last executing test programs: 1m51.473749575s ago: executing program 4 (id=654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) io_setup(0x6, &(0x7f0000001380)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="280100001a0007000800000000000000ff020000000000000000000000000001e0000002000000000000000000000000ff000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400000000007f00000000000000000000000a000200700000000000000014000e00ac14142400000000000000000000000024000900fdffffffffffffff070000000000000081000000000000000900000000000000"], 0x128}}, 0x4000040) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x0, 0x7, 0x0, 0x9}, 'syz1\x00', 0x3d}) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000500)={0x52, 0x9, 0x4, {0x2, 0xdac}, {0x8000, 0x7}, @cond=[{0xeeb, 0x405, 0x5, 0x610b, 0x8, 0x2cf2}, {0x2, 0x2, 0x5, 0xfff9, 0x6, 0x3b7e}]}) fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) socket$packet(0x11, 0x2, 0x300) r8 = io_uring_setup(0x13b5, &(0x7f0000000140)={0x0, 0x5606, 0x4200, 0xdfffffff, 0x2fa}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) 1m49.024220074s ago: executing program 4 (id=667): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0xe2d47c7d41d810e, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000ef001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r8, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m21.366340667s ago: executing program 4 (id=667): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0xe2d47c7d41d810e, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000ef001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r8, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m0.813581003s ago: executing program 4 (id=667): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0xe2d47c7d41d810e, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000ef001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r8, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 31.613973213s ago: executing program 4 (id=667): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0xe2d47c7d41d810e, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000ef001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r8, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 12.004376844s ago: executing program 4 (id=667): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0xe2d47c7d41d810e, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000ef001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r8, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.204008754s ago: executing program 1 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000b000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) socket$netlink(0x10, 0x3, 0x7) 8.112671836s ago: executing program 2 (id=960): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, &(0x7f00000035c0)='quota') 6.872833485s ago: executing program 3 (id=963): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001440)={@default, @default}) (fail_nth: 1) 6.328612724s ago: executing program 3 (id=967): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x289e0cb5, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 6.224555241s ago: executing program 2 (id=968): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x108001, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000280)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "e88d7d3b085d5ba40072e825a57c6149e591f6b80e90c16153"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x9}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0xc8}}, 0x0) syslog(0x9, 0x0, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r8, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004854}, 0x4) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0xc2020, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000001) 5.900919276s ago: executing program 0 (id=969): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) (fail_nth: 2) 5.21264139s ago: executing program 0 (id=970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2800, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0xfffffee5, 0x0}}], 0xf00, 0xf0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000805) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x8, 0x6, 0x7fff, 0x2, 0xe, 0xb859, 0x200, 0xe1]}}, 0x5c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000008000340000000000800014000000015140001800b00010072656a6563740000040002800900010073797a30000000020900020073797a3200000000140000001100010000000000000000000a00000a"], 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c13a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001a0001000000000000000000020000008192245deb8dd25bdf272207a256bad55d051251a772694c11"], 0x14}}, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='kfree\x00', r9}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4.79403138s ago: executing program 1 (id=971): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 4.204720946s ago: executing program 3 (id=972): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ff"], 0x4c}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008800000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 4.095562976s ago: executing program 1 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x541b, 0x1000000000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="440000001a000100000000000000000081808000000000000000000014000200fe800000001f000000000000000000bb14000100fc000000000000000000000000000000185262bf1919c43855f89a6f1c396d575fa7904a89538757afb782b1a353e71b3f3fad042d9aa2dcd2f309068cb91f06349651bda56e5acb"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x37}, [@IFA_RT_PRIORITY={0x8, 0xa, 0x80}]}, 0x20}, 0x1, 0x0, 0x0, 0x6bddc2c2db483bf4}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), 0x0, 0x17, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r11, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket(0x10, 0x803, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0xffff, 0xffff}, {0xffed}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x4, 0x19, 0x5a, @private1, @remote, 0x20, 0x40, 0x3, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @broadcast}, &(0x7f0000000700)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)={0x254, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x74be32104401186f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x14, r4, 0x1, 0x70bd22, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008000) 4.060367156s ago: executing program 2 (id=974): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000003280)='#', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="7f552b84e40eb0d1e0c60392d34009a8d15935f66db347340898c2e0f212f85cad7ac3f784dfae9e2c53707f5981b94efba342bf6ea89c2fe35ff39a38881be90a1e482e8d0fdf58964318951543a417277a0e3a0adb9989076d5c1b9941a2b8f139cca669b9fc683015ab1adb8a060778a9f41e527ecff8fcc5afee883d0c918620145dcdc9103a900628b4581ba106c5d4d7e42f07e2b7a352feab745e52fea48d92fab11fa01ac963d54a1d2152def9dd63ff551d815e8cdb5b15ee48d92293869402490261b96b0184533372867504187bad69376189fff04e78214d6788cbf381cc22912f3dcb50141b917127550140786f6587d4f6e1604fd92f9e767a4b440664c128eb73a4c8d2e06571928e40273db48a1af4641df08b4a1df13107e425a547b8fc5d241190c6f6b56984e6b221555db6a026ae58217f39ebe553c9dcc690df8b81b2186ad894e71d8b691b085bc6c12547a46a0ef9b16f9a10f4d916f00b25a993150e93b16a547a676d0a9967af1618be257a264d31328127bf06a68d661356a3f6ac8b3f01a5e83918f9d3a8e14b335f43e44ff21ea467c358ac3038d67d6b18a31a4cf7f9b7e074f34d7e1fd47ffa44a54ff6774ae657a341757ece6520b5bcae3147d71d77e84ad148e4578b6702135fdf25457817cb0e8c90bcd10799bad5c24658681194eced5fee431ad0558b0b33a85f3c73f5c169c39686bc43dec5c412db48b0d538a343feebbe1614238c66f65f932342a408e07f432ba0c72a86976d9afd5de7d86b1129df642bb0bc03133d3bf8f0b4efa765e6f30d0e2803100e2d78fe9ee1235410c9d7612f7ee396b5f745868867143d79c0e97133dfaacfd6188431128b85afa4b8c6334ce678d9f1c81ea656915c6773c31a855d5e34f5c75c51ce97cd8bb43b76baaae94cd4bbf3d2da0c7ed9392e042323181cd66e5a13b7da28688834e80bda80263e73e15805a2ab88a81292f8822ce5864ac53d38f7add565a19225705dabba1f73edb89e84b4abf6f6c5a5b4f5dc5769f8b45831124defe64ef9d0336d15516494b637a09c8c6698561485f33fec037cd61482742b26fc0b358690161448bd73e9bb98fb46229eb6a4c5c3817c65927153195d25ee1f6161177676168f56835ba74d3061e7206d8a4cd50925d399f4d3e5f7d34e3250098b0d0c4660cfbbe833857e8d8ae5040fd84e7710c2ca8b151c6793400b81289b0e5968cd86cf", 0x36e, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001080)={r3, r4, r3}, &(0x7f00000010c0)=""/48, 0x30, &(0x7f0000001180)={&(0x7f0000001100)={'streebog256\x00'}, &(0x7f00000005c0)}) 3.801292246s ago: executing program 0 (id=975): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, 0x0, &(0x7f00000000c0)) epoll_create1(0x0) syz_emit_vhci(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000680)="ef55", 0x2}], 0x1, 0xa, 0x8) mkdir(&(0x7f0000000440)='.\x00', 0x1) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6(0xa, 0x80000, 0x2) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x7f, @local, 0x80000001}, 0x1c) connect$inet6(r5, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.044755344s ago: executing program 2 (id=976): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080) 2.167548866s ago: executing program 1 (id=977): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000002c0)={0x5d, 0x3ff, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) setresuid(0xffffffffffffffff, 0xee01, 0xee00) socket(0x10, 0x3, 0x9) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x6610}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040804}, 0xc098) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[], 0x114}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) 2.129876186s ago: executing program 2 (id=978): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000001408000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 2.052706385s ago: executing program 0 (id=979): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100210100000000000000000a0000000000000000000000080018004e"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000200)) socket$inet(0x2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.447861112s ago: executing program 2 (id=980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340)={0x4, 0x0, 0xdf, 0x0, 0x1000000}, 0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc121596e6d98d66b, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0xffffffff, &(0x7f0000000180)=0x3, &(0x7f0000000040)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000001, 0x0, 0xfd, "d4e9002b2c000000ff00"}) r2 = syz_open_pts(r1, 0x0) dup(r2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mlockall(0x1) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) getxattr(0x0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="692effc47ada9a255143ea4562ce1e00007e0000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000004000000050000000700"/28], 0x50) close_range(r4, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.20042439s ago: executing program 1 (id=981): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = dup3(r3, r0, 0x80000) ioctl$NBD_DO_IT(r5, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xa4, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x803e}, 0x20000004) 1.024651455s ago: executing program 0 (id=982): syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x16, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x16, 0x0, @opaque="02aadf0062dfafe40d02434feee9"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008000}, 0x240048c5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000380)=[r5, r5, r4], 0x3, 0x80800}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000400)={r4, 0x4, &(0x7f0000000200)=[0xfff, 0x0, 0x1322, 0x0], &(0x7f0000000280)=[0x5, 0x0, 0x40, 0xd0, 0xc366, 0x2, 0x6, 0x9, 0x8], &(0x7f00000003c0)=[0x6, 0x9, 0x0, 0x8, 0x2, 0xe, 0xfff]}) sendfile(r2, r2, 0x0, 0xb) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0xc0403d08, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) readv(r7, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) 998.245244ms ago: executing program 3 (id=983): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 452.796232ms ago: executing program 0 (id=984): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bd270d403c41178259b20102030102001200010000500009046a0a00ef31df01"], 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x2b, 0x2}, &(0x7f00000000c0)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a102"], 0x0) syz_usb_disconnect(r5) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000ffdfefffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000800600001400128009000100766c616e00000000040002800a000100bbbbbbbbbbbb00008fe69a09dd82a141ab78c4390b3264ccc589bd0009775cc1e5ff724eb1c66f649477a2916cc6ad3adc7386e0e34f9b1ae154b49b2dd8e25beea76366544b2ebcf87f32909206b47d70d0b01ede699b0fd370657625fe79dca589a7788274a8309e5362d9716f6c66039cf49fe826e4365f6b0f7fa79e31dcc970fcb520bbd86b112d5c35e9adc52b1ae8d134d9bf8933e93e441bad22ce5b6dfba5e3b02a3cd373b9"], 0x40}, 0x1, 0x0, 0x0, 0x24000}, 0x4000000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {r6, r7+10000000}}, &(0x7f0000000200)) r8 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa, 0x2}, {0xfff6, 0x6}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x24004000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$EVIOCRMFF(r0, 0x5509, 0x0) 428.466634ms ago: executing program 3 (id=985): fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) (fail_nth: 7) 644.689ยตs ago: executing program 3 (id=986): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, &(0x7f0000003280)='#', 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="7f552b84e40eb0d1e0c60392d34009a8d15935f66db347340898c2e0f212f85cad7ac3f784dfae9e2c53707f5981b94efba342bf6ea89c2fe35ff39a38881be90a1e482e8d0fdf58964318951543a417277a0e3a0adb9989076d5c1b9941a2b8f139cca669b9fc683015ab1adb8a060778a9f41e527ecff8fcc5afee883d0c918620145dcdc9103a900628b4581ba106c5d4d7e42f07e2b7a352feab745e52fea48d92fab11fa01ac963d54a1d2152def9dd63ff551d815e8cdb5b15ee48d92293869402490261b96b0184533372867504187bad69376189fff04e78214d6788cbf381cc22912f3dcb50141b917127550140786f6587d4f6e1604fd92f9e767a4b440664c128eb73a4c8d2e06571928e40273db48a1af4641df08b4a1df13107e425a547b8fc5d241190c6f6b56984e6b221555db6a026ae58217f39ebe553c9dcc690df8b81b2186ad894e71d8b691b085bc6c12547a46a0ef9b16f9a10f4d916f00b25a993150e93b16a547a676d0a9967af1618be257a264d31328127bf06a68d661356a3f6ac8b3f01a5e83918f9d3a8e14b335f43e44ff21ea467c358ac3038d67d6b18a31a4cf7f9b7e074f34d7e1fd47ffa44a54ff6774ae657a341757ece6520b5bcae3147d71d77e84ad148e4578b6702135fdf25457817cb0e8c90bcd10799bad5c24658681194eced5fee431ad0558b0b33a85f3c73f5c169c39686bc43dec5c412db48b0d538a343feebbe1614238c66f65f932342a408e07f432ba0c72a86976d9afd5de7d86b1129df642bb0bc03133d3bf8f0b4efa765e6f30d0e2803100e2d78fe9ee1235410c9d7612f7ee396b5f745868867143d79c0e97133dfaacfd6188431128b85afa4b8c6334ce678d9f1c81ea656915c6773c31a855d5e34f5c75c51ce97cd8bb43b76baaae94cd4bbf3d2da0c7ed9392e042323181cd66e5a13b7da28688834e80bda80263e73e15805a2ab88a81292f8822ce5864ac53d38f7add565a19225705dabba1f73edb89e84b4abf6f6c5a5b4f5dc5769f8b45831124defe64ef9d0336d15516494b637a09c8c6698561485f33fec037cd61482742b26fc0b358690161448bd73e9bb98fb46229eb6a4c5c3817c65927153195d25ee1f6161177676168f56835ba74d3061e7206d8a4cd50925d399f4d3e5f7d34e3250098b0d0c4660cfbbe833857e8d8ae5040fd84e7710c2ca8b151c6793400b81289b0e5968cd86cf", 0x36e, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001080)={r3, r4, r3}, &(0x7f00000010c0)=""/48, 0x30, &(0x7f0000001180)={&(0x7f0000001100)={'streebog256\x00'}, &(0x7f00000005c0)}) 0s ago: executing program 1 (id=987): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000480)="58504d2a8ddaed8c0bafbd01dacb88b183ca633352b5f68db993d1656dc3b4e362848513e7f1c111cf6c9067e67fa72b1bb95835bcc5649590740a35b2d0edc427d06975f847db18fa4aeec0964007551128c07c6df15235dd94fb99dfc8e14c72836489713d2bc4620c071c00a911daaa7f783c661359d09661d2ceedc44e88a0771c5b89fc0692f4e52d7567511c4182e48ed244d662c81aab932a487d80fe14ff641073912247155ad650704712782e360ff399e62d0b6ac1c1b0d4a73b26", 0xda, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f00000002c0)="d31c410fa3f114db79458b074c01483041916346faddb64124f04f484a8eb37181e5a6097dc4b48e5743d73fcf144142ee33a70300c2632f5f2f3fc1ae5f9ceac06c6c8f3137e843ea6b3fd43beced35966de3097c4ec0d5f7ec6965952dd3df0f55c7fad4ed83e68d74a2944ed88761b5b75b38ecc8359a9b54d0edc9bdee742a2fbe42ba88f85758ab9bd70d9dc97d89b401cace55c995bd7c56b5e7b2b48149a66d9c230e4362e105413bf744e760330ff54d99e9e92259b3edcf62fd2a25c5762123a96ddd5ab65ec0323539b1529376ebb9667144f8a7c28367ff81c326bdadd79a40f7d6901f97083c0f20d562724b265105", 0xf5, r1) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x4) kernel console output (not intermixed with test programs): hcd [ 258.125137][ T5896] usb 1-1: device descriptor read/8, error -71 [ 258.222080][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.267010][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.289340][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.318169][ T8539] lo speed is unknown, defaulting to 1000 [ 