last executing test programs: 53.953165754s ago: executing program 2 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="8c003300d0980700ffffffffffff080211000001505050505050020004000ec10c03300037520e00f6ceeb793f39166ea234caa48754ae31fd67506e7a0070638655ad406988e2a30be547caacdf6395f1d408000000000000af9432bfb7c479e8024717f8bf5867a6cfdcf70000000000000000000000006512505050505050080211000000ffffffffffff"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x44050) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "aaed7e5ba3da1eda", "a78239a747645802caa73be57ff46b9e95cda20ebe1ccdb4da076c850bd79da3", "1a1c2f6d", "97119af0cb3910e5"}, 0x38) sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xfdef) sendto$inet6(r3, &(0x7f00000000c0)="c62ee5d6a89f2387cb4093532f7c0a22", 0x10, 0x8040, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f00000000c0)="c62ee5d6a89f2387cb4093532f7c0a22", 0x10, 0x8040, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0x2}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) 52.886648254s ago: executing program 2 (id=732): syz_open_dev$sndmidi(&(0x7f0000000100), 0x8, 0x400) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x80000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 51.206049139s ago: executing program 2 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r4, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r5, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 50.220137315s ago: executing program 2 (id=739): mkdir(0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newtaction={0x188, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{0x174, 0x1, [@m_ct={0x3c, 0x5, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x9542}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xa925}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x134, 0xa, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9, 0x4, 0x4, 0x10}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x6, 0xffffffffffffffff, 0x63c1070a, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xa1, 0x1000000d, 0xdcc, 0x1ff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xecd, 0x1fe, 0xffffffffffffffff, 0x1, 0x5a55}, 0x1}}]}, {0x87, 0x6, "99f45d6241861d539cf29d192840416aaf2cf9aee83ef514597b37f1b42f25372d7bf537eeadb408caab77e44d3f6148c1f6888ae865918ad6c827dd826922a7fb6d42ded0424190cb50dcdb91137172b726cc88c1830499befea6a1e2be744629dea72c24d1c24de5c0c44b2b67798b1496c12fbc57d31edd01a6791348b72098e9ae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x40048820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 48.965419502s ago: executing program 2 (id=740): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0xd}, 0x2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYRES8=r5], 0x408100) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) 46.893577493s ago: executing program 2 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r5, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.954915547s ago: executing program 4 (id=788): socketpair(0x2b, 0x2, 0x26f, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) setrlimit(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[@ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x2400c401}, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @bcast]}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000040)={@random="23b4ec4b6dbf", @multicast, @void, {@arp={0x806, @generic={0x306, 0x88ca, 0x6, 0x0, 0x1, @local, "", @multicast, "96ef1d07"}}}}, 0x0) 28.537397616s ago: executing program 4 (id=792): syz_open_dev$sndmidi(&(0x7f0000000100), 0x8, 0x400) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x80000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pipe2$watch_queue(&(0x7f0000000080), 0x80) 24.934548347s ago: executing program 4 (id=799): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x80000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r3], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x40) 24.642875427s ago: executing program 3 (id=800): epoll_create(0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 24.051288763s ago: executing program 3 (id=802): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000007c450000000000804000000000020000000800"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="a000e76102572f114ed606f78e2fac7f000021000100000000000400000007c10001000000000000000000000000cb500000000000000000000000009dd3000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c0000000000000000000a00"], 0xa0}}, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0xd40, 0x0) mq_getsetattr(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0, 0x6, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff7, 0x8, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_setup(0x1b6a, &(0x7f00000003c0)={0x0, 0x2990, 0x10000, 0x2, 0x1fd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000440)=""/198) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24041, 0x0) io_setup(0x202, &(0x7f0000000200)) 22.883048457s ago: executing program 4 (id=804): syz_open_dev$sndmidi(&(0x7f0000000100), 0x8, 0x400) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r2], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x40) 21.750068233s ago: executing program 3 (id=807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000240)="f20f90a5a6c5db795c0f20e06635000040000f22e0f3a50f1f73fb2e0f2d22660f38818f030066b9800000c00f326635002000000f30660f388153be0f1c9c386b", 0x41}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000780)=[@textreal={0x8, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21.144124581s ago: executing program 4 (id=809): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000008c0)="15a9010c8398347a77d5949b821388463c", 0x11}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="44afd604b1a9d6a1b6aecdf220d89d6eba4e2f4c2f70be38edfa4bb65e66f04694f68ddb7bcee9b748", 0x29}, {&(0x7f00000019c0)="4b94269e21117cb86867a8eaabfaa2fac0e3c69044a3f435523fa9a8cc3d3f7fdbc2fcf33959176face566795805dc1794c8070cd49dd44749ee3b7cee67e4854b85bf6408438982555a745734e25acab250f661090788ed4d25782e3e252f217c90540dab3325cc3ba05623c1bfff8b1265a0c7f663a28a5f880af12fd442204530cfb1698d319b0b01984cb3", 0x8d}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000001a80)="07630ff3e1eebe9e13d3f3acbc40bdae8574283957ef0060af39a15d9edb1bf1574e6e8f60a57383aa8a655f51b92cd99f251b3b0b9b363b910fb9cf3624fcda73bea5a7a2d33b2a7a30dbe0b37619ac66c26c36e9a777a8223a19ae9d149dd4eadeddb9d9abd1a84531178dfb56a0c19f5080a0169183e99ffd61d435da052065026b34579ca921df5af8e691d3264f9da5db324cd9b9b8fefb2882e72e90d50e", 0xa1}, {&(0x7f0000001b40)="254aeb9a077ea7fc84cadacb92814c0aef84dc8206c97def6a020653d604e06044261ddbd9691b4e82fbd7e262aa51620aa4d945d021a4164f682ed61f", 0x3d}, {&(0x7f0000003cc0)="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", 0x1000}], 0x8}}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000001c40)="82c16aa328eb9bf66f67f716c1b8dea4bb4dedc3997bf64847a9f1d0e34a0a0df851671cac", 0x25}], 0x1}}], 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 20.277308801s ago: executing program 4 (id=810): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r2, 0x0, 0x5, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f00000001c0)={0x20, r2, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) socket$alg(0x26, 0x5, 0x0) writev(r0, &(0x7f0000002500)=[{&(0x7f0000001500)="a8138cdf6c2c299855427ddd33edc86c", 0x10}], 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x7, 0x73, 0x4, 0x2, 0x80, 0x0, 0x7, 0x5, 0xfa, 0x4, 0x8, 0x9, 0x6}, {0x7f, 0x1d9, 0x0, 0x81, 0x3, 0x8, 0x40, 0x3, 0x6, 0xf8, 0x95, 0x8, 0x5}, {0x0, 0x6, 0xf9, 0x7, 0x0, 0x28, 0x40, 0x9, 0x80, 0x1, 0x1, 0x7, 0x7}], 0xc00e}) 19.730350496s ago: executing program 0 (id=811): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000001c0)=':\x00', 0x6) preadv(r1, &(0x7f0000004fc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1, 0x3, 0x3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000200)=""/88, 0x58) unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f00000002c0)='./control\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) 19.535278859s ago: executing program 3 (id=812): r0 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 19.378533404s ago: executing program 3 (id=814): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/101) 19.134938899s ago: executing program 1 (id=815): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x3c, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@any, 0x8}, @my=0x1, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x80006, 0x6}) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_dev$hiddev(&(0x7f0000000740), 0x8, 0x72480) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000780)="ab5530524ab200"/16, 0x10) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f00000007c0)=[{&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/159, 0x9f}], 0x2, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0x40000000, &(0x7f0000008000)={0x0, 0x989680}) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) 18.990498548s ago: executing program 1 (id=816): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0xd}, 0x2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r7 = fsmount(r5, 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) 17.915298419s ago: executing program 1 (id=817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 17.772214949s ago: executing program 1 (id=818): ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 17.587078908s ago: executing program 1 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0), 0x0, 0x4000854) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000014) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000001a00), 0x800, 0x20100) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001a40), 0x204000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) landlock_create_ruleset(&(0x7f0000001a80)={0x10, 0x2}, 0x18, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 17.174603261s ago: executing program 1 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b76164}, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0xe8, 0x24, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xe}, {0xfff1, 0xfff1}, {0x6, 0x7}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf9, 0x0, 0xde, 0x7, 0x1, 0xa, 0x7, 0x2}}, {0x8, 0x2, [0xc6, 0xe]}}, {{0x1c, 0x1, {0x5, 0xc, 0xfffb, 0x0, 0x0, 0x6, 0x9, 0x4}}, {0xc, 0x2, [0x9, 0x8, 0x800, 0x3e]}}, {{0x1c, 0x1, {0x40, 0x9, 0x6, 0x6913, 0x2, 0xfffffffe, 0x2, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0x2, 0x5, 0x4, 0x120, 0x2, 0x7, 0x7fff, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x4, 0xda, 0x3, 0xffffff82, 0x0, 0x1, 0x1ff, 0x5}}, {0xe, 0x2, [0x56, 0x2, 0xc2, 0x6, 0x5]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000e00)={@val={0x0, 0x88f8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x1d, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x1f, 0x1, 0x1, 0x2, 0x1, 0xd4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0xf, 0x3, 0x0, 0x0, 0x3}, 0x2, {0x6, 0x200, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}}, 0x6a) 17.05915181s ago: executing program 3 (id=821): socket$packet(0x11, 0x0, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101840, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000014) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, 0x0, 0x0, 0xc0) sendto$inet(r3, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48341, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x12, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r4, 0x0, 0xb9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 16.537439154s ago: executing program 0 (id=822): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x183002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x3, 0xfffffffc}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16.536621513s ago: executing program 0 (id=823): syz_open_dev$sndmidi(&(0x7f0000000100), 0x8, 0x400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x80000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 15.566638496s ago: executing program 0 (id=824): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) 15.511379599s ago: executing program 0 (id=825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}) write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018001000000000000c0000000c08000000ffff08d6e10000001500800f134362ffe4b16a05000000000000000077c9d8e60ec81a5fa3a3f22469a0d46bc8d4"], 0x0, 0x31, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xa, 0x1}, {0x1, 0x41}, {0x1, 0x3}, {0x40, 0x7}, {0xfa}, {0x3, 0x4}], "60323bb1c3e17c83"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) 15.399023627s ago: executing program 0 (id=826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x3c, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@any, 0x8}, @my=0x1, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x80006, 0x6}) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_dev$hiddev(&(0x7f0000000740), 0x8, 0x72480) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000780)="ab5530524ab200"/16, 0x10) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {0x0}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f00000007c0)=[{&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/159, 0x9f}], 0x2, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0x40000000, &(0x7f0000008000)={0x0, 0x989680}) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) 5.005378565s ago: executing program 32 (id=810): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r2, 0x0, 0x5, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f00000001c0)={0x20, r2, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) socket$alg(0x26, 0x5, 0x0) writev(r0, &(0x7f0000002500)=[{&(0x7f0000001500)="a8138cdf6c2c299855427ddd33edc86c", 0x10}], 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x7, 0x73, 0x4, 0x2, 0x80, 0x0, 0x7, 0x5, 0xfa, 0x4, 0x8, 0x9, 0x6}, {0x7f, 0x1d9, 0x0, 0x81, 0x3, 0x8, 0x40, 0x3, 0x6, 0xf8, 0x95, 0x8, 0x5}, {0x0, 0x6, 0xf9, 0x7, 0x0, 0x28, 0x40, 0x9, 0x80, 0x1, 0x1, 0x7, 0x7}], 0xc00e}) 1.99437221s ago: executing program 33 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b76164}, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0xe8, 0x24, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xe}, {0xfff1, 0xfff1}, {0x6, 0x7}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf9, 0x0, 0xde, 0x7, 0x1, 0xa, 0x7, 0x2}}, {0x8, 0x2, [0xc6, 0xe]}}, {{0x1c, 0x1, {0x5, 0xc, 0xfffb, 0x0, 0x0, 0x6, 0x9, 0x4}}, {0xc, 0x2, [0x9, 0x8, 0x800, 0x3e]}}, {{0x1c, 0x1, {0x40, 0x9, 0x6, 0x6913, 0x2, 0xfffffffe, 0x2, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0x2, 0x5, 0x4, 0x120, 0x2, 0x7, 0x7fff, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x4, 0xda, 0x3, 0xffffff82, 0x0, 0x1, 0x1ff, 0x5}}, {0xe, 0x2, [0x56, 0x2, 0xc2, 0x6, 0x5]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000e00)={@val={0x0, 0x88f8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x1d, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x1f, 0x1, 0x1, 0x2, 0x1, 0xd4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0xf, 0x3, 0x0, 0x0, 0x3}, 0x2, {0x6, 0x200, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}}, 0x6a) 1.972891267s ago: executing program 34 (id=821): socket$packet(0x11, 0x0, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101840, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000014) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, 0x0, 0x0, 0xc0) sendto$inet(r3, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48341, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x12, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r4, 0x0, 0xb9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 0s ago: executing program 35 (id=826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x3c, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@any, 0x8}, @my=0x1, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x80006, 0x6}) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_dev$hiddev(&(0x7f0000000740), 0x8, 0x72480) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000780)="ab5530524ab200"/16, 0x10) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {0x0}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f00000007c0)=[{&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/159, 0x9f}], 0x2, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0x40000000, &(0x7f0000008000)={0x0, 0x989680}) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) kernel console output (not intermixed with test programs): interface: batadv_slave_1 [ 215.369276][ T3502] veth1_macvtap: left promiscuous mode [ 215.377471][ T7300] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 215.387523][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 215.420589][ T3502] veth0_macvtap: left promiscuous mode [ 215.426477][ T3502] veth1_vlan: left promiscuous mode [ 215.432272][ T3502] veth0_vlan: left promiscuous mode [ 215.826747][ T3502] team0 (unregistering): Port device