last executing test programs: 2m26.520937752s ago: executing program 2 (id=417): syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x88a8, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) 2m12.359138454s ago: executing program 2 (id=417): syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x88a8, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) 1m57.746720357s ago: executing program 2 (id=417): syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x88a8, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) 1m42.211458844s ago: executing program 2 (id=417): syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x88a8, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) 1m27.487241742s ago: executing program 2 (id=417): syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x88a8, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) 1m16.409568744s ago: executing program 0 (id=771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m16.299398697s ago: executing program 0 (id=773): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x101, &(0x7f0000006680)=0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x23aa, @remote, 0x6}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @empty}, 0x2}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800, 0x2, &(0x7f00000002c0)) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffffff, 0x0, 0x80, 0x1) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0xfffffffffffffd54) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') r8 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000000)={0x1, 0x83, 0x55, 0x0, 0x8}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) preadv(r7, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m13.170205368s ago: executing program 0 (id=785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c8f1}, 0x40010) 1m12.439092386s ago: executing program 0 (id=787): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40041}}, 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 1m11.426864941s ago: executing program 0 (id=794): mkdir(&(0x7f0000000500)='./file1\x00', 0x13d) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x180000, &(0x7f0000002540)="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", 0x1035, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000440)="048badb0c494e82374eb613b594ce17aa9428e517baa448128c30e22b965654a11c17138305d2150e08cc8fa53df1bc768f6e4a69804e954f0b17cbf80c7efa6e62bfbc4f7276f8a92520e00"/86) prlimit64(r3, 0x8, &(0x7f0000000380)={0x8a, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x8000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bd", 0x45}], 0x1000004a, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getpgrp(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) fallocate(r0, 0x1, 0x9, 0x81) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0x0) fchown(r7, 0xee01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x0, 0x0) 1m11.132145138s ago: executing program 2 (id=417): syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x88a8, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) 1m9.821852392s ago: executing program 0 (id=796): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r5 = socket(0xe2d47c7d41d810e, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000040000000400000007000000000000006cd18f3839e68199451fee8af16e1752fe6f05d8d9a7a68740cb4565bf0d542026d5157182d07c9c8c34126fa708f62921d2305e8432876a0241dc65fb63cc7b8688c12f5e5415fbf750c1139e4387717da2f09db0c2c91affe42aab726b453fe37c3c5826e985ec80f6e4b7a22e1a434695323053feaacad20e1c773296843cda6087ac00000000000000f4", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r9, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m9.82140218s ago: executing program 32 (id=796): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r5 = socket(0xe2d47c7d41d810e, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000040000000400000007000000000000006cd18f3839e68199451fee8af16e1752fe6f05d8d9a7a68740cb4565bf0d542026d5157182d07c9c8c34126fa708f62921d2305e8432876a0241dc65fb63cc7b8688c12f5e5415fbf750c1139e4387717da2f09db0c2c91affe42aab726b453fe37c3c5826e985ec80f6e4b7a22e1a434695323053feaacad20e1c773296843cda6087ac00000000000000f4", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r9, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 45.760005531s ago: executing program 1 (id=821): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r0 = syz_open_procfs(0x0, &(0x7f0000001180)='net/vlan/vlan1\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) connect$rose(r1, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) syz_open_dev$sndctrl(0x0, 0x9, 0x42) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) listen(r4, 0x1000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8943, 0x0) 43.745420042s ago: executing program 1 (id=823): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x20008800) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = getpid() sched_setscheduler(r2, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007780), 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x70bd26, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xfffffffc, 0x10000000, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7de, @rand_addr=' \x01\x00', 0x1}, {0xa, 0x4c23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000002d00)=[{&(0x7f0000000600)='8', 0x1}], 0x1, 0x6) close(r8) socket$caif_stream(0x25, 0x1, 0x1) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 43.698022697s ago: executing program 4 (id=824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000e00), 0x77, 0x101301) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@remote}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r5, &(0x7f0000000240)=""/66, 0x42, 0x0, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) 42.716480221s ago: executing program 3 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0xcf5) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000004c0)={0x40, 0x200, 0x9, 0x7, 0x11, "78f09bf4e5ecf54a"}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000240)={0x28, 0x1, r4, r6, 0x0, 0x0, 0x0, 0x17, &(0x7f0000000200)="449cb10d37d704f0964f571d7fb3cce6625a3c4cc1f4e8"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="2400000007060104c00e0000070000000800064000000004"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_clone(0x14000080, &(0x7f0000000000)="09a56a6708f135b560e0a1c1b96e97b59644a318fce2b02ca021dc5e3c8a3bfc95260f5e776c0a53b295f1f7c7c2a64176f7bf44a0c704cb02772ff8d7612b2625eb4cd6229079da88ab137a4b19ea6b887ec67b0d4efed6f3631703a23d9a00fb8bd2bc74faf521fff84ece740c4252dff766f16f1a247d32f36f6a1e6cf8788fe9670507b02167facc6fe67087e3369cd23a9578bff7f901ba60f71bb523b420405d", 0xa3, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000001a80)="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") 42.041011244s ago: executing program 1 (id=828): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000500)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000feffffff000000000000000018010000696c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000070000100000000000000000007"], 0x24}}, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/netlink\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x5, 0x0) 41.732730413s ago: executing program 4 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) gettid() mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 38.916517887s ago: executing program 3 (id=830): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000180)={0x1f00, 0x0, 0xf7fffff8}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @random="fb499d4ab72c"}, 0x10) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001000010000e939194618d96d6d2e8553", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESOCT, @ANYBLOB="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", @ANYBLOB="afde53fbba7b7aecaff7cdb3b959fa5193bd8092a3061cfaf740ea507be90dd702585578cfe58a16ae", @ANYBLOB="84f694ddede8e2b85b780cc4daa87ddcec1f04db5e7900d08b8546ce1b97cd06ce6f11c21993a90d02a6849545243effffffff77584bcf2385ef0003f7b7f5f8af31324aa2b474f13b389ef072e3927469813300"/108], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 38.575185032s ago: executing program 4 (id=831): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r8, r0, 0x0, 0x3a) 38.454132645s ago: executing program 1 (id=832): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x250}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x11, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x7, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x3, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000bd4b3c93c2e52e100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) 37.616680572s ago: executing program 3 (id=833): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x70bd25, 0x25dfdbfd, {0xa, 0x14, 0x80, 0x0, 0x0, 0x2, 0xff, 0x7, 0x4100}}, 0x1c}}, 0x4008014) 37.45850108s ago: executing program 3 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 37.385498913s ago: executing program 4 (id=835): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private0}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x1}], 0x38) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0x7, '\x00\x00'}]}}, 0x0}, 0x0) 35.373885917s ago: executing program 4 (id=836): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x1}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) (async) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x44, 0x8, "1944ca1495e2ba7db46bc2b582f5185299bf08f1aea639a1ed2202f416441b86ddf15ea4e7b825715151caeeab3e4e9366248dd1ccac5e9040866e832e7893f9"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000894) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe5a}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x34c}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x50600, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r6}) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000540)=0x15, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x5}}, @enum={0xd, 0x5, 0x0, 0x6, 0x4, [{0xc, 0x10001}, {0x7, 0x2}, {0x9, 0x9}, {0xe, 0x6}, {0x7, 0x7fff}]}, @union={0x4, 0x5, 0x0, 0x5, 0x0, 0x9, [{0x8, 0x5, 0x9}, {0x3, 0x1, 0x9}, {0x7, 0x3, 0x8}, {0x1, 0x3, 0xd1}, {0x10, 0x3, 0x4}]}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x1}, {0x6, 0x1000}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000680)=""/83, 0xcf, 0x53, 0x1, 0x4, 0x10000, @value=r2}, 0x28) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f0000000740), 0x8, 0x0) (async) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004) (async) connect$inet(r2, &(0x7f0000000880)={0x2, 0x4e20, @empty}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000980)={'vxcan1\x00', 0x0}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xa, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r8, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0xc, 0x1ff, 0x7fffffff}, 0x10, 0x1d7ca, r2, 0x0, &(0x7f0000000a00)=[r2, r2], 0x0, 0x10, 0x101}, 0x94) (async) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000b00)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xe4, r11, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xc5, 0x2a, [@link_id={0x65, 0x12, {@random="4d06fccb76d1", @device_b}}, @challenge={0x10, 0x1, 0x86}, @perr={0x84, 0xa8, {0x7, 0xa, [{{}, @device_b, 0xdf, @void, 0x22}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x28}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x18}, {{0x0, 0x1}, @device_a, 0x8000, @value, 0x1c}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x2f}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x3c}, {{}, @device_b, 0x8, @void, 0x2a}, {{}, @device_b, 0x4, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x2f}, {{}, @broadcast, 0x7, @void, 0xe}]}}]}]}, 0xe4}}, 0x8800) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000d40)) (async) r12 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000d80), 0x2) (async) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000e00)=[r0, r9, r12, r10, r13, r5, r7, r2], 0x8) 35.25087126s ago: executing program 3 (id=837): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4850}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x1, 0x0, 0x807, 0x33, &(0x7f0000000000)=""/51, 0x8e, &(0x7f0000000600)=""/142, 0x38, &(0x7f0000000200)=""/56}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/158) 35.089279307s ago: executing program 4 (id=838): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c3a1d708cd0c99000d95010203010902b20001000000000904"], 0x0) 34.979077586s ago: executing program 1 (id=839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 34.801625988s ago: executing program 3 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) gettid() mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 34.733614585s ago: executing program 1 (id=841): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efb", 0xb8}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf6", 0x23}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x3d5}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x109e00) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x1, 0x61, &(0x7f0000000040)="42162b9dfcde69a459febfc791ae87aae652d75e56c293cf39fab15ac9c13cb35ecde82ccf73a39e18e6509ded51e40a052ceea11578b37a7f3b8d694a492fabd6159a9c11474bd800d6868d1e33ea97961a8c2eb8f477b229cbb600e13e34702e"}) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 33 (id=841): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efb", 0xb8}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf6", 0x23}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x3d5}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x109e00) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x1, 0x61, &(0x7f0000000040)="42162b9dfcde69a459febfc791ae87aae652d75e56c293cf39fab15ac9c13cb35ecde82ccf73a39e18e6509ded51e40a052ceea11578b37a7f3b8d694a492fabd6159a9c11474bd800d6868d1e33ea97961a8c2eb8f477b229cbb600e13e34702e"}) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): number 15 using dummy_hcd [ 230.005379][ T7778] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[7778] [ 230.122236][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 230.163766][ T7628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.193761][ T5978] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 230.213855][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.222407][ T5978] usb 5-1: Product: syz [ 230.226910][ T5978] usb 5-1: Manufacturer: syz [ 230.232292][ T5978] usb 5-1: SerialNumber: syz [ 230.239100][ T5978] usb 5-1: config 0 descriptor?? [ 231.082569][ T7628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.122845][ T30] audit: type=1400 audit(1751718107.791:736): avc: denied { create } for pid=7772 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.156312][ T7628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.261773][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 231.493923][ T7628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.511176][ T30] audit: type=1400 audit(1751718107.811:737): avc: denied { setopt } for pid=7772 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.618919][ T30] audit: type=1400 audit(1751718107.931:738): avc: denied { bind } for pid=7772 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 231.675044][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 231.768301][ T43] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 231.911476][ T30] audit: type=1400 audit(1751718107.931:739): avc: denied { write } for pid=7772 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.967635][ T43] usb 4-1: config 0 has no interface number 0 [ 232.076192][ T43] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 232.117427][ T30] audit: type=1400 audit(1751718107.931:740): avc: denied { read } for pid=7772 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.167391][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.264603][ T43] usb 4-1: Product: syz [ 232.320454][ T43] usb 4-1: Manufacturer: syz [ 232.391360][ T43] usb 4-1: SerialNumber: syz [ 232.400441][ T43] usb 4-1: config 0 descriptor?? [ 232.410651][ T7628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.456761][ T5978] usb 5-1: USB disconnect, device number 15 [ 232.552110][ T7802] Device name cannot be null; rc = [-22] [ 232.918930][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.933570][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.945231][ T43] usb 4-1: USB disconnect, device number 7 [ 233.073048][ T7628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.090392][ T7628] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.204475][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.211706][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.226244][ T7808] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.469'. [ 233.239708][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.246815][ T6286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.266857][ T7628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.306631][ T30] audit: type=1400 audit(1751718109.971:741): avc: denied { map } for pid=7806 comm="syz.4.468" path="socket:[14134]" dev="sockfs" ino=14134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.329776][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.352678][ T30] audit: type=1400 audit(1751718109.971:742): avc: denied { read } for pid=7806 comm="syz.4.468" path="socket:[14134]" dev="sockfs" ino=14134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.376602][ T30] audit: type=1400 audit(1751718110.011:743): avc: denied { module_request } for pid=7628 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 233.984230][ T7628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.288400][ T7821] overlayfs: failed to resolve './file0': -2 [ 234.714788][ T7628] veth0_vlan: entered promiscuous mode [ 234.753042][ T7628] veth1_vlan: entered promiscuous mode [ 234.777542][ T7826] netlink: 44 bytes leftover after parsing attributes in process `syz.1.473'. [ 234.827692][ T7628] veth0_macvtap: entered promiscuous mode [ 234.839263][ T7628] veth1_macvtap: entered promiscuous mode [ 234.875739][ T7628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.948052][ T7628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.987146][ T7628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.033725][ T7628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.099144][ T7628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.137427][ T7628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.240904][ T5942] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 235.360834][ T6286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.389873][ T6286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.412280][ T5942] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 235.439833][ T7826] random: crng reseeded on system resumption [ 235.447808][ T5942] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 235.457010][ T30] audit: type=1400 audit(1751718112.101:744): avc: denied { write } for pid=7825 comm="syz.1.473" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 235.479845][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.500235][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.500659][ T5942] usb 1-1: config 0 has no interface number 0 [ 235.538187][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.540239][ T5942] usb 1-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.570795][ T30] audit: type=1400 audit(1751718112.101:745): avc: denied { open } for pid=7825 comm="syz.1.473" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 235.593993][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.610762][ T5942] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 235.629458][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.660018][ T5942] usb 1-1: config 0 descriptor?? [ 235.669588][ T30] audit: type=1400 audit(1751718112.191:746): avc: denied { ioctl } for pid=7825 comm="syz.1.473" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 235.694279][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.791231][ T30] audit: type=1400 audit(1751718112.291:747): avc: denied { mount } for pid=7628 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.813234][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.865483][ T30] audit: type=1400 audit(1751718112.321:748): avc: denied { mounton } for pid=7628 comm="syz-executor" path="/root/syzkaller.djpPC6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 236.006561][ T7837] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.476'. [ 236.174623][ T7840] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 236.188380][ T7840] Error validating options; rc = [-22] [ 237.154479][ T7852] Device name cannot be null; rc = [-22] [ 237.894898][ T7855] netlink: 'syz.1.480': attribute type 5 has an invalid length. [ 238.372701][ T5942] usb 1-1: USB disconnect, device number 10 [ 238.675053][ T7870] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.484'. [ 238.684605][ T7870] netlink: zone id is out of range [ 238.689900][ T7870] netlink: get zone limit has 8 unknown bytes [ 241.561698][ T6286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.703090][ T6286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.856642][ T6286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.017483][ T7880] could not allocate digest TFM handle sha224-ssse3 [ 242.082110][ T6286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.093143][ T1220] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 242.151206][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.160487][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.173807][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.183720][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.192988][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.307746][ T1220] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.567941][ T1220] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.578156][ T1220] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.587286][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.595343][ T1220] usb 1-1: SerialNumber: syz [ 242.724773][ T6286] bridge_slave_1: left allmulticast mode [ 242.744966][ T6286] bridge_slave_1: left promiscuous mode [ 242.765411][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.864340][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 242.864362][ T30] audit: type=1400 audit(1751718119.531:750): avc: denied { bind } for pid=7894 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.801756][ T30] audit: type=1400 audit(1751718119.561:751): avc: denied { setopt } for pid=7894 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.123891][ T6286] bridge_slave_0: left allmulticast mode [ 244.129661][ T6286] bridge_slave_0: left promiscuous mode [ 244.135746][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.231081][ T5829] Bluetooth: hci2: command tx timeout [ 244.337726][ T7899] sctp: [Deprecated]: syz.1.491 (pid 7899) Use of int in max_burst socket option deprecated. [ 244.337726][ T7899] Use struct sctp_assoc_value instead [ 244.702061][ T6286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.731663][ T6286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.750329][ T6286] bond0 (unregistering): Released all slaves [ 244.772054][ T1220] usb 1-1: 0:2 : does not exist [ 245.352066][ T1220] usb 1-1: USB disconnect, device number 11 [ 245.375208][ T7912] lo speed is unknown, defaulting to 1000 [ 245.400332][ T7912] lo speed is unknown, defaulting to 1000 [ 245.768955][ T7912] lo speed is unknown, defaulting to 1000 [ 246.061320][ T7912] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 246.319800][ T5829] Bluetooth: hci2: command tx timeout [ 246.340983][ T7912] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 246.413008][ T7925] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 246.437095][ T7912] lo speed is unknown, defaulting to 1000 [ 246.475226][ T7912] lo speed is unknown, defaulting to 1000 [ 246.551515][ T7912] lo speed is unknown, defaulting to 1000 [ 246.567023][ T7887] chnl_net:caif_netlink_parms(): no params data found [ 246.597750][ T7912] lo speed is unknown, defaulting to 1000 [ 247.011071][ T7912] lo speed is unknown, defaulting to 1000 [ 247.042265][ T7912] lo speed is unknown, defaulting to 1000 [ 247.132027][ T7912] lo speed is unknown, defaulting to 1000 [ 247.844976][ T30] audit: type=1400 audit(1751718124.511:752): avc: denied { write } for pid=7943 comm="syz.3.502" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.873646][ T6286] hsr_slave_0: left promiscuous mode [ 247.902381][ T6286] hsr_slave_1: left promiscuous mode [ 247.927541][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.967204][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.979646][ T7941] could not allocate digest TFM handle sha224-ssse3 [ 248.014634][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.113268][ T7951] syz.4.504 uses old SIOCAX25GETINFO [ 248.129054][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.390783][ T5829] Bluetooth: hci2: command tx timeout [ 248.943741][ T6286] veth1_macvtap: left promiscuous mode [ 248.949959][ T6286] veth0_macvtap: left promiscuous mode [ 248.957602][ T6286] veth1_vlan: left promiscuous mode [ 248.963371][ T6286] veth0_vlan: left promiscuous mode [ 250.316680][ T30] audit: type=1400 audit(1751718126.981:753): avc: denied { write } for pid=7963 comm="syz.4.507" path="socket:[15004]" dev="sockfs" ino=15004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.475953][ T5829] Bluetooth: hci2: command tx timeout [ 253.163141][ T7984] sctp: [Deprecated]: syz.3.513 (pid 7984) Use of int in max_burst socket option deprecated. [ 253.163141][ T7984] Use struct sctp_assoc_value instead [ 253.335938][ T6286] team0 (unregistering): Port device team_slave_1 removed [ 253.424142][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 253.440529][ T6286] team0 (unregistering): Port device team_slave_0 removed [ 254.230814][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.237973][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.250698][ T7887] bridge_slave_0: entered allmulticast mode [ 254.258182][ T7887] bridge_slave_0: entered promiscuous mode [ 254.281549][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.380025][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.439926][ T7887] bridge_slave_1: entered allmulticast mode [ 254.613528][ T7887] bridge_slave_1: entered promiscuous mode [ 254.632749][ T7987] tipc: Enabling of bearer rejected, already enabled [ 255.274062][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.280443][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.705100][ T8004] fuse: Unknown parameter 'fd0x0000000000000004' [ 256.635015][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.655881][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.667362][ T8009] FAULT_INJECTION: forcing a failure. [ 256.667362][ T8009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.721669][ T8009] CPU: 1 UID: 0 PID: 8009 Comm: syz.0.520 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 256.721699][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.721710][ T8009] Call Trace: [ 256.721716][ T8009] [ 256.721722][ T8009] dump_stack_lvl+0x16c/0x1f0 [ 256.721753][ T8009] should_fail_ex+0x512/0x640 [ 256.721782][ T8009] _copy_from_iter+0x29f/0x16f0 [ 256.721814][ T8009] ? __pfx__copy_from_iter+0x10/0x10 [ 256.721840][ T8009] ? rcu_is_watching+0x12/0xc0 [ 256.721864][ T8009] ? trace_kmalloc+0x2b/0xd0 [ 256.721880][ T8009] ? __kmalloc_noprof+0x242/0x510 [ 256.721910][ T8009] kernfs_fop_write_iter+0x19a/0x510 [ 256.721936][ T8009] vfs_write+0x6c4/0x1150 [ 256.721961][ T8009] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 256.721983][ T8009] ? __pfx___mutex_lock+0x10/0x10 [ 256.722009][ T8009] ? __pfx_vfs_write+0x10/0x10 [ 256.722054][ T8009] ksys_write+0x12a/0x250 [ 256.722078][ T8009] ? __pfx_ksys_write+0x10/0x10 [ 256.722109][ T8009] do_syscall_64+0xcd/0x4c0 [ 256.722137][ T8009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.722154][ T8009] RIP: 0033:0x7f73da38e929 [ 256.722169][ T8009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.722185][ T8009] RSP: 002b:00007f73db161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.722203][ T8009] RAX: ffffffffffffffda RBX: 00007f73da5b5fa0 RCX: 00007f73da38e929 [ 256.722214][ T8009] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000004 [ 256.722225][ T8009] RBP: 00007f73db161090 R08: 0000000000000000 R09: 0000000000000000 [ 256.722236][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.722246][ T8009] R13: 0000000000000000 R14: 00007f73da5b5fa0 R15: 00007ffff572c168 [ 256.722270][ T8009] [ 257.449351][ T7887] team0: Port device team_slave_0 added [ 257.501985][ T8025] sctp: [Deprecated]: syz.4.524 (pid 8025) Use of int in max_burst socket option deprecated. [ 257.501985][ T8025] Use struct sctp_assoc_value instead [ 257.653142][ T7887] team0: Port device team_slave_1 added [ 257.868254][ T8028] sctp: [Deprecated]: syz.0.525 (pid 8028) Use of int in max_burst socket option deprecated. [ 257.868254][ T8028] Use struct sctp_assoc_value instead [ 258.519618][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.542734][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.612407][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.666826][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.713773][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.743480][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.834071][ T7887] hsr_slave_0: entered promiscuous mode [ 258.857293][ T7887] hsr_slave_1: entered promiscuous mode [ 258.876524][ T7887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.904204][ T7887] Cannot create hsr debugfs directory [ 258.944848][ T30] audit: type=1400 audit(1751718135.571:754): avc: denied { bind } for pid=8044 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.160810][ T5906] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 259.201187][ T30] audit: type=1400 audit(1751718135.581:755): avc: denied { setopt } for pid=8044 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.442654][ T5906] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 259.475742][ T5906] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 259.536610][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 259.562755][ T5906] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 259.575999][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 259.586126][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 259.603656][ T5906] usb 5-1: string descriptor 0 read error: -22 [ 259.613467][ T5906] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 259.623508][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.637992][ T5906] usb 5-1: config 0 descriptor?? [ 259.653444][ T5906] hub 5-1:0.0: bad descriptor, ignoring hub [ 259.659558][ T5906] hub 5-1:0.0: probe with driver hub failed with error -5 [ 260.129563][ T1220] usb 5-1: USB disconnect, device number 16 [ 260.651054][ T8064] netlink: 'syz.1.535': attribute type 5 has an invalid length. [ 260.681230][ T30] audit: type=1400 audit(1751718137.341:756): avc: denied { create } for pid=8067 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.833324][ T30] audit: type=1400 audit(1751718137.351:757): avc: denied { ioctl } for pid=8067 comm="syz.3.536" path="socket:[16120]" dev="sockfs" ino=16120 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.886057][ T7887] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.113575][ T7887] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.192685][ T7887] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.234501][ T7887] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.305704][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'. [ 261.501579][ T8088] Bluetooth: MGMT ver 1.23 [ 261.858335][ T30] audit: type=1400 audit(1751718138.521:758): avc: denied { write } for pid=8089 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.870929][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.935395][ T7887] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.956115][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.963312][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.981417][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.988599][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.841029][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 263.655138][ T5899] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 264.040649][ T8103] hsr_slave_1 (unregistering): left promiscuous mode [ 264.077494][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.079684][ T8122] input: syz0 as /devices/virtual/input/input12 [ 264.142265][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 264.143573][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.143592][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.143611][ T5899] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.143624][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.145260][ T5899] usb 4-1: config 0 descriptor?? [ 264.147254][ T5899] hub 4-1:0.0: USB hub found [ 264.291264][ T7887] veth0_vlan: entered promiscuous mode [ 264.294827][ T7887] veth1_vlan: entered promiscuous mode [ 264.371151][ T5899] hub 4-1:0.0: 1 port detected [ 264.655725][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.549'. [ 264.666353][ T7887] veth0_macvtap: entered promiscuous mode [ 264.669723][ T7887] veth1_macvtap: entered promiscuous mode [ 264.680523][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.685673][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.688194][ T7887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.688304][ T7887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.688330][ T7887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.688354][ T7887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.826310][ T8131] FAULT_INJECTION: forcing a failure. [ 264.826310][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 264.826345][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.1.550 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 264.826359][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.826366][ T8131] Call Trace: [ 264.826369][ T8131] [ 264.826373][ T8131] dump_stack_lvl+0x16c/0x1f0 [ 264.826393][ T8131] should_fail_ex+0x512/0x640 [ 264.826409][ T8131] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 264.826424][ T8131] should_failslab+0xc2/0x120 [ 264.826441][ T8131] __kmalloc_cache_noprof+0x6a/0x3e0 [ 264.826454][ T8131] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x319/0x480 [ 264.826473][ T8131] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x36d/0x480 [ 264.826491][ T8131] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x9c/0x480 [ 264.826511][ T8131] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0x9c/0x480 [ 264.826532][ T8131] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 264.826549][ T8131] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 264.826575][ T8131] snd_mixer_oss_ioctl1+0x1880/0x1cf0 [ 264.826595][ T8131] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.826619][ T8131] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 264.826637][ T8131] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 264.826656][ T8131] ? tomoyo_path_number_perm+0x18d/0x580 [ 264.826673][ T8131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 264.826688][ T8131] ? do_vfs_ioctl+0x523/0x1a60 [ 264.826702][ T8131] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 264.826716][ T8131] snd_mixer_oss_ioctl_card+0x102/0x170 [ 264.826733][ T8131] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 264.826752][ T8131] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 264.826772][ T8131] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 264.826784][ T8131] ? hook_file_ioctl_common+0x145/0x410 [ 264.826796][ T8131] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 264.826810][ T8131] ? selinux_file_ioctl+0x180/0x270 [ 264.826824][ T8131] ? selinux_file_ioctl+0xb4/0x270 [ 264.826840][ T8131] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 264.826853][ T8131] __x64_sys_ioctl+0x18e/0x210 [ 264.826866][ T8131] do_syscall_64+0xcd/0x4c0 [ 264.826884][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.826895][ T8131] RIP: 0033:0x7f395c78e929 [ 264.826905][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.826916][ T8131] RSP: 002b:00007f395d63a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.826927][ T8131] RAX: ffffffffffffffda RBX: 00007f395c9b5fa0 RCX: 00007f395c78e929 [ 264.826934][ T8131] RDX: 0000200000000200 RSI: 0000000080044dff RDI: 0000000000000003 [ 264.826940][ T8131] RBP: 00007f395d63a090 R08: 0000000000000000 R09: 0000000000000000 [ 264.826946][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.826952][ T8131] R13: 0000000000000000 R14: 00007f395c9b5fa0 R15: 00007ffc4b978038 [ 264.826966][ T8131] [ 264.902886][ T6389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.902905][ T6389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.052996][ T5906] hub 4-1:0.0: activate --> -90 [ 265.893682][ T8107] netlink: 'syz.3.545': attribute type 1 has an invalid length. [ 265.893722][ T8107] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.545'. [ 265.998672][ T974] usb 4-1: USB disconnect, device number 8 [ 266.017229][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.294413][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.518271][ T30] audit: type=1400 audit(1751718143.181:759): avc: denied { mount } for pid=8137 comm="syz.0.552" name="/" dev="autofs" ino=16647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 266.635467][ T30] audit: type=1400 audit(1751718143.301:760): avc: denied { read write } for pid=8145 comm="syz.1.555" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 266.669751][ T30] audit: type=1400 audit(1751718143.301:761): avc: denied { open } for pid=8145 comm="syz.1.555" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 266.694221][ T8144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 267.002395][ T5978] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 267.331157][ T30] audit: type=1400 audit(1751718143.951:762): avc: denied { write } for pid=8150 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 267.333738][ T5978] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 267.506191][ T30] audit: type=1400 audit(1751718143.971:763): avc: denied { setopt } for pid=8150 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 267.532870][ T5978] usb 1-1: config 2 has no interface number 0 [ 267.621842][ T5978] usb 1-1: config 2 interface 174 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 267.695857][ T5978] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 267.717507][ T8152] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 267.744837][ T5978] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 267.770280][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.790426][ T5978] usb 1-1: Product: syz [ 267.825265][ T6194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.859078][ T5978] usb 1-1: Manufacturer: syz [ 267.877231][ T5978] usb 1-1: SerialNumber: syz [ 267.904329][ T8138] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.019882][ T6194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.122102][ T5978] usb 1-1: probing VID:PID(0424:012C) [ 268.145759][ T5978] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 08 [ 268.187715][ T5978] usb 1-1: vub300 ignoring EndPoint(0) 08 [ 268.230520][ T5978] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 268.266462][ T6194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.285629][ T5978] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 268.484319][ T6194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.664440][ T8155] netlink: 'syz.3.557': attribute type 9 has an invalid length. [ 268.678373][ T30] audit: type=1400 audit(1751718145.341:764): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 268.702725][ T8155] netlink: 'syz.3.557': attribute type 9 has an invalid length. [ 268.705250][ T5978] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 268.863342][ T5978] usb 1-1: USB disconnect, device number 12 [ 268.978244][ T30] audit: type=1400 audit(1751718145.641:765): avc: denied { connect } for pid=8165 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 269.084674][ T6194] bridge_slave_1: left allmulticast mode [ 269.091633][ T6194] bridge_slave_1: left promiscuous mode [ 269.097666][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.107094][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.115409][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.123182][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.133906][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.144083][ T6194] bridge_slave_0: left allmulticast mode [ 269.149779][ T6194] bridge_slave_0: left promiscuous mode [ 269.155548][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.174987][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.855027][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.865717][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.875537][ T6194] bond0 (unregistering): Released all slaves [ 269.980370][ T8168] lo speed is unknown, defaulting to 1000 [ 270.090726][ T5978] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 270.154590][ T8185] fuse: Bad value for 'rootmode' [ 270.351755][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 270.375887][ T5978] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 270.385054][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.393222][ T5978] usb 4-1: Product: syz [ 270.400701][ T5978] usb 4-1: Manufacturer: syz [ 270.405373][ T5978] usb 4-1: SerialNumber: syz [ 270.473905][ T8190] Can't find a SQUASHFS superblock on nullb0 [ 270.822849][ T5978] usb 4-1: config 0 descriptor?? [ 270.899511][ T8193] kernel profiling enabled (shift: 17) [ 270.930962][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.979753][ T6194] hsr_slave_0: left promiscuous mode [ 270.989637][ T6194] hsr_slave_1: left promiscuous mode [ 270.996183][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.003991][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.014738][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.022500][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.257540][ T5842] Bluetooth: hci2: command tx timeout [ 271.407534][ T6194] veth1_macvtap: left promiscuous mode [ 271.413339][ T6194] veth0_macvtap: left promiscuous mode [ 271.421465][ T6194] veth1_vlan: left promiscuous mode [ 271.430979][ T6194] veth0_vlan: left promiscuous mode [ 271.500319][ T30] audit: type=1400 audit(1751718148.161:766): avc: denied { ioctl } for pid=8179 comm="syz.3.565" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 271.525205][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.553852][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.563289][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.588579][ T5973] usb 4-1: USB disconnect, device number 9 [ 271.657534][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 271.729323][ T30] audit: type=1400 audit(1751718148.341:767): avc: denied { getopt } for pid=8201 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.283647][ T8222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.576'. [ 272.415032][ T30] audit: type=1400 audit(1751718149.081:768): avc: denied { read } for pid=8219 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.444773][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 272.607119][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 273.086493][ T8232] overlayfs: missing 'lowerdir' [ 273.171364][ T8233] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 273.350690][ T5842] Bluetooth: hci2: command tx timeout [ 273.901652][ T8204] : entered promiscuous mode [ 274.029837][ T8168] chnl_net:caif_netlink_parms(): no params data found [ 275.474618][ T5842] Bluetooth: hci2: command tx timeout [ 275.692098][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.767788][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.840313][ T8168] bridge_slave_0: entered allmulticast mode [ 275.869452][ T8168] bridge_slave_0: entered promiscuous mode [ 275.886640][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.900687][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.907871][ T8168] bridge_slave_1: entered allmulticast mode [ 275.931821][ T8168] bridge_slave_1: entered promiscuous mode [ 275.951990][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.964245][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.994481][ T8168] team0: Port device team_slave_0 added [ 276.030265][ T8168] team0: Port device team_slave_1 added [ 276.124791][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.142332][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.191806][ T8168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.208120][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.217911][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.251030][ T8168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.729346][ T8168] hsr_slave_0: entered promiscuous mode [ 276.774546][ T8168] hsr_slave_1: entered promiscuous mode [ 276.781437][ T8168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.794527][ T8168] Cannot create hsr debugfs directory [ 276.913370][ T8277] tipc: Started in network mode [ 276.919439][ T8277] tipc: Node identity 7f000001, cluster identity 4711 [ 276.963871][ T8277] tipc: New replicast peer: 0.0.0.0 [ 276.974537][ T8277] tipc: Enabled bearer , priority 10 [ 277.022615][ T5942] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 277.200982][ T5942] usb 4-1: device descriptor read/64, error -71 [ 277.504534][ T8168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.511514][ T5842] Bluetooth: hci2: command tx timeout [ 277.520182][ T8168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.532717][ T8168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.544189][ T8168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.612318][ T5942] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.690677][ T5978] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 278.102256][ T5906] tipc: Node number set to 2130706433 [ 278.109364][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.143779][ T5942] usb 4-1: device descriptor read/64, error -71 [ 278.195359][ T8168] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.213957][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.221070][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.246253][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.254173][ T6194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.265087][ T5942] usb usb4-port1: attempt power cycle [ 278.266131][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.310150][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.374596][ T5978] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 278.393098][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.419119][ T5978] usb 1-1: config 0 descriptor?? [ 278.558842][ T8308] pvfs2: Unknown parameter 'seclabrÒë0' [ 278.639339][ T30] audit: type=1400 audit(1751718155.301:769): avc: denied { read } for pid=8286 comm="syz.0.589" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.639600][ T8168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.666520][ T5942] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 278.675496][ T8311] bridge0: port 3(batadv1) entered blocking state [ 278.682285][ T8311] bridge0: port 3(batadv1) entered disabled state [ 278.689347][ T8311] batadv1: entered allmulticast mode [ 278.706387][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.721403][ T5942] usb 4-1: device descriptor read/8, error -71 [ 278.723748][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.729016][ T8311] batadv1: entered promiscuous mode [ 278.829231][ T8168] veth0_vlan: entered promiscuous mode [ 278.838362][ T5978] usbhid 1-1:0.0: can't add hid device: -71 [ 278.845588][ T5978] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 278.862785][ T5978] usb 1-1: USB disconnect, device number 13 [ 278.869260][ T8168] veth1_vlan: entered promiscuous mode [ 278.937360][ T8168] veth0_macvtap: entered promiscuous mode [ 278.950192][ T8168] veth1_macvtap: entered promiscuous mode [ 278.975208][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.991028][ T5942] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 278.993016][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.012065][ T5942] usb 4-1: device descriptor read/8, error -71 [ 279.048101][ T8168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.063907][ T8168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.075571][ T8168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.086566][ T8168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.134134][ T5942] usb usb4-port1: unable to enumerate USB device [ 279.180747][ T6194] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 279.190191][ T6194] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 279.273794][ T5946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.282661][ T5946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.323336][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.333025][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.094284][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 281.353956][ T8334] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.598'. [ 281.363587][ T8334] netlink: zone id is out of range [ 281.368726][ T8334] netlink: get zone limit has 8 unknown bytes [ 281.683181][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.717821][ T8337] bond0: (slave rose0): Enslaving as an active interface with an up link [ 281.791363][ T8340] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.213264][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.515980][ T8350] tipc: Enabling of bearer rejected, already enabled [ 283.411037][ T30] audit: type=1400 audit(1751718160.081:770): avc: denied { ioctl } for pid=8354 comm="syz.4.605" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 284.078564][ T30] audit: type=1400 audit(1751718160.151:771): avc: denied { set_context_mgr } for pid=8354 comm="syz.4.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 284.172460][ T8357] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.605'. [ 284.244813][ T8357] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 284.265819][ T8368] netlink: 176 bytes leftover after parsing attributes in process `syz.3.608'. [ 284.282659][ T8368] input: syz0 as /devices/virtual/input/input13 [ 284.292129][ T8372] binder: 8354:8372 ioctl c0306201 200000000040 returned -22 [ 284.305147][ T8372] binder: 8354:8372 ioctl c0306201 200000000640 returned -22 [ 284.338109][ T30] audit: type=1400 audit(1751718160.971:772): avc: denied { watch watch_reads } for pid=8354 comm="syz.4.605" path="/138" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 284.470454][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.483894][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.493692][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.501958][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.509550][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.544400][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.578739][ T8375] lo speed is unknown, defaulting to 1000 [ 284.628731][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.700680][ T5961] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 284.795150][ T974] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 284.806582][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.869245][ T8386] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.612'. [ 284.880043][ T8386] netlink: zone id is out of range [ 284.885265][ T8386] netlink: zone id is out of range [ 284.890377][ T8386] netlink: get zone limit has 8 unknown bytes [ 284.950749][ T5961] usb 1-1: device descriptor read/64, error -71 [ 284.971429][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 284.981375][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.028118][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 285.035791][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 285.064561][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 285.091474][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 285.102707][ T974] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.119176][ T974] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 285.135029][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.145703][ T974] usb 4-1: Product: syz [ 285.152851][ T974] usb 4-1: Manufacturer: syz [ 285.157832][ T974] usb 4-1: SerialNumber: syz [ 285.168846][ T974] usb 4-1: config 0 descriptor?? [ 285.190813][ T5961] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 285.205029][ T12] bridge_slave_1: left allmulticast mode [ 285.213874][ T12] bridge_slave_1: left promiscuous mode [ 285.219821][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.236271][ T12] bridge_slave_0: left allmulticast mode [ 285.245685][ T12] bridge_slave_0: left promiscuous mode [ 285.254446][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.320673][ T5961] usb 1-1: device descriptor read/64, error -71 [ 285.382922][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.392311][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.433253][ T5961] usb usb1-port1: attempt power cycle [ 285.445470][ T974] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 285.476211][ T974] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 285.833518][ T5961] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 285.916318][ T5961] usb 1-1: device descriptor read/8, error -71 [ 286.129958][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.147166][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.170037][ T12] bond0 (unregistering): Released all slaves [ 286.173501][ T974] usb 4-1: USB disconnect, device number 14 [ 286.191637][ T5961] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 286.224740][ T5961] usb 1-1: device descriptor read/8, error -71 [ 286.238285][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.247187][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.256509][ T8375] bridge_slave_0: entered allmulticast mode [ 286.265202][ T8375] bridge_slave_0: entered promiscuous mode [ 286.294992][ T8398] tipc: Enabling of bearer rejected, already enabled [ 286.315979][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.325338][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.333731][ T8375] bridge_slave_1: entered allmulticast mode [ 286.342227][ T8375] bridge_slave_1: entered promiscuous mode [ 286.351586][ T5961] usb usb1-port1: unable to enumerate USB device [ 286.414294][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.457320][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.508161][ T12] hsr_slave_0: left promiscuous mode [ 286.543494][ T12] hsr_slave_1: left promiscuous mode [ 286.551808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.555492][ T5842] Bluetooth: hci2: command tx timeout [ 286.559207][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.623559][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.631661][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.666018][ T12] veth1_macvtap: left promiscuous mode [ 286.671711][ T12] veth0_macvtap: left promiscuous mode [ 286.678607][ T12] veth1_vlan: left promiscuous mode [ 286.684544][ T12] veth0_vlan: left promiscuous mode [ 287.151500][ T8408] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.637782][ T12] team0 (unregistering): Port device team_slave_1 removed [ 287.698474][ T12] team0 (unregistering): Port device team_slave_0 removed [ 287.755785][ T8414] could not allocate digest TFM handle sha224-ssse3 [ 288.094350][ T8375] team0: Port device team_slave_0 added [ 288.165260][ T8375] team0: Port device team_slave_1 added [ 288.250323][ T30] audit: type=1400 audit(1751718164.911:773): avc: denied { ioctl } for pid=8418 comm="syz.4.618" path="socket:[19518]" dev="sockfs" ino=19518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.274859][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.416550][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.424377][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.482480][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 288.495923][ T8424] Error validating options; rc = [-22] [ 288.640651][ T5842] Bluetooth: hci2: command tx timeout [ 288.836947][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.859874][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.876176][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.902156][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.914705][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.997486][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801df7ac00: rx timeout, send abort [ 289.013009][ T30] audit: type=1400 audit(1751718165.681:774): avc: denied { read } for pid=5183 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 289.034881][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.047885][ T30] audit: type=1400 audit(1751718165.681:775): avc: denied { search } for pid=5183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.069406][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.142055][ T8375] hsr_slave_0: entered promiscuous mode [ 289.149143][ T8375] hsr_slave_1: entered promiscuous mode [ 289.186510][ T8433] kvm: MONITOR instruction emulated as NOP! [ 289.192948][ T30] audit: type=1400 audit(1751718165.681:776): avc: denied { search } for pid=5183 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.242212][ T8375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.290656][ T8375] Cannot create hsr debugfs directory [ 289.290759][ T30] audit: type=1400 audit(1751718165.681:777): avc: denied { add_name } for pid=5183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.320695][ T30] audit: type=1400 audit(1751718165.681:778): avc: denied { create } for pid=5183 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.351010][ T30] audit: type=1400 audit(1751718165.681:779): avc: denied { append open } for pid=5183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.374010][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.394245][ T30] audit: type=1400 audit(1751718165.681:780): avc: denied { getattr } for pid=5183 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.420889][ T30] audit: type=1400 audit(1751718165.821:781): avc: denied { read write } for pid=8431 comm="syz.1.620" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.506883][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801df7ac00: abort rx timeout. Force session deactivation [ 289.590736][ T30] audit: type=1400 audit(1751718165.821:782): avc: denied { open } for pid=8431 comm="syz.1.620" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.649167][ T30] audit: type=1400 audit(1751718165.991:783): avc: denied { create } for pid=8437 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.676260][ T30] audit: type=1400 audit(1751718166.051:784): avc: denied { write } for pid=8437 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.778999][ T30] audit: type=1400 audit(1751718166.151:785): avc: denied { nlmsg_write } for pid=8437 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.820227][ T8448] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.623'. [ 289.850070][ T8448] netlink: zone id is out of range [ 289.856181][ T8448] netlink: zone id is out of range [ 289.861355][ T8448] netlink: get zone limit has 8 unknown bytes [ 290.012637][ T8453] overlayfs: missing 'lowerdir' [ 290.102752][ T8454] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 290.548457][ T8452] tipc: Enabling