258.325054][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.357774][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.454595][ T5896] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 258.477204][ T8544] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 258.478912][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.498123][ T8542] lo speed is unknown, defaulting to 1000 [ 258.513777][ T5896] usb 1-1: device descriptor read/8, error -71 [ 258.520909][ T8545] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 258.530574][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.599'. [ 258.578094][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.627043][ T5896] usb usb1-port1: unable to enumerate USB device [ 258.770083][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.819639][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.848152][ T5912] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 258.858384][ T5912] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 258.870035][ T5912] usb 4-1: Product: syz [ 258.875099][ T5912] usb 4-1: Manufacturer: syz [ 258.883045][ T5912] usb 4-1: SerialNumber: syz [ 258.893457][ T5912] usb 4-1: config 0 descriptor?? [ 258.911473][ T5912] yurex 4-1:0.0: Could not find endpoints [ 259.051323][ T51] Bluetooth: hci0: unexpected event for opcode 0x200c [ 259.106777][ T5912] usb 4-1: USB disconnect, device number 16 [ 259.152772][ T8561] loop6: detected capacity change from 0 to 63 [ 259.163390][ T8561] ldm_validate_partition_table(): Disk read failed. [ 259.170885][ T8561] Dev loop6: unable to read RDB block 0 [ 259.176752][ T8561] loop6: unable to read partition table [ 259.186144][ T8561] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 259.536921][ T8562] could not allocate digest TFM handle sha256-ce [ 259.543453][ T8569] capability: warning: `syz.0.606' uses 32-bit capabilities (legacy support in use) [ 259.600313][ T5203] ldm_validate_partition_table(): Disk read failed. [ 259.618782][ T5203] Dev loop6: unable to read RDB block 0 [ 259.634393][ T5203] loop6: unable to read partition table [ 261.949892][ T8586] pim6reg1: entered allmulticast mode [ 262.163513][ T8596] netlink: 'syz.1.615': attribute type 4 has an invalid length. [ 262.173038][ T8594] lo speed is unknown, defaulting to 1000 [ 262.178882][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.615'. [ 262.971484][ T8610] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 263.883458][ T5912] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 263.915131][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 263.942209][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 264.062788][ T30] audit: type=1400 audit(1751735873.027:557): avc: denied { ioctl } for pid=8625 comm="syz.1.623" path="socket:[15990]" dev="sockfs" ino=15990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.228908][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 264.308014][ T5912] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 264.323299][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.481644][ T5912] usb 1-1: Product: syz [ 265.486446][ T5912] usb 1-1: Manufacturer: syz [ 265.491601][ T5912] usb 1-1: SerialNumber: syz [ 266.218472][ T30] audit: type=1800 audit(1751735875.274:558): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.619" name="bus" dev="overlay" ino=772 res=0 errno=0 [ 267.935239][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.984741][ T5912] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 268.033867][ T5912] usb 1-1: USB disconnect, device number 20 [ 268.050821][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.414198][ T43] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 268.597772][ T8671] lo speed is unknown, defaulting to 1000 [ 268.609014][ T43] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 268.618599][ T8673] syz.3.634: attempt to access beyond end of device [ 268.618599][ T8673] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 268.641185][ T43] usb 2-1: config 0 has no interface number 0 [ 268.642993][ T8676] netlink: 'syz.0.633': attribute type 4 has an invalid length. [ 268.653948][ T43] usb 2-1: config 0 interface 63 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 268.657782][ T8673] syz.3.634: attempt to access beyond end of device [ 268.657782][ T8673] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 268.666622][ T43] usb 2-1: config 0 interface 63 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 268.694708][ T43] usb 2-1: config 0 interface 63 has no altsetting 0 [ 268.704383][ T43] usb 2-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=9f.58 [ 268.720910][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.730745][ T43] usb 2-1: Product: syz [ 268.740160][ T43] usb 2-1: Manufacturer: syz [ 268.748246][ T43] usb 2-1: SerialNumber: syz [ 268.758797][ T8673] Mount JFS Failure: -5 [ 268.772314][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 268.789666][ T43] usb 2-1: config 0 descriptor?? [ 268.808614][ T8663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.840834][ T8663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.879540][ T43] f81534 2-1:0.63: unsupported endpoint max packet size [ 268.934398][ T8681] syz.3.634: attempt to access beyond end of device [ 268.934398][ T8681] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 268.947664][ T8681] gfs2: error -5 reading superblock [ 269.153011][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.172211][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.192034][ T8663] x_tables: duplicate underflow at hook 1 [ 269.203855][ T5946] usb 2-1: USB disconnect, device number 17 [ 269.270119][ T8686] netlink: 'syz.4.636': attribute type 10 has an invalid length. [ 269.286100][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.294948][ T8686] team0: entered promiscuous mode [ 269.300432][ T8686] bond0: (slave team0): Enslaving as an active interface with an up link [ 269.888119][ T8703] pim6reg1: entered allmulticast mode [ 270.140521][ T5946] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 270.296174][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.307316][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.319433][ T5946] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 270.328883][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.340633][ T5946] usb 4-1: config 0 descriptor?? [ 270.470259][ T30] audit: type=1400 audit(1751735879.758:559): avc: denied { bind } for pid=8710 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.490369][ T30] audit: type=1400 audit(1751735879.758:560): avc: denied { write } for pid=8710 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.510777][ T30] audit: type=1400 audit(1751735879.758:561): avc: denied { accept } for pid=8710 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.532835][ T30] audit: type=1400 audit(1751735879.758:562): avc: denied { read } for pid=8710 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.735437][ T974] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 270.759325][ T5946] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 270.769669][ T5946] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 271.121957][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 271.146951][ T974] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 271.160671][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.162321][ T8728] dummy0: entered allmulticast mode [ 271.174083][ T974] usb 1-1: Product: syz [ 271.176099][ T8710] block nbd2: shutting down sockets [ 271.182246][ T974] usb 1-1: Manufacturer: syz [ 271.567008][ T8730] lo speed is unknown, defaulting to 1000 [ 271.651760][ T974] usb 1-1: SerialNumber: syz [ 271.659157][ T8727] dummy0: left allmulticast mode [ 272.271288][ T8741] tipc: Enabling of bearer rejected, failed to enable media [ 272.414799][ T8744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 272.862098][ T30] audit: type=1800 audit(1751735882.225:563): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.644" name="bus" dev="overlay" ino=798 res=0 errno=0 [ 273.227703][ T5946] cp2112 0003:10C4:EA90.0006: error requesting version [ 275.214343][ T5946] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 275.243833][ T5946] usb 4-1: USB disconnect, device number 17 [ 275.418927][ T974] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.798841][ T974] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 275.836750][ T974] usb 1-1: USB disconnect, device number 21 [ 275.892266][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.966177][ T51] Bluetooth: hci1: unexpected event 0x03 length: 4 < 11 [ 276.196228][ T974] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 276.411536][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 276.536561][ T974] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 276.586564][ T974] usb 1-1: config 0 has no interface number 0 [ 276.604276][ T974] usb 1-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 276.639268][ T974] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 276.658490][ T974] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 276.663228][ T8774] netlink: 68 bytes leftover after parsing attributes in process `syz.1.661'. [ 276.673563][ T974] usb 1-1: Product: syz [ 276.681371][ T974] usb 1-1: Manufacturer: syz [ 276.689252][ T974] usb 1-1: SerialNumber: syz [ 276.710686][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 276.726166][ T974] usb 1-1: config 0 descriptor?? [ 276.737026][ T8758] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.015280][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.024053][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.050031][ T30] audit: type=1400 audit(1751735886.667:564): avc: denied { mount } for pid=8757 comm="syz.0.656" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.329915][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.340116][ T30] audit: type=1400 audit(1751735886.909:565): avc: denied { bind } for pid=8778 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.360177][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.370580][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.381104][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.382265][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.401032][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.457264][ T974] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 277.459716][ T30] audit: type=1400 audit(1751735887.098:566): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.465881][ T974] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 277.499216][ T974] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 277.520792][ T974] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 277.532294][ T974] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 277.541738][ T974] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 277.555475][ T974] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 277.566457][ T974] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 277.580545][ T974] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 277.597935][ T974] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 277.613227][ T974] usb 1-1: USB disconnect, device number 22 [ 277.686854][ T974] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 277.779457][ T974] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 277.808772][ T974] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 277.832013][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.836564][ T974] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 277.842194][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.668'. [ 277.872383][ T974] keyspan 1-1:0.107: device disconnected [ 277.948295][ T1822] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 278.091338][ T1822] usb 4-1: Using ep0 maxpacket: 16 [ 278.107808][ T1822] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 278.120244][ T1822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.128316][ T1822] usb 4-1: Product: syz [ 278.135026][ T1822] usb 4-1: Manufacturer: syz [ 278.140418][ T1822] usb 4-1: SerialNumber: syz [ 278.176811][ T974] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 278.268788][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.349312][ T974] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 278.364111][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.476010][ T30] audit: type=1800 audit(1751735888.137:567): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.666" name="bus" dev="overlay" ino=774 res=0 errno=0 [ 278.503647][ T974] usb 1-1: config 0 descriptor?? [ 279.301861][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.680271][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.093306][ T974] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 280.185431][ T974] asix 1-1:0.0: probe with driver asix failed with error -61 [ 281.062978][ T8813] netlink: 64 bytes leftover after parsing attributes in process `syz.2.671'. [ 281.071977][ T8813] netlink: 64 bytes leftover after parsing attributes in process `syz.2.671'. [ 281.100376][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 281.222947][ T1822] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.239300][ T5896] usb 3-1: device descriptor read/64, error -71 [ 281.307000][ T1822] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 281.396532][ T1822] usb 4-1: USB disconnect, device number 18 [ 281.528916][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 281.974799][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.077532][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.138489][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.147362][ T5904] usb 1-1: USB disconnect, device number 23 [ 282.176088][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.193900][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.203514][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.220966][ T30] audit: type=1400 audit(1751735892.096:568): avc: denied { mounton } for pid=8820 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 282.270126][ T5896] usb 3-1: device descriptor read/64, error -71 [ 282.373897][ T8833] netlink: 72 bytes leftover after parsing attributes in process `syz.0.674'. [ 282.384320][ T5896] usb usb3-port1: attempt power cycle [ 282.409814][ T8833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.674'. [ 282.738417][ T5896] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 282.953832][ T8848] loop6: detected capacity change from 0 to 63 [ 282.965076][ T5834] buffer_io_error: 46 callbacks suppressed [ 282.965091][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.984178][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.992245][ T5896] usb 3-1: device not accepting address 24, error -71 [ 283.000473][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.009122][ T8851] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 283.018750][ T5834] loop6: unable to read partition table [ 283.025307][ T8851] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 283.046806][ T8848] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 283.055497][ T8848] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 283.078657][ T8848] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 283.091611][ T8848] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 283.102318][ T8848] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 283.206691][ T8848] ldm_validate_partition_table(): Disk read failed. [ 283.221632][ T8854] could not allocate digest TFM handle sha256-ce [ 283.225088][ T8848] Dev loop6: unable to read RDB block 0 [ 283.254989][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 283.263797][ T13] team0: left promiscuous mode [ 283.270443][ T8848] loop6: unable to read partition table [ 283.272371][ T13] bond0 (unregistering): Released all slaves [ 283.290158][ T8848] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 283.327961][ T8833] vlan0: entered promiscuous mode [ 283.413585][ T8820] lo speed is unknown, defaulting to 1000 [ 283.632535][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'. [ 283.725648][ T8867] netlink: 'syz.2.679': attribute type 4 has an invalid length. [ 284.166993][ T5830] Bluetooth: hci0: command tx timeout [ 284.258936][ T13] hsr_slave_0: left promiscuous mode [ 284.295711][ T13] hsr_slave_1: left promiscuous mode [ 284.564676][ T13] veth1_macvtap: left promiscuous mode [ 284.571916][ T13] veth0_macvtap: left promiscuous mode [ 284.610271][ T13] veth1_vlan: left promiscuous mode [ 284.668578][ T13] veth0_vlan: left promiscuous mode [ 284.766062][ T8900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.836085][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 284.858101][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 284.938776][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 284.973080][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 284.988296][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 285.176710][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 