team_slave_1 removed [ 215.860710][ T3502] team0 (unregistering): Port device team_slave_0 removed [ 216.199466][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.223409][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.230623][ T7234] bridge_slave_0: entered allmulticast mode [ 216.237974][ T7234] bridge_slave_0: entered promiscuous mode [ 216.257929][ T24] usb 5-1: USB disconnect, device number 7 [ 216.291426][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.326977][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.357767][ T7234] bridge_slave_1: entered allmulticast mode [ 216.368431][ T7234] bridge_slave_1: entered promiscuous mode [ 216.451684][ T30] audit: type=1400 audit(1750633369.915:305): avc: denied { sqpoll } for pid=7321 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 216.492198][ T7322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.337'. [ 216.564365][ T2147] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 216.758580][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.877100][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.073326][ T5811] Bluetooth: hci0: command tx timeout [ 217.075298][ T5896] usb 4-1: USB disconnect, device number 9 [ 217.119213][ T5896] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 217.496828][ T7334] bio_check_eod: 14 callbacks suppressed [ 217.496857][ T7334] syz.3.338: attempt to access beyond end of device [ 217.496857][ T7334] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 217.516449][ T7334] syz.3.338: attempt to access beyond end of device [ 217.516449][ T7334] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 217.529611][ T7334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 217.540032][ T7334] syz.3.338: attempt to access beyond end of device [ 217.540032][ T7334] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 217.553152][ T7334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 217.562730][ T7334] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 217.570432][ T7334] UDF-fs: Scanning with blocksize 512 failed [ 217.579235][ T7334] syz.3.338: attempt to access beyond end of device [ 217.579235][ T7334] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 217.592872][ T7334] syz.3.338: attempt to access beyond end of device [ 217.592872][ T7334] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 217.606049][ T7334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 217.638639][ T7334] syz.3.338: attempt to access beyond end of device [ 217.638639][ T7334] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 217.652323][ T7334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 217.661917][ T7334] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 217.669604][ T7334] UDF-fs: Scanning with blocksize 1024 failed [ 217.676228][ T7334] syz.3.338: attempt to access beyond end of device [ 217.676228][ T7334] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 217.689239][ T7334] syz.3.338: attempt to access beyond end of device [ 217.689239][ T7334] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 217.702277][ T7334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 217.712066][ T7334] syz.3.338: attempt to access beyond end of device [ 217.712066][ T7334] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 217.725089][ T7334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 217.734675][ T7334] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 217.742312][ T7334] UDF-fs: Scanning with blocksize 2048 failed [ 217.748812][ T7334] syz.3.338: attempt to access beyond end of device [ 217.748812][ T7334] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 217.762607][ T7334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 217.772387][ T7334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 217.782108][ T7334] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 217.789797][ T7334] UDF-fs: Scanning with blocksize 4096 failed [ 217.796556][ T7334] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 217.819361][ T7234] team0: Port device team_slave_0 added [ 217.869500][ T7234] team0: Port device team_slave_1 added [ 217.979127][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.995909][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.021841][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.030006][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.045297][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.052250][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.078147][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.095336][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.290038][ T7234] hsr_slave_0: entered promiscuous mode [ 218.440274][ T7234] hsr_slave_1: entered promiscuous mode [ 218.446784][ T7234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.454392][ T7234] Cannot create hsr debugfs directory [ 219.640855][ T30] audit: type=1400 audit(1750633373.105:306): avc: denied { read append } for pid=7361 comm="syz.4.345" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.687908][ T30] audit: type=1400 audit(1750633373.105:307): avc: denied { open } for pid=7361 comm="syz.4.345" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.986738][ T30] audit: type=1804 audit(1750633373.435:308): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.344" name="/newroot/59/file0" dev="tmpfs" ino=336 res=1 errno=0 [ 220.188165][ T7373] random: crng reseeded on system resumption [ 220.603229][ T30] audit: type=1400 audit(1750633374.005:309): avc: denied { read write } for pid=7374 comm="syz.4.347" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.793208][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.885621][ T30] audit: type=1400 audit(1750633374.005:310): avc: denied { open } for pid=7374 comm="syz.4.347" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.917233][ T30] audit: type=1400 audit(1750633374.015:311): avc: denied { ioctl } for pid=7374 comm="syz.4.347" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.043591][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 221.230868][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 221.355327][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 221.490538][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 221.617373][ T24] usb 5-1: config 1 has no interface number 0 [ 221.705090][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.835031][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 221.879989][ T24] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 221.949644][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 221.959971][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.017103][ T7381] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.422696][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 222.433422][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 222.443093][ T7407] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 222.450747][ T7407] UDF-fs: Scanning with blocksize 512 failed [ 222.460303][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 222.471003][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 222.480646][ T7407] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 222.488364][ T7407] UDF-fs: Scanning with blocksize 1024 failed [ 222.497141][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 222.530781][ T7407] bio_check_eod: 10 callbacks suppressed [ 222.530815][ T7407] syz.1.351: attempt to access beyond end of device [ 222.530815][ T7407] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 222.549796][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 222.559676][ T7407] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 222.567457][ T7407] UDF-fs: Scanning with blocksize 2048 failed [ 222.575259][ T7407] syz.1.351: attempt to access beyond end of device [ 222.575259][ T7407] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 222.585110][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 222.588382][ T7407] syz.1.351: attempt to access beyond end of device [ 222.588382][ T7407] loop1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 222.607370][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 222.617681][ T7407] syz.1.351: attempt to access beyond end of device [ 222.617681][ T7407] loop1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 222.630969][ T7407] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 222.640598][ T7407] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 222.648316][ T7407] UDF-fs: Scanning with blocksize 4096 failed [ 222.654448][ T7407] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 222.661236][ T7377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.680627][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 222.906412][ T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 223.073473][ T972] usb 3-1: Using ep0 maxpacket: 32 [ 223.107538][ T972] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 223.132351][ T972] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 223.172837][ T972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 223.190372][ T7415] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 223.250348][ T972] usb 3-1: config 1 has no interface number 0 [ 223.257385][ T972] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.269015][ T972] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 223.280494][ T972] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 223.296855][ T972] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 223.306939][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.325081][ T7405] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 223.338106][ T972] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 223.642391][ T7234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.653380][ T7415] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 223.664399][ T7415] netlink: 128 bytes leftover after parsing attributes in process `syz.1.352'. [ 223.691836][ T7234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.775883][ T43] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 223.778445][ T7234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.806622][ T7234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.820279][ T30] audit: type=1400 audit(1750633377.285:312): avc: denied { load_policy } for pid=7414 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 223.853905][ T7415] SELinux: failed to load policy [ 224.011681][ T24] usb 5-1: USB disconnect, device number 8 [ 224.021702][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 224.081419][ T7234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.150848][ T7234] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.168945][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.176154][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.229025][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.236249][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.560706][ T30] audit: type=1804 audit(1750633378.025:313): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.356" name="/newroot/77/file0" dev="tmpfs" ino=458 res=1 errno=0 [ 224.621936][ T7234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.736344][ T972] snd_usb_pod 3-1:1.1: set_interface failed [ 224.762941][ T972] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 224.780086][ T7234] veth0_vlan: entered promiscuous mode [ 224.840494][ T7456] random: crng reseeded on system resumption [ 224.855726][ T972] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 224.887713][ T7234] veth1_vlan: entered promiscuous mode [ 224.903726][ T972] usb 3-1: USB disconnect, device number 3 [ 224.978113][ T7234] veth0_macvtap: entered promiscuous mode [ 225.004502][ T7234] veth1_macvtap: entered promiscuous mode [ 225.049712][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.099251][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.126347][ T7234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.156543][ T7234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.193774][ T7234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.220205][ T7234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.362579][ T6490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.216530][ T6490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.425209][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.463513][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.722175][ T30] audit: type=1400 audit(1750633379.965:314): avc: denied { mount } for pid=7234 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 226.950907][ T30] audit: type=1400 audit(1750633380.335:315): avc: denied { mount } for pid=7234 comm="syz-executor" name="/" dev="gadgetfs" ino=6546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 228.514132][ T7516] syz.4.368: attempt to access beyond end of device [ 228.514132][ T7516] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 228.530782][ T7516] syz.4.368: attempt to access beyond end of device [ 228.530782][ T7516] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 228.546177][ T7516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 228.557406][ T7516] syz.4.368: attempt to access beyond end of device [ 228.557406][ T7516] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 228.570345][ T7516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 228.579961][ T7516] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 228.587645][ T7516] UDF-fs: Scanning with blocksize 512 failed [ 228.594316][ T7516] syz.4.368: attempt to access beyond end of device [ 228.594316][ T7516] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 228.607383][ T7516] syz.4.368: attempt to access beyond end of device [ 228.607383][ T7516] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 228.620596][ T7516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 228.630422][ T7516] syz.4.368: attempt to access beyond end of device [ 228.630422][ T7516] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 228.643562][ T7516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 228.653143][ T7516] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 228.660802][ T7516] UDF-fs: Scanning with blocksize 1024 failed [ 228.667462][ T7516] syz.4.368: attempt to access beyond end of device [ 228.667462][ T7516] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 228.680638][ T7516] syz.4.368: attempt to access beyond end of device [ 228.680638][ T7516] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 228.693679][ T7516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 228.703395][ T7516] syz.4.368: attempt to access beyond end of device [ 228.703395][ T7516] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 228.716446][ T7516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 228.726357][ T7516] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 228.734029][ T7516] UDF-fs: Scanning with blocksize 2048 failed [ 228.740526][ T7516] syz.4.368: attempt to access beyond end of device [ 228.740526][ T7516] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 228.754039][ T7516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 228.764110][ T7516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 228.773723][ T7516] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 228.781366][ T7516] UDF-fs: Scanning with blocksize 4096 failed [ 228.787536][ T7516] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 229.622926][ T7536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 229.633638][ T7536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 229.643387][ T7536] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 229.651063][ T7536] UDF-fs: Scanning with blocksize 512 failed [ 229.661011][ T7536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 229.671740][ T7536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 229.681335][ T7536] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 229.689027][ T7536] UDF-fs: Scanning with blocksize 1024 failed [ 229.698095][ T7536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 229.708359][ T7536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 229.739895][ T7536] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 229.748643][ T7536] UDF-fs: Scanning with blocksize 2048 failed [ 229.757749][ T7536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 229.767909][ T7536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 229.777520][ T7536] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 229.785201][ T7536] UDF-fs: Scanning with blocksize 4096 failed [ 229.791318][ T7536] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 231.526382][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 232.883651][ T2147] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 233.008042][ T7568] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 233.018809][ T7568] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 233.028871][ T7568] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 233.036720][ T7568] UDF-fs: Scanning with blocksize 512 failed [ 233.046087][ T7568] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 233.056479][ T7568] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 233.066163][ T7568] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 233.073867][ T7568] UDF-fs: Scanning with blocksize 1024 failed [ 233.082501][ T7568] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 233.092813][ T7568] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 233.102436][ T7568] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 233.131240][ T7568] UDF-fs: Scanning with blocksize 2048 failed [ 233.139504][ T7568] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 233.149649][ T7568] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 233.159355][ T7568] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 233.167049][ T7568] UDF-fs: Scanning with blocksize 4096 failed [ 233.173287][ T7568] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 233.372327][ T2147] usb 4-1: Using ep0 maxpacket: 16 [ 233.380817][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.457282][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.472940][ T2147] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 233.623126][ T2147] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 233.718674][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.906313][ T2147] usb 4-1: config 0 descriptor?? [ 234.683073][ T7591] overlayfs: failed to resolve './file1/file0': -2 [ 235.537894][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.604716][ T7595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.620382][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.736814][ T7601] netlink: 48 bytes leftover after parsing attributes in process `syz.4.384'. [ 235.829621][ T7560] netlink: 'syz.3.375': attribute type 2 has an invalid length. [ 235.882225][ T7560] netlink: 244 bytes leftover after parsing attributes in process `syz.3.375'. [ 236.184037][ T2147] usbhid 4-1:0.0: can't add hid device: -71 [ 236.190080][ T2147] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 236.200637][ T2147] usb 4-1: USB disconnect, device number 10 [ 237.160139][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 237.863139][ T972] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 238.093144][ T972] usb 2-1: Using ep0 maxpacket: 32 [ 238.120870][ T972] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 238.139531][ T972] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 238.161785][ T972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 238.171974][ T972] usb 2-1: config 1 has no interface number 0 [ 238.178499][ T972] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.189959][ T972] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 238.201796][ T972] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 238.215021][ T972] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 238.225763][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.239002][ T7624] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.251629][ T972] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 238.505095][ T7621] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.564327][ T972] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 239.515155][ T7639] netlink: 48 bytes leftover after parsing attributes in process `syz.3.392'. [ 239.597798][ T5896] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 240.088938][ T972] usb 2-1: USB disconnect, device number 4 [ 240.109435][ T972] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 245.099679][ T7684] xt_hashlimit: max too large, truncated to 1048576 [ 246.243486][ T7700] bio_check_eod: 26 callbacks suppressed [ 246.243519][ T7700] syz.2.407: attempt to access beyond end of device [ 246.243519][ T7700] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 246.263063][ T7700] syz.2.407: attempt to access beyond end of device [ 246.263063][ T7700] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 246.276226][ T7700] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 246.286866][ T7700] syz.2.407: attempt to access beyond end of device [ 246.286866][ T7700] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 246.300035][ T7700] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 246.309707][ T7700] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 246.317397][ T7700] UDF-fs: Scanning with blocksize 512 failed [ 246.326687][ T7700] syz.2.407: attempt to access beyond end of device [ 246.326687][ T7700] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 246.340475][ T7700] syz.2.407: attempt to access beyond end of device [ 246.340475][ T7700] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 246.375624][ T7700] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 246.385913][ T7700] syz.2.407: attempt to access beyond end of device [ 246.385913][ T7700] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 246.399231][ T7700] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 246.408840][ T7700] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 246.416543][ T7700] UDF-fs: Scanning with blocksize 1024 failed [ 246.425185][ T7700] syz.2.407: attempt to access beyond end of device [ 246.425185][ T7700] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 246.438474][ T7700] syz.2.407: attempt to access beyond end of device [ 246.438474][ T7700] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 246.451747][ T7700] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 246.461477][ T7700] syz.2.407: attempt to access beyond end of device [ 246.461477][ T7700] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 246.474850][ T7700] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 246.484467][ T7700] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 246.492329][ T7700] UDF-fs: Scanning with blocksize 2048 failed [ 246.499667][ T7700] syz.2.407: attempt to access beyond end of device [ 246.499667][ T7700] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 246.512799][ T7700] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 246.522563][ T7700] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 246.532576][ T7700] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 246.540396][ T7700] UDF-fs: Scanning with blocksize 4096 failed [ 246.546883][ T7700] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 247.775055][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 249.231787][ T7716] Invalid ELF header magic: != ELF [ 251.159767][ T7729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 252.421116][ T7743] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 254.826735][ T7776] xt_hashlimit: max too large, truncated to 1048576 [ 255.266660][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.273376][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.683050][ T972] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.892420][ T71] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.943507][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 255.965702][ T972] usb 3-1: config 0 has no interfaces? [ 255.989194][ T972] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 256.857877][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.906500][ T972] usb 3-1: config 0 descriptor?? [ 257.018067][ T71] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.266861][ T71] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.293574][ T5923] usb 3-1: USB disconnect, device number 4 [ 258.127496][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.138779][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.147528][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.155536][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.163168][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.219099][ T71] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.809518][ T71] bridge_slave_1: left allmulticast mode [ 259.966963][ T7820] xt_hashlimit: max too large, truncated to 1048576 [ 260.224095][ T5811] Bluetooth: hci1: command tx timeout [ 260.263019][ T71] bridge_slave_1: left promiscuous mode [ 260.268766][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.311619][ T71] bridge_slave_0: left allmulticast mode [ 260.375280][ T71] bridge_slave_0: left promiscuous mode [ 260.389483][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.948697][ T7836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 261.140427][ T7845] xt_hashlimit: max too large, truncated to 1048576 [ 261.189835][ T2147] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 262.133037][ T2147] usb 2-1: Using ep0 maxpacket: 16 [ 262.210013][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.303185][ T5811] Bluetooth: hci1: command tx timeout [ 262.973845][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.101822][ T2147] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.166851][ T2147] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.193057][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.224454][ T2147] usb 2-1: config 0 descriptor?? [ 263.338581][ T2147] usbhid 2-1:0.0: can't add hid device: -71 [ 263.346232][ T2147] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 263.358040][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.376702][ T2147] usb 2-1: USB disconnect, device number 5 [ 263.505213][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.518058][ T71] bond0 (unregistering): Released all slaves [ 264.393549][ T5811] Bluetooth: hci1: command tx timeout [ 264.894066][ T7872] bio_check_eod: 2 callbacks suppressed [ 264.894095][ T7872] syz.2.448: attempt to access beyond end of device [ 264.894095][ T7872] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 264.913578][ T7872] syz.2.448: attempt to access beyond end of device [ 264.913578][ T7872] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 264.926799][ T7872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 264.937301][ T7872] syz.2.448: attempt to access beyond end of device [ 264.937301][ T7872] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 264.950418][ T7872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 264.960031][ T7872] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 264.967709][ T7872] UDF-fs: Scanning with blocksize 512 failed [ 264.976581][ T7872] syz.2.448: attempt to access beyond end of device [ 264.976581][ T7872] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 264.990241][ T7872] syz.2.448: attempt to access beyond end of device [ 264.990241][ T7872] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 265.025927][ T7872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 265.035743][ T7872] syz.2.448: attempt to access beyond end of device [ 265.035743][ T7872] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 265.048821][ T7872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 265.058419][ T7872] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 265.066106][ T7872] UDF-fs: Scanning with blocksize 1024 failed [ 265.072647][ T7872] syz.2.448: attempt to access beyond end of device [ 265.072647][ T7872] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 265.085864][ T7872] syz.2.448: attempt to access beyond end of device [ 265.085864][ T7872] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 265.098911][ T7872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 265.108965][ T7872] syz.2.448: attempt to access beyond end of device [ 265.108965][ T7872] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 265.122003][ T7872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 265.131631][ T7872] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 265.139299][ T7872] UDF-fs: Scanning with blocksize 2048 failed [ 265.145776][ T7872] syz.2.448: attempt to access beyond end of device [ 265.145776][ T7872] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 265.158765][ T7872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 265.163732][ T5986] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 265.168487][ T7872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 265.185973][ T7872] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 265.193654][ T7872] UDF-fs: Scanning with blocksize 4096 failed [ 265.195724][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 265.199712][ T7872] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 265.512106][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 265.534089][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.563998][ T5986] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.583174][ T5986] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 265.606553][ T71] hsr_slave_0: left promiscuous mode [ 265.641279][ T71] hsr_slave_1: left promiscuous mode [ 265.699510][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.766212][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.919292][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.979270][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.127734][ T71] veth1_macvtap: left promiscuous mode [ 266.167863][ T71] veth0_macvtap: left promiscuous mode [ 266.203140][ T71] veth1_vlan: left promiscuous mode [ 266.256172][ T71] veth0_vlan: left promiscuous mode [ 266.466253][ T5811] Bluetooth: hci1: command tx timeout [ 266.559408][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.570251][ T5986] usb 2-1: config 0 descriptor?? [ 267.065841][ T71] team0 (unregistering): Port device team_slave_1 removed [ 267.100574][ T71] team0 (unregistering): Port device team_slave_0 removed [ 267.251054][ T30] audit: type=1400 audit(1750633420.715:316): avc: denied { ioctl } for pid=7866 comm="syz.1.450" path="mnt:[4026532941]" dev="nsfs" ino=4026532941 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 267.825199][ T7915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 267.835756][ T7915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 267.845585][ T7915] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 267.853401][ T7915] UDF-fs: Scanning with blocksize 512 failed [ 267.862848][ T7915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 267.873238][ T7915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 267.882868][ T7915] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 267.890696][ T7915] UDF-fs: Scanning with blocksize 1024 failed [ 267.899387][ T7915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 267.909622][ T7915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 267.919218][ T7915] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 267.950085][ T7915] UDF-fs: Scanning with blocksize 2048 failed [ 267.957989][ T7915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 267.967781][ T7915] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 267.977405][ T7915] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 267.985092][ T7915] UDF-fs: Scanning with blocksize 4096 failed [ 267.991251][ T7915] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 268.033591][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.041070][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.049159][ T7792] bridge_slave_0: entered allmulticast mode [ 268.056810][ T7792] bridge_slave_0: entered promiscuous mode [ 268.072363][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.079613][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.087165][ T7792] bridge_slave_1: entered allmulticast mode [ 268.096325][ T7792] bridge_slave_1: entered promiscuous mode [ 268.102675][ T7905] netlink: 'syz.1.450': attribute type 2 has an invalid length. [ 268.111086][ T7905] netlink: 244 bytes leftover after parsing attributes in process `syz.1.450'. [ 268.170115][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.188942][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.395901][ T7792] team0: Port device team_slave_0 added [ 268.414516][ T7792] team0: Port device team_slave_1 added [ 268.500304][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.517410][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.564731][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.577521][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.587446][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.617267][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.187105][ T972] usb 2-1: USB disconnect, device number 6 [ 269.449899][ T7940] xt_hashlimit: max too large, truncated to 1048576 [ 269.562669][ T7792] hsr_slave_0: entered promiscuous mode [ 269.693211][ T7792] hsr_slave_1: entered promiscuous mode [ 269.798134][ T30] audit: type=1804 audit(1750633423.265:317): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.460" name="/newroot/86/file0" dev="tmpfs" ino=503 res=1 errno=0 [ 269.828008][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.264480][ T7792] Cannot create hsr debugfs directory [ 270.753467][ T7942] random: crng reseeded on system resumption [ 273.343586][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 273.642607][ T71] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.183499][ T71] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.789676][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.798749][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.808069][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.820160][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.829105][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.876353][ T71] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.873143][ T5811] Bluetooth: hci2: command tx timeout [ 277.555064][ T71] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.683064][ T5986] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 277.849866][ T5986] usb 1-1: Using ep0 maxpacket: 32 [ 277.934895][ T5986] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 277.986644][ T5986] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 278.019365][ T5986] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 278.083905][ T5986] usb 1-1: config 1 has no interface number 0 [ 278.142353][ T5986] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.301091][ T5986] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 278.409581][ T5986] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 278.508940][ T5986] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 278.560742][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.710216][ T8010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.795926][ T5986] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 278.849733][ T7792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.927699][ T5986] snd_usb_pod 1-1:1.1: set_interface failed [ 278.944192][ T5811] Bluetooth: hci2: command tx timeout [ 278.985384][ T5986] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 278.998444][ T5986] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 279.011136][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.100346][ T8028] bio_check_eod: 14 callbacks suppressed [ 279.100375][ T8028] syz.3.478: attempt to access beyond end of device [ 279.100375][ T8028] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 279.120119][ T8028] syz.3.478: attempt to access beyond end of device [ 279.120119][ T8028] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 279.133417][ T8028] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 279.143916][ T8028] syz.3.478: attempt to access beyond end of device [ 279.143916][ T8028] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 279.157099][ T8028] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 279.166731][ T8028] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 279.174413][ T8028] UDF-fs: Scanning with blocksize 512 failed [ 279.183002][ T8028] syz.3.478: attempt to access beyond end of device [ 279.183002][ T8028] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 279.219983][ T8028] syz.3.478: attempt to access beyond end of device [ 279.219983][ T8028] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 279.233087][ T8028] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 279.243265][ T8028] syz.3.478: attempt to access beyond end of device [ 279.243265][ T8028] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 279.256444][ T8028] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 279.266037][ T8028] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 279.273718][ T8028] UDF-fs: Scanning with blocksize 1024 failed [ 279.280328][ T8028] syz.3.478: attempt to access beyond end of device [ 279.280328][ T8028] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 279.287721][ T5986] usb 1-1: USB disconnect, device number 4 [ 279.293285][ T8028] syz.3.478: attempt to access beyond end of device [ 279.293285][ T8028] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 279.312190][ T8028] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 279.321909][ T8028] syz.3.478: attempt to access beyond end of device [ 279.321909][ T8028] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 279.334930][ T8028] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 279.344883][ T8028] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 279.345390][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.352503][ T8028] UDF-fs: Scanning with blocksize 2048 failed [ 279.352885][ T8028] syz.3.478: attempt to access beyond end of device [ 279.352885][ T8028] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 279.363867][ T7792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.365727][ T8028] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 279.386539][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.394688][ T8028] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 279.404177][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.411352][ T8028] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 279.422427][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.425807][ T8028] UDF-fs: Scanning with blocksize 4096 failed [ 279.425820][ T8028] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 279.464901][ T7792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.478683][ T71] bridge_slave_1: left allmulticast mode [ 279.485796][ T71] bridge_slave_1: left promiscuous mode [ 279.491616][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.501298][ T71] bridge_slave_0: left allmulticast mode [ 279.507929][ T71] bridge_slave_0: left promiscuous mode [ 279.514293][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.142908][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 280.370395][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.392257][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.411268][ T71] bond0 (unregistering): Released all slaves [ 280.568358][ T7792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.700421][ T8042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 280.710971][ T8042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 280.720640][ T8042] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 280.728316][ T8042] UDF-fs: Scanning with blocksize 512 failed [ 280.737835][ T8042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 280.748220][ T8042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 280.757977][ T8042] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 280.765675][ T8042] UDF-fs: Scanning with blocksize 1024 failed [ 280.774344][ T8042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 280.784497][ T8042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 280.815898][ T8042] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 280.823639][ T8042] UDF-fs: Scanning with blocksize 2048 failed [ 280.831965][ T8042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 280.842096][ T8042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 280.851877][ T8042] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 280.859701][ T8042] UDF-fs: Scanning with blocksize 4096 failed [ 280.866232][ T8042] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 280.939495][ T7997] chnl_net:caif_netlink_parms(): no params data found [ 281.023149][ T5811] Bluetooth: hci2: command tx timeout [ 281.180658][ T8025] chnl_net:caif_netlink_parms(): no params data found [ 281.200744][ T71] hsr_slave_0: left promiscuous mode [ 281.209082][ T71] hsr_slave_1: left promiscuous mode [ 281.217146][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.225007][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.241631][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.249284][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.316311][ T71] veth1_macvtap: left promiscuous mode [ 281.332112][ T71] veth0_macvtap: left promiscuous mode [ 281.338727][ T71] veth1_vlan: left promiscuous mode [ 281.346614][ T71] veth0_vlan: left promiscuous mode [ 281.503310][ T5811] Bluetooth: hci4: command tx timeout [ 282.263845][ T71] team0 (unregistering): Port device team_slave_1 removed [ 282.336454][ T71] team0 (unregistering): Port device team_slave_0 removed [ 282.923205][ T972] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 283.113097][ T5811] Bluetooth: hci2: command tx timeout [ 283.216345][ T972] usb 1-1: Using ep0 maxpacket: 32 [ 283.235659][ T972] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 283.307763][ T972] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 283.318066][ T972] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 283.368903][ T972] usb 1-1: config 1 has no interface number 0 [ 283.389374][ T972] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.400669][ T972] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 283.416804][ T972] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 283.432031][ T972] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 283.441734][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.454830][ T8069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.468251][ T972] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 283.594731][ T5811] Bluetooth: hci4: command tx timeout [ 283.613568][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.620730][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.630266][ T7997] bridge_slave_0: entered allmulticast mode [ 283.638806][ T7997] bridge_slave_0: entered promiscuous mode [ 283.692511][ T8066] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.701565][ T972] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 283.720864][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.758172][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.765958][ T7997] bridge_slave_1: entered allmulticast mode [ 283.790595][ T7997] bridge_slave_1: entered promiscuous mode [ 283.855599][ T7997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.867475][ T7997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.046707][ T7997] team0: Port device team_slave_0 added [ 284.102771][ T7997] team0: Port device team_slave_1 added [ 284.435987][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.462309][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.476710][ T8025] bridge_slave_0: entered allmulticast mode [ 284.490776][ T8025] bridge_slave_0: entered promiscuous mode [ 284.519565][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.545346][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.644653][ T7997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.704421][ T972] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 284.706098][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.746215][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.772552][ T7997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.787065][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.794353][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.801656][ T8025] bridge_slave_1: entered allmulticast mode [ 284.809755][ T8025] bridge_slave_1: entered promiscuous mode [ 284.882052][ T8025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.897287][ T8025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.940023][ T7997] hsr_slave_0: entered promiscuous mode [ 284.947250][ T7997] hsr_slave_1: entered promiscuous mode [ 285.344950][ T8025] team0: Port device team_slave_0 added [ 285.444566][ T10] usb 1-1: USB disconnect, device number 5 [ 285.451303][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 285.509674][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.554484][ T8025] team0: Port device team_slave_1 added [ 285.627217][ T8088] KVM: debugfs: duplicate directory 8088-5 [ 285.664155][ T5811] Bluetooth: hci4: command tx timeout [ 286.430411][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.519933][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.527609][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.554474][ T8025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.587895][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.613276][ T5923] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 286.631443][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.673902][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.680876][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.712237][ T8025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.755518][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.805841][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 286.815269][ T5923] usb 4-1: config 0 has no interfaces? [ 286.821284][ T5923] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 286.849595][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.875385][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.900743][ T5923] usb 4-1: config 0 descriptor?? [ 287.013803][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 287.257880][ T8025] hsr_slave_0: entered promiscuous mode [ 287.275233][ T8025] hsr_slave_1: entered promiscuous mode [ 287.323964][ T8025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.543087][ T5923] usb 4-1: USB disconnect, device number 11 [ 287.551863][ T8025] Cannot create hsr debugfs directory [ 287.649964][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.657313][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.774342][ T5811] Bluetooth: hci4: command tx timeout [ 288.317260][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.324447][ T6490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.408701][ T36] bridge_slave_1: left allmulticast mode [ 288.415793][ T36] bridge_slave_1: left promiscuous mode [ 288.425168][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.437737][ T36] bridge_slave_0: left allmulticast mode [ 288.443726][ T36] bridge_slave_0: left promiscuous mode [ 288.449516][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.886187][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.182147][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.192459][ T36] bond0 (unregistering): Released all slaves [ 290.794680][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.518986][ T36] hsr_slave_0: left promiscuous mode [ 291.728038][ T36] hsr_slave_1: left promiscuous mode [ 291.746195][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.764732][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.793813][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.802173][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.889267][ T36] veth1_macvtap: left promiscuous mode [ 291.903646][ T36] veth0_macvtap: left promiscuous mode [ 291.921374][ T36] veth1_vlan: left promiscuous mode [ 292.131102][ T36] veth0_vlan: left promiscuous mode [ 292.444066][ T30] audit: type=1804 audit(1750633445.905:318): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.500" name="/newroot/100/file0" dev="tmpfs" ino=554 res=1 errno=0 [ 294.021785][ T36] team0 (unregistering): Port device team_slave_1 removed [ 294.049195][ T36] team0 (unregistering): Port device team_slave_0 removed [ 294.285298][ T7997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.295211][ T7997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.307352][ T7997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.386778][ T7997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.449980][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.029674][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.086273][ T7997] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.171105][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.178272][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.375192][ T8025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.408356][ T8025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.428002][ T8025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.911081][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.918243][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.931306][ T5986] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 298.954700][ T8025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.359878][ T7792] veth0_vlan: entered promiscuous mode [ 299.387368][ T7792] veth1_vlan: entered promiscuous mode [ 299.403858][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 299.425400][ T5986] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 299.443742][ T5986] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 299.461867][ T8025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.463289][ T5986] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 299.482523][ T5986] usb 4-1: config 1 has no interface number 0 [ 299.519343][ T5986] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.531767][ T5986] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 299.549952][ T5986] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 299.571070][ T5986] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 299.575530][ T7792] veth0_macvtap: entered promiscuous mode [ 299.587800][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.602537][ T8252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.609188][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.612570][ T5986] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 299.641276][ T7792] veth1_macvtap: entered