-1: config 0 descriptor?? [ 410.184998][ T10] usb 5-1: 0:2 : does not exist [ 410.484488][ T10] usb 5-1: USB disconnect, device number 11 [ 410.682791][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.733460][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.821183][ T5925] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 410.996919][ T8291] udevd[8291]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.122161][ T10] usb 1-1: USB disconnect, device number 9 [ 411.378467][ T5840] Bluetooth: hci0: command tx timeout [ 412.600634][ T5910] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 412.762647][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.762713][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 412.762742][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 412.762770][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 412.762794][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 412.766953][ T5910] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 412.766993][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 412.767012][ T5910] usb 2-1: Product: syz [ 412.767038][ T5910] usb 2-1: Manufacturer: syz [ 412.767051][ T5910] usb 2-1: SerialNumber: syz [ 413.016783][ T5910] usb 2-1: config 0 descriptor?? [ 413.227287][ T5910] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 413.227332][ T5910] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 413.285978][ T38] audit: type=1804 audit(1756827370.683:179): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.708" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=20239 res=1 errno=0 [ 413.434464][ T5910] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 413.434490][ T5910] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 413.434509][ T5910] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 413.459721][ T5840] Bluetooth: hci0: command tx timeout [ 413.635424][ T5910] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 414.174661][ T6597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.289019][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 414.669735][ T8643] loop7: detected capacity change from 0 to 7 [ 414.703750][ T8643] Dev loop7: unable to read RDB block 7 [ 414.703861][ T8643] loop7: unable to read partition table [ 414.707397][ T8643] loop7: partition table beyond EOD, truncated [ 414.713994][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 414.723880][ T8643] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 414.724998][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.725019][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.793115][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.793148][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.793229][ T31] usb 1-1: Product: syz [ 414.793245][ T31] usb 1-1: Manufacturer: syz [ 414.793260][ T31] usb 1-1: SerialNumber: syz [ 415.109300][ T31] usb 1-1: 0:2 : does not exist [ 415.242219][ T31] usb 1-1: USB disconnect, device number 10 [ 415.413778][ T8301] udevd[8301]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.440963][ T10] usb 2-1: USB disconnect, device number 9 [ 415.526549][ T6597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.538529][ T5840] Bluetooth: hci0: command tx timeout [ 416.100595][ T8652] FAULT_INJECTION: forcing a failure. [ 416.100595][ T8652] name failslab, interval 1, probability 0, space 0, times 0 [ 416.100655][ T8652] CPU: 0 UID: 0 PID: 8652 Comm: syz.0.712 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 416.100679][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.100691][ T8652] Call Trace: [ 416.100699][ T8652] [ 416.100708][ T8652] dump_stack_lvl+0x189/0x250 [ 416.100743][ T8652] ? __pfx____ratelimit+0x10/0x10 [ 416.100771][ T8652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.100800][ T8652] ? __pfx__printk+0x10/0x10 [ 416.100828][ T8652] ? __pfx___might_resched+0x10/0x10 [ 416.100850][ T8652] ? fs_reclaim_acquire+0x7d/0x100 [ 416.100874][ T8652] should_fail_ex+0x46c/0x600 [ 416.100906][ T8652] should_failslab+0xa8/0x100 [ 416.100935][ T8652] __kmalloc_cache_noprof+0x6e/0x320 [ 416.100962][ T8652] ? wakeup_source_register+0x5b/0x390 [ 416.100995][ T8652] wakeup_source_register+0x5b/0x390 [ 416.101028][ T8652] ep_insert+0xec2/0x1740 [ 416.101072][ T8652] ? __pfx_ep_insert+0x10/0x10 [ 416.101098][ T8652] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 416.101126][ T8652] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 416.101154][ T8652] ? cap_capable+0x11f/0x460 [ 416.101191][ T8652] ? mutex_lock_nested+0x154/0x1d0 [ 416.101210][ T8652] ? do_epoll_ctl+0x3d2/0xe90 [ 416.101250][ T8652] do_epoll_ctl+0x7fd/0xe90 [ 416.101284][ T8652] __x64_sys_epoll_ctl+0x163/0x1a0 [ 416.101313][ T8652] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 416.101344][ T8652] ? do_syscall_64+0xbe/0x3b0 [ 416.101374][ T8652] do_syscall_64+0xfa/0x3b0 [ 416.101401][ T8652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.101420][ T8652] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 416.101438][ T8652] ? clear_bhb_loop+0x60/0xb0 [ 416.101461][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.101479][ T8652] RIP: 0033:0x7f437cf3ebe9 [ 416.101495][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.101511][ T8652] RSP: 002b:00007f437b164038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 416.101530][ T8652] RAX: ffffffffffffffda RBX: 00007f437d176180 RCX: 00007f437cf3ebe9 [ 416.101544][ T8652] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 416.101554][ T8652] RBP: 00007f437b164090 R08: 0000000000000000 R09: 0000000000000000 [ 416.101566][ T8652] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 416.101577][ T8652] R13: 00007f437d176218 R14: 00007f437d176180 R15: 00007fff6cad4748 [ 416.101607][ T8652] [ 417.259610][ T6597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.198509][ T5840] Bluetooth: hci0: command tx timeout [ 419.269176][ T6597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.518923][ T38] audit: type=1804 audit(1756827376.913:180): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.718" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=20318 res=1 errno=0 [ 419.754127][ T8576] chnl_net:caif_netlink_parms(): no params data found [ 420.048402][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 420.198413][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 420.204067][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 420.204098][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 420.204117][ T10] usb 2-1: Product: syz [ 420.204129][ T10] usb 2-1: Manufacturer: syz [ 420.204142][ T10] usb 2-1: SerialNumber: syz [ 420.249868][ T10] usb 2-1: config 0 descriptor?? [ 421.426485][ T8237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 421.871055][ T8237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.921489][ T8693] comedi: valid board names for 8255 driver are: [ 421.921505][ T8693] 8255 [ 421.921512][ T8693] comedi: valid board names for vmk80xx driver are: [ 421.921522][ T8693] vmk80xx [ 421.921529][ T8693] comedi: valid board names for usbduxsigma driver are: [ 421.921538][ T8693] usbduxsigma [ 421.921545][ T8693] comedi: valid board names for usbduxfast driver are: [ 421.921554][ T8693] usbduxfast [ 421.921560][ T8693] comedi: valid board names for usbdux driver are: [ 421.921569][ T8693] usbdux [ 421.921575][ T8693] comedi: valid board names for ni6501 driver are: [ 421.921582][ T8693] ni6501 [ 421.921588][ T8693] comedi: valid board names for dt9812 driver are: [ 421.921596][ T8693] dt9812 [ 421.921603][ T8693] comedi: valid board names for ni_labpc_cs driver are: [ 421.921610][ T8693] ni_labpc_cs [ 421.921616][ T8693] comedi: valid board names for ni_daq_700 driver are: [ 421.921624][ T8693] ni_daq_700 [ 421.921629][ T8693] comedi: valid board names for labpc_pci driver are: [ 421.921637][ T8693] labpc_pci [ 421.921643][ T8693] comedi: valid board names for adl_pci9118 driver are: [ 421.921652][ T8693] pci9118dg [ 421.921658][ T8693] pci9118hg [ 421.921665][ T8693] pci9118hr [ 421.921672][ T8693] comedi: valid board names for 8255_pci driver are: [ 421.921681][ T8693] 8255_pci [ 421.921687][ T8693] comedi: valid board names for s526 driver are: [ 421.921695][ T8693] s526 [ 421.921701][ T8693] comedi: valid board names for multiq3 driver are: [ 421.921710][ T8693] multiq3 [ 421.921715][ T8693] comedi: valid board names for pcmuio driver are: [ 421.921724][ T8693] pcmuio48 [ 421.921730][ T8693] pcmuio96 [ 421.921736][ T8693] comedi: valid board names for pcmmio driver are: [ 421.921745][ T8693] pcmmio [ 421.921751][ T8693] comedi: valid board names for pcmda12 driver are: [ 421.921759][ T8693] pcmda12 [ 421.921765][ T8693] comedi: valid board names for pcmad driver are: [ 421.921774][ T8693] pcmad12 [ 421.921780][ T8693] pcmad16 [ 421.921798][ T8693] comedi: valid board names for ni_labpc driver are: [ 421.921806][ T8693] lab-pc-1200 [ 421.921812][ T8693] lab-pc-1200ai [ 421.921819][ T8693] lab-pc+ [ 421.921825][ T8693] comedi: valid board names for atmio16 driver are: [ 421.921834][ T8693] atmio16 [ 421.921840][ T8693] atmio16d [ 421.921847][ T8693] comedi: valid board names for ni_at_ao driver are: [ 421.921855][ T8693] at-ao-6 [ 421.921861][ T8693] at-ao-10 [ 421.921867][ T8693] comedi: valid board names for ni_at_a2150 driver are: [ 421.921877][ T8693] ni_at_a2150 [ 421.921883][ T8693] comedi: valid board names for adq12b driver are: [ 421.921891][ T8693] adq12b [ 421.921897][ T8693] comedi: valid board names for mpc624 driver are: [ 421.921905][ T8693] mpc624 [ 421.921910][ T8693] comedi: valid board names for c6xdigio driver are: [ 421.921925][ T8693] c6xdigio [ 421.921931][ T8693] comedi: valid board names for aio_iiro_16 driver are: [ 421.921939][ T8693] aio_iiro_16 [ 421.921944][ T8693] comedi: valid board names for aio_aio12_8 driver are: [ 421.921953][ T8693] aio_aio12_8 [ 421.921959][ T8693] aio_ai12_8 [ 421.921965][ T8693] aio_ao12_4 [ 421.921971][ T8693] comedi: valid board names for fl512 driver are: [ 421.921979][ T8693] fl512 [ 421.921985][ T8693] comedi: valid board names for dmm32at driver are: [ 421.921993][ T8693] dmm32at [ 421.921999][ T8693] comedi: valid board names for dt282x driver are: [ 421.922007][ T8693] dt2821 [ 421.922014][ T8693] dt2821-f [ 421.922019][ T8693] dt2821-g [ 421.922026][ T8693] dt2823 [ 421.922032][ T8693] dt2824-pgh [ 