285.191838][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 285.194358][ T43] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 285.210405][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.211951][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 285.332139][ T43] usb 4-1: Product: syz [ 285.351577][ T43] usb 4-1: Manufacturer: syz [ 285.356594][ T43] usb 4-1: SerialNumber: syz [ 285.430425][ T30] audit: type=1400 audit(1751735895.467:569): avc: denied { write } for pid=8917 comm="syz.0.690" path="socket:[17557]" dev="sockfs" ino=17557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 285.717624][ T1822] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 286.237471][ T5830] Bluetooth: hci0: command tx timeout [ 286.298809][ T30] audit: type=1800 audit(1751735895.887:570): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.685" name="bus" dev="overlay" ino=808 res=0 errno=0 [ 287.090940][ T1822] usb 1-1: Using ep0 maxpacket: 8 [ 287.147375][ T1822] usb 1-1: config 162 has an invalid interface number: 236 but max is 0 [ 287.156765][ T1822] usb 1-1: config 162 has no interface number 0 [ 287.191822][ T1822] usb 1-1: config 162 interface 236 has no altsetting 0 [ 287.221209][ T1822] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e9.c0 [ 287.256067][ T1822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.280653][ T1822] usb 1-1: Product: syz [ 287.288003][ T1822] usb 1-1: Manufacturer: syz [ 287.298069][ T1822] usb 1-1: SerialNumber: syz [ 287.324475][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.373551][ T43] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 287.394474][ T43] usb 4-1: USB disconnect, device number 19 [ 287.439934][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.512026][ T30] audit: type=1400 audit(1751735897.651:571): avc: denied { create } for pid=8917 comm="syz.0.690" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 287.555178][ T1822] cypress_cy7c63 1-1:162.236: Cypress CY7C63xxx device now attached [ 287.557751][ T30] audit: type=1400 audit(1751735897.651:572): avc: denied { write } for pid=8917 comm="syz.0.690" name="file0" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 287.567707][ T1822] usb 1-1: USB disconnect, device number 24 [ 287.592804][ T1822] cypress_cy7c63 1-1:162.236: Cypress CY7C63xxx device now disconnected [ 287.614125][ T30] audit: type=1400 audit(1751735897.651:573): avc: denied { open } for pid=8917 comm="syz.0.690" path="/141/file0" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 287.638935][ T30] audit: type=1400 audit(1751735897.651:574): avc: denied { ioctl } for pid=8917 comm="syz.0.690" path="/141/file0" dev="tmpfs" ino=842 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 287.669070][ T30] audit: type=1400 audit(1751735897.651:575): avc: denied { mount } for pid=8917 comm="syz.0.690" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 287.694345][ T30] audit: type=1400 audit(1751735897.651:576): avc: denied { search } for pid=8917 comm="syz.0.690" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 287.951357][ T8913] pim6reg1: entered allmulticast mode [ 288.151625][ T30] audit: type=1400 audit(1751735898.334:577): avc: denied { unlink } for pid=5828 comm="syz-executor" name="file0" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 288.154645][ T8820] chnl_net:caif_netlink_parms(): no params data found [ 288.193586][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 288.195295][ T5830] Bluetooth: hci0: command tx timeout [ 289.166846][ T5958] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 289.328601][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 289.706321][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.722522][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.744104][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.770278][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.770493][ T5958] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 289.794658][ T8820] bridge_slave_0: entered allmulticast mode [ 289.853183][ T5958] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 289.869688][ T8820] bridge_slave_0: entered promiscuous mode [ 290.004084][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.007138][ T5958] usb 4-1: Product: syz [ 290.165290][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.176115][ T5830] Bluetooth: hci0: command tx timeout [ 290.189133][ T8820] bridge_slave_1: entered allmulticast mode [ 290.207918][ T8820] bridge_slave_1: entered promiscuous mode [ 290.252637][ T5958] usb 4-1: Manufacturer: syz [ 290.280621][ T5958] usb 4-1: config 0 descriptor?? [ 290.417728][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.946896][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.035837][ T8820] team0: Port device team_slave_0 added [ 291.061509][ T8820] team0: Port device team_slave_1 added [ 291.336032][ T5958] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 291.358770][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.366008][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.407791][ T8820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.464525][ T8985] netlink: 'syz.1.702': attribute type 4 has an invalid length. [ 291.489057][ T8983] pim6reg1: entered allmulticast mode [ 291.510844][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.526601][ T5958] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 291.542914][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.547961][ T5958] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 291.577659][ T8820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.581456][ T5958] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -71 [ 291.628067][ T5958] usb 4-1: USB disconnect, device number 20 [ 291.730286][ T8820] hsr_slave_0: entered promiscuous mode [ 291.745062][ T8820] hsr_slave_1: entered promiscuous mode [ 292.188791][ T8988] fido_id[8988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 292.653778][ T9009] 9pnet_fd: Insufficient options for proto=fd [ 292.766356][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 293.455965][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.484357][ T43] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 293.500904][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.582655][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.617890][ T43] usb 1-1: Product: syz [ 293.696967][ T43] usb 1-1: Manufacturer: syz [ 293.703141][ T43] usb 1-1: SerialNumber: syz [ 293.720408][ T43] cdc_mbim 1-1:1.0: skipping garbage [ 293.916004][ T9002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.512684][ T8820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.532386][ T8820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.569236][ T8820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.587063][ T9002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.592360][ T8820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.602209][ T43] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 294.617906][ T43] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 294.760561][ T43] wwan wwan0: port wwan0mbim0 attached [ 294.821099][ T9038] pim6reg1: entered allmulticast mode [ 296.531446][ T43] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 62:21:79:93:8c:82 [ 296.569612][ T43] usb 1-1: USB disconnect, device number 25 [ 296.610406][ T43] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 296.678125][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 296.699311][ T30] audit: type=1400 audit(1751735907.301:578): avc: denied { read write } for pid=9051 comm="syz.2.720" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.723846][ T9052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.720'. [ 296.739686][ T30] audit: type=1400 audit(1751735907.301:579): avc: denied { open } for pid=9051 comm="syz.2.720" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.900405][ T43] wwan wwan0: port wwan0mbim0 disconnected [ 296.906068][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.967217][ T5896] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 296.972862][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.066632][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.073834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.123068][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.130277][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.652062][ T5896] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 297.661209][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.771333][ T8820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.815459][ T5896] usb 3-1: config 0 descriptor?? [ 298.064786][ T5896] bfusb 3-1:0.0: probe with driver bfusb failed with error -5 [ 298.263426][ T30] audit: type=1400 audit(1751735908.824:581): avc: denied { map } for pid=9051 comm="syz.2.720" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 298.335562][ T30] audit: type=1400 audit(1751735908.750:580): avc: denied { append } for pid=9051 comm="syz.2.720" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 298.751488][ T9091] netlink: 'syz.1.724': attribute type 4 has an invalid length. [ 298.780001][ T9093] macsec1: entered promiscuous mode [ 298.798116][ T9093] bridge0: entered promiscuous mode [ 298.909327][ T9093] bridge0: port 3(macsec1) entered blocking state [ 298.916356][ T9093] bridge0: port 3(macsec1) entered disabled state [ 298.923218][ T9093] macsec1: entered allmulticast mode [ 298.928874][ T9093] bridge0: entered allmulticast mode [ 298.947198][ T9093] macsec1: left allmulticast mode [ 299.007869][ T9093] bridge0: left allmulticast mode [ 299.024994][ T9093] bridge0: left promiscuous mode [ 299.166246][ T30] audit: type=1400 audit(1751735909.884:582): avc: denied { append } for pid=9101 comm="syz.0.729" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 299.274701][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.445745][ T9110] syz.0.730: attempt to access beyond end of device [ 299.445745][ T9110] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 299.928483][ T9110] SQUASHFS error: Failed to read block 0x0: -5 [ 299.951453][ T9110] unable to read squashfs_super_block [ 300.010784][ T5958] usb 3-1: USB disconnect, device number 26 [ 300.508727][ T5958] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 300.755922][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 300.766552][ T5958] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 300.775758][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.783735][ T5958] usb 3-1: Product: syz [ 300.788607][ T5958] usb 3-1: Manufacturer: syz [ 300.793193][ T5958] usb 3-1: SerialNumber: syz [ 300.911799][ T8820] veth0_vlan: entered promiscuous mode [ 300.968394][ T8820] veth1_vlan: entered promiscuous mode [ 301.083357][ T8820] veth0_macvtap: entered promiscuous mode [ 301.089650][ T1822] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 301.171937][ T30] audit: type=1800 audit(1751735911.984:583): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.733" name="bus" dev="overlay" ino=840 res=0 errno=0 [ 301.976857][ T8820] veth1_macvtap: entered promiscuous mode [ 302.444801][ T1822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.637745][ T1822] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 302.640312][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.647502][ T1822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.676362][ T1822] usb 1-1: config 0 descriptor?? [ 302.710432][ T1822] pwc: Askey VC010 type 2 USB webcam detected. [ 302.749817][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.780557][ T8820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.801564][ T8820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.823529][ T8820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.832250][ T8820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.936079][ T5958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.140345][ T1822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 303.334477][ T1822] pwc: recv_control_msg error -32 req 02 val 2700 [ 303.421018][ T1822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 303.636741][ T1822] pwc: recv_control_msg error -32 req 04 val 1000 [ 303.655360][ T5958] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 303.696494][ T1822] pwc: recv_control_msg error -32 req 04 val 1300 [ 303.736711][ T6872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.756502][ T1822] pwc: recv_control_msg error -32 req 04 val 1400 [ 303.763904][ T5958] usb 3-1: USB disconnect, device number 27 [ 303.801952][ T6872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.811551][ T1822] pwc: recv_control_msg error -32 req 02 val 2000 [ 303.830318][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.060914][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.339519][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.354012][ T1822] pwc: recv_control_msg error -71 req 04 val 1500 [ 304.375037][ T9167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 304.387200][ T9167] x_tables: ip_tables: udp match: only valid for protocol 17 [ 304.593791][ T1822] pwc: recv_control_msg error -71 req 02 val 2500 [ 304.607510][ T1822] pwc: recv_control_msg error -71 req 02 val 2400 [ 304.614722][ T1822] pwc: recv_control_msg error -71 req 02 val 2600 [ 304.627420][ T1822] pwc: recv_control_msg error -71 req 02 val 2900 [ 304.644279][ T30] audit: type=1400 audit(1751735915.607:584): avc: denied { mounton } for pid=8820 comm="syz-executor" path="/root/syzkaller.K9gaSK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 304.718569][ T1822] pwc: recv_control_msg error -71 req 02 val 2800 [ 304.837093][ T30] audit: type=1400 audit(1751735915.639:585): avc: denied { mount } for pid=8820 comm="syz-executor" name="/" dev="gadgetfs" ino=7443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 304.868911][ T30] audit: type=1400 audit(1751735915.639:586): avc: denied { mounton } for pid=8820 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 304.932251][ T1822] pwc: recv_control_msg error -71 req 04 val 1100 [ 304.982033][ T1822] pwc: recv_control_msg error -71 req 04 val 1200 [ 305.029464][ T1822] pwc: Registered as video103. [ 305.079815][ T1822] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 305.133353][ T30] audit: type=1400 audit(1751735916.153:587): avc: denied { append } for pid=9175 comm="syz.1.742" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 305.191467][ T1822] usb 1-1: USB disconnect, device number 26 [ 305.283279][ T9187] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 305.393726][ T9190] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 305.550532][ T9198] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 305.592095][ T9198] netlink: 'syz.3.748': attribute type 6 has an invalid length. [ 305.621437][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.855104][ T9190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.910688][ T9192] bond1: (slave geneve2): making interface the new active one [ 305.942342][ T9192] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 306.035182][ T9197] veth3: entered promiscuous mode [ 306.055196][ T9197] bond1: (slave veth3): Enslaving as an active interface with a down link [ 306.282269][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.841330][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.850113][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.858850][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.867672][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.875785][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.091917][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.112941][ T9233] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 307.359073][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.432436][ T9242] tipc: Enabling of bearer rejected, failed to enable media [ 307.540919][ T43] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 307.603505][ T5904] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 308.795031][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 308.811427][ T9227] chnl_net:caif_netlink_parms(): no params data found [ 308.818366][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.832378][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 308.845625][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.860154][ T51] Bluetooth: hci0: command tx timeout [ 308.866603][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 308.876935][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 308.888202][ T5904] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 308.898084][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 308.907174][ T5904] usb 2-1: SerialNumber: syz [ 308.913303][ T43] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 308.923750][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.932319][ T43] usb 3-1: Product: syz [ 308.939188][ T43] usb 3-1: Manufacturer: syz [ 308.944488][ T43] usb 3-1: SerialNumber: syz [ 308.967355][ T43] usb 3-1: config 0 descriptor?? [ 309.093329][ T1150] bridge_slave_1: left allmulticast