promiscuous mode [ 299.662684][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.669872][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.708733][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.715859][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.826787][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.850380][ T8251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.862116][ T5986] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 299.868828][ T7997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.908174][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.954572][ T7792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.972786][ T7792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.982655][ T7792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.993066][ T7792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.050445][ T7997] veth0_vlan: entered promiscuous mode [ 300.131795][ T7997] veth1_vlan: entered promiscuous mode [ 300.493510][ T8281] Invalid ELF header magic: != ELF [ 300.613173][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.621021][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.727361][ T7997] veth0_macvtap: entered promiscuous mode [ 300.754493][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.770067][ T7997] veth1_macvtap: entered promiscuous mode [ 300.776630][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.796495][ T8025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.848985][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.863821][ T5896] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 300.878170][ T8025] veth0_vlan: entered promiscuous mode [ 300.900117][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.912522][ T7997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.927114][ T7997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.940679][ T7997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.970493][ T7997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.001159][ T8025] veth1_vlan: entered promiscuous mode [ 301.149135][ T8025] veth0_macvtap: entered promiscuous mode [ 301.235909][ T5986] usb 4-1: USB disconnect, device number 13 [ 301.243219][ T5986] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 301.289030][ T8025] veth1_macvtap: entered promiscuous mode [ 301.384752][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.393685][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.440009][ T8025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.469268][ T8025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.479344][ T8025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.488201][ T8025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.496975][ T8025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.506296][ T8025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.626867][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.652710][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.669308][ T6133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.963291][ T5986] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 302.109692][ T6133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.146344][ T5986] usb 4-1: Using ep0 maxpacket: 16 [ 302.152926][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.160808][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.176479][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.198501][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.227715][ T5986] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.262003][ T5986] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.356763][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.367119][ T5986] usb 4-1: config 0 descriptor?? [ 302.643461][ T2147] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 302.791392][ T5986] HID 045e:07da: Invalid code 65791 type 1 [ 302.914993][ T5811] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 303.513867][ T5986] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input14 [ 303.686381][ T5986] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 303.745691][ T30] audit: type=1804 audit(1750633457.195:319): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.519" name="/newroot/2/file0" dev="tmpfs" ino=29 res=1 errno=0 [ 303.887275][ T8329] random: crng reseeded on system resumption [ 305.101976][ T8344] KVM: debugfs: duplicate directory 8344-5 [ 305.117790][ T8343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 305.214103][ T8347] xt_hashlimit: max too large, truncated to 1048576 [ 306.143265][ T2147] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 306.353118][ T2147] usb 2-1: Using ep0 maxpacket: 16 [ 306.449333][ T2147] usb 2-1: config 0 has no interfaces? [ 306.469270][ T2147] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 306.508984][ T5986] usb 4-1: USB disconnect, device number 14 [ 306.513045][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.558699][ T2147] usb 2-1: config 0 descriptor?? [ 307.243972][ T5811] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 307.421839][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 307.839922][ T24] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 307.856627][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.015887][ T5882] usb 2-1: USB disconnect, device number 7 [ 308.051828][ T24] usb 1-1: config 0 has no interface number 0 [ 308.116185][ T24] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 308.188812][ T24] usb 1-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 308.258196][ T24] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 308.362654][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.557620][ T24] usb 1-1: config 0 descriptor?? [ 308.797470][ T24] HFC-S_USB 1-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 308.914153][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.925062][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.034520][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.048608][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.058959][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.088176][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.718057][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.812025][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.028387][ T2147] usb 1-1: USB disconnect, device number 6 [ 310.337905][ T5811] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 313.013569][ T30] audit: type=1400 audit(1750633465.805:320): avc: denied { create } for pid=8394 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 314.062863][ T30] audit: type=1400 audit(1750633467.465:321): avc: denied { mount } for pid=8422 comm="syz.0.545" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 314.173835][ T30] audit: type=1400 audit(1750633467.465:322): avc: denied { connect } for pid=8422 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.338234][ T30] audit: type=1400 audit(1750633467.465:323): avc: denied { write } for pid=8422 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.828676][ T8436] overlayfs: missing 'workdir' [ 316.709468][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.727784][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.566212][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 318.833119][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 318.852334][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 318.964939][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 319.037592][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 319.092997][ T24] usb 5-1: config 1 has no interface number 0 [ 319.104953][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.146339][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 319.167761][ T24] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 319.194348][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 319.209698][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.229640][ T8449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.239981][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 319.462571][ T8448] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.614228][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 320.663404][ T5882] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 321.166318][ T5986] usb 5-1: USB disconnect, device number 10 [ 321.624211][ T5986] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 321.801786][ T8477] netlink: 72 bytes leftover after parsing attributes in process `syz.4.557'. [ 322.550561][ T8488] xt_hashlimit: max too large, truncated to 1048576 [ 323.081420][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 323.298140][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 323.389598][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 323.441002][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.502149][ T24] usb 1-1: Product: syz [ 323.552215][ T24] usb 1-1: Manufacturer: syz [ 323.614250][ T24] usb 1-1: SerialNumber: syz [ 323.628561][ T8495] overlayfs: failed to resolve './file1': -2 [ 323.664044][ T24] usb 1-1: config 0 descriptor?? [ 324.025967][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 324.073037][ T5896] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 324.223162][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 324.229730][ T5896] usb 3-1: config 0 has no interfaces? [ 324.235468][ T5896] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 324.253037][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.273534][ T5896] usb 3-1: config 0 descriptor?? [ 325.665743][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 326.036050][ T5986] usb 3-1: USB disconnect, device number 5 [ 326.299771][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 326.846259][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 326.881221][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 327.128828][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.147271][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.177999][ T5923] usb 1-1: USB disconnect, device number 7 [ 327.192668][ T5896] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.204215][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.243864][ T5896] usb 2-1: config 0 descriptor?? [ 327.422554][ T8532] netlink: 72 bytes leftover after parsing attributes in process `syz.3.572'. [ 327.515785][ T972] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 327.781145][ T8537] FAULT_INJECTION: forcing a failure. [ 327.781145][ T8537] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 327.794456][ T8537] CPU: 1 UID: 0 PID: 8537 Comm: syz.0.573 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 327.794479][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.794489][ T8537] Call Trace: [ 327.794495][ T8537] [ 327.794501][ T8537] dump_stack_lvl+0x16c/0x1f0 [ 327.794530][ T8537] should_fail_ex+0x512/0x640 [ 327.794557][ T8537] _copy_from_user+0x2e/0xd0 [ 327.794582][ T8537] copy_msghdr_from_user+0x98/0x160 [ 327.794607][ T8537] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 327.794629][ T8537] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.794656][ T8537] ? __pfx__kstrtoull+0x10/0x10 [ 327.794672][ T8537] ? __might_fault+0x13b/0x190 [ 327.794699][ T8537] ___sys_sendmsg+0xfe/0x1d0 [ 327.794724][ T8537] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.794759][ T8537] ? find_held_lock+0x2b/0x80 [ 327.794794][ T8537] __sys_sendmmsg+0x200/0x420 [ 327.794821][ T8537] ? __pfx___sys_sendmmsg+0x10/0x10 [ 327.794864][ T8537] ? fput+0x70/0xf0 [ 327.794890][ T8537] ? ksys_write+0x1ac/0x250 [ 327.794916][ T8537] __x64_sys_sendmmsg+0x9c/0x100 [ 327.794939][ T8537] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.794962][ T8537] do_syscall_64+0xcd/0x4c0 [ 327.794988][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.795006][ T8537] RIP: 0033:0x7f8df938e929 [ 327.795020][ T8537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.795036][ T8537] RSP: 002b:00007f8dfa13c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.795051][ T8537] RAX: ffffffffffffffda RBX: 00007f8df95b6160 RCX: 00007f8df938e929 [ 327.795062][ T8537] RDX: 0000000000000002 RSI: 0000200000003f40 RDI: 0000000000000003 [ 327.795072][ T8537] RBP: 00007f8dfa13c090 R08: 0000000000000000 R09: 0000000000000000 [ 327.795089][ T8537] R10: 0000000004040052 R11: 0000000000000246 R12: 0000000000000001 [ 327.795099][ T8537] R13: 0000000000000000 R14: 00007f8df95b6160 R15: 00007ffcac4a18d8 [ 327.795122][ T8537] [ 328.002421][ T5896] microsoft 0003:045E:07DA.0006: invalid report_count 17636 [ 328.027995][ T5896] microsoft 0003:045E:07DA.0006: item 0 2 1 9 parsing failed [ 328.036779][ T972] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 328.057411][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.068718][ T5896] microsoft 0003:045E:07DA.0006: parse failed [ 328.084065][ T5896] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 328.903572][ T972] usb 5-1: config 0 descriptor?? [ 328.909848][ T30] audit: type=1804 audit(1750633482.355:324): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.568" name="/newroot/11/bus/file1" dev="overlay" ino=83 res=1 errno=0 [ 329.176676][ T30] audit: type=1804 audit(1750633482.355:325): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.568" name="/newroot/11/bus/file1" dev="overlay" ino=83 res=1 errno=0 [ 329.178017][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.283006][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.515213][ T2147] usb 5-1: USB disconnect, device number 11 [ 329.523071][ T5889] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 329.693094][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 329.701618][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.715934][ T5889] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 329.737770][ T5889] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.750931][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 329.766162][ T5889] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 329.777772][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.785940][ T5889] usb 4-1: Product: syz [ 329.791079][ T5889] usb 4-1: Manufacturer: syz [ 329.798426][ T5889] usb 4-1: SerialNumber: syz [ 329.831281][ T5889] usb 4-1: config 0 descriptor?? [ 329.852916][ T5889] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 330.204776][ T8556] Invalid ELF header magic: != ELF [ 330.339830][ T5889] snd_usb_toneport 4-1:0.0: set_interface failed [ 330.356596][ T5889] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 330.364189][ T972] usb 2-1: USB disconnect, device number 8 [ 330.373835][ T5889] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 330.411800][ T5889] usb 4-1: USB disconnect, device number 15 [ 331.162177][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 331.163203][ T8560] Invalid ELF header magic: != ELF [ 331.951984][ T2147] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 332.257992][ T2147] usb 2-1: Using ep0 maxpacket: 16 [ 333.020773][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.049044][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.068187][ T2147] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 333.081073][ T2147] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 333.090593][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.103489][ T2147] usb 2-1: config 0 descriptor?? [ 333.810725][ T2147] HID 045e:07da: Invalid code 65791 type 1 [ 334.157177][ T2147] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input16 [ 334.159334][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 334.271867][ T8602] overlayfs: failed to resolve './file0': -2 [ 334.292488][ T2147] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 335.433840][ T5820] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 335.537797][ T8603] Invalid ELF header magic: != ELF [ 335.563062][ T972] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 336.957846][ T10] usb 2-1: USB disconnect, device number 9 [ 336.964084][ T5820] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 337.855405][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 339.390979][ T5829] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 339.750395][ T8665] CUSE: DEVNAME unspecified [ 339.976659][ T8663] vlan2: entered allmulticast mode [ 340.245466][ T8675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.610'. [ 340.283299][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 341.012056][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.034506][ T24] usb 3-1: config 0 has no interfaces? [ 341.042354][ T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 341.524959][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.605254][ T24] usb 3-1: Product: syz [ 341.646948][ T24] usb 3-1: Manufacturer: syz [ 341.676150][ T24] usb 3-1: SerialNumber: syz [ 342.149729][ T8688] FAULT_INJECTION: forcing a failure. [ 342.149729][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 