421.922038][ T8693] dt2824-pgl [ 421.922044][ T8693] dt2825 [ 421.922050][ T8693] dt2827 [ 421.922060][ T8693] dt2828 [ 421.922066][ T8693] dt2829 [ 421.922072][ T8693] dt21-ez [ 421.922078][ T8693] dt23-ez [ 421.922084][ T8693] dt24-ez [ 421.922107][ T8693] dt24-ez-pgl [ 421.922113][ T8693] comedi: valid board names for dt2817 driver are: [ 421.922122][ T8693] dt2817 [ 421.922128][ T8693] comedi: valid board names for dt2815 driver are: [ 421.922155][ T8693] dt2815 [ 421.922161][ T8693] comedi: valid board names for dt2814 driver are: [ 421.922171][ T8693] dt2814 [ 421.922177][ T8693] comedi: valid board names for dt2811 driver are: [ 421.922187][ T8693] dt2811-pgh [ 421.922194][ T8693] dt2811-pgl [ 421.922201][ T8693] comedi: valid board names for dt2801 driver are: [ 421.922211][ T8693] dt2801 [ 421.922218][ T8693] comedi: valid board names for das6402 driver are: [ 421.922228][ T8693] das6402-12 [ 421.922236][ T8693] das6402-16 [ 421.922243][ T8693] comedi: valid board names for das1800 driver are: [ 421.922253][ T8693] das-1701st [ 421.922261][ T8693] das-1701st-da [ 421.922268][ T8693] das-1702st [ 421.922275][ T8693] das-1702st-da [ 421.922281][ T8693] das-1702hr [ 421.922288][ T8693] das-1702hr-da [ 421.922296][ T8693] das-1701ao [ 421.922303][ T8693] das-1702ao [ 421.922310][ T8693] das-1801st [ 421.922317][ T8693] das-1801st-da [ 421.922324][ T8693] das-1802st [ 421.922330][ T8693] das-1802st-da [ 421.922338][ T8693] das-1802hr [ 421.922345][ T8693] das-1802hr-da [ 421.922352][ T8693] das-1801hc [ 421.922358][ T8693] das-1802hc [ 421.922365][ T8693] das-1801ao [ 421.922373][ T8693] das-1802ao [ 421.922379][ T8693] comedi: valid board names for das800 driver are: [ 421.922389][ T8693] das-800 [ 421.922396][ T8693] cio-das800 [ 421.922403][ T8693] das-801 [ 421.922411][ T8693] cio-das801 [ 421.922419][ T8693] das-802 [ 421.922425][ T8693] cio-das802 [ 421.922431][ T8693] cio-das802/16 [ 421.922437][ T8693] comedi: valid board names for isa-das08 driver are: [ 421.922445][ T8693] isa-das08 [ 421.922452][ T8693] das08-pgm [ 421.922458][ T8693] das08-pgh [ 421.922464][ T8693] das08-pgl [ 421.922470][ T8693] das08-aoh [ 421.922476][ T8693] das08-aol [ 421.922483][ T8693] das08-aom [ 421.922490][ T8693] das08/jr-ao [ 421.922496][ T8693] das08jr-16-ao [ 421.922503][ T8693] pc104-das08 [ 421.922509][ T8693] das08jr/16 [ 421.922516][ T8693] comedi: valid board names for das16m1 driver are: [ 421.922525][ T8693] das16m1 [ 421.924882][ T8693] comedi: valid board names for dac02 driver are: [ 421.924896][ T8693] dac02 [ 421.924903][ T8693] comedi: valid board names for rti802 driver are: [ 421.924912][ T8693] rti802 [ 421.924927][ T8693] comedi: valid board names for rti800 driver are: [ 421.924936][ T8693] rti800 [ 421.924943][ T8693] rti815 [ 421.924949][ T8693] comedi: valid board names for pcm3724 driver are: [ 421.924959][ T8693] pcm3724 [ 421.924966][ T8693] comedi: valid board names for pcl818 driver are: [ 421.924975][ T8693] pcl818l [ 421.924982][ T8693] pcl818h [ 421.924988][ T8693] pcl818hd [ 421.924995][ T8693] pcl818hg [ 421.925002][ T8693] pcl818 [ 421.925009][ T8693] pcl718 [ 421.925015][ T8693] pcm3718 [ 421.925022][ T8693] comedi: valid board names for pcl816 driver are: [ 421.925032][ T8693] pcl816 [ 421.925038][ T8693] pcl814b [ 421.925044][ T8693] comedi: valid board names for pcl812 driver are: [ 421.925054][ T8693] pcl812 [ 421.925061][ T8693] pcl812pg [ 421.925067][ T8693] acl8112pg [ 421.925075][ T8693] acl8112dg [ 421.925081][ T8693] acl8112hg [ 421.925088][ T8693] a821pgl [ 421.925095][ T8693] a821pglnda [ 421.925102][ T8693] a821pgh [ 421.925108][ T8693] a822pgl [ 421.925114][ T8693] a822pgh [ 421.925133][ T8693] a823pgl [ 421.925139][ T8693] a823pgh [ 421.925146][ T8693] pcl813 [ 421.925152][ T8693] pcl813b [ 421.925201][ T8693] acl8113 [ 421.925209][ T8693] iso813 [ 421.925215][ T8693] acl8216 [ 421.925221][ T8693] a826pg [ 421.925227][ T8693] comedi: valid board names for pcl730 driver are: [ 421.925236][ T8693] pcl730 [ 421.925241][ T8693] iso730 [ 421.925248][ T8693] acl7130 [ 421.925253][ T8693] pcm3730 [ 421.925259][ T8693] pcl725 [ 421.925266][ T8693] p8r8dio [ 421.925271][ T8693] acl7225b [ 421.925278][ T8693] p16r16dio [ 421.925284][ T8693] pcl733 [ 421.925290][ T8693] pcl734 [ 421.925296][ T8693] opmm-1616-xt [ 421.925301][ T8693] pearl-mm-p [ 421.925307][ T8693] ir104-pbf [ 421.925314][ T8693] comedi: valid board names for pcl726 driver are: [ 421.925323][ T8693] pcl726 [ 421.925329][ T8693] pcl727 [ 421.925335][ T8693] pcl728 [ 421.925341][ T8693] acl6126 [ 421.925347][ T8693] acl6128 [ 421.925353][ T8693] comedi: valid board names for pcl724 driver are: [ 421.925361][ T8693] pcl724 [ 421.925367][ T8693] pcl722 [ 421.925373][ T8693] pcl731 [ 421.925379][ T8693] acl7122 [ 421.925384][ T8693] acl7124 [ 421.925390][ T8693] pet48dio [ 421.925396][ T8693] pcmio48 [ 421.925401][ T8693] onyx-mm-dio [ 421.925408][ T8693] comedi: valid board names for pcl711 driver are: [ 421.925416][ T8693] pcl711 [ 421.925422][ T8693] pcl711b [ 421.925428][ T8693] acl8112hg [ 421.925434][ T8693] acl8112dg [ 421.925439][ T8693] comedi: valid board names for amplc_pc263 driver are: [ 421.925447][ T8693] pc263 [ 421.925452][ T8693] comedi: valid board names for amplc_pc236 driver are: [ 421.925459][ T8693] pc36at [ 421.925464][ T8693] comedi: valid board names for amplc_dio200 driver are: [ 421.925472][ T8693] pc212e [ 421.925476][ T8693] pc214e [ 421.925480][ T8693] pc215e [ 421.925485][ T8693] pc218e [ 421.925490][ T8693] pc272e [ 421.925495][ T8693] comedi: valid board names for comedi_parport driver are: [ 421.925503][ T8693] comedi_parport [ 421.925510][ T8693] comedi: valid board names for comedi_test driver are: [ 421.925518][ T8693] comedi_test [ 421.925525][ T8693] comedi: valid board names for comedi_bond driver are: [ 421.925533][ T8693] comedi_bond [ 422.555789][ T8695] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 422.555826][ T8695] overlayfs: missing 'lowerdir' [ 423.148451][ T5910] usb 2-1: USB disconnect, device number 10 [ 423.156802][ T8237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 424.818926][ T8237] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.459474][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.459677][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.459924][ T8576] bridge_slave_0: entered allmulticast mode [ 426.462834][ T8576] bridge_slave_0: entered promiscuous mode [ 426.683124][ T6597] bridge_slave_1: left allmulticast mode [ 426.683159][ T6597] bridge_slave_1: left promiscuous mode [ 426.683431][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.651969][ T6597] bridge_slave_0: left allmulticast mode [ 427.652001][ T6597] bridge_slave_0: left promiscuous mode [ 427.652296][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.628847][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 428.778400][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 428.783107][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.783134][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.786988][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.787018][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.787038][ T10] usb 2-1: Product: syz [ 428.787052][ T10] usb 2-1: Manufacturer: syz [ 428.787066][ T10] usb 2-1: SerialNumber: syz [ 428.990857][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.010102][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.012440][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.013730][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.014514][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.249555][ T10] usb 2-1: 0:2 : does not exist [ 429.304883][ T10] usb 2-1: USB disconnect, device number 11 [ 429.458901][ T8291] udevd[8291]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.915655][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.536627][ T8759] FAULT_INJECTION: forcing a failure. [ 430.536627][ T8759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.536673][ T8759] CPU: 1 UID: 0 PID: 8759 Comm: syz.4.737 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.536695][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.536707][ T8759] Call Trace: [ 430.536714][ T8759] [ 430.536722][ T8759] dump_stack_lvl+0x189/0x250 [ 430.536755][ T8759] ? __pfx____ratelimit+0x10/0x10 [ 430.536800][ T8759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.536829][ T8759] ? __pfx__printk+0x10/0x10 [ 430.536862][ T8759] ? __might_fault+0xb0/0x130 [ 430.536901][ T8759] should_fail_ex+0x46c/0x600 [ 430.536932][ T8759] _copy_from_user+0x2d/0xb0 [ 430.536954][ T8759] ___sys_sendmsg+0x158/0x2a0 [ 430.536986][ T8759] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.537049][ T8759] ? __fget_files+0x2a/0x420 [ 430.537094][ T8759] ? __fget_files+0x3a6/0x420 [ 430.537133][ T8759] __x64_sys_sendmsg+0x1a1/0x260 [ 430.537165][ T8759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.537205][ T8759] ? __pfx_ksys_write+0x10/0x10 [ 430.537228][ T8759] ? rcu_is_watching+0x15/0xb0 [ 430.537270][ T8759] ? do_syscall_64+0xbe/0x3b0 [ 430.537302][ T8759] do_syscall_64+0xfa/0x3b0 [ 430.537329][ T8759] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.537354][ T8759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.537375][ T8759] ? clear_bhb_loop+0x60/0xb0 [ 430.537399][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.537419][ T8759] RIP: 0033:0x7f373ab2ebe9 [ 430.537436][ T8759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.537453][ T8759] RSP: 002b:00007f3738d96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.537474][ T8759] RAX: ffffffffffffffda RBX: 00007f373ad65fa0 RCX: 00007f373ab2ebe9 [ 430.537489][ T8759] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000004 [ 430.537502][ T8759] RBP: 00007f3738d96090 R08: 0000000000000000 R09: 0000000000000000 [ 430.537515][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.537527][ T8759] R13: 00007f373ad66038 R14: 00007f373ad65fa0 R15: 00007ffe203cf338 [ 430.537558][ T8759] [ 430.760914][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.062292][ T5847] Bluetooth: hci4: command tx timeout [ 432.230448][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.745343][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.616579][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.616779][ T5847] Bluetooth: hci4: command tx timeout [ 434.016347][ T8794] 9pnet_fd: Insufficient options for proto=fd [ 434.821189][ T6597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.879155][ T6597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.905141][ T6597] bond0 (unregistering): Released all slaves [ 434.945099][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.945234][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.945501][ T8576] bridge_slave_1: entered allmulticast mode [ 434.974380][ T8576] bridge_slave_1: entered promiscuous mode [ 435.818281][ T5840] Bluetooth: hci4: command tx timeout [ 437.109255][ T8816] netlink: 'syz.1.754': attribute type 2 has an invalid length. [ 437.117968][ T8576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.212714][ T8576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.395650][ T5840] Bluetooth: hci4: command tx timeout [ 438.973396][ T8838] FAULT_INJECTION: forcing a failure. [ 438.973396][ T8838] name failslab, interval 1, probability 0, space 0, times 0 [ 438.973465][ T8838] CPU: 0 UID: 0 PID: 8838 Comm: syz.1.759 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 438.973490][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.973504][ T8838] Call Trace: [ 438.973513][ T8838] [ 438.973523][ T8838] dump_stack_lvl+0x189/0x250 [ 438.973560][ T8838] ? __pfx____ratelimit+0x10/0x10 [ 438.973590][ T8838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.973621][ T8838] ? __pfx__printk+0x10/0x10 [ 438.973662][ T8838] ? __pfx___might_resched+0x10/0x10 [ 438.973690][ T8838] should_fail_ex+0x46c/0x600 [ 438.973743][ T8838] should_failslab+0xa8/0x100 [ 438.973775][ T8838] __kmalloc_cache_noprof+0x6e/0x320 [ 438.973805][ T8838] ? snd_mixer_oss_put_volume1_vol+0xbb/0x510 [ 438.973847][ T8838] snd_mixer_oss_put_volume1_vol+0xbb/0x510 [ 438.973878][ T8838] snd_mixer_oss_put_volume1+0x1c6/0x8b0 [ 438.973900][ T8838] ? snd_mixer_oss_ioctl1+0x60b/0x19f0 [ 438.973924][ T8838] snd_mixer_oss_ioctl1+0x6ab/0x19f0 [ 438.973952][ T8838] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 438.973970][ T8838] ? preempt_schedule_irq+0xde/0x150 [ 438.973996][ T8838] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 438.974031][ T8838] ? irqentry_exit+0x74/0x90 [ 438.974057][ T8838] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.974087][ T8838] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 438.974109][ T8838] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 438.974136][ T8838] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 438.974157][ T8838] snd_mixer_oss_ioctl+0x48/0x60 [ 438.974178][ T8838] __se_sys_ioctl+0xfc/0x170 [ 438.974205][ T8838] do_syscall_64+0xfa/0x3b0 [ 438.974242][ T8838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.974280][ T8838] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 438.974301][ T8838] ? clear_bhb_loop+0x60/0xb0 [ 438.974328][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.974349][ T8838] RIP: 0033:0x7fce275aebe9 [ 438.974368][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.974386][ T8838] RSP: 002b:00007fce257cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.974409][ T8838] RAX: ffffffffffffffda RBX: 00007fce277e6180 RCX: 00007fce275aebe9 [ 438.974425][ T8838] RDX: 0000200000000040 RSI: 00000000c0040d07 RDI: 0000000000000003 [ 438.974439][ T8838] RBP: 00007fce257cc090 R08: 0000000000000000 R09: 0000000000000000 [ 438.974453][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.974465][ T8838] R13: 00007fce277e6218 R14: 00007fce277e6180 R15: 00007ffe250b7388 [ 438.974501][ T8838] [ 439.780851][ T8576] team0: Port device team_slave_0 added [ 439.840739][ T8576] team0: Port device team_slave_1 added [ 440.278490][ T6597] hsr_slave_0: left promiscuous mode [ 440.319450][ T6597] hsr_slave_1: left promiscuous mode [ 440.371549][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.371582][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.428880][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.428904][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.606971][ T6597] veth1_macvtap: left promiscuous mode [ 440.607090][ T6597] veth0_macvtap: left promiscuous mode [ 440.607378][ T6597] veth1_vlan: left promiscuous mode [ 440.607466][ T6597] veth0_vlan: left promiscuous mode [ 445.220034][ T6597] team0 (unregistering): Port device team_slave_1 removed [ 445.393632][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.449755][ T6597] team0 (unregistering): Port device team_slave_0 removed [ 450.280929][ T8862] netlink: 'syz.4.765': attribute type 2 has an invalid length. [ 450.369519][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.369536][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.369562][ T8576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.426389][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.426406][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.426433][ T8576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.007179][ T8576] hsr_slave_0: entered promiscuous mode [ 451.037102][ T8576] hsr_slave_1: entered promiscuous mode [ 451.038096][ T8576] debugfs: 'hsr0' already exists in 'hsr' [ 451.038119][ T8576] Cannot create hsr debugfs directory [ 453.178945][ T8931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.942514][ T6597] IPVS: stop unused estimator thread 0... [ 454.258591][ T8946] netlink: 'syz.4.785': attribute type 2 has an invalid length. [ 454.510672][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 454.805497][ T8968] openvswitch: netlink: Missing valid actions attribute. [ 454.805528][ T8968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.739845][ T8975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.789'. [ 455.910113][ T8981] FAULT_INJECTION: forcing a failure. [ 455.910113][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 455.910145][ T8981] CPU: 0 UID: 0 PID: 8981 Comm: syz.1.793 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 455.910167][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.910178][ T8981] Call Trace: [ 455.910186][ T8981] [ 455.910194][ T8981] dump_stack_lvl+0x189/0x250 [ 455.910227][ T8981] ? __pfx____ratelimit+0x10/0x10 [ 455.910252][ T8981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.910280][ T8981] ? __pfx__printk+0x10/0x10 [ 455.910311][ T8981] ? __pfx___might_resched+0x10/0x10 [ 455.910332][ T8981] ? fs_reclaim_acquire+0x7d/0x100 [ 455.910355][ T8981] should_fail_ex+0x46c/0x600 [ 455.910384][ T8981] should_failslab+0xa8/0x100 [ 455.910413][ T8981] __kmalloc_noprof+0xcb/0x430 [ 455.910436][ T8981] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 455.910468][ T8981] tomoyo_realpath_from_path+0xe3/0x5d0 [ 455.910496][ T8981] ? tomoyo_domain+0xda/0x130 [ 455.910528][ T8981] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 455.910550][ T8981] tomoyo_path_number_perm+0x1e8/0x5a0 [ 455.910575][ T8981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 455.910601][ T8981] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 455.910627][ T8981] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.910660][ T8981] ? __lock_acquire+0xab9/0xd20 [ 455.910704][ T8981] ? __fget_files+0x2a/0x420 [ 455.910734][ T8981] ? __fget_files+0x2a/0x420 [ 455.910758][ T8981] ? __fget_files+0x3a6/0x420 [ 455.910784][ T8981] ? __fget_files+0x2a/0x420 [ 455.910821][ T8981] security_file_ioctl+0xcb/0x2d0 [ 455.910845][ T8981] __se_sys_ioctl+0x47/0x170 [ 455.910869][ T8981] do_syscall_64+0xfa/0x3b0 [ 455.910895][ T8981] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.910919][ T8981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.910939][ T8981] ? clear_bhb_loop+0x60/0xb0 [ 455.910961][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.910980][ T8981] RIP: 0033:0x7fce275aebe9 [ 455.910997][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.911013][ T8981] RSP: 002b:00007fce2580e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.911032][ T8981] RAX: ffffffffffffffda RBX: 00007fce277e5fa0 RCX: 00007fce275aebe9 [ 455.911047][ T8981] RDX: 0000200000000100 RSI: 0000000000004b66 RDI: 0000000000000004 [ 455.911060][ T8981] RBP: 00007fce2580e090 R08: 0000000000000000 R09: 0000000000000000 [ 455.911071][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.911083][ T8981] R13: 00007fce277e6038 R14: 00007fce277e5fa0 R15: 00007ffe250b7388 [ 455.911112][ T8981] [ 455.916540][ T8981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 456.523866][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.386990][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.106467][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.183415][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.441403][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.784224][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.005224][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.367397][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.393614][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.444310][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.880159][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.992361][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.127752][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.384779][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.384864][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.385017][ T8749] bridge_slave_0: entered allmulticast mode [ 462.417851][ T8749] bridge_slave_0: entered promiscuous mode [ 462.872161][ T8576] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 462.931786][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.931960][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.932219][ T8749] bridge_slave_1: entered allmulticast mode [ 462.935002][ T8749] bridge_slave_1: entered promiscuous mode [ 462.989270][ T8576] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 463.217831][ T8576] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 464.945269][ T9046] FAULT_INJECTION: forcing a failure. [ 464.945269][ T9046] name failslab, interval 1, probability 0, space 0, times 0 [ 464.945309][ T9046] CPU: 1 UID: 0 PID: 9046 Comm: syz.1.807 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 464.945330][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.945341][ T9046] Call Trace: [ 464.945348][ T9046] [ 464.945356][ T9046] dump_stack_lvl+0x189/0x250 [ 