mode [ 309.123011][ T30] audit: type=1400 audit(1751735920.353:588): avc: denied { load_policy } for pid=9267 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 309.137094][ T1150] bridge_slave_1: left promiscuous mode [ 309.144665][ T9268] SELinux: policydb version 1094744477 does not match my version range 15-34 [ 309.167067][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.173660][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.183995][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.194206][ T9268] SELinux: failed to load policy [ 309.202814][ T5904] usb 2-1: 0:2 : does not exist [ 309.209852][ T5904] usb 2-1: unit 255 not found! [ 309.211794][ T1150] bridge_slave_0: left allmulticast mode [ 309.477870][ T5904] usb 2-1: USB disconnect, device number 18 [ 309.669435][ T1150] bridge_slave_0: left promiscuous mode [ 309.675432][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.714400][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.794908][ T30] audit: type=1326 audit(1751735921.046:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 309.838515][ T30] audit: type=1326 audit(1751735921.046:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 309.929888][ T30] audit: type=1326 audit(1751735921.046:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 309.979671][ T30] audit: type=1326 audit(1751735921.046:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 310.019348][ T30] audit: type=1326 audit(1751735921.046:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 310.125091][ T30] audit: type=1326 audit(1751735921.046:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 310.473451][ T30] audit: type=1326 audit(1751735921.046:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 310.533500][ T9289] TCP: TCP_TX_DELAY enabled [ 310.698772][ T30] audit: type=1326 audit(1751735921.046:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 310.837186][ T51] Bluetooth: hci0: command tx timeout [ 310.895160][ T30] audit: type=1326 audit(1751735921.046:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 310.918371][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.934754][ T30] audit: type=1326 audit(1751735921.046:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x7fc00000 [ 311.749739][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.771301][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.785414][ T1150] bond0 (unregistering): Released all slaves [ 312.020612][ T5904] usb 3-1: USB disconnect, device number 28 [ 312.190912][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.209321][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.252076][ T9227] bridge_slave_0: entered allmulticast mode [ 312.289100][ T9227] bridge_slave_0: entered promiscuous mode [ 312.299529][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.306638][ T9227] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.313948][ T9227] bridge_slave_1: entered allmulticast mode [ 312.327072][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 312.357276][ T9227] bridge_slave_1: entered promiscuous mode [ 312.366714][ T9327] vivid-000: disconnect [ 312.399009][ T9328] netlink: 'syz.3.765': attribute type 4 has an invalid length. [ 312.557366][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.591428][ T43] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 312.647472][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.725598][ T43] usb 2-1: config 0 descriptor?? [ 312.764017][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 312.806065][ T51] Bluetooth: hci0: command tx timeout [ 313.139867][ T9326] vivid-000: reconnect [ 313.316502][ T9227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.389429][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 313.440554][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 313.473527][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 313.513670][ T9227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.526318][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 313.535308][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 313.544486][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 313.558021][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 313.567363][ T1150] hsr_slave_0: left promiscuous mode [ 313.574775][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 313.581329][ T1150] hsr_slave_1: left promiscuous mode [ 313.603925][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 313.605770][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.630654][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 313.639893][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.659691][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 313.671196][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.674276][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 313.693379][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.714443][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 313.734348][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 313.754008][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 313.782838][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 313.833454][ T1150] veth1_macvtap: left promiscuous mode [ 313.839447][ T43] pwc: Registered as video103. [ 313.885158][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 313.894960][ T1150] veth0_macvtap: left promiscuous mode [ 313.911349][ T1150] veth1_vlan: left promiscuous mode [ 313.963392][ T1150] veth0_vlan: left promiscuous mode [ 314.092097][ T43] usb 2-1: USB disconnect, device number 19 [ 314.784813][ T51] Bluetooth: hci0: command tx timeout [ 315.220251][ T9368] overlayfs: conflicting lowerdir path [ 315.817074][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 315.847027][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 315.847043][ T30] audit: type=1400 audit(1751735927.410:657): avc: denied { setattr } for pid=9374 comm="syz.2.777" name="NETLINK" dev="sockfs" ino=19364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.904291][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 316.307760][ T5946] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 316.315478][ T9360] bond0: (slave syz_tun): Releasing backup interface [ 316.373993][ T9360] bond0: (slave batadv0): Releasing backup interface [ 316.539562][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 316.544523][ T9360] bridge_slave_0: left allmulticast mode [ 316.556917][ T9360] bridge_slave_0: left promiscuous mode [ 316.615160][ T5946] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 316.672765][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.686963][ T5946] usb 3-1: config 0 has no interface number 0 [ 316.744727][ T5946] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 316.754361][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.756488][ T9360] bridge_slave_1: left allmulticast mode [ 316.770488][ T5946] usb 3-1: Product: syz [ 316.776905][ T5946] usb 3-1: Manufacturer: syz [ 316.782184][ T5946] usb 3-1: SerialNumber: syz [ 316.795838][ T9360] bridge_slave_1: left promiscuous mode [ 316.802649][ T5946] usb 3-1: config 0 descriptor?? [ 316.809943][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.827322][ T9360] bond0: (slave bond_slave_0): Releasing backup interface [ 316.837941][ T9360] bond0: (slave bond_slave_1): Releasing backup interface [ 316.861495][ T9360] team0: Port device team_slave_0 removed [ 316.873373][ T9360] team0: Port device team_slave_1 removed [ 316.880673][ T9360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.888081][ T9360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.897622][ T9360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.906434][ T9360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.923334][ T9360] bond1: (slave geneve2): Releasing active interface [ 316.930888][ T9360] bond1: (slave geneve2): the permanent HWaddr of slave - ea:49:57:db:4f:f9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 316.959310][ T9360] bond1: (slave veth3): Releasing active interface [ 317.540615][ T9227] team0: Port device team_slave_0 added [ 317.572292][ T9227] team0: Port device team_slave_1 added [ 317.606326][ T5946] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v61 fw v146.0.0 (2 channels) [ 317.627484][ T5946] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 317.636341][ T5946] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 317.643623][ T5946] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 317.705965][ T9227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.713060][ T9227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.754817][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 317.756325][ T9227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.832552][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 317.948967][ T5912] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 318.035945][ T9227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.114183][ T9227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.141307][ T9405] syz.3.785: attempt to access beyond end of device [ 318.141307][ T9405] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 318.282153][ T5946] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -22 [ 318.283228][ T9405] syz.3.785: attempt to access beyond end of device [ 318.283228][ T9405] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 318.307977][ T9405] Mount JFS Failure: -5 [ 318.479468][ T9411] /dev/nbd3: Can't open blockdev [ 318.515917][ T5912] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 318.527393][ T5912] usb 1-1: config 0 has no interface number 0 [ 318.527705][ T9227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.563193][ T5912] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=b4.98 [ 318.593941][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.606522][ T9400] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.702434][ T5904] usb 3-1: USB disconnect, device number 29 [ 318.722539][ T5912] usb 1-1: config 0 descriptor?? [ 318.761443][ T5912] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 318.859916][ T9227] hsr_slave_0: entered promiscuous mode [ 318.866623][ T9227] hsr_slave_1: entered promiscuous mode [ 319.032153][ T5912] gspca_vc032x: reg_w err -71 [ 319.036879][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.049084][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.055033][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.060554][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.065845][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.546206][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.551554][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.557301][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.562609][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.568246][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.573549][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.595400][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.600723][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.707803][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.716854][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.732249][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.741292][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.746743][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.752127][ T5912] gspca_vc032x: I2c Bus Busy Wait 00 [ 319.782909][ T5912] gspca_vc032x: Unknown sensor... [ 319.794980][ T5912] vc032x 1-1:0.153: probe with driver vc032x failed with error -22 [ 319.852694][ T5912] usb 1-1: USB disconnect, device number 27 [ 320.166755][ T9436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.209721][ T9436] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.309314][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 320.366039][ T9436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.851451][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.794'. [ 321.487716][ T9227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.504711][ T9227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.532637][ T9227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.585609][ T9227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.760603][ T30] audit: type=1400 audit(1751735933.616:658): avc: denied { read } for pid=9477 comm="syz.2.797" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 321.920623][ T30] audit: type=1400 audit(1751735933.616:659): avc: denied { open } for pid=9477 comm="syz.2.797" path="/162/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 322.028879][ T30] audit: type=1400 audit(1751735933.616:660): avc: denied { read } for pid=9477 comm="syz.2.797" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 322.084808][ T30] audit: type=1400 audit(1751735933.616:661): avc: denied { read } for pid=9477 comm="syz.2.797" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 322.214442][ T9495] tipc: Enabling of bearer rejected, failed to enable media [ 322.269442][ T1822] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 322.315996][ T30] audit: type=1400 audit(1751735934.204:662): avc: denied { write } for pid=9498 comm="syz.3.800" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 322.401498][ T30] audit: type=1400 audit(1751735934.204:663): avc: denied { ioctl } for pid=9498 comm="syz.3.800" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 322.504291][ T9227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.575949][ T1822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.587032][ T1822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.609181][ T1822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.655173][ T1822] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.675352][ T1822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.696099][ T9227] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.714321][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.721503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.785962][ T1822] usb 2-1: config 0 descriptor?? [ 322.804405][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.811535][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.233539][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 323.250483][ T1822] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 323.305588][ T1822] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 323.402575][ T9227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.440887][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 323.447894][ T5912] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 323.482270][ T5912] usb 4-1: config 0 has no interface number 0 [ 323.510018][ T5912] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 323.532166][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.561588][ T5912] usb 4-1: Product: syz [ 323.583589][ T5912] usb 4-1: Manufacturer: syz [ 323.588242][ T5912] usb 4-1: SerialNumber: syz [ 323.785065][ T30] audit: type=1400 audit(1751735935.663:664): avc: denied { bind } for pid=9536 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.965063][ T5912] usb 4-1: config 0 descriptor?? [ 324.010940][ T1822] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 324.043662][ T5912] smsc95xx v2.0.0 [ 324.047340][ T5912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 324.073469][ T1822] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 324.114743][ T5912] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 324.246110][ T9523] netlink: 176 bytes leftover after parsing attributes in process `syz.3.804'. [ 324.271856][ T9523] netlink: 176 bytes leftover after parsing attributes in process `syz.3.804'. [ 324.296441][ T9523] Bluetooth: MGMT ver 1.23 [ 324.304723][ T1822] usb 4-1: USB disconnect, device number 21 [ 324.341411][ T9546] fido_id[9546]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 324.352203][ T5946] usb 2-1: USB disconnect, device number 20 [ 324.637184][ T9227] veth0_vlan: entered promiscuous mode [ 324.653511][ T9227] veth1_vlan: entered promiscuous mode [ 324.710458][ T9227] veth0_macvtap: entered promiscuous mode [ 324.729142][ T9227] veth1_macvtap: entered promiscuous mode [ 324.762389][ T9227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.807130][ T9227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.833305][ T9227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.855406][ T9227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.975429][ T9227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.985342][ T9227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.097639][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 325.115633][ T8582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.140104][ T8582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.201812][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.216589][ T5904] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 325.228630][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.262017][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 325.289821][ T43] usb 