of bearer rejected, already enabled [ 290.723688][ T5842] Bluetooth: hci2: command tx timeout [ 291.056689][ T8463] sctp: [Deprecated]: syz.0.627 (pid 8463) Use of int in max_burst socket option deprecated. [ 291.056689][ T8463] Use struct sctp_assoc_value instead [ 291.245841][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 291.396667][ T8457] sctp: [Deprecated]: syz.1.626 (pid 8457) Use of int in max_burst socket option deprecated. [ 291.396667][ T8457] Use struct sctp_assoc_value instead [ 291.904447][ T8471] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 291.933685][ T8375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.295707][ T8375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.308471][ T8471] cramfs: wrong magic [ 292.309918][ T8375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.353164][ T8375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.574914][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.690843][ T8375] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.714195][ T8375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.725121][ T8375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.220418][ T5842] Bluetooth: hci2: command tx timeout [ 293.315077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.322255][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.374834][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.381995][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.759588][ T8375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.814885][ T8375] veth0_vlan: entered promiscuous mode [ 293.832796][ T8375] veth1_vlan: entered promiscuous mode [ 293.871992][ T1220] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 293.885060][ T8375] veth0_macvtap: entered promiscuous mode [ 293.897712][ T8375] veth1_macvtap: entered promiscuous mode [ 293.924636][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.960291][ T8503] overlayfs: missing 'lowerdir' [ 293.969316][ T8503] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 293.999338][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.019414][ T8375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.037323][ T8375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.052826][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 294.067155][ T8375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.079548][ T1220] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 294.095984][ T8375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.142847][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 294.187432][ T1220] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 294.200246][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.212911][ T1220] usb 5-1: Product: syz [ 294.236784][ T1220] usb 5-1: Manufacturer: syz [ 294.258129][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.268898][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.270307][ T1220] usb 5-1: SerialNumber: syz [ 294.310353][ T1220] usb 5-1: config 0 descriptor?? [ 294.331002][ T8492] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.343831][ T8492] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.358218][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.367904][ T1220] usb 5-1: ucan: probing device on interface #0 [ 294.379181][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.417836][ T30] audit: type=1400 audit(1751718171.081:786): avc: denied { mounton } for pid=8375 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 294.852175][ T8508] IPv6: Can't replace route, no match found [ 294.953890][ T8513] Device name cannot be null; rc = [-22] [ 294.986703][ T1220] ucan 5-1:0.0: probe with driver ucan failed with error -22 [ 295.727932][ T30] audit: type=1400 audit(1751718172.391:787): avc: denied { map } for pid=8491 comm="syz.4.632" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.752253][ T30] audit: type=1400 audit(1751718172.391:788): avc: denied { execute } for pid=8491 comm="syz.4.632" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.356790][ T70] bridge_slave_1: left allmulticast mode [ 296.389463][ T70] bridge_slave_1: left promiscuous mode [ 296.495857][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.611772][ T70] bridge_slave_0: left allmulticast mode [ 296.626360][ T70] bridge_slave_0: left promiscuous mode [ 296.645928][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.895083][ T5978] usb 5-1: USB disconnect, device number 18 [ 297.366569][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.563834][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.610904][ T70] bond0 (unregistering): Released all slaves [ 297.651996][ T30] audit: type=1400 audit(1751718174.321:789): avc: denied { write } for pid=8534 comm="syz.1.644" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 297.748904][ T70] tipc: Disabling bearer [ 297.749188][ T30] audit: type=1400 audit(1751718174.351:790): avc: denied { open } for pid=8534 comm="syz.1.644" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 298.910692][ T70] tipc: Left network mode [ 298.935477][ T30] audit: type=1400 audit(1751718174.751:791): avc: denied { bind } for pid=8538 comm="syz.4.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 299.231611][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.256267][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.264716][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.276111][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.741291][ T1220] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 299.769133][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.801194][ T8548] lo speed is unknown, defaulting to 1000 [ 299.910758][ T1220] usb 4-1: Using ep0 maxpacket: 16 [ 299.924498][ T1220] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.025473][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.056785][ T1220] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 300.066282][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.083008][ T1220] usb 4-1: config 0 descriptor?? [ 300.095642][ T1220] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 301.106535][ T70] hsr_slave_0: left promiscuous mode [ 301.119287][ T70] hsr_slave_1: left promiscuous mode [ 301.128344][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.138527][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.159297][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.190739][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.290509][ T70] veth1_macvtap: left promiscuous mode [ 301.317417][ T70] veth0_macvtap: left promiscuous mode [ 301.340091][ T70] veth1_vlan: left promiscuous mode [ 301.347949][ T70] veth0_vlan: left promiscuous mode [ 301.465112][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.499818][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.835046][ T5842] Bluetooth: hci2: command tx timeout [ 302.010032][ T70] team0 (unregistering): Port device team_slave_1 removed [ 302.062652][ T70] team0 (unregistering): Port device team_slave_0 removed [ 302.508429][ T8548] chnl_net:caif_netlink_parms(): no params data found [ 302.667233][ T8548] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.677221][ T8548] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.689399][ T8548] bridge_slave_0: entered allmulticast mode [ 302.700663][ T8548] bridge_slave_0: entered promiscuous mode [ 302.715602][ T8548] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.725947][ T8548] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.736005][ T8548] bridge_slave_1: entered allmulticast mode [ 302.747469][ T8548] bridge_slave_1: entered promiscuous mode [ 302.795813][ T8548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.808168][ T8548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.867289][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.908175][ T8548] team0: Port device team_slave_0 added [ 302.916959][ T8548] team0: Port device team_slave_1 added [ 302.961319][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.056341][ T8548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.104167][ T8548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.137983][ T8548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.240803][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.311497][ T8548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.318744][ T8548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.349158][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 303.358888][ T8548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.402575][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.507056][ T974] usb 4-1: USB disconnect, device number 15 [ 303.523805][ T5186] bcm5974 4-1:0.0: could not write to device [ 303.571071][ T5186] bcm5974 4-1:0.0: could not read from device [ 303.921837][ T5829] Bluetooth: hci2: command tx timeout [ 304.346928][ T8548] hsr_slave_0: entered promiscuous mode [ 304.367934][ T8548] hsr_slave_1: entered promiscuous mode [ 304.378081][ T8548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.389711][ T8548] Cannot create hsr debugfs directory [ 304.709287][ T70] bridge_slave_1: left allmulticast mode [ 304.720666][ T70] bridge_slave_1: left promiscuous mode [ 304.731110][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.755449][ T70] bridge_slave_0: left allmulticast mode [ 304.770677][ T70] bridge_slave_0: left promiscuous mode [ 304.770810][ T974] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 304.781065][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.932217][ T974] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 304.945949][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.966081][ T974] usb 2-1: config 0 descriptor?? [ 304.973890][ T974] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 305.016779][ T30] audit: type=1400 audit(1751718181.681:792): avc: denied { read } for pid=8605 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.043221][ T30] audit: type=1400 audit(1751718181.701:793): avc: denied { map } for pid=8605 comm="syz.0.661" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 305.464773][ T974] gp8psk: usb in 128 operation failed. [ 305.616179][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.627596][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.639049][ T70] bond0 (unregistering): Released all slaves [ 305.677468][ T974] gp8psk: usb in 146 operation failed. [ 305.690015][ T974] gp8psk: failed to get FW version [ 305.719741][ T974] gp8psk: FPGA Version = 46 [ 305.990719][ T5842] Bluetooth: hci2: command tx timeout [ 306.044763][ T974] gp8psk: usb in 138 operation failed. [ 306.160723][ T974] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 306.191027][ T974] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 306.222884][ T974] usb 2-1: USB disconnect, device number 9 [ 306.323036][ T8617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.664'. [ 306.343355][ T70] hsr_slave_0: left promiscuous mode [ 306.349930][ T70] hsr_slave_1: left promiscuous mode [ 306.367251][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.390309][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.419705][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.428541][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.467820][ T70] veth1_macvtap: left promiscuous mode [ 306.484328][ T70] veth0_macvtap: left promiscuous mode [ 306.498087][ T70] veth1_vlan: left promiscuous mode [ 306.503782][ T70] veth0_vlan: left promiscuous mode [ 306.991931][ T70] team0 (unregistering): Port device team_slave_1 removed [ 307.024280][ T70] team0 (unregistering): Port device team_slave_0 removed [ 307.459352][ T8548] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.479549][ T8548] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.499092][ T8548] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.516731][ T8548] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.994762][ T8548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.055880][ T8548] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.071732][ T5842] Bluetooth: hci2: command tx timeout [ 308.930064][ T8648] could not allocate digest TFM handle sha224-ssse3 [ 308.983113][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.990248][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.023316][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.030401][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.114848][ T8548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.614327][ T8664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.694927][ T8548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.833640][ T8548] veth0_vlan: entered promiscuous mode [ 309.871825][ T8548] veth1_vlan: entered promiscuous mode [ 309.926033][ T8548] veth0_macvtap: entered promiscuous mode [ 309.969039][ T8548] veth1_macvtap: entered promiscuous mode [ 310.001093][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 310.300455][ T8548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.312271][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.330773][ T5961] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 310.335021][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 310.353508][ T8548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.391469][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 310.418174][ T8548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.427982][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.430673][ T8548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.438260][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.454686][ T8548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.468836][ T8548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.475169][ T8667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.490483][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.522077][ T5961] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 310.533785][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.564510][ T5961] usb 4-1: config 0 descriptor?? [ 310.570412][ T6389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.578769][ T6389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.581114][ T5961] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 310.609519][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.618521][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.836187][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.850866][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.884120][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.895103][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.892120][ T5961] gspca_stv06xx: I2C: Read error writing address: -71 [ 311.944556][ T5961] usb 4-1: USB disconnect, device number 16 [ 312.662414][ T8695] sctp: [Deprecated]: syz.1.684 (pid 8695) Use of int in max_burst socket option deprecated. [ 312.662414][ T8695] Use struct sctp_assoc_value instead [ 312.829151][ T6389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.022107][ T43] usb 1-1: USB disconnect, device number 18 [ 313.184694][ T6389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.399507][ T6389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.458807][ T6389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.543727][ T6389] bridge_slave_1: left allmulticast mode [ 313.549402][ T6389] bridge_slave_1: left promiscuous mode [ 313.556038][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.564577][ T6389] bridge_slave_0: left allmulticast mode [ 313.570210][ T6389] bridge_slave_0: left promiscuous mode [ 313.576196][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.260881][ T30] audit: type=1400 audit(1751718190.701:794): avc: denied { watch } for pid=8703 comm="syz.4.688" path="/155/file0" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 314.400285][ T30] audit: type=1400 audit(1751718190.701:795): avc: denied { watch_sb watch_reads } for pid=8703 comm="syz.4.688" path="/155/file0" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 315.212680][ T5942] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 315.331153][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.341840][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.356427][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.365474][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.383533][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.400741][ T5942] usb 1-1: device descriptor read/64, error -71 [ 315.603886][ T6389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.613980][ T6389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.624585][ T6389] bond0 (unregistering): Released all slaves [ 315.637138][ T8716] netlink: 'syz.1.686': attribute type 5 has an invalid length. [ 315.726285][ T5942] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 315.969805][ T8707] lo speed is unknown, defaulting to 1000 [ 316.019385][ T5942] usb 1-1: device descriptor read/64, error -71 [ 316.095568][ T8727] lo speed is unknown, defaulting to 1000 [ 316.223405][ T5942] usb usb1-port1: attempt power cycle [ 316.358085][ T6389] hsr_slave_0: left promiscuous mode [ 316.367114][ T6389] hsr_slave_1: left promiscuous mode [ 316.372675][ T5973] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 316.384995][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.395884][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.403942][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.411555][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.425242][ T6389] veth1_macvtap: left promiscuous mode [ 316.430866][ T6389] veth0_macvtap: left promiscuous mode [ 316.436382][ T6389] veth1_vlan: left promiscuous mode [ 316.441802][ T6389] veth0_vlan: left promiscuous mode [ 316.542070][ T5973] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 316.550358][ T5973] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 316.558761][ T5973] usb 2-1: config 0 has no interface number 0 [ 316.564973][ T5973] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 316.577510][ T5973] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.589815][ T5973] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 316.599025][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.610847][ T5942] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 316.628023][ T5973] usb 2-1: config 0 descriptor?? [ 316.647084][ T5942] usb 1-1: device descriptor read/8, error -71 [ 316.718934][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.847486][ T6389] team0 (unregistering): Port device team_slave_1 removed [ 316.884713][ T6389] team0 (unregistering): Port device team_slave_0 removed [ 316.892748][ T5942] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 316.922494][ T5942] usb 1-1: device descriptor read/8, error -71 [ 317.042799][ T5942] usb usb1-port1: unable to enumerate USB device [ 317.137657][ T8734] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 317.233262][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 317.325081][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.332496][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.339645][ T8727] bridge_slave_0: entered allmulticast mode [ 317.347323][ T8727] bridge_slave_0: entered promiscuous mode [ 317.355881][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.363094][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.370313][ T8727] bridge_slave_1: entered allmulticast mode [ 317.378049][ T8727] bridge_slave_1: entered promiscuous mode [ 317.428109][ T5973] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input15 [ 317.441145][ T5829] Bluetooth: hci2: command tx timeout [ 317.461474][ T5973] input: failed to attach handler kbd to device input15, error: -5 [ 317.464336][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.508716][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.564977][ T8727] team0: Port device team_slave_0 added [ 317.573700][ T8727] team0: Port device team_slave_1 added [ 317.596793][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.605191][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.631699][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.646749][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.654816][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.685104][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.802543][ T8727] hsr_slave_0: entered promiscuous mode [ 317.809873][ T8727] hsr_slave_1: entered promiscuous mode [ 317.822968][ T8727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.831072][ T8727] Cannot create hsr debugfs directory [ 318.224766][ T30] audit: type=1400 audit(1751718194.891:796): avc: denied { read } for pid=8772 comm="syz.3.705" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.224817][ T30] audit: type=1400 audit(1751718194.891:797): avc: denied { open } for pid=8772 comm="syz.3.705" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.227749][ T30] audit: type=1400 audit(1751718194.891:798): avc: denied { ioctl } for pid=8772 comm="syz.3.705" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.229300][ T8773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 318.243021][ T8770] overlayfs: missing 'lowerdir' [ 318.247854][ T8770] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 318.343659][ T30] audit: type=1400 audit(1751718195.001:799): avc: denied { override_creds } for pid=8772 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 318.775984][ T8771] netlink: 'syz.4.703': attribute type 5 has an invalid length. [ 318.906688][ T8727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.995615][ T8727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.009033][ T8727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.030186][ T8727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.142495][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.169082][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.182169][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.189312][ T6194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.217803][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.224955][ T6194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.331247][ T5961] usb 2-1: USB disconnect, device number 10 [ 319.510694][ T5829] Bluetooth: hci2: command tx timeout [ 319.607293][ T8807] tipc: Enabling of bearer rejected, already enabled [ 319.740959][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.750254][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 319.833626][ T8812] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 319.847069][ T8812] Error validating options; rc = [-22] [ 320.340513][ T30] audit: type=1400 audit(1751718196.931:800): avc: denied { execute } for pid=8808 comm="syz.4.714" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 320.366582][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.570192][ T8727] veth0_vlan: entered promiscuous mode [ 320.653210][ T8727] veth1_vlan: entered promiscuous mode [ 320.696712][ T8727] veth0_macvtap: entered promiscuous mode [ 320.706271][ T8727] veth1_macvtap: entered promiscuous mode [ 320.729323][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.748737][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.766462][ T8727] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.778491][ T8727] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.875755][ T8727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.895737][ T8727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.972327][ T30] audit: type=1400 audit(1751718197.641:801): avc: denied { getopt } for pid=8819 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.992063][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.222234][ T5946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.232389][ T5946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.323884][ T5961] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 321.943225][ T5829] Bluetooth: hci2: command tx timeout [ 321.948689][ T30] audit: type=1400 audit(1751718198.611:802): avc: denied { create } for pid=8821 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 322.013674][ T30] audit: type=1400 audit(1751718198.631:803): avc: denied { ioctl } for pid=8821 comm="syz.3.718" path="socket:[22521]" dev="sockfs" ino=22521 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 322.039759][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.060615][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 322.070155][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.079630][ T5961] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 322.161797][ T5961] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 322.250415][ T5961] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 322.343293][ T5961] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 322.452781][ T5961] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.644838][ T5961] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 322.655781][ T5961] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 322.704005][ T5961] usb 5-1: Product: syz [ 322.718374][ T5961] usb 5-1: Manufacturer: syz [ 322.750718][ T5961] usb 5-1: SerialNumber: syz [ 322.799898][ T5961] usb 5-1: config 0 descriptor?? [ 322.816442][ T5961] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 322.851757][ T5961] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 323.024103][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.076249][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.236865][ T5961] usb 5-1: USB disconnect, device number 19 [ 323.266136][ T5961] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 324.052504][ T30] audit: type=1400 audit(1751718200.721:804): avc: denied { ioctl } for pid=8850 comm="syz.4.726" path="socket:[23604]" dev="sockfs" ino=23604 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 324.308571][ T30] audit: type=1326 audit(1751718200.811:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395c78e929 code=0x7ffc0000 [ 324.343500][ T30] audit: type=1326 audit(1751718200.811:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395c78e929 code=0x7ffc0000 [ 324.371066][ T30] audit: type=1326 audit(1751718200.811:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f395c78e929 code=0x7ffc0000 [ 324.542217][ T30] audit: type=1326 audit(1751718200.811:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395c78e929 code=0x7ffc0000 [ 324.580105][ T30] audit: type=1326 audit(1751718200.811:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f395c78e929 code=0x7ffc0000 [ 326.071235][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 326.071251][ T30] audit: type=1400 audit(1751718202.741:814): avc: denied { getopt } for pid=8886 comm="syz.0.737" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.673848][ T30] audit: type=1400 audit(1751718202.771:815): avc: denied { append } for pid=8886 comm="syz.0.737" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 326.703529][ T30] audit: type=1400 audit(1751718202.781:816): avc: denied { read } for pid=8886 comm="syz.0.737" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 326.863726][ T6389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.993001][ T6389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.082462][ T6389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.132490][ T6389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.190424][ T6389] bridge_slave_1: left allmulticast mode [ 327.196287][ T6389] bridge_slave_1: left promiscuous mode [ 327.202424][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.212621][ T6389] bridge_slave_0: left allmulticast mode [ 327.218270][ T6389] bridge_slave_0: left promiscuous mode [ 327.224219][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.448723][ T6389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.458878][ T6389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.469053][ T6389] bond0 (unregistering): Released all slaves [ 327.656343][ T6389] hsr_slave_0: left promiscuous mode [ 327.663818][ T6389] hsr_slave_1: left promiscuous mode [ 327.669450][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.677266][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.687737][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.695298][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.712136][ T6389] veth1_macvtap: left promiscuous mode [ 327.717631][ T6389] veth0_macvtap: left promiscuous mode [ 327.723447][ T6389] veth1_vlan: left promiscuous mode [ 327.728836][ T6389] veth0_vlan: left promiscuous mode [ 328.042677][ T30] audit: type=1400 audit(1751718204.701:817): avc: denied { ioctl } for pid=8893 comm="syz.4.741" path="socket:[23104]" dev="sockfs" ino=23104 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 328.067293][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.420965][ T5973] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 328.602167][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.613501][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.622155][ T5973] usb 4-1: Using ep0 maxpacket: 16 [ 328.670967][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.681644][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.695268][ T5973] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 328.723308][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.738559][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.747557][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.761317][ T5973] usb 4-1: config 0 descriptor?? [ 329.019266][ T30] audit: type=1326 audit(1751718205.671:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 329.093611][ T30] audit: type=1326 audit(1751718205.671:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 329.163316][ T30] audit: type=1326 audit(1751718205.681:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 329.249485][ T30] audit: type=1326 audit(1751718205.681:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 