464.945388][ T9046] ? __pfx____ratelimit+0x10/0x10 [ 464.945414][ T9046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.945442][ T9046] ? __pfx__printk+0x10/0x10 [ 464.945468][ T9046] ? __pfx___might_resched+0x10/0x10 [ 464.945489][ T9046] ? fs_reclaim_acquire+0x7d/0x100 [ 464.945511][ T9046] should_fail_ex+0x46c/0x600 [ 464.945541][ T9046] should_failslab+0xa8/0x100 [ 464.945569][ T9046] __kmalloc_noprof+0xcb/0x430 [ 464.945593][ T9046] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 464.945625][ T9046] tomoyo_realpath_from_path+0xe3/0x5d0 [ 464.945654][ T9046] ? tomoyo_domain+0xda/0x130 [ 464.945686][ T9046] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 464.945708][ T9046] tomoyo_path_number_perm+0x1e8/0x5a0 [ 464.945733][ T9046] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 464.945759][ T9046] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 464.945785][ T9046] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.945817][ T9046] ? __lock_acquire+0xab9/0xd20 [ 464.945862][ T9046] ? __fget_files+0x2a/0x420 [ 464.945892][ T9046] ? __fget_files+0x2a/0x420 [ 464.945917][ T9046] ? __fget_files+0x3a6/0x420 [ 464.945941][ T9046] ? __fget_files+0x2a/0x420 [ 464.945971][ T9046] security_file_ioctl+0xcb/0x2d0 [ 464.945997][ T9046] __se_sys_ioctl+0x47/0x170 [ 464.946021][ T9046] do_syscall_64+0xfa/0x3b0 [ 464.946046][ T9046] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.946070][ T9046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.946089][ T9046] ? clear_bhb_loop+0x60/0xb0 [ 464.946112][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.946130][ T9046] RIP: 0033:0x7fce275aebe9 [ 464.946147][ T9046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.946163][ T9046] RSP: 002b:00007fce2580e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.946183][ T9046] RAX: ffffffffffffffda RBX: 00007fce277e5fa0 RCX: 00007fce275aebe9 [ 464.946196][ T9046] RDX: 0000000000000000 RSI: 00000000000007b0 RDI: 0000000000000003 [ 464.946207][ T9046] RBP: 00007fce2580e090 R08: 0000000000000000 R09: 0000000000000000 [ 464.946219][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.946230][ T9046] R13: 00007fce277e6038 R14: 00007fce277e5fa0 R15: 00007ffe250b7388 [ 464.946260][ T9046] [ 464.946267][ T9046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.315162][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.723028][ T8576] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 465.909637][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.540107][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.598723][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.953036][ T9054] FAULT_INJECTION: forcing a failure. [ 466.953036][ T9054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.953074][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 466.953099][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.953112][ T9054] Call Trace: [ 466.953130][ T9054] [ 466.953140][ T9054] dump_stack_lvl+0x189/0x250 [ 466.953178][ T9054] ? __pfx____ratelimit+0x10/0x10 [ 466.953208][ T9054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.953241][ T9054] ? __pfx__printk+0x10/0x10 [ 466.953282][ T9054] should_fail_ex+0x46c/0x600 [ 466.953318][ T9054] _copy_to_user+0x31/0xb0 [ 466.953347][ T9054] simple_read_from_buffer+0xe1/0x170 [ 466.953393][ T9054] proc_fail_nth_read+0x1b6/0x220 [ 466.953420][ T9054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 466.953447][ T9054] ? rw_verify_area+0x2ac/0x4e0 [ 466.953471][ T9054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 466.953495][ T9054] vfs_read+0x203/0xa30 [ 466.953531][ T9054] ? __pfx_vfs_read+0x10/0x10 [ 466.953553][ T9054] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 466.953585][ T9054] ? mutex_lock_nested+0x154/0x1d0 [ 466.953606][ T9054] ? fdget_pos+0x253/0x320 [ 466.953647][ T9054] ksys_read+0x14b/0x260 [ 466.953676][ T9054] ? __pfx_ksys_read+0x10/0x10 [ 466.953701][ T9054] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 466.953731][ T9054] ? syscall_user_dispatch+0x4f/0x90 [ 466.953768][ T9054] do_syscall_64+0xfa/0x3b0 [ 466.953796][ T9054] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.953824][ T9054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.953845][ T9054] ? clear_bhb_loop+0x60/0xb0 [ 466.953871][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.953892][ T9054] RIP: 0033:0x7fce275ad5fc [ 466.953910][ T9054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 466.953928][ T9054] RSP: 002b:00007fce2580e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.953950][ T9054] RAX: ffffffffffffffda RBX: 00007fce277e5fa0 RCX: 00007fce275ad5fc [ 466.953977][ T9054] RDX: 000000000000000f RSI: 00007fce2580e0a0 RDI: 0000000000000003 [ 466.953989][ T9054] RBP: 00007fce2580e090 R08: 0000000000000000 R09: 0000000000000000 [ 466.954001][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.954013][ T9054] R13: 00007fce277e6038 R14: 00007fce277e5fa0 R15: 00007ffe250b7388 [ 466.954046][ T9054] [ 467.259963][ T9067] gre0: entered promiscuous mode [ 467.480151][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.496552][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.502282][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.503729][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.505174][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.569698][ T8749] team0: Port device team_slave_0 added [ 467.598453][ T5917] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 467.600955][ T8749] team0: Port device team_slave_1 added [ 467.707085][ T38] audit: type=1326 audit(1756827425.103:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9082 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 467.707140][ T38] audit: type=1326 audit(1756827425.103:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9082 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 467.707184][ T38] audit: type=1326 audit(1756827425.103:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9082 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 467.707304][ T38] audit: type=1326 audit(1756827425.103:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9082 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 467.778929][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 467.781879][ T5917] usb 1-1: config 3 has an invalid interface number: 201 but max is 0 [ 467.781904][ T5917] usb 1-1: config 3 has no interface number 0 [ 467.781936][ T5917] usb 1-1: config 3 interface 201 has no altsetting 0 [ 467.808408][ T5917] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=74.48 [ 467.808439][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.808459][ T5917] usb 1-1: Product: syz [ 467.808473][ T5917] usb 1-1: Manufacturer: syz [ 467.808487][ T5917] usb 1-1: SerialNumber: syz [ 467.908095][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.073715][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.329878][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.566028][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.719898][ T5917] int51x1 1-1:3.201: probe with driver int51x1 failed with error -71 [ 468.728769][ T5917] usb 1-1: USB disconnect, device number 11 [ 468.777973][ T38] audit: type=1326 audit(1756827426.173:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9093 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 468.778031][ T38] audit: type=1326 audit(1756827426.173:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9093 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 468.779614][ T9094] FAULT_INJECTION: forcing a failure. [ 468.779614][ T9094] name failslab, interval 1, probability 0, space 0, times 0 [ 468.779644][ T9094] CPU: 0 UID: 0 PID: 9094 Comm: syz.1.817 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.779676][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.779688][ T9094] Call Trace: [ 468.779695][ T9094] [ 468.779703][ T9094] dump_stack_lvl+0x189/0x250 [ 468.779744][ T9094] ? __pfx____ratelimit+0x10/0x10 [ 468.779769][ T9094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.779796][ T9094] ? __pfx__printk+0x10/0x10 [ 468.779822][ T9094] ? __pfx___might_resched+0x10/0x10 [ 468.779843][ T9094] ? fs_reclaim_acquire+0x7d/0x100 [ 468.779864][ T9094] should_fail_ex+0x46c/0x600 [ 468.779893][ T9094] ? audit_log_start+0x126/0x850 [ 468.779912][ T9094] should_failslab+0xa8/0x100 [ 468.779938][ T9094] ? audit_log_start+0x126/0x850 [ 468.779954][ T9094] kmem_cache_alloc_noprof+0x6e/0x310 [ 468.779985][ T9094] audit_log_start+0x126/0x850 [ 468.780009][ T9094] ? __pfx_audit_log_start+0x10/0x10 [ 468.780032][ T9094] ? migrate_enable+0x29c/0x3c0 [ 468.780056][ T9094] ? __lock_acquire+0xab9/0xd20 [ 468.780082][ T9094] ? __pfx_migrate_enable+0x10/0x10 [ 468.780109][ T9094] audit_seccomp+0x64/0x190 [ 468.780142][ T9094] __seccomp_filter+0x9aa/0x1a40 [ 468.780178][ T9094] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.780205][ T9094] ? __pfx___seccomp_filter+0x10/0x10 [ 468.780232][ T9094] ? __pfx_vfs_write+0x10/0x10 [ 468.780252][ T9094] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 468.780274][ T9094] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 468.780294][ T9094] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 468.780337][ T9094] ? __secure_computing+0xe2/0x2a0 [ 468.780368][ T9094] syscall_trace_enter+0xaa/0x160 [ 468.780397][ T9094] do_syscall_64+0xd3/0x3b0 [ 468.780422][ T9094] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.780446][ T9094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.780481][ T9094] ? clear_bhb_loop+0x60/0xb0 [ 468.780506][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.780525][ T9094] RIP: 0033:0x7fce275aebe9 [ 468.780541][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.780559][ T9094] RSP: 002b:00007fce2580e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 468.780579][ T9094] RAX: ffffffffffffffda RBX: 00007fce277e5fa0 RCX: 00007fce275aebe9 [ 468.780593][ T9094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 468.780605][ T9094] RBP: 00007fce2580e090 R08: 0000000000000000 R09: 0000000000000000 [ 468.780618][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.780630][ T9094] R13: 00007fce277e6038 R14: 00007fce277e5fa0 R15: 00007ffe250b7388 [ 468.780661][ T9094] [ 468.780669][ T9094] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 468.780684][ T9094] audit: out of memory in audit_log_start [ 468.781476][ T38] audit: type=1326 audit(1756827426.183:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9093 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce275ad550 code=0x7ffc0000 [ 468.781524][ T38] audit: type=1326 audit(1756827426.183:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9093 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fce275ad69f code=0x7ffc0000 [ 468.878142][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.629203][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.798354][ T5840] Bluetooth: hci5: command tx timeout [ 471.138697][ T5917] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 471.286790][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.286806][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.286832][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.313552][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 471.317036][ T5917] usb 1-1: config 0 has no interfaces? [ 471.320728][ T5917] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 471.320760][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.320778][ T5917] usb 1-1: Product: syz [ 471.320791][ T5917] usb 1-1: Manufacturer: syz [ 471.320804][ T5917] usb 1-1: SerialNumber: syz [ 471.326206][ T5917] usb 1-1: config 0 descriptor?? [ 471.381489][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.381506][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.381532][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.597840][ T5917] usb 1-1: USB disconnect, device number 12 [ 471.859094][ T5840] Bluetooth: hci5: command tx timeout [ 473.938754][ T5840] Bluetooth: hci5: command tx timeout [ 474.257244][ T8749] hsr_slave_0: entered promiscuous mode [ 474.569044][ T8749] hsr_slave_1: entered promiscuous mode [ 474.569918][ T8749] debugfs: 'hsr0' already exists in 'hsr' [ 474.569940][ T8749] Cannot create hsr debugfs directory [ 474.636996][ T6597] bridge_slave_1: left allmulticast mode [ 474.637018][ T6597] bridge_slave_1: left promiscuous mode [ 474.637183][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.774693][ T6597] bridge_slave_0: left allmulticast mode [ 475.774724][ T6597] bridge_slave_0: left promiscuous mode [ 475.774968][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.188968][ T5840] Bluetooth: hci5: command tx timeout [ 478.865888][ T6597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.992203][ T6597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.322095][ T6597] bond0 (unregistering): Released all slaves [ 482.183308][ T6597] hsr_slave_0: left promiscuous mode [ 482.220188][ T9227] FAULT_INJECTION: forcing a failure. [ 482.220188][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 482.220225][ T9227] CPU: 1 UID: 0 PID: 9227 Comm: syz.0.846 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 482.220247][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.220259][ T9227] Call Trace: [ 482.220266][ T9227] [ 482.220274][ T9227] dump_stack_lvl+0x189/0x250 [ 482.220308][ T9227] ? __pfx____ratelimit+0x10/0x10 [ 482.220334][ T9227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.220362][ T9227] ? __pfx__printk+0x10/0x10 [ 482.220388][ T9227] ? __pfx___might_resched+0x10/0x10 [ 482.220408][ T9227] ? fs_reclaim_acquire+0x7d/0x100 [ 482.220430][ T9227] should_fail_ex+0x46c/0x600 [ 482.220457][ T9227] ? create_io_worker+0x27/0x5d0 [ 482.220482][ T9227] should_failslab+0xa8/0x100 [ 482.220511][ T9227] __kmalloc_cache_noprof+0x6e/0x320 [ 482.220536][ T9227] ? create_io_worker+0xac/0x5d0 [ 482.220561][ T9227] ? create_io_worker+0x27/0x5d0 [ 482.220585][ T9227] create_io_worker+0xac/0x5d0 [ 482.220613][ T9227] io_wq_enqueue+0x62c/0x850 [ 482.220635][ T9227] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 482.220665][ T9227] io_poll_task_func+0xa18/0xd80 [ 482.220693][ T9227] ? __pfx_io_poll_task_func+0x10/0x10 [ 482.220717][ T9227] ? percpu_ref_get_many+0x18c/0x1e0 [ 482.220741][ T9227] ? __pfx_io_poll_task_func+0x10/0x10 [ 482.220759][ T9227] io_handle_tw_list+0x1f5/0x4c0 [ 482.220789][ T9227] tctx_task_work_run+0x99/0x370 [ 482.220817][ T9227] tctx_task_work+0x3f/0x90 [ 482.220841][ T9227] task_work_run+0x1d4/0x260 [ 482.220869][ T9227] ? __pfx_task_work_run+0x10/0x10 [ 482.220886][ T9227] ? percpu_ref_put+0x1e/0x230 [ 482.220914][ T9227] ? percpu_ref_put+0x1e/0x230 [ 482.220943][ T9227] ? percpu_ref_put+0x188/0x230 [ 482.220978][ T9227] get_signal+0x11c5/0x1310 [ 482.221008][ T9227] ? irqentry_exit+0x74/0x90 [ 482.221035][ T9227] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 482.221063][ T9227] arch_do_signal_or_restart+0x9a/0x750 [ 482.221086][ T9227] ? __se_sys_io_pgetevents+0x28e/0x430 [ 482.221118][ T9227] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 482.221156][ T9227] ? exit_to_user_mode_loop+0x40/0x110 [ 482.221185][ T9227] exit_to_user_mode_loop+0x75/0x110 [ 482.221212][ T9227] do_syscall_64+0x2bd/0x3b0 [ 482.221238][ T9227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.221256][ T9227] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 482.221274][ T9227] ? clear_bhb_loop+0x60/0xb0 [ 482.221297][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.221315][ T9227] RIP: 0033:0x7f437cf3ebe9 [ 482.221332][ T9227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.221348][ T9227] RSP: 002b:00007f437b185038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 482.221368][ T9227] RAX: fffffffffffffdfe RBX: 00007f437d176090 RCX: 00007f437cf3ebe9 [ 482.221382][ T9227] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00007f437dcaf000 [ 482.221393][ T9227] RBP: 00007f437b185090 R08: 0000000000000000 R09: 0000000000000000 [ 482.221405][ T9227] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 482.221417][ T9227] R13: 00007f437d176128 R14: 00007f437d176090 R15: 00007fff6cad4748 [ 482.221460][ T9227] [ 482.265043][ T6597] hsr_slave_1: left promiscuous mode [ 482.266313][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.415780][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.432733][ T5680] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 483.591014][ T5680] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 483.591044][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.595993][ T5680] usb 2-1: config 0 descriptor?? [ 485.219170][ T6597] team0 (unregistering): Port device team_slave_1 removed [ 485.371477][ T9257] netlink: 276 bytes leftover after parsing attributes in process `syz.1.850'. [ 486.189131][ T6597] team0 (unregistering): Port device team_slave_0 removed [ 487.274038][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.290572][ T5680] usb 2-1: Cannot set autoneg [ 487.290854][ T5680] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 487.413755][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.614887][ T5680] usb 2-1: USB disconnect, device number 12 [ 488.091684][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.350105][ T9270] syz.0.856 uses obsolete (PF_INET,SOCK_PACKET) [ 489.073310][ T9077] chnl_net:caif_netlink_parms(): no params data found [ 489.110302][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.118799][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.137602][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.148520][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.149231][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.443136][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.621236][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.340030][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.066178][ T9314] FAULT_INJECTION: forcing a failure. [ 491.066178][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 491.066213][ T9314] CPU: 1 UID: 0 PID: 9314 Comm: syz.0.860 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 491.066235][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.066248][ T9314] Call Trace: [ 491.066256][ T9314] [ 491.066264][ T9314] dump_stack_lvl+0x189/0x250 [ 491.066297][ T9314] ? __pfx____ratelimit+0x10/0x10 [ 491.066323][ T9314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.066351][ T9314] ? __pfx__printk+0x10/0x10 [ 491.066377][ T9314] ? __pfx___might_resched+0x10/0x10 [ 491.066398][ T9314] ? fs_reclaim_acquire+0x7d/0x100 [ 491.066422][ T9314] should_fail_ex+0x46c/0x600 [ 491.066453][ T9314] should_failslab+0xa8/0x100 [ 491.066481][ T9314] __kmalloc_noprof+0xcb/0x430 [ 491.066505][ T9314] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 491.066537][ T9314] tomoyo_realpath_from_path+0xe3/0x5d0 [ 491.066566][ T9314] ? tomoyo_domain+0xda/0x130 [ 491.066598][ T9314] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 491.066620][ T9314] tomoyo_path_number_perm+0x1e8/0x5a0 [ 491.066641][ T9314] ? _parse_integer_limit+0x1ae/0x1f0 [ 491.066668][ T9314] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 491.066690][ T9314] ? __lock_acquire+0xab9/0xd20 [ 491.066755][ T9314] ? __pfx_from_kuid+0x10/0x10 [ 491.066786][ T9314] ? __pfx_make_kgid+0x10/0x10 [ 491.066811][ T9314] tomoyo_path_chown+0x46/0xc0 [ 491.066841][ T9314] security_path_chown+0x13d/0x360 [ 491.066863][ T9314] chown_common+0x3bd/0x5c0 [ 491.066902][ T9314] ? __pfx_chown_common+0x10/0x10 [ 491.066942][ T9314] ? mnt_get_write_access+0x2bb/0x340 [ 491.066968][ T9314] ? mnt_want_write_file+0x17e/0x210 [ 491.066990][ T9314] ksys_fchown+0xea/0x160 [ 491.067022][ T9314] __x64_sys_fchown+0x7a/0x90 [ 491.067052][ T9314] do_syscall_64+0xfa/0x3b0 [ 491.067083][ T9314] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.067108][ T9314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.067127][ T9314] ? clear_bhb_loop+0x60/0xb0 [ 491.067150][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.067168][ T9314] RIP: 0033:0x7f437cf3ebe9 [ 491.067185][ T9314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.067201][ T9314] RSP: 002b:00007f437b1a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 491.067221][ T9314] RAX: ffffffffffffffda RBX: 00007f437d175fa0 RCX: 00007f437cf3ebe9 [ 491.067235][ T9314] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000003 [ 491.067246][ T9314] RBP: 00007f437b1a6090 R08: 0000000000000000 R09: 0000000000000000 [ 491.067258][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.067269][ T9314] R13: 00007f437d176038 R14: 00007f437d175fa0 R15: 00007fff6cad4748 [ 491.067299][ T9314] [ 491.067309][ T9314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.218482][ T5840] Bluetooth: hci0: command tx timeout [ 491.704969][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.298440][ T5840] Bluetooth: hci0: command tx timeout [ 493.426614][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.426768][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.427004][ T9077] bridge_slave_0: entered allmulticast mode [ 493.430181][ T9077] bridge_slave_0: entered promiscuous mode [ 493.451594][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.451743][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.452009][ T9077] bridge_slave_1: entered allmulticast mode [ 493.468592][ T9077] bridge_slave_1: entered promiscuous mode [ 493.914563][ T9077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.024755][ T9077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.591059][ T9077] team0: Port device team_slave_0 added [ 494.615662][ T9077] team0: Port device team_slave_1 added [ 495.381572][ T5840] Bluetooth: hci0: command tx timeout [ 495.912083][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.912105][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.912129][ T9077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.987481][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.987497][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.987523][ T9077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.170279][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 496.170297][ T38] audit: type=1804 audit(1756827453.563:194): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.886" name="/newroot/217/T" dev="tmpfs" ino=1188 res=1 errno=0 [ 496.654285][ T9433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 496.747426][ T9433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 497.220542][ T9450] ======================================================= [ 497.220542][ T9450] WARNING: The mand mount option has been deprecated and [ 497.220542][ T9450] and is ignored by this kernel. Remove the mand [ 497.220542][ T9450] option from the mount to silence this warning. [ 497.220542][ T9450] ======================================================= [ 497.468444][ T5840] Bluetooth: hci0: command tx timeout [ 497.485377][ T38] audit: type=1326 audit(1756827454.883:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9459 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 497.485686][ T38] audit: type=1326 audit(1756827454.883:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9459 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 497.485933][ T38] audit: type=1326 audit(1756827454.883:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9459 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 497.946021][ T9077] hsr_slave_0: entered promiscuous mode [ 497.947358][ T9077] hsr_slave_1: entered promiscuous mode [ 497.952363][ T9077] debugfs: 'hsr0' already exists in 'hsr' [ 497.952393][ T9077] Cannot create hsr debugfs directory [ 497.953162][ T9278] chnl_net:caif_netlink_parms(): no params data found [ 499.427617][ T9519] netlink: 14 bytes leftover after parsing attributes in process `syz.1.924'. [ 499.495476][ T9519] hsr_slave_0: left promiscuous mode [ 499.523646][ T38] audit: type=1326 audit(1756827456.923:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9518 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 499.525288][ T38] audit: type=1326 audit(1756827456.923:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9518 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 499.525762][ T38] audit: type=1326 audit(1756827456.923:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9518 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 499.526269][ T38] audit: type=1326 audit(1756827456.923:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9518 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce275ad550 code=0x7ffc0000 [ 499.526811][ T38] audit: type=1326 audit(1756827456.923:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9518 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 499.529916][ T38] audit: type=1326 audit(1756827456.923:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9518 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 499.694075][ T9519] hsr_slave_1: left promiscuous mode [ 500.251331][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.251537][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.251767][ T9278] bridge_slave_0: entered allmulticast mode [ 500.254637][ T9278] bridge_slave_0: entered promiscuous mode [ 500.302544][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.302705][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.302979][ T9278] bridge_slave_1: entered allmulticast mode [ 500.305575][ T9278] bridge_slave_1: entered promiscuous mode [ 500.740997][ T9278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.744946][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 500.851107][ T9278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.086715][ T6020] bridge_slave_1: left allmulticast mode [ 501.086749][ T6020] bridge_slave_1: left promiscuous mode [ 501.087077][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.167705][ T6020] bridge_slave_0: left allmulticast mode [ 501.167738][ T6020] bridge_slave_0: left promiscuous mode [ 501.168001][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.273942][ T6020] bridge_slave_1: left allmulticast mode [ 501.273975][ T6020] bridge_slave_1: left promiscuous mode [ 501.274302][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.350852][ T6020] bridge_slave_0: left allmulticast mode [ 501.350883][ T6020] bridge_slave_0: left promiscuous mode [ 501.351138][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.413413][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.935'. [ 502.049246][ T6020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.179405][ T6020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.262237][ T6020] bond0 (unregistering): Released all slaves [ 502.785257][ T6020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.880137][ T6020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.965193][ T6020] bond0 (unregistering): Released all slaves [ 503.484255][ T9278] team0: Port device team_slave_0 added [ 503.490065][ T9278] team0: Port device team_slave_1 added [ 503.872761][ T38] kauditd_printk_skb: 237 callbacks suppressed [ 503.872780][ T38] audit: type=1326 audit(1756827461.273:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 503.872837][ T38] audit: type=1326 audit(1756827461.273:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 503.970771][ T38] audit: type=1326 audit(1756827461.373:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 503.972385][ T38] audit: type=1326 audit(1756827461.373:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.0.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 504.368722][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.368741][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.368771][ T9278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.461098][ T6020] hsr_slave_0: left promiscuous mode [ 504.498465][ T6020] hsr_slave_1: left promiscuous mode [ 504.499484][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.550524][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.735051][ T6020] hsr_slave_0: left promiscuous mode [ 504.768473][ T6020] hsr_slave_1: left promiscuous mode [ 504.769552][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.825715][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.934725][ T9613] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 504.958321][ T5910] IPVS: starting estimator thread 0... [ 505.051359][ T9615] IPVS: using max 8 ests per chain, 19200 per kthread [ 505.174256][ T9618] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 505.296109][ T9622] netlink: 'syz.0.961': attribute type 21 has an invalid length. [ 505.299319][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 505.703063][ T6020] team0 (unregistering): Port device team_slave_1 removed [ 505.879268][ T6020] team0 (unregistering): Port device team_slave_0 removed [ 506.827978][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.129434][ T6020] team0 (unregistering): Port device team_slave_1 removed [ 507.269263][ T6020] team0 (unregistering): Port device team_slave_0 removed [ 507.888000][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.888019][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.888047][ T9278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.939960][ T9622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.961'. [ 508.846750][ T9656] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 508.847023][ T9656] FAT-fs (loop9): unable to read boot sector [ 508.855191][ T9648] netlink: 100 bytes leftover after parsing attributes in process `syz.1.974'. [ 508.891537][ T9278] hsr_slave_0: entered promiscuous mode [ 508.907600][ T9278] hsr_slave_1: entered promiscuous mode [ 508.914583][ T9278] debugfs: 'hsr0' already exists in 'hsr' [ 508.914616][ T9278] Cannot create hsr debugfs directory [ 510.388333][ T38] audit: type=1326 audit(1756827467.783:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.403307][ T38] audit: type=1326 audit(1756827467.803:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.403387][ T38] audit: type=1326 audit(1756827467.803:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.403448][ T38] audit: type=1326 audit(1756827467.803:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.409075][ T38] audit: type=1326 audit(1756827467.803:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.409130][ T38] audit: type=1326 audit(1756827467.803:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.409175][ T38] audit: type=1326 audit(1756827467.803:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.410613][ T38] audit: type=1326 audit(1756827467.813:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.410792][ T38] audit: type=1326 audit(1756827467.813:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.410840][ T38] audit: type=1326 audit(1756827467.813:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 510.712162][ T9692] netlink: 'syz.1.988': attribute type 30 has an invalid length. [ 511.832626][ T9077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 511.858836][ T9718] netlink: 'syz.1.997': attribute type 