3-1: too many configurations: 180, using maximum allowed: 8 [ 325.317590][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 325.325198][ T43] usb 3-1: can't read configurations, error -61 [ 325.373437][ T9586] tipc: Started in network mode [ 325.374777][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 325.391443][ T9586] tipc: Node identity 5e6394660be8, cluster identity 4711 [ 325.402082][ T5904] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 325.421466][ T9586] tipc: Enabled bearer , priority 0 [ 325.429211][ T5904] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.440653][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.452415][ T5904] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.462521][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.480032][ T5904] usb 4-1: Product: syz [ 325.484807][ T5904] usb 4-1: Manufacturer: syz [ 325.492034][ T5904] usb 4-1: SerialNumber: syz [ 325.495109][ T9588] syzkaller0: entered promiscuous mode [ 325.499841][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 325.538003][ T9588] syzkaller0: entered allmulticast mode [ 325.566742][ T9586] tipc: Resetting bearer [ 325.924555][ T5904] usb 4-1: 0:2 : does not exist [ 325.935822][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 325.942377][ T43] usb 3-1: too many configurations: 180, using maximum allowed: 8 [ 325.954332][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 325.964148][ T5904] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 325.971924][ T43] usb 3-1: can't read configurations, error -61 [ 325.975295][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.991079][ T43] usb usb3-port1: attempt power cycle [ 326.021634][ T5904] usb 4-1: USB disconnect, device number 22 [ 326.035621][ T9585] tipc: Resetting bearer [ 326.043903][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 326.082775][ T9585] tipc: Disabling bearer [ 326.129839][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.384088][ T24] usb 1-1: config 0 has no interfaces? [ 326.392516][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 326.621642][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 326.632283][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.644932][ T24] usb 1-1: Product: syz [ 326.649507][ T24] usb 1-1: Manufacturer: syz [ 326.882150][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 326.904256][ T43] usb 3-1: too many configurations: 180, using maximum allowed: 8 [ 326.916000][ T24] usb 1-1: SerialNumber: syz [ 326.924703][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 326.933522][ T24] usb 1-1: config 0 descriptor?? [ 326.938616][ T43] usb 3-1: can't read configurations, error -61 [ 326.950557][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.026492][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.079015][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 327.112221][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.119650][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 327.127436][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.135495][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.148569][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.173918][ T43] usb 3-1: too many configurations: 180, using maximum allowed: 8 [ 327.183977][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 327.191616][ T43] usb 3-1: can't read configurations, error -61 [ 327.198822][ T43] usb usb3-port1: unable to enumerate USB device [ 327.281801][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.451901][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 328.297260][ T5946] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 329.116846][ T5830] Bluetooth: hci0: command tx timeout [ 329.195897][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.212595][ T5946] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 329.233753][ T5946] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.252831][ T1822] usb 1-1: USB disconnect, device number 28 [ 329.260549][ T9601] chnl_net:caif_netlink_parms(): no params data found [ 329.268067][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.307871][ T5946] usb 4-1: Product: syz [ 329.326104][ T5946] usb 4-1: Manufacturer: syz [ 329.337029][ T59] bridge_slave_1: left allmulticast mode [ 329.346737][ T5946] usb 4-1: SerialNumber: syz [ 329.351436][ T59] bridge_slave_1: left promiscuous mode [ 329.372109][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.396285][ T59] bridge_slave_0: left allmulticast mode [ 329.404578][ T59] bridge_slave_0: left promiscuous mode [ 329.414559][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.052677][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.090967][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.133028][ T59] bond0 (unregistering): Released all slaves [ 330.413770][ T30] audit: type=1400 audit(1751735942.699:665): avc: denied { associate } for pid=9660 comm="syz.2.827" name="blkio.bfq.group_wait_time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 330.440453][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'. [ 330.463560][ T9661] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 330.477793][ T30] audit: type=1400 audit(1751735942.772:666): avc: denied { execute } for pid=9660 comm="syz.2.827" dev="hugetlbfs" ino=20400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 330.507188][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 330.516360][ T30] audit: type=1400 audit(1751735942.783:667): avc: denied { execute_no_trans } for pid=9660 comm="syz.2.827" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=20400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 330.608303][ T5946] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 330.615027][ T5946] cdc_ncm 4-1:1.0: dwNtbInMaxSize=256 is too small. Using 2048 [ 330.635467][ T5946] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 330.800746][ T5946] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 330.835105][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.835634][ T9669] syz.0.829: attempt to access beyond end of device [ 330.835634][ T9669] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 330.853623][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.863067][ T9601] bridge_slave_0: entered allmulticast mode [ 330.865417][ T9669] syz.0.829: attempt to access beyond end of device [ 330.865417][ T9669] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 330.870308][ T9601] bridge_slave_0: entered promiscuous mode [ 330.884004][ T9669] Mount JFS Failure: -5 [ 330.985506][ T5946] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 331.002252][ T5912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 331.029431][ T59] hsr_slave_0: left promiscuous mode [ 331.046045][ T5946] usb 4-1: USB disconnect, device number 23 [ 331.070019][ T5946] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 331.145814][ T51] Bluetooth: hci0: command tx timeout [ 331.155484][ T59] hsr_slave_1: left promiscuous mode [ 331.165394][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.177696][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.186741][ T5912] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.200618][ T9669] syz.0.829: attempt to access beyond end of device [ 331.200618][ T9669] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 331.218506][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.226450][ T5912] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 331.240632][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.247840][ T9669] gfs2: error -5 reading superblock [ 331.273944][ T59] veth1_macvtap: left promiscuous mode [ 331.279693][ T59] veth0_macvtap: left promiscuous mode [ 331.285417][ T59] veth1_vlan: left promiscuous mode [ 331.288062][ T5912] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.291017][ T59] veth0_vlan: left promiscuous mode [ 331.302539][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.313637][ T5912] usb 2-1: Product: syz [ 331.320899][ T5912] usb 2-1: Manufacturer: syz [ 331.325568][ T5912] usb 2-1: SerialNumber: syz [ 331.339048][ T5912] cdc_mbim 2-1:1.0: skipping garbage [ 331.482669][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 331.554145][ T9667] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 332.157335][ T59] team0 (unregistering): Port device team_slave_1 removed [ 332.194957][ T59] team0 (unregistering): Port device team_slave_0 removed [ 332.309499][ T9679] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 332.351596][ T5912] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 332.367607][ T5912] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 332.388302][ T5912] wwan wwan0: port wwan0mbim0 attached [ 332.459328][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 332.467904][ T5154] Bluetooth: hci5: command 0x1003 tx timeout [ 332.673329][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.697423][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.712477][ T9601] bridge_slave_1: entered allmulticast mode [ 332.720484][ T9601] bridge_slave_1: entered promiscuous mode [ 332.844466][ T5912] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, d6:81:01:04:ed:e3 [ 332.915927][ T5912] usb 2-1: USB disconnect, device number 21 [ 332.946023][ T5912] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 333.080357][ T5830] Bluetooth: hci0: command tx timeout [ 333.097088][ T30] audit: type=1400 audit(1751735945.524:668): avc: denied { map } for pid=9691 comm="syz.0.834" path="socket:[20447]" dev="sockfs" ino=20447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 333.137257][ T9692] netlink: 288 bytes leftover after parsing attributes in process `syz.0.834'. [ 333.213423][ T9601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.249142][ T30] audit: type=1400 audit(1751735945.681:669): avc: denied { map } for pid=9701 comm="syz.2.836" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 333.395826][ T5912] wwan wwan0: port wwan0mbim0 disconnected [ 333.404662][ T9601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.414674][ T30] audit: type=1400 audit(1751735945.681:670): avc: denied { execute } for pid=9701 comm="syz.2.836" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 334.662240][ T9601] team0: Port device team_slave_0 added [ 334.826480][ T30] audit: type=1400 audit(1751735947.246:671): avc: denied { watch } for pid=9723 comm="syz.2.840" path="/proc/589/smaps" dev="proc" ino=20473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 334.881114][ T9601] team0: Port device team_slave_1 added [ 335.073172][ T5830] Bluetooth: hci0: command tx timeout [ 335.328545][ T30] audit: type=1400 audit(1751735947.246:672): avc: denied { watch_sb watch_reads } for pid=9723 comm="syz.2.840" path="/proc/589/smaps" dev="proc" ino=20473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 335.428160][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.453239][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.502816][ T9733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.514189][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 335.604630][ T9601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.606232][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.606247][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.606278][ T9601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.638740][ T9737] trusted_key: encrypted_key: insufficient parameters specified [ 335.868213][ T9601] hsr_slave_0: entered promiscuous mode [ 335.888482][ T9601] hsr_slave_1: entered promiscuous mode [ 335.958282][ T9749] netlink: 'syz.0.846': attribute type 4 has an invalid length. [ 336.463511][ T9751] could not allocate digest TFM handle sha256-ce [ 336.924541][ T30] audit: type=1400 audit(1751735949.535:673): avc: denied { getopt } for pid=9769 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 336.954393][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 336.958243][ T5912] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 337.063768][ T9773] syz.1.852: attempt to access beyond end of device [ 337.063768][ T9773] nbd1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 337.106703][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 337.117265][ T5912] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 337.135934][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 337.145050][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.174011][ T43] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 337.179377][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.201796][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 337.239406][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.249327][ T43] usb 4-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.40 [ 337.261923][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.267160][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.283376][ T9601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.373581][ T43] usb 4-1: Product: ่„ˆ๏„ฏโพซใญžๆญ•ไ›œๆ›ญไก‡้ธฝแ‹ธ์Š€ไ–†๎•™ู‰๎ธ›ไพค๏Ÿต็ณ“โ•Ÿ๏ฌทไต‰่‡ซ์ กๆ‹ฑไจ€แปชโ’งโ˜‚๏บฆๅ–ฟ๊‰เฝฅ่„ใทณในณํ•ค็šธไ‘€๋ธ โž“้‚ฏ้‘–็ž่ฃ‰่•›โฑ๏–ž๊ฐŒ็ผ์‡ผไžฑ์พต [ 337.402532][ T5912] usb 3-1: Product: syz [ 337.406092][ T43] usb 4-1: Manufacturer: ั [ 337.409095][ T5912] usb 3-1: Manufacturer: syz [ 337.411237][ T43] usb 4-1: SerialNumber: ใ  [ 337.426874][ T9601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.898851][ T5912] usb 3-1: SerialNumber: syz [ 340.091400][ T5912] usb 3-1: 0:2 : does not exist [ 340.368471][ T9601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.495373][ T9601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.498378][ T43] usbhid 4-1:1.0: can't add hid device: -71 [ 340.627989][ T43] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 340.639030][ T43] usb 4-1: USB disconnect, device number 24 [ 342.554312][ T9794] pim6reg1: entered allmulticast mode [ 343.003212][ T5912] usb 3-1: USB disconnect, device number 34 [ 343.464672][ T9807] pim6reg1: entered allmulticast mode [ 343.653640][ T9829] netlink: 'syz.1.861': attribute type 4 has an invalid length. [ 343.692524][ T9818] could not allocate digest TFM handle sha256-ce [ 343.864372][ T9601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.770603][ T9601] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.267971][ T9848] netlink: 'syz.3.863': attribute type 4 has an invalid length. [ 345.294531][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.301663][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.509390][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.516705][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.939724][ T9860] pim6reg1: entered allmulticast mode [ 346.593177][ T9601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.629929][ T9601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.025633][ T9889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.054085][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 348.658355][ T9891] syz.0.873: attempt to access beyond end of device [ 348.658355][ T9891] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 348.686449][ T9891] syz.0.873: attempt to access beyond end of device [ 348.686449][ T9891] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 348.705326][ T9891] Mount JFS Failure: -5 [ 348.979535][ T9895] syz.0.873: attempt to access beyond end of device [ 348.979535][ T9895] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 348.992741][ T9895] gfs2: error -5 reading superblock [ 350.677930][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.691545][ T9894] could not allocate digest TFM handle sha256-ce [ 350.877602][ T5896] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 351.039825][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 351.053231][ T5896] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 351.071812][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.073703][ T9928] loop6: detected capacity change from 0 to 63 [ 351.101081][ T9928] buffer_io_error: 23 callbacks suppressed [ 351.101092][ T9928] Buffer I/O error on dev loop6, logical block 0, async page read [ 351.117499][ T5896] usb 1-1: Product: syz [ 351.126199][ T5896] usb 1-1: Manufacturer: syz [ 351.131561][ T9928] Buffer I/O error on dev loop6, logical block 0, async page read [ 351.137395][ T5896] usb 1-1: SerialNumber: syz [ 351.158822][ T9928] Buffer I/O error on dev loop6, logical block 0, async page read [ 351.185207][ T9928] Buffer I/O error on dev loop6, logical block 0, async page read [ 351.208951][ T9928] loop6: unable to read partition table [ 351.209176][ T9933] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 351.236342][ T9928] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 351.296121][ T9933] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 351.359182][ T9906] overlayfs: failed to resolve './file1': -2 [ 352.734168][ T9601] veth0_vlan: entered promiscuous mode [ 352.753068][ T9933] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 352.800667][ T9933] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 352.821324][ T9933] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 352.835821][ T9601] veth1_vlan: entered promiscuous mode [ 352.861672][ T9933] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 352.894125][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 352.932061][ T9601] veth0_macvtap: entered promiscuous mode [ 352.980721][ T5896] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 353.041478][ T9601] veth1_macvtap: entered promiscuous mode [ 353.063839][ T5896] usb 1-1: USB disconnect, device number 29 [ 353.114058][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.158525][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.192165][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.215895][ T9928] could not allocate digest TFM handle sha256-ce [ 353.249720][ T9601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.271763][ T9943] could not allocate digest TFM handle sha256-ce [ 353.301603][ T9601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.327674][ T9601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.338122][ T9601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.356329][ T5203] ldm_validate_partition_table(): Disk read failed. [ 353.365974][ T5203] Dev loop6: unable to read RDB block 0 [ 353.414403][ T5203] loop6: unable to read partition table [ 353.547968][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.588384][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.732131][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.794481][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.002069][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 354.065843][ T9967] syz.0.887: attempt to access beyond end of device [ 354.065843][ T9967] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 354.079157][ T9967] syz.0.887: attempt to access beyond end of device [ 354.079157][ T9967] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 354.093370][ T9967] Mount JFS Failure: -5 [ 354.124667][ T5904] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 354.172466][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 354.221868][ T43] usb 2-1: config 0 has no interfaces? [ 354.440010][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 354.455393][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.498206][ T9976] syz.0.887: attempt to access beyond end of device [ 354.498206][ T9976] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 354.511376][ T9976] gfs2: error -5 reading superblock [ 354.911543][ T43] usb 2-1: config 0 descriptor?? [ 355.029155][ T5904] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 355.038263][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.169829][ T5904] usb 3-1: config 0 descriptor?? [ 355.301728][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.332452][ T43] usb 2-1: USB disconnect, device number 22 [ 356.094460][ T5904] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 356.118879][ T9987] could not allocate digest TFM handle sha256-ce [ 356.221418][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.321257][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.417145][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.563608][ T1150] bridge_slave_1: left allmulticast mode [ 356.575474][ T1150] bridge_slave_1: left promiscuous mode [ 356.581387][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.592099][ T1150] bridge_slave_0: left allmulticast mode [ 356.597851][ T1150] bridge_slave_0: left promiscuous mode [ 356.605312][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.110996][ T5904] [drm:udl_init] *ERROR* Selecting channel failed [ 357.140091][ T5904] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 357.156236][ T5904] [drm] Initialized udl on minor 2 [ 357.168319][ T5904] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 357.212893][ T5904] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 357.254819][ T5896] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 357.280793][T10030] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 357.296201][ T5904] usb 3-1: USB disconnect, device number 35 [ 357.302474][ T5896] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 357.377488][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.388988][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.398751][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.416409][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.426740][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.569618][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.581102][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.591034][ T1150] bond0 (unregistering): Released all slaves [ 357.606412][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 357.824330][T10040] loop6: detected capacity change from 0 to 63 [ 357.839355][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.895'. [ 357.850713][ T5839] buffer_io_error: 30 callbacks suppressed [ 357.850726][ T5839] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.865288][ T5839] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.880036][T10044] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 357.891255][T10044] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 357.908267][ T5839] loop6: unable to read partition table [ 357.917375][T10044] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 358.053532][T10040] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 358.084845][T10040] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 358.177773][T10040] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 358.180359][T10044] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 358.300944][T10040] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.411162][T10040] ldm_validate_partition_table(): Disk read failed. [ 358.422453][ T1150] hsr_slave_0: left promiscuous mode [ 358.448129][ T1150] hsr_slave_1: left promiscuous mode [ 358.457404][T10040] Dev loop6: unable to read RDB block 0 [ 358.463676][T10040] loop6: unable to read partition table [ 358.481498][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.489820][T10040] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 358.499191][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.615842][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.644993][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.650669][T10044] could not allocate digest TFM handle sha256-ce [ 358.765158][ T1150] veth1_macvtap: left promiscuous mode [ 358.775159][ T1150] veth0_macvtap: left promiscuous mode [ 358.780778][ T1150] veth1_vlan: left promiscuous mode [ 358.788898][ T1150] veth0_vlan: left promiscuous mode [ 358.874942][ T30] audit: type=1400 audit(1751735972.573:674): avc: denied { read write } for pid=10068 comm="syz.3.899" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 359.438254][ T5154] Bluetooth: hci0: command tx timeout [ 359.714795][ T30] audit: type=1400 audit(1751735972.573:675): avc: denied { open } for pid=10068 comm="syz.3.899" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 359.743106][ T30] audit: type=1326 audit(1751735972.888:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10068 comm="syz.3.899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f760278e929 code=0x0 [ 360.378432][T10080] could not allocate digest TFM handle sha256-ce [ 360.588744][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 360.621148][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 360.767810][T10077] Falling back ldisc for ttyprintk. [ 360.998159][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 361.007070][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 361.015995][T10099] netlink: 'syz.2.904': attribute type 5 has an invalid length. [ 361.036581][T10099] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.046470][T10099] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.056101][T10099] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.064846][T10099] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.233886][ T30] audit: type=1400 audit(1751735974.999:677): avc: denied { setopt } for pid=10103 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 361.277708][ T30] audit: type=1400 audit(1751735974.999:678): avc: denied { ioctl } for pid=10103 comm="syz.1.905" path="socket:[23248]" dev="sockfs" ino=23248 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.419104][ T5154] Bluetooth: hci0: command tx timeout [ 361.441214][T10032] chnl_net:caif_netlink_parms(): no params data found [ 361.476652][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 361.666667][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 361.704269][ T43] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 361.732659][ T43] usb 2-1: config 0 has no interface number 0 [ 361.767028][ T43] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 361.786688][T10119] No control pipe specified [ 361.814665][ T43] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 361.855000][ T43] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 361.896766][ T43] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 361.906472][ T43] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 361.923281][ T43] usb 2-1: Product: syz [ 361.933495][ T43] usb 2-1: SerialNumber: syz [ 361.945640][ T43] usb 2-1: config 0 descriptor?? [ 361.961653][ T43] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 361.980017][ T43] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input21 [ 362.069920][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.095259][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.122704][T10032] bridge_slave_0: entered allmulticast mode [ 362.156717][T10032] bridge_slave_0: entered promiscuous mode [ 362.169971][T10121] pim6reg1: entered allmulticast mode [ 362.179851][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.202230][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.212359][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.213621][T10032] bridge_slave_1: entered allmulticast mode [ 362.221277][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.233961][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.234328][T10032] bridge_slave_1: entered promiscuous mode [ 362.241383][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.255164][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.263177][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.270429][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.277518][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.285654][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.292754][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 362.300624][ T43] usb 2-1: USB disconnect, device number 23 [ 362.306633][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 362.339235][ T43] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 362.419030][ T5946] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 362.526531][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.557993][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.615876][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.638259][ T5946] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 362.670529][ T5946] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.680334][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.688444][ T5946] usb 3-1: Product: syz [ 362.692717][ T5946] usb 3-1: Manufacturer: syz [ 362.697357][ T5946] usb 3-1: SerialNumber: syz [ 362.744637][ T5946] cdc_mbim 3-1:1.0: skipping garbage [ 362.816881][T10032] team0: Port device team_slave_0 added [ 362.865807][T10032] team0: Port device team_slave_1 added [ 362.943846][T10135] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 363.025912][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.045495][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.089024][ T30] audit: type=1400 audit(1751735977.015:679): avc: denied { getopt } for pid=10142 comm="syz.3.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.126055][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.178652][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.195527][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.281726][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.371060][T10032] hsr_slave_0: entered promiscuous mode [ 363.378295][T10032] hsr_slave_1: entered promiscuous mode [ 363.401687][ T5154] Bluetooth: hci0: command tx timeout [ 363.648171][T10135] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 363.680575][ T5946] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 363.692415][ T5946] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 363.710076][ T5946] wwan wwan0: port wwan0mbim0 attached [ 363.876131][ T30] audit: type=1400 audit(1751735977.824:680): avc: denied { setopt } for pid=10152 comm="syz.3.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 364.300968][ T5946] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, e6:02:af:07:b1:8c [ 364.439917][ T5946] usb 3-1: USB disconnect, device number 36 [ 364.502539][ T5946] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 364.550871][ T30] audit: type=1800 audit(1751735978.548:681): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.913" name="/" dev="fuse" ino=1 res=0 errno=0 [ 364.666825][ T30] audit: type=1800 audit(1751735978.548:682): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.913" name="/" dev="fuse" ino=1 res=0 errno=0 [ 364.783285][ T5946] wwan wwan0: port wwan0mbim0 disconnected [ 364.909239][T10173] loop6: detected capacity change from 0 to 63 [ 364.922315][T10173] buffer_io_error: 15 callbacks suppressed [ 364.922330][T10173] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.971160][T10173] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.028019][T10173] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.040670][T10173] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.069279][T10177] mkiss: ax0: crc mode is auto. [ 365.210788][T10174] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 365.237996][T10174] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 365.238111][T10173] loop6: unable to read partition table [ 365.329257][T10173] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 365.382072][ T5154] Bluetooth: hci0: command tx timeout [ 365.400260][T10174] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 365.468089][T10174] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 365.483980][T10174] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 365.492679][T10174] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 365.535254][T10181] could not allocate digest TFM handle sha256-ce [ 367.398308][T10032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.670610][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.677411][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.717080][T10032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.877181][T10032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.978680][T10032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.770640][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 369.021016][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.061218][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.061816][ T43] usb 2-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 369.094394][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.106618][ T43] usb 2-1: Product: syz [ 369.148525][ T43] usb 2-1: Manufacturer: syz [ 369.157405][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.173622][ T43] usb 2-1: SerialNumber: syz [ 369.180290][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.187426][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.207729][T10252] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 369.224688][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.231874][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.239945][ T43] usb 2-1: config 0 descriptor?? [ 369.273128][T10032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.297622][T10032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.372597][ T5912] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 369.470630][ T30] audit: type=1800 audit(1751735983.714:683): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.930" name="/" dev="fuse" ino=1 res=0 errno=0 [ 369.589262][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 369.619624][ T5912] usb 4-1: config 162 has an invalid interface number: 251 but max is 1 [ 369.648766][ T5912] usb 4-1: config 162 has an invalid interface number: 209 but max is 1 [ 369.676386][ T5912] usb 4-1: config 162 has no interface number 0 [ 369.676831][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.682828][ T30] audit: type=1800 audit(1751735983.746:684): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.930" name="/" dev="fuse" ino=1 res=0 errno=0 [ 369.716705][ T5912] usb 4-1: config 162 has no interface number 1 [ 369.744760][ T5912] usb 4-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 369.771241][ T5912] usb 4-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 369.804256][ T5912] usb 4-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 