342.162650][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.4.613 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 342.162673][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.162684][ T8688] Call Trace: [ 342.162690][ T8688] [ 342.162698][ T8688] dump_stack_lvl+0x16c/0x1f0 [ 342.162728][ T8688] should_fail_ex+0x512/0x640 [ 342.162750][ T8688] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 342.162772][ T8688] should_failslab+0xc2/0x120 [ 342.162798][ T8688] __kmalloc_cache_noprof+0x6a/0x3e0 [ 342.162818][ T8688] ? snd_mixer_oss_proc_write+0x366/0x690 [ 342.162849][ T8688] snd_mixer_oss_proc_write+0x366/0x690 [ 342.162880][ T8688] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 342.162906][ T8688] ? rcu_is_watching+0x12/0xc0 [ 342.162936][ T8688] ? trace_sched_exit_tp+0xde/0x130 [ 342.162975][ T8688] ? find_held_lock+0x2b/0x80 [ 342.162999][ T8688] snd_info_text_entry_release+0xf8/0x260 [ 342.163026][ T8688] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 342.163052][ T8688] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 342.163081][ T8688] close_pdeo.part.0+0xdc/0x2e0 [ 342.163108][ T8688] proc_reg_release+0x2ee/0x360 [ 342.163134][ T8688] ? __pfx_proc_reg_release+0x10/0x10 [ 342.163157][ T8688] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.163183][ T8688] ? __pfx_proc_reg_release+0x10/0x10 [ 342.163212][ T8688] ? __fput+0x393/0xb70 [ 342.163230][ T8688] ? __pfx_proc_reg_release+0x10/0x10 [ 342.163255][ T8688] __fput+0x402/0xb70 [ 342.163272][ T8688] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.163296][ T8688] task_work_run+0x150/0x240 [ 342.163316][ T8688] ? __pfx_task_work_run+0x10/0x10 [ 342.163341][ T8688] exit_to_user_mode_loop+0xeb/0x110 [ 342.163362][ T8688] do_syscall_64+0x3f6/0x4c0 [ 342.163389][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.163407][ T8688] RIP: 0033:0x7f2486f8e929 [ 342.163422][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.163439][ T8688] RSP: 002b:00007f2484dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 342.163455][ T8688] RAX: 000000000000000b RBX: 00007f24871b6160 RCX: 00007f2486f8e929 [ 342.163466][ T8688] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000c [ 342.163476][ T8688] RBP: 00007f2484dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 342.163486][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.163496][ T8688] R13: 0000000000000000 R14: 00007f24871b6160 R15: 00007ffea2496f68 [ 342.163519][ T8688] [ 342.412625][ T8688] ALSA: mixer_oss: invalid OSS volume 'LI' [ 342.442109][ T24] usb 3-1: config 0 descriptor?? [ 342.449163][ T30] audit: type=1400 audit(1750633495.345:326): avc: denied { getopt } for pid=8685 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 342.468933][ T30] audit: type=1400 audit(1750633495.595:327): avc: denied { watch } for pid=8685 comm="syz.4.613" path="/25" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 342.491529][ T30] audit: type=1400 audit(1750633495.595:328): avc: denied { watch_sb watch_reads } for pid=8685 comm="syz.4.613" path="/25" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 342.911175][ T8695] lo speed is unknown, defaulting to 1000 [ 342.913076][ T10] usb 3-1: USB disconnect, device number 6 [ 342.923577][ T8695] lo speed is unknown, defaulting to 1000 [ 342.931058][ T8695] lo speed is unknown, defaulting to 1000 [ 342.965113][ T8697] syz.3.615 uses obsolete (PF_INET,SOCK_PACKET) [ 342.973919][ T30] audit: type=1400 audit(1750633496.425:329): avc: denied { getopt } for pid=8694 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 343.025956][ T8695] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 343.338929][ T30] audit: type=1400 audit(1750633496.495:330): avc: denied { ioctl } for pid=8694 comm="syz.3.615" path="socket:[21730]" dev="sockfs" ino=21730 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.345677][ T8695] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 343.403854][ T8695] lo speed is unknown, defaulting to 1000 [ 343.411562][ T8695] lo speed is unknown, defaulting to 1000 [ 343.435094][ T8695] lo speed is unknown, defaulting to 1000 [ 343.442265][ T8695] lo speed is unknown, defaulting to 1000 [ 343.450311][ T8695] lo speed is unknown, defaulting to 1000 [ 343.495479][ T8706] input: syz0 as /devices/virtual/input/input17 [ 343.581304][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.621'. [ 343.590963][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.621'. [ 343.607905][ T8704] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.618'. [ 343.627061][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.621'. [ 343.654422][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.621'. [ 343.795106][ T8713] xt_hashlimit: max too large, truncated to 1048576 [ 345.293301][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 345.663036][ T2147] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 345.669183][ T2147] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 345.677212][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 346.551097][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 346.753134][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 346.761517][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 346.785124][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 346.794600][ T10] usb 5-1: config 1 has no interface number 0 [ 346.800857][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.812750][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 346.915357][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 347.373008][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 347.382088][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.405964][ T8740] FAULT_INJECTION: forcing a failure. [ 347.405964][ T8740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.429247][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.3.628 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 347.429273][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.429283][ T8740] Call Trace: [ 347.429289][ T8740] [ 347.429296][ T8740] dump_stack_lvl+0x16c/0x1f0 [ 347.429326][ T8740] should_fail_ex+0x512/0x640 [ 347.429353][ T8740] _copy_from_user+0x2e/0xd0 [ 347.429378][ T8740] copy_msghdr_from_user+0x98/0x160 [ 347.429403][ T8740] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 347.429442][ T8740] ___sys_sendmsg+0xfe/0x1d0 [ 347.429468][ T8740] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.429489][ T8740] ? __lock_acquire+0x622/0x1c90 [ 347.429546][ T8740] __sys_sendmsg+0x16d/0x220 [ 347.429570][ T8740] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.429609][ T8740] do_syscall_64+0xcd/0x4c0 [ 347.429637][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.429654][ T8740] RIP: 0033:0x7fd8b278e929 [ 347.429668][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.429681][ T8740] RSP: 002b:00007fd8b3559038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.429697][ T8740] RAX: ffffffffffffffda RBX: 00007fd8b29b5fa0 RCX: 00007fd8b278e929 [ 347.429707][ T8740] RDX: 0000000000000010 RSI: 0000200000000f00 RDI: 0000000000000004 [ 347.429716][ T8740] RBP: 00007fd8b3559090 R08: 0000000000000000 R09: 0000000000000000 [ 347.429725][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.429733][ T8740] R13: 0000000000000000 R14: 00007fd8b29b5fa0 R15: 00007ffd66b313d8 [ 347.429754][ T8740] [ 347.633436][ T10] usb 5-1: can't set config #1, error -71 [ 347.672039][ T10] usb 5-1: USB disconnect, device number 13 [ 347.987140][ T8738] random: crng reseeded on system resumption [ 348.175037][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 349.983086][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 349.990146][ T2147] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 349.998206][ T2147] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 351.830490][ T30] audit: type=1400 audit(1750633505.265:331): avc: denied { name_bind } for pid=8782 comm="syz.2.641" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 352.144067][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 352.171270][ T2147] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 353.045427][ T2147] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 354.316326][ T30] audit: type=1400 audit(1750633507.785:332): avc: denied { connect } for pid=8807 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 354.346612][ T30] audit: type=1400 audit(1750633507.805:333): avc: denied { read } for pid=8807 comm="syz.2.650" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 354.369894][ T30] audit: type=1400 audit(1750633507.805:334): avc: denied { open } for pid=8807 comm="syz.2.650" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 354.393237][ T30] audit: type=1400 audit(1750633507.805:335): avc: denied { ioctl } for pid=8807 comm="syz.2.650" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 354.583259][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 355.343062][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 355.343596][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 355.370461][ T8818] overlayfs: failed to resolve './file1': -2 [ 355.378313][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 355.387910][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.402413][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 355.755144][ T8808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8808 comm=syz.2.650 [ 355.768017][ T10] pvrusb2: ********** [ 355.772759][ T2147] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 356.031336][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 356.044143][ T10] pvrusb2: Important functionality might not be entirely working. [ 356.051971][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 356.159884][ T10] pvrusb2: ********** [ 356.239774][ T2334] pvrusb2: Invalid write control endpoint [ 356.332790][ T2147] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 356.452417][ T8819] lo speed is unknown, defaulting to 1000 [ 356.512549][ T8808] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 356.566018][ T30] audit: type=1400 audit(1750633509.965:336): avc: denied { append } for pid=8807 comm="syz.2.650" name="i2c-1" dev="devtmpfs" ino=2935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.197921][ T24] usb 3-1: USB disconnect, device number 7 [ 357.593136][ T2334] pvrusb2: Invalid write control endpoint [ 357.600805][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 357.611890][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 357.620783][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 357.630884][ T2334] pvrusb2: Device being rendered inoperable [ 357.847034][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 357.897344][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 358.223853][ T2334] pvrusb2: Attached sub-driver cx25840 [ 358.288159][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 358.462419][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 359.155051][ T8860] xt_hashlimit: max too large, truncated to 1048576 [ 361.785917][ T8875] FAULT_INJECTION: forcing a failure. [ 361.785917][ T8875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.986175][ T8875] CPU: 1 UID: 0 PID: 8875 Comm: syz.4.666 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 361.986201][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.986210][ T8875] Call Trace: [ 361.986216][ T8875] [ 361.986222][ T8875] dump_stack_lvl+0x16c/0x1f0 [ 361.986251][ T8875] should_fail_ex+0x512/0x640 [ 361.986276][ T8875] _copy_to_user+0x32/0xd0 [ 361.986298][ T8875] simple_read_from_buffer+0xcb/0x170 [ 361.986323][ T8875] proc_fail_nth_read+0x197/0x270 [ 361.986345][ T8875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.986367][ T8875] ? rw_verify_area+0xcf/0x680 [ 361.986384][ T8875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.986404][ T8875] vfs_read+0x1e4/0xc60 [ 361.986427][ T8875] ? __pfx___mutex_lock+0x10/0x10 [ 361.986451][ T8875] ? __pfx_vfs_read+0x10/0x10 [ 361.986478][ T8875] ? __fget_files+0x20e/0x3c0 [ 361.986505][ T8875] ksys_read+0x12a/0x250 [ 361.986524][ T8875] ? __pfx_ksys_read+0x10/0x10 [ 361.986543][ T8875] ? fdget+0x187/0x210 [ 361.986567][ T8875] do_syscall_64+0xcd/0x4c0 [ 361.986593][ T8875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.986610][ T8875] RIP: 0033:0x7f2486f8d33c [ 361.986624][ T8875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 361.986639][ T8875] RSP: 002b:00007f2484df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.986655][ T8875] RAX: ffffffffffffffda RBX: 00007f24871b6080 RCX: 00007f2486f8d33c [ 361.986666][ T8875] RDX: 000000000000000f RSI: 00007f2484df60a0 RDI: 0000000000000004 [ 361.986675][ T8875] RBP: 00007f2484df6090 R08: 0000000000000000 R09: 0000000000000000 [ 361.986685][ T8875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.986694][ T8875] R13: 0000000000000001 R14: 00007f24871b6080 R15: 00007ffea2496f68 [ 361.986717][ T8875] [ 361.989148][ T8876] overlayfs: failed to resolve './file0': -2 [ 362.062653][ T8877] lo speed is unknown, defaulting to 1000 [ 362.433668][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 362.473058][ T30] audit: type=1400 audit(1750633515.895:337): avc: denied { setopt } for pid=8882 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 362.492279][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.521928][ T8891] Invalid ELF header magic: != ELF [ 364.701351][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.845831][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.004629][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.292696][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.322830][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.369863][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.400174][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.401296][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.441967][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.264530][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.347485][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.356671][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.405773][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.417103][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.598769][ T8945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.606351][ T8945] IPv6: NLM_F_CREATE should be set when creating new route [ 367.736139][ T8928] lo speed is unknown, defaulting to 1000 [ 369.071779][ T36] bridge_slave_1: left allmulticast mode [ 369.080544][ T36] bridge_slave_1: left promiscuous mode [ 369.087254][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.114505][ T36] bridge_slave_0: left allmulticast mode [ 369.129548][ T36] bridge_slave_0: left promiscuous mode [ 369.141790][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.415402][ T8973] FAULT_INJECTION: forcing a failure. [ 369.415402][ T8973] name failslab, interval 1, probability 0, space 0, times 0 [ 369.472446][ T8973] CPU: 0 UID: 0 PID: 8973 Comm: syz.3.691 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 369.472473][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.472483][ T8973] Call Trace: [ 369.472489][ T8973] [ 369.472496][ T8973] dump_stack_lvl+0x16c/0x1f0 [ 369.472526][ T8973] should_fail_ex+0x512/0x640 [ 369.472548][ T8973] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 369.472571][ T8973] should_failslab+0xc2/0x120 [ 369.472595][ T8973] __kmalloc_cache_noprof+0x6a/0x3e0 [ 369.472614][ T8973] ? __pfx___might_resched+0x10/0x10 [ 369.472636][ T8973] ? vhost_task_create+0xe5/0x2e0 [ 369.472651][ T8973] ? rcu_is_watching+0x12/0xc0 [ 369.472670][ T8973] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 369.472693][ T8973] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 369.472722][ T8973] vhost_task_create+0xe5/0x2e0 [ 369.472738][ T8973] ? __pfx_vhost_task_create+0x10/0x10 [ 369.472763][ T8973] ? __pfx_vhost_task_fn+0x10/0x10 [ 369.472791][ T8973] kvm_mmu_post_init_vm+0x1b7/0x370 [ 369.472815][ T8973] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 369.472835][ T8973] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 369.472860][ T8973] kvm_vcpu_ioctl+0x5eb/0x1690 [ 369.472883][ T8973] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 369.472916][ T8973] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 369.472944][ T8973] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 369.472972][ T8973] ? hook_file_ioctl_common+0x145/0x410 [ 369.473004][ T8973] ? selinux_file_ioctl+0x180/0x270 [ 369.473025][ T8973] ? selinux_file_ioctl+0xb4/0x270 [ 369.473047][ T8973] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 369.473067][ T8973] __x64_sys_ioctl+0x18b/0x210 [ 369.473087][ T8973] do_syscall_64+0xcd/0x4c0 [ 369.473113][ T8973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.473130][ T8973] RIP: 0033:0x7fd8b278e929 [ 369.473144][ T8973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.473159][ T8973] RSP: 002b:00007fd8b3517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.473175][ T8973] RAX: ffffffffffffffda RBX: 00007fd8b29b6160 RCX: 00007fd8b278e929 [ 369.473186][ T8973] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 369.473195][ T8973] RBP: 00007fd8b3517090 R08: 0000000000000000 R09: 0000000000000000 [ 369.473204][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.473213][ T8973] R13: 0000000000000001 R14: 00007fd8b29b6160 R15: 00007ffd66b313d8 [ 369.473236][ T8973] [ 369.750665][ T5820] Bluetooth: hci1: command tx timeout [ 370.292616][ T8986] NILFS (nullb0): couldn't find nilfs on the device [ 371.052101][ T30] audit: type=1400 audit(1750633523.755:338): avc: denied { mounton } for pid=8983 comm="syz.0.694" path="/74/file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 371.824044][ T5820] Bluetooth: hci1: command tx timeout [ 371.847640][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.860953][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.872144][ T36] bond0 (unregistering): Released all slaves [ 373.365292][ T36] hsr_slave_0: left promiscuous mode [ 373.403866][ T36] hsr_slave_1: left promiscuous mode [ 373.409874][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.418622][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.437182][ T30] audit: type=1400 audit(1750633526.905:339): avc: denied { getopt } for pid=9015 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 373.459036][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.467269][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.492833][ T36] veth1_macvtap: left promiscuous mode [ 373.522428][ T36] veth0_macvtap: left promiscuous mode [ 373.539168][ T36] veth1_vlan: left promiscuous mode [ 373.554654][ T36] veth0_vlan: left promiscuous mode [ 373.913323][ T5820] Bluetooth: hci1: command tx timeout [ 374.340033][ T36] team0 (unregistering): Port device team_slave_1 removed [ 374.375779][ T36] team0 (unregistering): Port device team_slave_0 removed [ 374.803948][ T9032] Invalid ELF header magic: != ELF [ 374.997054][ T9013] geneve2: entered promiscuous mode [ 375.005084][ T9013] geneve2: entered allmulticast mode [ 375.039765][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 375.983125][ T5820] Bluetooth: hci1: command tx timeout [ 376.475958][ T9055] random: crng reseeded on system resumption [ 376.505130][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.505675][ T9044] lo speed is unknown, defaulting to 1000 [ 376.513602][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.528385][ T8928] bridge_slave_0: entered allmulticast mode [ 376.536337][ T8928] bridge_slave_0: entered promiscuous mode [ 376.581762][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.605682][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.679297][ T8928] bridge_slave_1: entered allmulticast mode [ 376.691105][ T8928] bridge_slave_1: entered promiscuous mode [ 376.777606][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.848449][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.721653][ T8928] team0: Port device team_slave_0 added [ 377.816082][ T8928] team0: Port device team_slave_1 added [ 378.032151][ T30] audit: type=1400 audit(1750633531.495:340): avc: denied { bind } for pid=9043 comm="syz.3.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 378.159136][ T9087] xt_hashlimit: max too large, truncated to 1048576 [ 379.003938][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.010301][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.705717][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.713029][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.740030][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.758753][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.766358][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.805934][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.896281][ T30] audit: type=1400 audit(1750633533.225:341): avc: denied { read } for pid=9093 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.113033][ T972] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 380.746096][ T8928] hsr_slave_0: entered promiscuous mode [ 380.755285][ T972] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 213 [ 380.781053][ T8928] hsr_slave_1: entered promiscuous mode [ 380.792406][ T972] usb 3-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 380.814037][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.821880][ T8928] Cannot create hsr debugfs directory [ 380.832821][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 381.762305][ T972] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 381.772494][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.780796][ T972] usb 3-1: Product: syz [ 381.785197][ T972] usb 3-1: Manufacturer: syz [ 381.790624][ T972] usb 3-1: SerialNumber: syz [ 381.805306][ T972] usb 3-1: config 0 descriptor?? [ 381.822419][ T972] usb-storage 3-1:0.0: USB Mass Storage device detected [ 381.879893][ T972] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 382.265811][ T10] usb 3-1: USB disconnect, device number 8 [ 382.304916][ T9112] Invalid ELF header magic: != ELF [ 383.945835][ T9143] netlink: 157356 bytes leftover after parsing attributes in process `syz.2.728'. [ 383.957816][ T9146] netlink: 157356 bytes leftover after parsing attributes in process `syz.2.728'. [ 385.895093][ T9159] Invalid ELF header magic: != ELF [ 386.390855][ T9179] xt_hashlimit: max too large, truncated to 1048576 [ 386.779607][ T8928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.812647][ T8928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.836220][ T8928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.846533][ T8928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 387.461229][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.507023][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.796978][ T8928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.073287][ T8928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.500845][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.508017][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.534452][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.541596][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.206669][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.926297][ T6133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.639907][ T6133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.725815][ T9238] netlink: 48 bytes leftover after parsing attributes in process `syz.0.747'. [ 392.487884][ T6133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.564142][ T9256] random: crng reseeded on system resumption [ 392.717629][ T6133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.770990][ T8928] veth0_vlan: entered promiscuous mode [ 392.875026][ T8928] veth1_vlan: entered promiscuous mode [ 392.911010][ T8928] veth0_macvtap: entered promiscuous mode [ 393.095673][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.106321][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.131810][ T8928] veth1_macvtap: entered promiscuous mode [ 393.490652][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.744211][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.751243][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.759189][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.764468][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.779014][ T8928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.880600][ T8928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.889999][ T8928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.898744][ T8928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.237927][ T9287] netlink: 'syz.3.756': attribute type 9 has an invalid length. [ 394.256976][ T9287] netlink: 'syz.3.756': attribute type 7 has an invalid length. [ 394.281269][ T9287] netlink: 'syz.3.756': attribute type 8 has an invalid length. [ 394.379310][ T10] kernel write not supported for file /563/oom_score_adj (pid: 10 comm: kworker/0:1) [ 394.417786][ T30] audit: type=1400 audit(1750633547.875:342): avc: denied { validate_trans } for pid=9286 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 394.458557][ T30] audit: type=1400 audit(1750633547.875:343): avc: denied { write } for pid=9286 comm="syz.3.756" name="ptype" dev="proc" ino=4026533097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 394.487651][ T6133] bridge_slave_1: left allmulticast mode [ 394.524487][ T6133] bridge_slave_1: left promiscuous mode [ 394.530234][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.599310][ T6133] bridge_slave_0: left allmulticast mode [ 394.642524][ T6133] bridge_slave_0: left promiscuous mode [ 394.663765][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.155934][ T9312] xt_hashlimit: max too large, truncated to 1048576 [ 395.823863][ T5820] Bluetooth: hci2: command tx timeout [ 395.898384][ T9316] netlink: 48 bytes leftover after parsing attributes in process `syz.0.760'. [ 396.907464][ T9333] xt_hashlimit: max too large, truncated to 1048576 [ 397.350752][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.366894][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.379129][ T6133] bond0 (unregistering): Released all slaves [ 397.396475][ T9270] lo speed is unknown, defaulting to 1000 [ 397.597260][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.642996][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.903035][ T5820] Bluetooth: hci2: command tx timeout [ 398.106054][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.132964][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.231632][ T9344] lo speed is unknown, defaulting to 1000 [ 399.308978][ T6133] hsr_slave_0: left promiscuous mode [ 399.773247][ T6133] hsr_slave_1: left promiscuous mode [ 399.779113][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.811704][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.821449][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.842453][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.874082][ T6133] veth1_macvtap: left promiscuous mode [ 399.879703][ T6133] veth0_macvtap: left promiscuous mode [ 399.886651][ T6133] veth1_vlan: left promiscuous mode [ 399.892060][ T6133] veth0_vlan: left promiscuous mode [ 399.985319][ T5820] Bluetooth: hci2: command tx timeout [ 400.135980][ T30] audit: type=1400 audit(1750633553.605:344): avc: denied { mount } for pid=9385 comm="syz.3.768" name="/" dev="autofs" ino=24463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 400.160182][ T30] audit: type=1400 audit(1750633553.605:345): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 400.291192][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 400.338079][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 400.885902][ T30] audit: type=1400 audit(1750633553.965:346): avc: denied { create } for pid=9387 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 400.905645][ T30] audit: type=1400 audit(1750633553.965:347): avc: denied { connect } for pid=9387 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 400.932389][ T30] audit: type=1400 audit(1750633553.975:348): avc: denied { write } for pid=9387 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 401.276492][ T9270] chnl_net:caif_netlink_parms(): no params data found [ 402.063539][ T5820] Bluetooth: hci2: command tx timeout [ 402.590561][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.633134][ T9270] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.649241][ T9270] bridge_slave_0: entered allmulticast mode [ 402.674287][ T9270] bridge_slave_0: entered promiscuous mode [ 403.673465][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.683827][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.691034][ T9270] bridge_slave_1: entered allmulticast mode [ 403.717807][ T9270] bridge_slave_1: entered promiscuous mode [ 404.484432][ T9270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.852755][ T9270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.887809][ T9465] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 405.894534][ T9465] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 405.928966][ T9465] vhci_hcd vhci_hcd.0: Device attached [ 406.049844][ T9463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9463 comm=syz.4.782 [ 406.094311][ T9270] team0: Port device team_slave_0 added [ 406.178274][ T9466] vhci_hcd: connection closed [ 406.179818][ T71] vhci_hcd: stop threads [ 406.199620][ T9270] team0: Port device team_slave_1 added [ 406.219923][ T71] vhci_hcd: release socket [ 406.238208][ T71] vhci_hcd: disconnect device [ 406.523563][ T2147] usb 42-1: enqueue for inactive port 0 [ 407.383296][ T9270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.398828][ T2147] usb usb42-port1: attempt power cycle [ 407.477410][ T9270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.768719][ T9270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.781918][ T9270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.790096][ T9270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.195368][ T9270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.398334][ T2147] usb usb42-port1: unable to enumerate USB device [ 409.326555][ T9270] hsr_slave_0: entered promiscuous mode [ 409.344282][ T9270] hsr_slave_1: entered promiscuous mode [ 411.510363][ T30] audit: type=1400 audit(1750633564.945:349): avc: denied { setopt } for pid=9527 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 417.576752][ T5923] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 417.617292][ T9600] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.811'. [ 417.627849][ T9600] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 417.629468][ T9270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.640290][ T30] audit: type=1400 audit(1750633571.105:350): avc: denied { mount } for pid=9599 comm="syz.0.811" name="/" dev="ramfs" ino=26033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 417.704585][ T9270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.724398][ T9270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.746375][ T9270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.765770][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 417.776107][ T5923] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 417.787479][ T5923] usb 5-1: config 0 has no interface number 0 [ 417.808121][ T5923] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.842244][ T5923] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 417.856982][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.878913][ T5923] usb 5-1: Product: syz [ 417.883324][ T5923] usb 5-1: Manufacturer: syz [ 417.888027][ T5923] usb 5-1: SerialNumber: syz [ 417.906072][ T5923] usb 5-1: config 0 descriptor?? [ 417.940340][ T5923] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 417.948237][ T9270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.997150][ T9612] input: syz0 as /devices/virtual/input/input18 [ 418.009759][ T9270] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.032295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.039463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.108484][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.115661][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.130450][ T5923] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 418.142125][ T6136] usb 5-1: Failed to submit usb control message: -71 [ 418.151910][ T5882] usb 5-1: USB disconnect, device number 14 [ 418.168233][ T6136] usb 5-1: unable to send the bmi data to the device: -71 [ 418.183786][ T6136] usb 5-1: unable to get target info from device [ 418.197109][ T6136] usb 5-1: could not get target info (-71) [ 418.237714][ T6136] usb 5-1: could not probe fw (-71) [ 418.272373][ T9270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.305662][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 418.467960][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.479601][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.489448][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 418.502411][ T5923] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 418.511748][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.533613][ T5923] usb 4-1: config 0 descriptor?? [ 419.034083][ T9270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.084624][ T9270] veth0_vlan: entered promiscuous mode [ 419.100447][ T9270] veth1_vlan: entered promiscuous mode [ 419.178048][ T5923] HID 045e:07da: Invalid code 65791 type 1 [ 419.201443][ T9270] veth0_macvtap: entered promiscuous mode [ 419.309517][ T5923] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input19 [ 419.325414][ T9270] veth1_macvtap: entered promiscuous mode [ 419.376810][ T5923] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 419.396361][ T9270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.430884][ T9270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.448638][ T5923] usb 4-1: USB disconnect, device number 16 [ 