329.273551][ T30] audit: type=1326 audit(1751718205.681:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 329.300522][ T30] audit: type=1326 audit(1751718205.681:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 329.390125][ T5973] usbhid 4-1:0.0: can't add hid device: -71 [ 329.396332][ T5973] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 329.410359][ T5973] usb 4-1: USB disconnect, device number 17 [ 329.664130][ T6389] team0 (unregistering): Port device team_slave_1 removed [ 329.846234][ T6389] team0 (unregistering): Port device team_slave_0 removed [ 330.559823][ T8929] Falling back ldisc for ttyprintk. [ 330.802104][ T5829] Bluetooth: hci2: command tx timeout [ 330.858729][ T8906] lo speed is unknown, defaulting to 1000 [ 331.983486][ T5906] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 332.180800][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 332.521694][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.535846][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.545946][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 332.553102][ T5906] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 332.563245][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.579420][ T5906] usb 4-1: config 0 descriptor?? [ 332.930871][ T5829] Bluetooth: hci2: command tx timeout [ 333.004110][ T8906] chnl_net:caif_netlink_parms(): no params data found [ 333.132136][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.146244][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.177608][ T5906] cougar 0003:060B:500A.0005: unexpected long global item [ 333.256917][ T5906] cougar 0003:060B:500A.0005: parse failed [ 333.265435][ T5906] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22 [ 333.444164][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.105590][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.142132][ T8906] bridge_slave_0: entered allmulticast mode [ 334.175545][ T8906] bridge_slave_0: entered promiscuous mode [ 334.208932][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.307645][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.328126][ T8906] bridge_slave_1: entered allmulticast mode [ 334.354469][ T8906] bridge_slave_1: entered promiscuous mode [ 334.997776][ T8986] 9pnet_virtio: no channels available for device 127.0.0.1 [ 335.030679][ T5829] Bluetooth: hci2: command tx timeout [ 335.373984][ T43] usb 4-1: USB disconnect, device number 18 [ 335.487019][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 335.487031][ T30] audit: type=1326 audit(1751718212.141:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 335.565597][ T8906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.629120][ T8906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.740002][ T30] audit: type=1326 audit(1751718212.141:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 335.957727][ T8999] binder: binder_mmap: 8995 200000ffd000-200001000000 bad vm_flags failed -1 [ 336.052157][ T30] audit: type=1326 audit(1751718212.141:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 336.213909][ T30] audit: type=1326 audit(1751718212.141:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 336.216084][ T8906] team0: Port device team_slave_0 added [ 336.243277][ T30] audit: type=1326 audit(1751718212.141:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 336.243325][ T30] audit: type=1326 audit(1751718212.151:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 336.243366][ T30] audit: type=1326 audit(1751718212.151:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 336.243407][ T30] audit: type=1326 audit(1751718212.161:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 336.243445][ T30] audit: type=1326 audit(1751718212.161:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 336.243483][ T30] audit: type=1326 audit(1751718212.161:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73da38e929 code=0x7ffc0000 [ 336.775256][ T8906] team0: Port device team_slave_1 added [ 336.867839][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.895668][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.923187][ T8906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.935613][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.945681][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.140962][ T8906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.150643][ T5829] Bluetooth: hci2: command tx timeout [ 337.305695][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 337.338897][ T8906] hsr_slave_0: entered promiscuous mode [ 337.398021][ T8906] hsr_slave_1: entered promiscuous mode [ 337.408315][ T8906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.416002][ T8906] Cannot create hsr debugfs directory [ 338.628285][ T8906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.777283][ T8906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.816750][ T8906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.860127][ T8906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.296754][ T9055] sctp: [Deprecated]: syz.4.778 (pid 9055) Use of int in max_burst socket option deprecated. [ 339.296754][ T9055] Use struct sctp_assoc_value instead [ 339.382075][ T8906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.434134][ T8906] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.448340][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.455536][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.492824][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.500010][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.724963][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 339.734372][ T9066] FAULT_INJECTION: forcing a failure. [ 339.734372][ T9066] name failslab, interval 1, probability 0, space 0, times 0 [ 339.757318][ T9066] CPU: 0 UID: 0 PID: 9066 Comm: syz.1.781 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 339.757347][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.757358][ T9066] Call Trace: [ 339.757364][ T9066] [ 339.757372][ T9066] dump_stack_lvl+0x16c/0x1f0 [ 339.757404][ T9066] should_fail_ex+0x512/0x640 [ 339.757428][ T9066] ? __kvmalloc_node_noprof+0x124/0x620 [ 339.757454][ T9066] should_failslab+0xc2/0x120 [ 339.757481][ T9066] __kvmalloc_node_noprof+0x137/0x620 [ 339.757501][ T9066] ? alloc_netdev_mqs+0xfbe/0x1570 [ 339.757526][ T9066] ? alloc_netdev_mqs+0xfbe/0x1570 [ 339.757545][ T9066] alloc_netdev_mqs+0xfbe/0x1570 [ 339.757570][ T9066] rtnl_create_link+0xc08/0xf90 [ 339.757593][ T9066] rtnl_newlink+0xb69/0x2000 [ 339.757620][ T9066] ? __pfx_rtnl_newlink+0x10/0x10 [ 339.757639][ T9066] ? find_held_lock+0x2b/0x80 [ 339.757658][ T9066] ? avc_has_perm_noaudit+0x117/0x3b0 [ 339.757676][ T9066] ? avc_has_perm_noaudit+0x149/0x3b0 [ 339.757693][ T9066] ? cred_has_capability.isra.0+0x193/0x2f0 [ 339.757728][ T9066] ? find_held_lock+0x2b/0x80 [ 339.757744][ T9066] ? __pfx_rtnl_newlink+0x10/0x10 [ 339.757763][ T9066] ? __pfx_rtnl_newlink+0x10/0x10 [ 339.757782][ T9066] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 339.757803][ T9066] ? __pfx_rtnl_newlink+0x10/0x10 [ 339.757823][ T9066] rtnetlink_rcv_msg+0x95b/0xe90 [ 339.757846][ T9066] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.757873][ T9066] ? ref_tracker_free+0x37c/0x830 [ 339.757896][ T9066] netlink_rcv_skb+0x158/0x420 [ 339.757911][ T9066] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.757933][ T9066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.757954][ T9066] ? netlink_deliver_tap+0x1ae/0xd30 [ 339.757980][ T9066] netlink_unicast+0x53a/0x7f0 [ 339.757997][ T9066] ? __pfx_netlink_unicast+0x10/0x10 [ 339.758017][ T9066] netlink_sendmsg+0x8d1/0xdd0 [ 339.758035][ T9066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.758057][ T9066] ____sys_sendmsg+0xa95/0xc70 [ 339.758073][ T9066] ? copy_msghdr_from_user+0x10a/0x160 [ 339.758093][ T9066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.758117][ T9066] ___sys_sendmsg+0x134/0x1d0 [ 339.758137][ T9066] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.758155][ T9066] ? __lock_acquire+0x622/0x1c90 [ 339.758194][ T9066] __sys_sendmsg+0x16d/0x220 [ 339.758214][ T9066] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.758247][ T9066] do_syscall_64+0xcd/0x4c0 [ 339.758270][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.758289][ T9066] RIP: 0033:0x7f395c78e929 [ 339.758301][ T9066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.758315][ T9066] RSP: 002b:00007f395d619038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.758330][ T9066] RAX: ffffffffffffffda RBX: 00007f395c9b6080 RCX: 00007f395c78e929 [ 339.758338][ T9066] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000f [ 339.758351][ T9066] RBP: 00007f395d619090 R08: 0000000000000000 R09: 0000000000000000 [ 339.758359][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.758367][ T9066] R13: 0000000000000000 R14: 00007f395c9b6080 R15: 00007ffc4b978038 [ 339.758386][ T9066] [ 340.728060][ T8906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.887841][ T9079] tipc: Enabling of bearer rejected, already enabled [ 340.917613][ T8906] veth0_vlan: entered promiscuous mode [ 340.932056][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 340.932070][ T30] audit: type=1400 audit(1751718217.601:837): avc: denied { setopt } for pid=9078 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 340.935227][ T8906] veth1_vlan: entered promiscuous mode [ 340.998302][ T8906] veth0_macvtap: entered promiscuous mode [ 341.017499][ T30] audit: type=1400 audit(1751718217.681:838): avc: denied { bind } for pid=9078 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.056958][ T8906] veth1_macvtap: entered promiscuous mode [ 341.072361][ T30] audit: type=1400 audit(1751718217.681:839): avc: denied { node_bind } for pid=9078 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 341.104350][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.184694][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.210480][ T8906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.233096][ T8906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.254933][ T8906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.273988][ T8906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.408516][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.446220][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.542330][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.550225][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.194713][ T9117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.296984][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.824794][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.933714][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.028636][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.176434][ T70] bridge_slave_1: left allmulticast mode [ 344.183018][ T70] bridge_slave_1: left promiscuous mode [ 344.188744][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.202945][ T70] bridge_slave_0: left allmulticast mode [ 344.208611][ T70] bridge_slave_0: left promiscuous mode [ 344.216790][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.607193][ T9127] FAULT_INJECTION: forcing a failure. [ 344.607193][ T9127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.668746][ T9127] CPU: 0 UID: 0 PID: 9127 Comm: syz.4.799 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 344.668776][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.668788][ T9127] Call Trace: [ 344.668794][ T9127] [ 344.668801][ T9127] dump_stack_lvl+0x16c/0x1f0 [ 344.668832][ T9127] should_fail_ex+0x512/0x640 [ 344.668861][ T9127] _copy_to_user+0x32/0xd0 [ 344.668889][ T9127] simple_read_from_buffer+0xcb/0x170 [ 344.668915][ T9127] proc_fail_nth_read+0x197/0x270 [ 344.668939][ T9127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.668964][ T9127] ? rw_verify_area+0xcf/0x680 [ 344.668985][ T9127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.669012][ T9127] vfs_read+0x1e1/0xc60 [ 344.669038][ T9127] ? __pfx___mutex_lock+0x10/0x10 [ 344.669064][ T9127] ? __pfx_vfs_read+0x10/0x10 [ 344.669093][ T9127] ? __fget_files+0x20e/0x3c0 [ 344.669116][ T9127] ? __pfx_rcu_is_watching+0x10/0x10 [ 344.669147][ T9127] ksys_read+0x12a/0x250 [ 344.669169][ T9127] ? __pfx_ksys_read+0x10/0x10 [ 344.669199][ T9127] do_syscall_64+0xcd/0x4c0 [ 344.669227][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.669245][ T9127] RIP: 0033:0x7fb1a438d33c [ 344.669259][ T9127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.669276][ T9127] RSP: 002b:00007fb1a515d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.669293][ T9127] RAX: ffffffffffffffda RBX: 00007fb1a45b5fa0 RCX: 00007fb1a438d33c [ 344.669304][ T9127] RDX: 000000000000000f RSI: 00007fb1a515d0a0 RDI: 0000000000000004 [ 344.669314][ T9127] RBP: 00007fb1a515d090 R08: 0000000000000000 R09: 0000000000000000 [ 344.669325][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.669335][ T9127] R13: 0000000000000000 R14: 00007fb1a45b5fa0 R15: 00007fffc5eaf918 [ 344.669359][ T9127] [ 344.921965][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.953973][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.970398][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.991989][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.000079][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.007882][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.009234][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.025329][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.035303][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.036833][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.055161][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.073766][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.081821][ T70] bond0 (unregistering): Released all slaves [ 345.127285][ T9138] lo speed is unknown, defaulting to 1000 [ 345.166206][ T9136] lo speed is unknown, defaulting to 1000 [ 345.240749][ T974] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 345.496427][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 345.697882][ T974] usb 5-1: config 0 has no interfaces? [ 345.725185][ T974] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 346.720824][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.110770][ T5834] Bluetooth: hci1: command tx timeout [ 347.118178][ T5835] Bluetooth: hci2: command tx timeout [ 347.171010][ T9156] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 347.835272][ T974] usb 5-1: config 0 descriptor?? [ 348.077440][ T974] usb 5-1: USB disconnect, device number 20 [ 348.824300][ T70] hsr_slave_0: left promiscuous mode [ 348.846647][ T70] hsr_slave_1: left promiscuous mode [ 348.866127][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.887770][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.899577][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.910147][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.939282][ T30] audit: type=1400 audit(1751718225.601:840): avc: denied { listen } for pid=9167 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 348.961664][ T70] veth1_macvtap: left promiscuous mode [ 348.967204][ T70] veth0_macvtap: left promiscuous mode [ 348.982297][ T70] veth1_vlan: left promiscuous mode [ 348.987797][ T70] veth0_vlan: left promiscuous mode [ 348.999418][ T30] audit: type=1400 audit(1751718225.601:841): avc: denied { accept } for pid=9167 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 349.028939][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 349.044138][ T30] audit: type=1400 audit(1751718225.691:842): avc: denied { write } for pid=9167 comm="syz.1.809" path="socket:[25653]" dev="sockfs" ino=25653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 349.072306][ T30] audit: type=1400 audit(1751718225.691:843): avc: denied { write } for pid=9167 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 349.132261][ T5961] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 349.193443][ T5835] Bluetooth: hci2: command tx timeout [ 349.199007][ T5834] Bluetooth: hci1: command tx timeout [ 349.290800][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 349.302093][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.322115][ T5961] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.345507][ T5961] usb 4-1: config 0 interface 0 has no altsetting 0 [ 349.366214][ T5961] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c09, bcdDevice= 0.00 [ 349.375805][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.401611][ T5961] usb 4-1: config 0 descriptor?? [ 350.086548][ T70] team0 (unregistering): Port device team_slave_1 removed [ 350.212502][ T70] team0 (unregistering): Port device team_slave_0 removed [ 351.271491][ T5834] Bluetooth: hci1: command tx timeout [ 351.277059][ T5835] Bluetooth: hci2: command tx timeout [ 351.670448][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 351.698091][ T9179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.812'. [ 351.747697][ T9136] chnl_net:caif_netlink_parms(): no params data found [ 352.225746][ T9180] netlink: 80 bytes leftover after parsing attributes in process `syz.1.812'. [ 352.684165][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.704152][ T5961] usb 4-1: string descriptor 0 read error: -71 [ 352.711881][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.719082][ T9138] bridge_slave_0: entered allmulticast mode [ 352.727353][ T5961] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 352.848353][ T5961] usb 4-1: USB disconnect, device number 19 [ 352.860387][ T9138] bridge_slave_0: entered promiscuous mode [ 353.351025][ T5834] Bluetooth: hci1: command tx timeout [ 353.358033][ T5835] Bluetooth: hci2: command tx timeout [ 355.625324][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.653760][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.250946][ T9138] bridge_slave_1: entered allmulticast mode [ 356.279790][ T9138] bridge_slave_1: entered promiscuous mode [ 356.401004][ T9203] could not allocate digest TFM handle sha224-ssse3 [ 356.423064][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.456670][ T9210] FAULT_INJECTION: forcing a failure. [ 356.456670][ T9210] name failslab, interval 1, probability 0, space 0, times 0 [ 356.476270][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.518619][ T9136] bridge_slave_0: entered allmulticast mode [ 356.531074][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.1.817 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 356.531101][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.531111][ T9210] Call Trace: [ 356.531118][ T9210] [ 356.531125][ T9210] dump_stack_lvl+0x16c/0x1f0 [ 356.531163][ T9210] should_fail_ex+0x512/0x640 [ 356.531186][ T9210] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 356.531210][ T9210] should_failslab+0xc2/0x120 [ 356.531237][ T9210] __kmalloc_cache_noprof+0x6a/0x3e0 [ 356.531259][ T9210] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 356.531289][ T9210] ? kasan_save_track+0x14/0x30 [ 356.531314][ T9210] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 356.531348][ T9210] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 356.531375][ T9210] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 356.531413][ T9210] snd_mixer_oss_ioctl1+0x1880/0x1cf0 [ 356.531437][ T9210] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.531464][ T9210] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 356.531492][ T9210] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 356.531523][ T9210] ? tomoyo_path_number_perm+0x18d/0x580 [ 356.531550][ T9210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.531575][ T9210] ? do_vfs_ioctl+0x523/0x1a60 [ 356.531596][ T9210] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 356.531621][ T9210] snd_mixer_oss_ioctl_card+0x102/0x170 [ 356.531646][ T9210] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 356.531674][ T9210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 356.531706][ T9210] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 356.531726][ T9210] ? hook_file_ioctl_common+0x145/0x410 [ 356.531745][ T9210] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 356.531767][ T9210] ? selinux_file_ioctl+0x180/0x270 [ 356.531790][ T9210] ? selinux_file_ioctl+0xb4/0x270 [ 356.531816][ T9210] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 356.531836][ T9210] __x64_sys_ioctl+0x18e/0x210 [ 356.531859][ T9210] do_syscall_64+0xcd/0x4c0 [ 356.531886][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.531904][ T9210] RIP: 0033:0x7f395c78e929 [ 356.531919][ T9210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.531936][ T9210] RSP: 002b:00007f395d63a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.531953][ T9210] RAX: ffffffffffffffda RBX: 00007f395c9b5fa0 RCX: 00007f395c78e929 [ 356.531964][ T9210] RDX: 0000200000000200 RSI: 0000000080044dff RDI: 0000000000000003 [ 356.531975][ T9210] RBP: 00007f395d63a090 R08: 0000000000000000 R09: 0000000000000000 [ 356.531985][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.531994][ T9210] R13: 0000000000000000 R14: 00007f395c9b5fa0 R15: 00007ffc4b978038 [ 356.532019][ T9210] [ 356.537486][ T9136] bridge_slave_0: entered promiscuous mode [ 363.230565][ C1] sched: DL replenish lagged too much [ 368.353152][ T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 368.468316][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.519315][ T30] audit: type=1400 audit(1751718245.151:844): avc: denied { connect } for pid=9220 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 370.013318][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.110757][ T9136] bridge_slave_1: entered allmulticast mode [ 370.126598][ T9136] bridge_slave_1: entered promiscuous mode [ 370.230265][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.262348][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.703134][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.746961][ T9138] team0: Port device team_slave_0 added [ 370.811241][ T9138] team0: Port device team_slave_1 added [ 370.964472][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.266898][ T9239] IPv6: Can't replace route, no match found [ 371.376358][ T9136] team0: Port device team_slave_0 added [ 371.399210][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.438110][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.540804][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.572956][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.602593][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.664368][ T30] audit: type=1400 audit(1751718248.321:845): avc: denied { ioctl } for pid=9240 comm="syz.3.827" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 371.708218][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.756422][ T30] audit: type=1400 audit(1751718248.371:846): avc: denied { write } for pid=9231 comm="syz.1.823" path="socket:[25317]" dev="sockfs" ino=25317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 371.815353][ T9136] team0: Port device team_slave_1 added [ 371.988683][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.827'. [ 372.115894][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.132262][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.479729][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.521134][ T9256] overlayfs: missing 'lowerdir' [ 375.139546][ T9249] could not allocate digest TFM handle sha224-ssse3 [ 375.162070][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.174053][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.310729][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.339345][ T9138] hsr_slave_0: entered promiscuous mode [ 375.365126][ T9138] hsr_slave_1: entered promiscuous mode [ 375.375409][ T9138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.387636][ T9138] Cannot create hsr debugfs directory [ 375.603133][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 375.677465][ T9264] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 376.342606][ T9264] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 376.368053][ T9273] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 376.424919][ T9136] hsr_slave_0: entered promiscuous mode [ 376.468758][ T9136] hsr_slave_1: entered promiscuous mode [ 376.501536][ T9136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.543106][ T9136] Cannot create hsr debugfs directory [ 376.611801][ T9276] IPv6: Can't replace route, no match found [ 377.293265][ T9285] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.834'. [ 377.312071][ T9285] netlink: zone id is out of range [ 377.317191][ T9285] netlink: zone id is out of range [ 377.333922][ T9285] netlink: zone id is out of range [ 377.339023][ T9285] netlink: get zone limit has 8 unknown bytes [ 378.322554][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.122030][ T9292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.837'. [ 379.226234][ T30] audit: type=1400 audit(1751718255.891:847): avc: denied { call } for pid=9293 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 379.772761][ T9302] overlayfs: missing 'lowerdir' [ 380.426719][ T974] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 439.986333][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.210254][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 468.460205][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 485.730522][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 485.737508][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9302/1:b..l [ 485.745868][ C0] rcu: (detected by 0, t=10502 jiffies, g=31793, q=1092302 ncpus=2) [ 485.753940][ C0] task:syz.3.840 state:R running task stack:27672 pid:9302 tgid:9297 ppid:5830 task_flags:0x40054c flags:0x00004002 [ 485.768533][ C0] Call Trace: [ 485.771822][ C0] [ 485.774756][ C0] __schedule+0x116a/0x5de0 [ 485.779270][ C0] ? get_signal+0x2673/0x26d0 [ 485.783962][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 485.788912][ C0] ? __pfx___schedule+0x10/0x10 [ 485.793779][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.798826][ C0] ? __lock_acquire+0x622/0x1c90 [ 485.803791][ C0] preempt_schedule_irq+0x51/0x90 [ 485.808845][ C0] irqentry_exit+0x36/0x90 [ 485.813279][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.819265][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0x20 [ 485.826037][ C0] Code: 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 [ 485.845644][ C0] RSP: 0018:ffffc90003407228 EFLAGS: 00000246 [ 485.851728][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff822e9c87 [ 485.859681][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 485.867628][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 485.875582][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffea000139b140 [ 485.883524][ C0] R13: 00000058a380e34a R14: 0000000000000000 R15: 00000000024002ac [ 485.891487][ C0] ? page_ext_put+0x27/0xd0 [ 485.895985][ C0] page_ext_put+0x63/0xd0 [ 485.900293][ C0] __reset_page_owner+0x7a/0x1a0 [ 485.905225][ C0] free_unref_folios+0xa65/0x1800 [ 485.910230][ C0] ? rcu_is_watching+0x12/0xc0 [ 485.914970][ C0] folios_put_refs+0x56f/0x740 [ 485.919715][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 485.924988][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 485.931298][ C0] shmem_undo_range+0x58f/0x1150 [ 485.936216][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 485.941568][ C0] ? __lock_acquire+0x622/0x1c90 [ 485.946499][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 485.951681][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 485.956423][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 485.962552][ C0] ? percpu_counter_add_batch+0xb8/0x1f0 [ 485.968186][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 485.973216][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 485.978699][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 485.984778][ C0] ? find_held_lock+0x2b/0x80 [ 485.989437][ C0] ? evict+0x3a2/0x920 [ 485.993479][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 485.998917][ C0] evict+0x3e6/0x920 [ 486.002787][ C0] ? __pfx_evict+0x10/0x10 [ 486.007177][ C0] ? iput+0x519/0x880 [ 486.011133][ C0] iput+0x521/0x880 [ 486.014913][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 486.020621][ C0] dentry_unlink_inode+0x29c/0x480 [ 486.025714][ C0] __dentry_kill+0x1d0/0x600 [ 486.030297][ C0] dput.part.0+0x4b1/0x9b0 [ 486.034702][ C0] dput+0x1f/0x30 [ 486.038309][ C0] __fput+0x51c/0xb70 [ 486.042265][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.047442][ C0] task_work_run+0x150/0x240 [ 486.052007][ C0] ? __pfx_task_work_run+0x10/0x10 [ 486.057212][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 486.062418][ C0] do_exit+0x86c/0x2bd0 [ 486.066568][ C0] ? lock_acquire+0x179/0x350 [ 486.071222][ C0] ? __pfx_do_exit+0x10/0x10 [ 486.075792][ C0] ? find_held_lock+0x2b/0x80 [ 486.080444][ C0] do_group_exit+0xd3/0x2a0 [ 486.084925][ C0] get_signal+0x2673/0x26d0 [ 486.089407][ C0] ? __pfx_get_signal+0x10/0x10 [ 486.094232][ C0] ? rcu_is_watching+0x12/0xc0 [ 486.098972][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 486.104512][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 486.110664][ C0] ? __pfx___x64_sys_mount+0x10/0x10 [ 486.115934][ C0] exit_to_user_mode_loop+0x84/0x110 [ 486.121208][ C0] do_syscall_64+0x3f6/0x4c0 [ 486.125794][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.131671][ C0] RIP: 0033:0x7f4d6a38e929 [ 486.136059][ C0] RSP: 002b:00007f4d6b165038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 486.144457][ C0] RAX: ffffffffffffffea RBX: 00007f4d6a5b6160 RCX: 00007f4d6a38e929 [ 486.152401][ C0] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 486.160347][ C0] RBP: 00007f4d6a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 486.168303][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.176248][ C0] R13: 0000000000000000 R14: 00007f4d6a5b6160 R15: 00007ffd77532148 [ 486.184197][ C0]