46 has an invalid length. [ 511.864745][ T9077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 511.948255][ T9077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 512.132976][ T9077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.934174][ T9077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.096515][ T9077] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.152921][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.154172][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.182577][ T9278] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 513.280354][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.280493][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.431240][ T9278] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 513.534923][ T9757] macvlan1: entered promiscuous mode [ 513.540164][ T9757] ipvlan0: entered promiscuous mode [ 513.559078][ T9757] ipvlan0: left promiscuous mode [ 513.592487][ T9757] macvlan1: left promiscuous mode [ 513.728408][ T9278] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 513.823677][ T9278] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 514.513823][ T9278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.640993][ T9278] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.693117][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.693416][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.726316][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.726457][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.026217][ T9077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.843462][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 515.880931][ T9834] ip6gre1: entered allmulticast mode [ 515.903222][ T9278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.185569][ T9844] netlink: 'syz.4.1031': attribute type 10 has an invalid length. [ 516.335906][ T9844] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 516.381374][ T9077] veth0_vlan: entered promiscuous mode [ 516.409451][ T9847] netlink: 'syz.0.1032': attribute type 30 has an invalid length. [ 516.816485][ T9077] veth1_vlan: entered promiscuous mode [ 517.042605][ T9077] veth0_macvtap: entered promiscuous mode [ 517.047512][ T9077] veth1_macvtap: entered promiscuous mode [ 517.328738][ T9077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.397246][ T9077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.468305][ T6020] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.499289][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.518582][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.533161][ T6024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.550487][ T9278] veth0_vlan: entered promiscuous mode [ 517.550849][ T38] kauditd_printk_skb: 30 callbacks suppressed [ 517.550864][ T38] audit: type=1326 audit(1756827474.953:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.550910][ T38] audit: type=1326 audit(1756827474.953:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.572089][ T38] audit: type=1326 audit(1756827474.953:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.572178][ T38] audit: type=1326 audit(1756827474.973:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.573331][ T38] audit: type=1326 audit(1756827474.973:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.573406][ T38] audit: type=1326 audit(1756827474.973:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.573451][ T38] audit: type=1326 audit(1756827474.973:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.573495][ T38] audit: type=1326 audit(1756827474.973:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.590134][ T38] audit: type=1326 audit(1756827474.973:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.590191][ T38] audit: type=1326 audit(1756827474.993:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9871 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 517.963668][ T9278] veth1_vlan: entered promiscuous mode [ 518.631445][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.631466][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.817970][ T9278] veth0_macvtap: entered promiscuous mode [ 518.994184][ T9278] veth1_macvtap: entered promiscuous mode [ 518.994884][ T6006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.994902][ T6006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.221826][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.265046][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.342286][ T6024] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.343759][ T6024] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.344780][ T6006] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.345181][ T6006] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.792551][ T9902] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 520.155262][ T6006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.155283][ T6006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.407419][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.407439][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.640244][ T9939] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.823208][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1054'. [ 523.616274][ T9939] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.943049][ T38] kauditd_printk_skb: 21 callbacks suppressed [ 523.943071][ T38] audit: type=1326 audit(1756827481.333:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.078978][ T38] audit: type=1326 audit(1756827481.343:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.119211][ T38] audit: type=1326 audit(1756827481.523:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.167838][ T38] audit: type=1326 audit(1756827481.563:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.168434][ T38] audit: type=1326 audit(1756827481.563:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.171281][ T38] audit: type=1326 audit(1756827481.573:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.171339][ T38] audit: type=1326 audit(1756827481.573:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.174407][ T38] audit: type=1326 audit(1756827481.573:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.175092][ T38] audit: type=1326 audit(1756827481.573:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.186010][ T38] audit: type=1326 audit(1756827481.583:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 524.787194][ T9983] 9pnet_fd: Insufficient options for proto=fd [ 524.828442][ T9939] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.328979][T10005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 525.329006][T10005] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1070'. [ 525.472861][ T9939] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.614246][T10024] batman_adv: batadv0: Adding interface: dummy0 [ 528.614263][T10024] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.614292][T10024] batman_adv: batadv0: Interface activated: dummy0 [ 528.636993][T10024] batadv0: mtu less than device minimum [ 528.646187][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.655108][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.664434][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.673281][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.682005][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.690932][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.699991][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.708727][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.717835][T10024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.870021][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.870858][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.870926][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.870981][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.258238][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 529.258257][ T38] audit: type=1326 audit(1756827486.653:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10031 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 529.267087][ T38] audit: type=1326 audit(1756827486.663:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10031 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 529.267138][ T38] audit: type=1326 audit(1756827486.663:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10031 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 529.267179][ T38] audit: type=1326 audit(1756827486.663:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10031 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 529.267220][ T38] audit: type=1326 audit(1756827486.663:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10031 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce275aebe9 code=0x7ffc0000 [ 532.086319][T10114] team0: Port device vlan0 added [ 532.235338][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235371][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235394][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235417][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235457][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235481][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235505][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235530][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235554][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.235578][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 532.346840][ T5925] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 532.788911][T10134] netlink: 'syz.5.1122': attribute type 46 has an invalid length. [ 534.486985][ T38] audit: type=1326 audit(1756827491.883:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10156 comm="syz.5.1130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942ef2ebe9 code=0x0 [ 534.493702][T10160] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1131'. [ 534.521519][ T38] audit: type=1326 audit(1756827491.923:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 534.522012][ T38] audit: type=1326 audit(1756827491.923:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 534.522627][ T38] audit: type=1326 audit(1756827491.923:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 534.926142][T10167] veth0: entered promiscuous mode [ 534.927989][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 535.844102][T10188] ALSA: seq fatal error: cannot create timer (-22) [ 536.406099][T10203] netlink: 'syz.1.1149': attribute type 10 has an invalid length. [ 536.406121][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1149'. [ 536.901625][T10215] syz.6.1154 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 537.190414][ T38] audit: type=1326 audit(1756827494.583:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10224 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd714d7ebe9 code=0x7ffc0000 [ 537.190771][ T38] audit: type=1326 audit(1756827494.593:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10224 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fd714d7ebe9 code=0x7ffc0000 [ 537.191084][ T38] audit: type=1326 audit(1756827494.593:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10224 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd714d7ebe9 code=0x7ffc0000 [ 538.043278][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1167'. [ 538.043304][T10244] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1167'. [ 538.043335][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1167'. [ 538.043489][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1167'. [ 538.335506][T10244] syz.6.1167 (10244) used greatest stack depth: 16184 bytes left [ 538.499503][ T38] audit: type=1326 audit(1756827495.903:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.4.