369.843442][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.872702][ T5912] usb 4-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 369.895889][ T5912] usb 4-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 369.908165][ T5912] usb 4-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 369.929254][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.955716][ T5912] usb 4-1: config 162 interface 251 has no altsetting 0 [ 369.966687][ T5912] usb 4-1: config 162 interface 209 has no altsetting 0 [ 369.977615][ T5912] usb 4-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 370.010562][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.018549][ T5912] usb 4-1: Product: syz [ 370.044694][ T5912] usb 4-1: Manufacturer: syz [ 370.055196][ T5912] usb 4-1: SerialNumber: syz [ 370.118130][ T43] usb 2-1: USB disconnect, device number 24 [ 370.293674][ T5912] io_edgeport 4-1:162.251: required endpoints missing [ 370.492022][ T5912] io_edgeport 4-1:162.209: Edgeport 2 port adapter converter detected [ 370.499655][T10032] veth0_vlan: entered promiscuous mode [ 370.538740][T10032] veth1_vlan: entered promiscuous mode [ 370.638933][T10281] syz.2.932: attempt to access beyond end of device [ 370.638933][T10281] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 370.651935][T10281] syz.2.932: attempt to access beyond end of device [ 370.651935][T10281] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 370.664860][T10281] Mount JFS Failure: -5 [ 370.816128][T10032] veth0_macvtap: entered promiscuous mode [ 370.990273][T10288] syz.2.932: attempt to access beyond end of device [ 370.990273][T10288] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 371.003874][T10288] gfs2: error -5 reading superblock [ 371.238880][ T5912] usb 4-1: ัƒ detected [ 371.262141][ T5912] usb 4-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 371.299153][ T5912] usb 4-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 371.319185][T10032] veth1_macvtap: entered promiscuous mode [ 371.331791][T10290] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 371.419868][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.447271][T10290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.933'. [ 371.522399][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.578170][T10032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.587489][T10032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.596397][T10032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.606423][T10032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.640949][ T43] usb 4-1: USB disconnect, device number 25 [ 371.641037][ C0] usb 4-1: edge_interrupt_callback - Error -19 submitting control urb [ 371.679790][T10290] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 371.683267][ T43] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 371.862150][ T43] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 372.008620][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.040934][ T43] io_edgeport 4-1:162.209: device disconnected [ 372.088416][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.321773][T10314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.814965][T10316] syz.1.938: attempt to access beyond end of device [ 372.814965][T10316] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 372.893374][T10316] gfs2: error -5 reading superblock [ 373.007869][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.115045][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.859238][ T30] audit: type=1400 audit(1751735988.314:685): avc: denied { listen } for pid=10331 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.004863][T10333] 9pnet_fd: Insufficient options for proto=fd [ 374.672397][T10349] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 374.737874][T10355] Cannot find map_set index 0 as target [ 374.754096][T10354] syz.1.949: attempt to access beyond end of device [ 374.754096][T10354] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 374.767074][T10354] syz.1.949: attempt to access beyond end of device [ 374.767074][T10354] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 374.780016][T10354] Mount JFS Failure: -5 [ 374.798597][ T30] audit: type=1400 audit(1751735989.301:686): avc: denied { execmem } for pid=10353 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 374.931405][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.206965][ T5896] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 375.338812][T10369] syz.1.949: attempt to access beyond end of device [ 375.338812][T10369] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 375.352085][T10369] gfs2: error -5 reading superblock [ 375.770709][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 375.815777][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.844007][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.869364][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.908694][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.920248][ T5896] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 375.938694][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.970756][ T5896] usb 1-1: config 0 descriptor?? [ 375.995380][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.061294][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.220681][ T12] bridge_slave_1: left allmulticast mode [ 376.226381][ T12] bridge_slave_1: left promiscuous mode [ 376.234870][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.244775][ T12] bridge_slave_0: left allmulticast mode [ 376.251762][ T12] bridge_slave_0: left promiscuous mode [ 376.257680][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.398307][ T5896] microsoft 0003:045E:07DA.000A: invalid report_count -1808524472 [ 376.444655][ T5896] microsoft 0003:045E:07DA.000A: item 0 4 1 9 parsing failed [ 376.463509][ T5896] microsoft 0003:045E:07DA.000A: parse failed [ 376.505835][ T5896] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 376.778415][ T30] audit: type=1400 audit(1751735991.390:687): avc: denied { create } for pid=10396 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 377.069564][ T30] audit: type=1400 audit(1751735991.390:688): avc: denied { getopt } for pid=10396 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 377.393642][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.436099][ T5896] usb 1-1: USB disconnect, device number 30 [ 377.443608][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.808644][ T5896] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 377.999005][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 378.060702][ T5896] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 378.133432][ T5896] usb 1-1: config 0 has no interface number 0 [ 378.174328][ T5896] usb 1-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=d3.4f [ 378.197465][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.220513][ T5896] usb 1-1: Product: syz [ 378.230197][ T5896] usb 1-1: Manufacturer: syz [ 378.250214][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.262268][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.278498][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.292018][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.299940][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.314930][ T5896] usb 1-1: SerialNumber: syz [ 378.349675][ T5896] usb 1-1: config 0 descriptor?? [ 378.377121][ T5896] io_ti 1-1:0.233: required endpoints missing [ 378.395369][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.423693][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.439869][ T12] bond0 (unregistering): Released all slaves [ 378.563776][ T24] usb 1-1: USB disconnect, device number 31 [ 378.659020][T10435] netlink: 'syz.1.959': attribute type 11 has an invalid length. [ 378.689593][T10435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.959'. [ 378.749780][ T30] audit: type=1400 audit(1751735993.449:689): avc: denied { create } for pid=10432 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.243332][T10435] loop6: detected capacity change from 0 to 524287999 [ 379.905444][T10455] FAULT_INJECTION: forcing a failure. [ 379.905444][T10455] name failslab, interval 1, probability 0, space 0, times 0 [ 379.952993][T10455] CPU: 1 UID: 0 PID: 10455 Comm: syz.3.963 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 379.953024][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.953035][T10455] Call Trace: [ 379.953041][T10455] [ 379.953048][T10455] dump_stack_lvl+0x16c/0x1f0 [ 379.953079][T10455] should_fail_ex+0x512/0x640 [ 379.953102][T10455] ? fs_reclaim_acquire+0xae/0x150 [ 379.953124][T10455] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 379.953149][T10455] should_failslab+0xc2/0x120 [ 379.953176][T10455] __kmalloc_noprof+0xd2/0x510 [ 379.953205][T10455] tomoyo_realpath_from_path+0xc2/0x6e0 [ 379.953234][T10455] ? tomoyo_profile+0x47/0x60 [ 379.953259][T10455] tomoyo_path_number_perm+0x245/0x580 [ 379.953280][T10455] ? tomoyo_path_number_perm+0x237/0x580 [ 379.953304][T10455] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 379.953327][T10455] ? find_held_lock+0x2b/0x80 [ 379.953374][T10455] ? find_held_lock+0x2b/0x80 [ 379.953394][T10455] ? hook_file_ioctl_common+0x145/0x410 [ 379.953416][T10455] ? __fget_files+0x20e/0x3c0 [ 379.953445][T10455] security_file_ioctl+0x9b/0x240 [ 379.953472][T10455] __x64_sys_ioctl+0xb7/0x210 [ 379.953494][T10455] do_syscall_64+0xcd/0x4c0 [ 379.953522][T10455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.953540][T10455] RIP: 0033:0x7f760278e929 [ 379.953554][T10455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.953571][T10455] RSP: 002b:00007f7603534038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.953588][T10455] RAX: ffffffffffffffda RBX: 00007f76029b5fa0 RCX: 00007f760278e929 [ 379.953600][T10455] RDX: 0000200000001440 RSI: 00000000000089eb RDI: 0000000000000004 [ 379.953610][T10455] RBP: 00007f7603534090 R08: 0000000000000000 R09: 0000000000000000 [ 379.953619][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.953629][T10455] R13: 0000000000000000 R14: 00007f76029b5fa0 R15: 00007ffe84f1eee8 [ 379.953653][T10455] [ 379.955024][T10455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.304787][ T5154] Bluetooth: hci0: command tx timeout [ 380.493692][ T12] hsr_slave_0: left promiscuous mode [ 380.532603][ T30] audit: type=1400 audit(1751735995.328:690): avc: denied { write } for pid=10467 comm="syz.0.966" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 380.561747][ T12] hsr_slave_1: left promiscuous mode [ 380.567691][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.650073][T10475] netlink: 'syz.2.968': attribute type 12 has an invalid length. [ 380.659877][T10475] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.968'. [ 380.810472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.883515][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.902443][ T30] audit: type=1400 audit(1751735995.717:691): avc: denied { remount } for pid=10472 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 380.917297][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.965571][T10482] FAULT_INJECTION: forcing a failure. [ 380.965571][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 381.035651][T10482] CPU: 0 UID: 0 PID: 10482 Comm: syz.0.969 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 381.035676][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.035686][T10482] Call Trace: [ 381.035692][T10482] [ 381.035698][T10482] dump_stack_lvl+0x16c/0x1f0 [ 381.035726][T10482] should_fail_ex+0x512/0x640 [ 381.035748][T10482] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 381.035774][T10482] should_failslab+0xc2/0x120 [ 381.035799][T10482] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 381.035823][T10482] ? sock_alloc_inode+0x25/0x1c0 [ 381.035842][T10482] ? __pfx_sock_alloc_inode+0x10/0x10 [ 381.035856][T10482] sock_alloc_inode+0x25/0x1c0 [ 381.035870][T10482] alloc_inode+0x64/0x240 [ 381.035888][T10482] sock_alloc+0x40/0x280 [ 381.035913][T10482] __sock_create+0xc1/0x8d0 [ 381.035935][T10482] mptcp_subflow_create_socket+0xf5/0xed0 [ 381.035952][T10482] ? avc_has_perm_noaudit+0x117/0x3b0 [ 381.035972][T10482] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 381.035998][T10482] __mptcp_nmpc_sk+0x182/0x7d0 [ 381.036018][T10482] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 381.036037][T10482] ? __lock_acquire+0xb8a/0x1c90 [ 381.036057][T10482] mptcp_connect+0x7f/0xfe0 [ 381.036079][T10482] __inet_stream_connect+0x3c8/0x1020 [ 381.036107][T10482] ? __pfx___inet_stream_connect+0x10/0x10 [ 381.036128][T10482] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.036148][T10482] ? __pfx_inet_stream_connect+0x10/0x10 [ 381.036170][T10482] ? __local_bh_enable_ip+0xa4/0x120 [ 381.036194][T10482] ? __pfx_inet_stream_connect+0x10/0x10 [ 381.036213][T10482] inet_stream_connect+0x57/0xa0 [ 381.036235][T10482] __sys_connect_file+0x141/0x1a0 [ 381.036257][T10482] __sys_connect+0x13b/0x160 [ 381.036275][T10482] ? __pfx___sys_connect+0x10/0x10 [ 381.036304][T10482] ? __pfx_ksys_write+0x10/0x10 [ 381.036330][T10482] __x64_sys_connect+0x72/0xb0 [ 381.036347][T10482] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.036370][T10482] do_syscall_64+0xcd/0x4c0 [ 381.036396][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.036412][T10482] RIP: 0033:0x7f954f78e929 [ 381.036425][T10482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.036440][T10482] RSP: 002b:00007f95505a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 381.036455][T10482] RAX: ffffffffffffffda RBX: 00007f954f9b5fa0 RCX: 00007f954f78e929 [ 381.036467][T10482] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 381.036482][T10482] RBP: 00007f95505a0090 R08: 0000000000000000 R09: 0000000000000000 [ 381.036491][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.036500][T10482] R13: 0000000000000000 R14: 00007f954f9b5fa0 R15: 00007ffef99d7e58 [ 381.036521][T10482] [ 381.036530][T10482] socket: no more sockets [ 381.391140][ T12] veth1_macvtap: left promiscuous mode [ 381.396708][ T12] veth0_macvtap: left promiscuous mode [ 381.427646][ T12] veth1_vlan: left promiscuous mode [ 381.453174][ T12] veth0_vlan: left promiscuous mode [ 381.649272][T10470] Falling back ldisc for ttyprintk. [ 382.126963][ T12] team0 (unregistering): Port device team_slave_1 removed [ 382.164422][ T12] team0 (unregistering): Port device team_slave_0 removed [ 382.290735][ T5154] Bluetooth: hci0: command tx timeout [ 382.901655][T10420] chnl_net:caif_netlink_parms(): no params data found [ 384.265205][ T5154] Bluetooth: hci0: command tx timeout [ 384.828240][ T30] audit: type=1326 audit(1751735999.843:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.0.979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f954f78e929 code=0x0 [ 384.864929][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.191771][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.199504][T10420] bridge_slave_0: entered allmulticast mode [ 385.208761][T10420] bridge_slave_0: entered promiscuous mode [ 385.226608][T10420] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.234130][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.242589][T10420] bridge_slave_1: entered allmulticast mode [ 385.256641][T10420] bridge_slave_1: entered promiscuous mode [ 385.324003][T10420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.336662][T10420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.414622][T10420] team0: Port device team_slave_0 added [ 385.422744][T10420] team0: Port device team_slave_1 added [ 385.541626][T10420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.558358][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.675850][T10420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.758075][T10420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.785202][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.969002][T10420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.246539][ T5830] Bluetooth: hci0: command tx timeout [ 386.257435][T10420] hsr_slave_0: entered promiscuous mode [ 386.294110][T10420] hsr_slave_1: entered promiscuous mode [ 386.390645][T10564] FAULT_INJECTION: forcing a failure. [ 386.390645][T10564] name failslab, interval 1, probability 0, space 0, times 0 [ 386.429039][ T5154] block nbd1: Receive control failed (result -32) [ 386.439445][T10552] block nbd1: shutting down sockets [ 386.469929][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz.3.985 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 386.469958][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.469969][T10564] Call Trace: [ 386.469975][T10564] [ 386.469982][T10564] dump_stack_lvl+0x16c/0x1f0 [ 386.470011][T10564] should_fail_ex+0x512/0x640 [ 386.470035][T10564] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 386.470061][T10564] should_failslab+0xc2/0x120 [ 386.470086][T10564] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 386.470108][T10564] ? d_instantiate+0x77/0x90 [ 386.470124][T10564] ? alloc_empty_file+0x55/0x1e0 [ 386.470145][T10564] alloc_empty_file+0x55/0x1e0 [ 386.470163][T10564] alloc_file_pseudo+0x13a/0x230 [ 386.470182][T10564] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 386.470201][T10564] ? _raw_spin_unlock+0x28/0x50 [ 386.470222][T10564] ? alloc_fd+0x471/0x7d0 [ 386.470249][T10564] __anon_inode_getfile+0xe8/0x280 [ 386.470277][T10564] anon_inode_getfd+0x52/0xb0 [ 386.470303][T10564] __x64_sys_fsopen+0x18b/0x240 [ 386.470322][T10564] do_syscall_64+0xcd/0x4c0 [ 386.470349][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.470366][T10564] RIP: 0033:0x7f760278e929 [ 386.470381][T10564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.470398][T10564] RSP: 002b:00007f7603534038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 386.470422][T10564] RAX: ffffffffffffffda RBX: 00007f76029b5fa0 RCX: 00007f760278e929 [ 386.470433][T10564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 386.470444][T10564] RBP: 00007f7603534090 R08: 0000000000000000 R09: 0000000000000000 [ 386.470455][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.470465][T10564] R13: 0000000000000001 R14: 00007f76029b5fa0 R15: 00007ffe84f1eee8 [ 386.470490][T10564] [ 387.160403][ C1] ================================================================== [ 387.168511][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x45a/0x4d0 [ 387.176426][ C1] Read of size 2 at addr ffff888057e0802a by task syz.3.986/10574 [ 387.184242][ C1] [ 387.186571][ C1] CPU: 1 UID: 0 PID: 10574 Comm: syz.3.986 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 387.186597][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.186608][ C1] Call Trace: [ 387.186614][ C1] [ 387.186621][ C1] dump_stack_lvl+0x116/0x1f0 [ 387.186651][ C1] print_report+0xcd/0x680 [ 387.186676][ C1] ? __virt_addr_valid+0x81/0x610 [ 387.186695][ C1] ? __phys_addr+0xe8/0x180 [ 387.186714][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 387.186738][ C1] kasan_report+0xe0/0x110 [ 387.186761][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 387.186787][ C1] rose_timer_expiry+0x45a/0x4d0 [ 387.186810][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 387.186833][ C1] call_timer_fn+0x19a/0x620 [ 387.186859][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 387.186887][ C1] ? rcu_is_watching+0x12/0xc0 [ 387.186909][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 387.186933][ C1] __run_timers+0x6ef/0x960 [ 387.186960][ C1] ? __pfx___run_timers+0x10/0x10 [ 387.186992][ C1] run_timer_base+0x114/0x190 [ 387.187018][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 387.187043][ C1] ? rcu_is_watching+0x12/0xc0 [ 387.187064][ C1] run_timer_softirq+0x1a/0x40 [ 387.187090][ C1] handle_softirqs+0x219/0x8e0 [ 387.187114][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 387.187138][ C1] __irq_exit_rcu+0x109/0x170 [ 387.187167][ C1] irq_exit_rcu+0x9/0x30 [ 387.187187][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 387.187212][ C1] [ 387.187218][ C1] [ 387.187224][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 387.187243][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 387.187261][ C1] Code: 0f c1 05 48 7a 38 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 5d 38 38 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 387.187277][ C1] RSP: 0018:ffffc90003467728 EFLAGS: 00000206 [ 387.187292][ C1] RAX: 32ab09fb9b688500 RBX: ffff888076cb5858 RCX: ffffc90003467734 [ 387.187302][ C1] RDX: 0000000000000000 RSI: ffffffff8de0c233 RDI: ffffffff8c1587e0 [ 387.187314][ C1] RBP: 1ffff9200068cef3 R08: 0000000000000005 R09: 0000000000000001 [ 387.187324][ C1] R10: 0000000000000002 R11: 0000000000000001 R12: ffffffff8a2e2826 [ 387.187335][ C1] R13: 0000000000000202 R14: ffff88801ffa8000 R15: 0000000000000001 [ 387.187346][ C1] ? __unix_dgram_recvmsg+0x786/0xc50 [ 387.187373][ C1] ? mark_held_locks+0x49/0x80 [ 387.187388][ C1] __mutex_unlock_slowpath+0xa2/0x6a0 [ 387.187414][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.187435][ C1] ? scm_recv_unix+0x14b/0x400 [ 387.187456][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 387.187477][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 387.187500][ C1] __unix_dgram_recvmsg+0x786/0xc50 [ 387.187525][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 387.187548][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 387.187566][ C1] ? iovec_from_user+0xbb/0x140 [ 387.187592][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 387.187614][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 387.187633][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 387.187653][ C1] ? kfree+0x24f/0x4d0 [ 387.187673][ C1] ___sys_recvmsg+0x114/0x1a0 [ 387.187694][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 387.187723][ C1] ? __pfx___might_resched+0x10/0x10 [ 387.187748][ C1] do_recvmmsg+0x2fe/0x750 [ 387.187773][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 387.187796][ C1] ? lock_acquire+0x179/0x350 [ 387.187813][ C1] ? do_futex+0x122/0x350 [ 387.187844][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 387.187871][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 387.187896][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 387.187924][ C1] do_syscall_64+0xcd/0x4c0 [ 387.187950][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.187967][ C1] RIP: 0033:0x7f760278e929 [ 387.187981][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.187997][ C1] RSP: 002b:00007f7603513038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 387.188014][ C1] RAX: ffffffffffffffda RBX: 00007f76029b6080 RCX: 00007f760278e929 [ 387.188026][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 387.188037][ C1] RBP: 00007f7602810b39 R08: 0000000000000000 R09: 0000000000000000 [ 387.188048][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 387.188059][ C1] R13: 0000000000000000 R14: 00007f76029b6080 R15: 00007ffe84f1eee8 [ 387.188077][ C1] [ 387.188083][ C1] [ 387.628066][ C1] Allocated by task 13: [ 387.632198][ C1] kasan_save_stack+0x33/0x60 [ 387.636864][ C1] kasan_save_track+0x14/0x30 [ 387.641523][ C1] __kasan_kmalloc+0xaa/0xb0 [ 387.646095][ C1] __kmalloc_noprof+0x223/0x510 [ 387.650932][ C1] fib6_info_alloc+0x40/0x160 [ 387.655594][ C1] ip6_route_info_create+0x14c/0x870 [ 387.660862][ C1] addrconf_f6i_alloc+0x2da/0x660 [ 387.665868][ C1] ipv6_add_addr+0x531/0x1fe0 [ 387.670531][ C1] addrconf_add_linklocal+0x2a5/0x500 [ 387.675882][ C1] addrconf_addr_gen+0x36d/0x3c0 [ 387.680796][ C1] addrconf_init_auto_addrs+0x4b9/0x8f0 [ 387.686322][ C1] addrconf_notify+0x6e2/0x19e0 [ 387.691154][ C1] notifier_call_chain+0xb9/0x410 [ 387.696166][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 387.702041][ C1] netif_state_change+0x165/0x3b0 [ 387.707046][ C1] linkwatch_do_dev+0x12b/0x160 [ 387.711876][ C1] __linkwatch_run_queue+0x2aa/0x8a0 [ 387.717141][ C1] linkwatch_event+0x8f/0xc0 [ 387.721711][ C1] process_one_work+0x9cf/0x1b70 [ 387.726628][ C1] worker_thread+0x6c8/0xf10 [ 387.731196][ C1] kthread+0x3c2/0x780 [ 387.735244][ C1] ret_from_fork+0x5d4/0x6f0 [ 387.739818][ C1] ret_from_fork_asm+0x1a/0x30 [ 387.744563][ C1] [ 387.746867][ C1] Freed by task 3455: [ 387.750822][ C1] kasan_save_stack+0x33/0x60 [ 387.755505][ C1] kasan_save_track+0x14/0x30 [ 387.760166][ C1] kasan_save_free_info+0x3b/0x60 [ 387.765170][ C1] __kasan_slab_free+0x51/0x70 [ 387.769916][ C1] kfree+0x2b4/0x4d0 [ 387.773792][ C1] rcu_core+0x79c/0x14e0 [ 387.778016][ C1] handle_softirqs+0x219/0x8e0 [ 387.782761][ C1] do_softirq+0xb2/0xf0 [ 387.786900][ C1] __local_bh_enable_ip+0x100/0x120 [ 387.792080][ C1] batadv_nc_purge_paths+0x1d4/0x3a0 [ 387.797349][ C1] batadv_nc_worker+0x921/0x1030 [ 387.802277][ C1] process_one_work+0x9cf/0x1b70 [ 387.807194][ C1] worker_thread+0x6c8/0xf10 [ 387.811767][ C1] kthread+0x3c2/0x780 [ 387.815812][ C1] ret_from_fork+0x5d4/0x6f0 [ 387.820386][ C1] ret_from_fork_asm+0x1a/0x30 [ 387.825133][ C1] [ 387.827438][ C1] Last potentially related work creation: [ 387.833130][ C1] kasan_save_stack+0x33/0x60 [ 387.837790][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 387.842970][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 387.848843][ C1] ip6_del_rt+0x1ee/0x230 [ 387.853156][ C1] __ipv6_ifa_notify+0x487/0xd60 [ 387.858077][ C1] addrconf_ifdown.isra.0+0xe8b/0x1a90 [ 387.863513][ C1] addrconf_notify+0x220/0x19e0 [ 387.868345][ C1] notifier_call_chain+0xb9/0x410 [ 387.873355][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 387.879231][ C1] dev_close_many+0x319/0x630 [ 387.883888][ C1] unregister_netdevice_many_notify+0x578/0x2700 [ 387.890203][ C1] default_device_exit_batch+0x853/0xaf0 [ 387.895824][ C1] ops_undo_list+0x363/0xab0 [ 387.900404][ C1] cleanup_net+0x408/0x890 [ 387.904796][ C1] process_one_work+0x9cf/0x1b70 [ 387.909713][ C1] worker_thread+0x6c8/0xf10 [ 387.914284][ C1] kthread+0x3c2/0x780 [ 387.918331][ C1] ret_from_fork+0x5d4/0x6f0 [ 387.922908][ C1] ret_from_fork_asm+0x1a/0x30 [ 387.927653][ C1] [ 387.929954][ C1] The buggy address belongs to the object at ffff888057e08000 [ 387.929954][ C1] which belongs to the cache kmalloc-512 of size 512 [ 387.943986][ C1] The buggy address is located 42 bytes inside of [ 387.943986][ C1] freed 512-byte region [ffff888057e08000, ffff888057e08200) [ 387.957672][ C1] [ 387.959975][ C1] The buggy address belongs to the physical page: [ 387.966361][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057e09000 pfn:0x57e08 [ 387.976407][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 387.984883][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 387.993363][ C1] page_type: f5(slab) [ 387.997325][ C1] raw: 00fff00000000240 ffff88801b841c80 ffffea00009c5b10 ffffea0000ae9010 [ 388.005891][ C1] raw: ffff888057e09000 000000000010000e 00000000f5000000 0000000000000000 [ 388.014455][ C1] head: 00fff00000000240 ffff88801b841c80 ffffea00009c5b10 ffffea0000ae9010 [ 388.023109][ C1] head: ffff888057e09000 000000000010000e 00000000f5000000 0000000000000000 [ 388.031759][ C1] head: 00fff00000000002 ffffea00015f8201 00000000ffffffff 00000000ffffffff [ 388.040411][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 388.049055][ C1] page dumped because: kasan: bad access detected [ 388.055444][ C1] page_owner tracks the page as allocated [ 388.061137][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5828, tgid 5828 (syz-executor), ts 72177775628, free_ts 16349624277 [ 388.080397][ C1] post_alloc_hook+0x1c0/0x230 [ 388.085147][ C1] get_page_from_freelist+0x1321/0x3890 [ 388.090675][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 388.096553][ C1] alloc_pages_mpol+0x1fb/0x550 [ 388.101389][ C1] new_slab+0x23b/0x330 [ 388.105530][ C1] ___slab_alloc+0xd9c/0x1940 [ 388.110186][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 388.115539][ C1] __kmalloc_noprof+0x2f2/0x510 [ 388.120372][ C1] fib6_info_alloc+0x40/0x160 [ 388.125039][ C1] ip6_route_info_create+0x14c/0x870 [ 388.130308][ C1] ip6_route_add.part.0+0x22/0x1d0 [ 388.135403][ C1] ip6_route_add+0x45/0x60 [ 388.139810][ C1] addrconf_prefix_route+0x2fd/0x510 [ 388.145081][ C1] addrconf_notify+0x12c6/0x19e0 [ 388.149997][ C1] notifier_call_chain+0xb9/0x410 [ 388.155006][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 388.160889][ C1] page last free pid 1 tgid 1 stack trace: [ 388.166670][ C1] __free_frozen_pages+0x7fe/0x1180 [ 388.171851][ C1] free_contig_range+0x183/0x4b0 [ 388.176769][ C1] destroy_args+0x7f6/0xa60 [ 388.181254][ C1] debug_vm_pgtable+0x13b8/0x2d00 [ 388.186261][ C1] do_one_initcall+0x120/0x6e0 [ 388.191005][ C1] kernel_init_freeable+0x5c2/0x900 [ 388.196188][ C1] kernel_init+0x1c/0x2b0 [ 388.200498][ C1] ret_from_fork+0x5d4/0x6f0 [ 388.205074][ C1] ret_from_fork_asm+0x1a/0x30 [ 388.209818][ C1] [ 388.212129][ C1] Memory state around the buggy address: [ 388.217735][ C1] ffff888057e07f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.225775][ C1] ffff888057e07f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.233836][ C1] >ffff888057e08000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 388.241871][ C1] ^ [ 388.247218][ C1] ffff888057e08080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 388.255256][ C1] ffff888057e08100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 388.263292][ C1] ================================================================== [ 388.271528][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.277584][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 388.284786][ C1] CPU: 1 UID: 0 PID: 10574 Comm: syz.3.986 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 388.296771][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.306830][ C1] Call Trace: [ 388.310188][ C1] [ 388.313024][ C1] dump_stack_lvl+0x3d/0x1f0 [ 388.317621][ C1] panic+0x71c/0x800 [ 388.321504][ C1] ? __pfx_panic+0x10/0x10 [ 388.325908][ C1] ? mark_held_locks+0x49/0x80 [ 388.330654][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 388.335772][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 388.340866][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 388.345961][ C1] check_panic_on_warn+0xab/0xb0 [ 388.350895][ C1] end_report+0x107/0x170 [ 388.355240][ C1] kasan_report+0xee/0x110 [ 388.359657][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 388.364765][ C1] rose_timer_expiry+0x45a/0x4d0 [ 388.369692][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 388.375137][ C1] call_timer_fn+0x19a/0x620 [ 388.379722][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 388.384825][ C1] ? rcu_is_watching+0x12/0xc0 [ 388.389573][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 388.395020][ C1] __run_timers+0x6ef/0x960 [ 388.399513][ C1] ? __pfx___run_timers+0x10/0x10 [ 388.404531][ C1] run_timer_base+0x114/0x190 [ 388.409196][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 388.414380][ C1] ? rcu_is_watching+0x12/0xc0 [ 388.419131][ C1] run_timer_softirq+0x1a/0x40 [ 388.423883][ C1] handle_softirqs+0x219/0x8e0 [ 388.428634][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 388.433905][ C1] __irq_exit_rcu+0x109/0x170 [ 388.438564][ C1] irq_exit_rcu+0x9/0x30 [ 388.442794][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 388.448417][ C1] [ 388.451329][ C1] [ 388.454246][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.460218][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 388.465485][ C1] Code: 0f c1 05 48 7a 38 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 5d 38 38 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 388.485077][ C1] RSP: 0018:ffffc90003467728 EFLAGS: 00000206 [ 388.491125][ C1] RAX: 32ab09fb9b688500 RBX: ffff888076cb5858 RCX: ffffc90003467734 [ 388.499078][ C1] RDX: 0000000000000000 RSI: ffffffff8de0c233 RDI: ffffffff8c1587e0 [ 388.507030][ C1] RBP: 1ffff9200068cef3 R08: 0000000000000005 R09: 0000000000000001 [ 388.514984][ C1] R10: 0000000000000002 R11: 0000000000000001 R12: ffffffff8a2e2826 [ 388.522934][ C1] R13: 0000000000000202 R14: ffff88801ffa8000 R15: 0000000000000001 [ 388.530886][ C1] ? __unix_dgram_recvmsg+0x786/0xc50 [ 388.536252][ C1] ? mark_held_locks+0x49/0x80 [ 388.540999][ C1] __mutex_unlock_slowpath+0xa2/0x6a0 [ 388.546361][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 388.552330][ C1] ? scm_recv_unix+0x14b/0x400 [ 388.557079][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 388.562174][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 388.568140][ C1] __unix_dgram_recvmsg+0x786/0xc50 [ 388.573329][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 388.579033][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 388.583958][ C1] ? iovec_from_user+0xbb/0x140 [ 388.588796][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 388.593722][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 388.598470][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 388.603742][ C1] ? kfree+0x24f/0x4d0 [ 388.607795][ C1] ___sys_recvmsg+0x114/0x1a0 [ 388.612467][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 388.617658][ C1] ? __pfx___might_resched+0x10/0x10 [ 388.622938][ C1] do_recvmmsg+0x2fe/0x750 [ 388.627343][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 388.632276][ C1] ? lock_acquire+0x179/0x350 [ 388.636936][ C1] ? do_futex+0x122/0x350 [ 388.641257][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 388.646201][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 388.651216][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 388.656763][ C1] do_syscall_64+0xcd/0x4c0 [ 388.661256][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.667130][ C1] RIP: 0033:0x7f760278e929 [ 388.671528][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.691119][ C1] RSP: 002b:00007f7603513038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 388.699515][ C1] RAX: ffffffffffffffda RBX: 00007f76029b6080 RCX: 00007f760278e929 [ 388.707467][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 388.715419][ C1] RBP: 00007f7602810b39 R08: 0000000000000000 R09: 0000000000000000 [ 388.723370][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 388.731325][ C1] R13: 0000000000000000 R14: 00007f76029b6080 R15: 00007ffe84f1eee8 [ 388.739284][ C1] [ 388.742481][ C1] Kernel Offset: disabled [ 388.746781][ C1] Rebooting in 86400 seconds..