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 538.538342][ T38] audit: type=1326 audit(1756827495.903:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.4.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 538.587482][ T38] audit: type=1326 audit(1756827495.953:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.4.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f373ab2ebe9 code=0x7ffc0000 [ 538.706634][T10258] netlink: 'syz.6.1174': attribute type 10 has an invalid length. [ 538.827701][T10258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.844126][T10258] team0: Port device bond0 added [ 538.943646][T10259] tipc: Started in network mode [ 538.943668][T10259] tipc: Node identity 4, cluster identity 4711 [ 538.943681][T10259] tipc: Node number set to 4 [ 539.380236][T10267] 9pnet_fd: Insufficient options for proto=fd [ 539.580320][ T38] kauditd_printk_skb: 47 callbacks suppressed [ 539.580337][ T38] audit: type=1326 audit(1756827496.983:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.580383][ T38] audit: type=1326 audit(1756827496.983:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.580423][ T38] audit: type=1326 audit(1756827496.983:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.580464][ T38] audit: type=1326 audit(1756827496.983:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.580504][ T38] audit: type=1326 audit(1756827496.983:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.580561][ T38] audit: type=1326 audit(1756827496.983:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.580603][ T38] audit: type=1326 audit(1756827496.983:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.580645][ T38] audit: type=1326 audit(1756827496.983:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.602992][ T38] audit: type=1326 audit(1756827497.003:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 539.603067][ T38] audit: type=1326 audit(1756827497.003:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10271 comm="syz.0.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cf3ebe9 code=0x7ffc0000 [ 541.340312][T10327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 541.340335][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1201'. [ 541.340352][T10327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 541.340389][T10327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 541.756511][T10337] syzkaller1: entered promiscuous mode [ 541.756542][T10337] syzkaller1: entered allmulticast mode [ 543.966197][T10401] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1223'. [ 545.120279][T10423] tipc: Started in network mode [ 545.120307][T10423] tipc: Node identity eef5ddc8e5ec, cluster identity 4711 [ 545.120815][T10423] tipc: Enabled bearer , priority 0 [ 545.125348][T10423] syzkaller0: entered promiscuous mode [ 545.125375][T10423] syzkaller0: entered allmulticast mode [ 545.662871][T10432] tipc: Resetting bearer [ 545.755469][T10421] tipc: Resetting bearer [ 545.859447][ C0] ------------[ cut here ]------------ [ 545.859476][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 545.859518][ C0] Modules linked in: [ 545.859539][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 545.859565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.859578][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 545.859603][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 545.859621][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 545.859639][ C0] RAX: ffffffff88dc69fb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 545.859655][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 545.859669][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 545.859683][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 545.859698][ C0] R13: 0000000000000000 R14: 000000000000000d R15: ffff88814328ec68 [ 545.859712][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 545.859731][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.859746][ C0] CR2: 000055eb9078c950 CR3: 0000000026706000 CR4: 00000000003526f0 [ 545.859764][ C0] Call Trace: [ 545.859773][ C0] [ 545.859798][ C0] ? __pfx_est_timer+0x10/0x10 [ 545.859835][ C0] call_timer_fn+0x17b/0x5f0 [ 545.859864][ C0] ? __pfx_est_timer+0x10/0x10 [ 545.859887][ C0] ? call_timer_fn+0xbe/0x5f0 [ 545.859915][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 545.859955][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.859984][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.860010][ C0] ? __pfx_est_timer+0x10/0x10 [ 545.860036][ C0] __run_timer_base+0x648/0x970 [ 545.860081][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 545.860129][ C0] run_timer_softirq+0xb7/0x180 [ 545.860157][ C0] handle_softirqs+0x22c/0x710 [ 545.860198][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 545.860238][ C0] run_ktimerd+0xcf/0x190 [ 545.860268][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 545.860305][ C0] ? schedule+0x91/0x360 [ 545.860341][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 545.860367][ C0] smpboot_thread_fn+0x542/0xa60 [ 545.860396][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 545.860434][ C0] kthread+0x711/0x8a0 [ 545.860476][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 545.860503][ C0] ? __pfx_kthread+0x10/0x10 [ 545.860542][ C0] ? __pfx_kthread+0x10/0x10 [ 545.860576][ C0] ret_from_fork+0x3f9/0x770 [ 545.860609][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 545.860645][ C0] ? __switch_to_asm+0x39/0x70 [ 545.860666][ C0] ? __switch_to_asm+0x33/0x70 [ 545.860685][ C0] ? __pfx_kthread+0x10/0x10 [ 545.860719][ C0] ret_from_fork_asm+0x1a/0x30 [ 545.860760][ C0] [ 545.860770][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 545.860786][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 545.860816][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.860829][ C0] Call Trace: [ 545.860837][ C0] [ 545.860845][ C0] dump_stack_lvl+0x99/0x250 [ 545.860879][ C0] ? __asan_memcpy+0x40/0x70 [ 545.860903][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.860935][ C0] ? __pfx__printk+0x10/0x10 [ 545.860976][ C0] vpanic+0x281/0x750 [ 545.861005][ C0] ? __pfx__printk+0x10/0x10 [ 545.861029][ C0] ? __pfx_vpanic+0x10/0x10 [ 545.861062][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 545.861108][ C0] panic+0xb9/0xc0 [ 545.861140][ C0] ? __pfx_panic+0x10/0x10 [ 545.861190][ C0] __warn+0x31b/0x4b0 [ 545.861220][ C0] ? est_timer+0x6dc/0x9f0 [ 545.861247][ C0] ? est_timer+0x6dc/0x9f0 [ 545.861269][ C0] report_bug+0x2be/0x4f0 [ 545.861296][ C0] ? est_timer+0x6dc/0x9f0 [ 545.861320][ C0] ? est_timer+0x6dc/0x9f0 [ 545.861343][ C0] ? est_timer+0x6de/0x9f0 [ 545.861367][ C0] handle_bug+0x84/0x160 [ 545.861401][ C0] exc_invalid_op+0x1a/0x50 [ 545.861434][ C0] asm_exc_invalid_op+0x1a/0x20 [ 545.861454][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 545.861484][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 545.861503][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 545.861521][ C0] RAX: ffffffff88dc69fb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 545.861538][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 545.861551][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 545.861565][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 545.861581][ C0] R13: 0000000000000000 R14: 000000000000000d R15: ffff88814328ec68 [ 545.861606][ C0] ? est_timer+0x6db/0x9f0 [ 545.861654][ C0] ? __pfx_est_timer+0x10/0x10 [ 545.861693][ C0] call_timer_fn+0x17b/0x5f0 [ 545.861721][ C0] ? __pfx_est_timer+0x10/0x10 [ 545.861744][ C0] ? call_timer_fn+0xbe/0x5f0 [ 545.861772][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 545.861812][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.861841][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.861867][ C0] ? __pfx_est_timer+0x10/0x10 [ 545.861893][ C0] __run_timer_base+0x648/0x970 [ 545.861939][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 545.861987][ C0] run_timer_softirq+0xb7/0x180 [ 545.862014][ C0] handle_softirqs+0x22c/0x710 [ 545.862052][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 545.862094][ C0] run_ktimerd+0xcf/0x190 [ 545.862129][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 545.862174][ C0] ? schedule+0x91/0x360 [ 545.862213][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 545.862243][ C0] smpboot_thread_fn+0x542/0xa60 [ 545.862275][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 545.862318][ C0] kthread+0x711/0x8a0 [ 545.862358][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 545.862388][ C0] ? __pfx_kthread+0x10/0x10 [ 545.862431][ C0] ? __pfx_kthread+0x10/0x10 [ 545.862469][ C0] ret_from_fork+0x3f9/0x770 [ 545.862511][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 545.862550][ C0] ? __switch_to_asm+0x39/0x70 [ 545.862572][ C0] ? __switch_to_asm+0x33/0x70 [ 545.862594][ C0] ? __pfx_kthread+0x10/0x10 [ 545.862631][ C0] ret_from_fork_asm+0x1a/0x30 [ 545.862676][ C0] [ 545.862981][ C0] Kernel Offset: disabled