419.489188][ T9270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.519775][ T9657] fido_id[9657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 419.532975][ T9270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.542621][ T9270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.578647][ T9270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.822844][ T9668] netlink: 48 bytes leftover after parsing attributes in process `syz.1.819'. [ 420.063170][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout [ 420.070217][ T5896] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 420.081975][ T5896] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 420.152605][ T9677] siw: device registration error -23 [ 421.677927][ T30] audit: type=1400 audit(1750633575.145:351): avc: denied { create } for pid=9691 comm="syz.0.824" name="#1f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 421.698877][ T30] audit: type=1400 audit(1750633575.145:352): avc: denied { link } for pid=9691 comm="syz.0.824" name="#1f" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 421.721170][ T30] audit: type=1400 audit(1750633575.145:353): avc: denied { rename } for pid=9691 comm="syz.0.824" name="#20" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 422.143041][ T5896] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 422.143309][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 422.155931][ T5896] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 439.584659][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.590980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.025059][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.031429][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.468290][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.477212][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.863314][ T31] INFO: task kworker/0:5:5896 blocked for more than 143 seconds. [ 568.871052][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 568.878811][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 568.889423][ T31] task:kworker/0:5 state:D stack:23816 pid:5896 tgid:5896 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 568.901468][ T31] Workqueue: events rfkill_op_handler [ 568.909338][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 568.912638][ T31] [ 568.915745][ T31] __schedule+0x116a/0x5de0 [ 568.920754][ T31] ? __lock_acquire+0x622/0x1c90 [ 568.925921][ T31] ? __pfx___schedule+0x10/0x10 [ 568.932275][ T31] ? find_held_lock+0x2b/0x80 [ 568.943684][ T31] ? schedule+0x2d7/0x3a0 [ 568.948067][ T31] schedule+0xe7/0x3a0 [ 568.952155][ T31] schedule_preempt_disabled+0x13/0x30 [ 568.966153][ T31] __mutex_lock+0x6c7/0xb90 [ 568.970706][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 568.975380][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 568.980436][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 568.985595][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 568.990373][ T31] nfc_dev_down+0x2d/0x2e0 [ 568.994898][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 568.999929][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 569.005747][ T31] rfkill_set_block+0x1fe/0x550 [ 569.010631][ T31] rfkill_epo+0x8e/0x1d0 [ 569.014959][ T31] rfkill_op_handler+0x262/0x280 [ 569.019917][ T31] process_one_work+0x9cc/0x1b70 [ 569.025515][ T31] ? __pfx_process_one_work+0x10/0x10 [ 569.030909][ T31] ? assign_work+0x1a0/0x250 [ 569.035534][ T31] worker_thread+0x6c8/0xf10 [ 569.040126][ T31] ? __kthread_parkme+0x19e/0x250 [ 569.045220][ T31] ? __pfx_worker_thread+0x10/0x10 [ 569.050329][ T31] kthread+0x3c2/0x780 [ 569.054424][ T31] ? __pfx_kthread+0x10/0x10 [ 569.059006][ T31] ? rcu_is_watching+0x12/0xc0 [ 569.063897][ T31] ? __pfx_kthread+0x10/0x10 [ 569.068484][ T31] ret_from_fork+0x5d4/0x6f0 [ 569.073113][ T31] ? __pfx_kthread+0x10/0x10 [ 569.077706][ T31] ret_from_fork_asm+0x1a/0x30 [ 569.082453][ T31] [ 569.085567][ T31] INFO: task kworker/0:7:5987 blocked for more than 143 seconds. [ 569.093360][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 569.101001][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.109775][ T31] task:kworker/0:7 state:D stack:21768 pid:5987 tgid:5987 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 569.122472][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 569.129273][ T31] Call Trace: [ 569.132552][ T31] [ 569.135554][ T31] __schedule+0x116a/0x5de0 [ 569.140079][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 569.145112][ T31] ? __pfx___schedule+0x10/0x10 [ 569.149970][ T31] ? find_held_lock+0x2b/0x80 [ 569.154676][ T31] ? schedule+0x2d7/0x3a0 [ 569.159005][ T31] schedule+0xe7/0x3a0 [ 569.163150][ T31] schedule_preempt_disabled+0x13/0x30 [ 569.168611][ T31] __mutex_lock+0x6c7/0xb90 [ 569.173173][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 569.179496][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 569.184590][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 569.190420][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 569.196333][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 569.202740][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 569.208973][ T31] process_one_work+0x9cc/0x1b70 [ 569.213962][ T31] ? __pfx_process_one_work+0x10/0x10 [ 569.219335][ T31] ? assign_work+0x1a0/0x250 [ 569.224001][ T31] worker_thread+0x6c8/0xf10 [ 569.228597][ T31] ? __kthread_parkme+0x19e/0x250 [ 569.233651][ T31] ? __pfx_worker_thread+0x10/0x10 [ 569.238768][ T31] kthread+0x3c2/0x780 [ 569.242835][ T31] ? __pfx_kthread+0x10/0x10 [ 569.247492][ T31] ? rcu_is_watching+0x12/0xc0 [ 569.252240][ T31] ? __pfx_kthread+0x10/0x10 [ 569.256850][ T31] ret_from_fork+0x5d4/0x6f0 [ 569.261437][ T31] ? __pfx_kthread+0x10/0x10 [ 569.266063][ T31] ret_from_fork_asm+0x1a/0x30 [ 569.270825][ T31] [ 569.273902][ T31] INFO: task syz-executor:9270 blocked for more than 143 seconds. [ 569.281704][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 569.289380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.298065][ T31] task:syz-executor state:D stack:24104 pid:9270 tgid:9270 ppid:1 task_flags:0x400140 flags:0x00004004 [ 569.310037][ T31] Call Trace: [ 569.313376][ T31] [ 569.316304][ T31] __schedule+0x116a/0x5de0 [ 569.320820][ T31] ? __lock_acquire+0x622/0x1c90 [ 569.325855][ T31] ? __pfx___schedule+0x10/0x10 [ 569.330722][ T31] ? find_held_lock+0x2b/0x80 [ 569.335421][ T31] ? schedule+0x2d7/0x3a0 [ 569.339752][ T31] schedule+0xe7/0x3a0 [ 569.343870][ T31] schedule_preempt_disabled+0x13/0x30 [ 569.349402][ T31] __mutex_lock+0x6c7/0xb90 [ 569.353995][ T31] ? rfkill_fop_open+0x136/0x750 [ 569.358942][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 569.364018][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 569.369402][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 569.374817][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 569.380096][ T31] ? rfkill_fop_open+0x136/0x750 [ 569.385062][ T31] rfkill_fop_open+0x136/0x750 [ 569.389820][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 569.395474][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 569.400759][ T31] misc_open+0x35d/0x420 [ 569.405035][ T31] ? __pfx_misc_open+0x10/0x10 [ 569.409796][ T31] chrdev_open+0x234/0x6a0 [ 569.414246][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 569.419222][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 569.426107][ T31] do_dentry_open+0x744/0x1c10 [ 569.430892][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 569.435880][ T31] vfs_open+0x82/0x3f0 [ 569.439958][ T31] path_openat+0x1de4/0x2cb0 [ 569.444607][ T31] ? __pfx_path_openat+0x10/0x10 [ 569.449573][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 569.454532][ T31] do_filp_open+0x20b/0x470 [ 569.459050][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 569.464149][ T31] ? alloc_fd+0x471/0x7d0 [ 569.468483][ T31] do_sys_openat2+0x11b/0x1d0 [ 569.473229][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.478434][ T31] ? __fput+0x68d/0xb70 [ 569.482572][ T31] __x64_sys_openat+0x174/0x210 [ 569.487487][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 569.492964][ T31] do_syscall_64+0xcd/0x4c0 [ 569.497489][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.503436][ T31] RIP: 0033:0x7f887158d290 [ 569.507838][ T31] RSP: 002b:00007fff4269fb20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 569.516330][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f887158d290 [ 569.524340][ T31] RDX: 0000000000000002 RSI: 00007f88716115b1 RDI: 00000000ffffff9c [ 569.532303][ T31] RBP: 00007f88716115b1 R08: 0000000000000000 R09: 0000000000000000 [ 569.540648][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 569.548922][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 569.556961][ T31] [ 569.559983][ T31] INFO: task syz.4.810:9593 blocked for more than 144 seconds. [ 569.567551][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 569.575186][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.583881][ T31] task:syz.4.810 state:D stack:28216 pid:9593 tgid:9593 ppid:8928 task_flags:0x400040 flags:0x00004006 [ 569.595830][ T31] Call Trace: [ 569.599089][ T31] [ 569.601998][ T31] __schedule+0x116a/0x5de0 [ 569.606534][ T31] ? __lock_acquire+0x622/0x1c90 [ 569.611484][ T31] ? __pfx___schedule+0x10/0x10 [ 569.616377][ T31] ? find_held_lock+0x2b/0x80 [ 569.621062][ T31] ? schedule+0x2d7/0x3a0 [ 569.625437][ T31] schedule+0xe7/0x3a0 [ 569.629513][ T31] schedule_preempt_disabled+0x13/0x30 [ 569.635017][ T31] __mutex_lock+0x6c7/0xb90 [ 569.639520][ T31] ? rfkill_unregister+0xec/0x2c0 [ 569.644576][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 569.649615][ T31] ? device_del+0x6b6/0x9f0 [ 569.654168][ T31] ? __pfx_device_del+0x10/0x10 [ 569.659035][ T31] ? rfkill_unregister+0xec/0x2c0 [ 569.664583][ T31] rfkill_unregister+0xec/0x2c0 [ 569.669444][ T31] nfc_unregister_device+0x94/0x330 [ 569.674700][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 569.680411][ T31] virtual_ncidev_close+0x4b/0xa0 [ 569.685465][ T31] __fput+0x402/0xb70 [ 569.689443][ T31] task_work_run+0x150/0x240 [ 569.694068][ T31] ? __pfx_task_work_run+0x10/0x10 [ 569.699201][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 569.704996][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 569.710296][ T31] do_syscall_64+0x3f6/0x4c0 [ 569.714929][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.720827][ T31] RIP: 0033:0x7fc55fd8e929 [ 569.725286][ T31] RSP: 002b:00007ffd60113488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 569.733725][ T31] RAX: 0000000000000000 RBX: 0000000000065ca9 RCX: 00007fc55fd8e929 [ 569.741675][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 569.751616][ T31] RBP: 00007fc55ffb7ba0 R08: 0000000000000001 R09: 000000096011377f [ 569.760938][ T31] R10: 00007fc55fc00000 R11: 0000000000000246 R12: 00007fc55ffb5fac [ 569.768982][ T31] R13: 00007fc55ffb5fa0 R14: ffffffffffffffff R15: 00007ffd601135a0 [ 569.776981][ T31] [ 569.779997][ T31] INFO: task syz.1.820:9674 blocked for more than 144 seconds. [ 569.787646][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 569.795279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.803968][ T31] task:syz.1.820 state:D stack:28888 pid:9674 tgid:9673 ppid:8025 task_flags:0x400040 flags:0x00004004 [ 569.815932][ T31] Call Trace: [ 569.819197][ T31] [ 569.822118][ T31] __schedule+0x116a/0x5de0 [ 569.826755][ T31] ? __lock_acquire+0x622/0x1c90 [ 569.831737][ T31] ? __pfx___schedule+0x10/0x10 [ 569.836630][ T31] ? find_held_lock+0x2b/0x80 [ 569.841322][ T31] ? schedule+0x2d7/0x3a0 [ 569.845709][ T31] schedule+0xe7/0x3a0 [ 569.849780][ T31] schedule_preempt_disabled+0x13/0x30 [ 569.855277][ T31] __mutex_lock+0x6c7/0xb90 [ 569.859789][ T31] ? misc_open+0x63/0x420 [ 569.864173][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 569.869215][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 569.874281][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 569.879919][ T31] ? __pfx_misc_open+0x10/0x10 [ 569.884717][ T31] ? misc_open+0x63/0x420 [ 569.889058][ T31] misc_open+0x63/0x420 [ 569.893243][ T31] ? __pfx_misc_open+0x10/0x10 [ 569.898001][ T31] chrdev_open+0x234/0x6a0 [ 569.902414][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 569.907466][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 569.914253][ T31] do_dentry_open+0x744/0x1c10 [ 569.919014][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 569.923974][ T31] vfs_open+0x82/0x3f0 [ 569.928057][ T31] path_openat+0x1de4/0x2cb0 [ 569.932648][ T31] ? __pfx_path_openat+0x10/0x10 [ 569.937690][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 569.942654][ T31] do_filp_open+0x20b/0x470 [ 569.947199][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 569.952254][ T31] ? alloc_fd+0x471/0x7d0 [ 569.956628][ T31] do_sys_openat2+0x11b/0x1d0 [ 569.961312][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.966539][ T31] ? find_held_lock+0x2b/0x80 [ 569.971216][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 569.976183][ T31] __x64_sys_openat+0x174/0x210 [ 569.981044][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 569.986516][ T31] ? do_user_addr_fault+0x843/0x1370 [ 569.991823][ T31] do_syscall_64+0xcd/0x4c0 [ 569.996372][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.002260][ T31] RIP: 0033:0x7f3ff078e929 [ 570.006736][ T31] RSP: 002b:00007f3ff158c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.015183][ T31] RAX: ffffffffffffffda RBX: 00007f3ff09b5fa0 RCX: 00007f3ff078e929 [ 570.023265][ T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 570.031232][ T31] RBP: 00007f3ff0810b39 R08: 0000000000000000 R09: 0000000000000000 [ 570.039255][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.047255][ T31] R13: 0000000000000001 R14: 00007f3ff09b5fa0 R15: 00007fff30a90e48 [ 570.055246][ T31] [ 570.058284][ T31] INFO: task syz.3.821:9679 blocked for more than 144 seconds. [ 570.065934][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 570.073726][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.082381][ T31] task:syz.3.821 state:D stack:28888 pid:9679 tgid:9678 ppid:5818 task_flags:0x400140 flags:0x00004004 [ 570.094335][ T31] Call Trace: [ 570.097627][ T31] [ 570.100563][ T31] __schedule+0x116a/0x5de0 [ 570.105118][ T31] ? __lock_acquire+0x622/0x1c90 [ 570.110072][ T31] ? __pfx___schedule+0x10/0x10 [ 570.114951][ T31] ? find_held_lock+0x2b/0x80 [ 570.119624][ T31] ? schedule+0x2d7/0x3a0 [ 570.124000][ T31] schedule+0xe7/0x3a0 [ 570.128084][ T31] schedule_preempt_disabled+0x13/0x30 [ 570.133565][ T31] __mutex_lock+0x6c7/0xb90 [ 570.138082][ T31] ? misc_open+0x63/0x420 [ 570.142394][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 570.147538][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 570.152599][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 570.158284][ T31] ? __pfx_misc_open+0x10/0x10 [ 570.163093][ T31] ? misc_open+0x63/0x420 [ 570.167425][ T31] misc_open+0x63/0x420 [ 570.171561][ T31] ? __pfx_misc_open+0x10/0x10 [ 570.176336][ T31] chrdev_open+0x234/0x6a0 [ 570.180772][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 570.185742][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 570.192505][ T31] do_dentry_open+0x744/0x1c10 [ 570.197304][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 570.202334][ T31] vfs_open+0x82/0x3f0 [ 570.206453][ T31] path_openat+0x1de4/0x2cb0 [ 570.211065][ T31] ? __pfx_path_openat+0x10/0x10 [ 570.216053][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 570.221001][ T31] do_filp_open+0x20b/0x470 [ 570.225522][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 570.230570][ T31] ? alloc_fd+0x471/0x7d0 [ 570.234919][ T31] do_sys_openat2+0x11b/0x1d0 [ 570.239613][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 570.244832][ T31] ? __sock_release+0x20b/0x270 [ 570.249696][ T31] __x64_sys_openat+0x174/0x210 [ 570.254581][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 570.259973][ T31] do_syscall_64+0xcd/0x4c0 [ 570.264510][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.270401][ T31] RIP: 0033:0x7fd8b278e929 [ 570.274848][ T31] RSP: 002b:00007fd8b3559038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.283290][ T31] RAX: ffffffffffffffda RBX: 00007fd8b29b5fa0 RCX: 00007fd8b278e929 [ 570.291263][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 570.299263][ T31] RBP: 00007fd8b2810b39 R08: 0000000000000000 R09: 0000000000000000 [ 570.307302][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.315298][ T31] R13: 0000000000000000 R14: 00007fd8b29b5fa0 R15: 00007ffd66b313d8 [ 570.323313][ T31] [ 570.326339][ T31] INFO: task syz.0.826:9696 blocked for more than 144 seconds. [ 570.333905][ T31] Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 [ 570.341526][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.350209][ T31] task:syz.0.826 state:D stack:26520 pid:9696 tgid:9695 ppid:7234 task_flags:0x400140 flags:0x00004004 [ 570.362160][ T31] Call Trace: [ 570.365477][ T31] [ 570.368403][ T31] __schedule+0x116a/0x5de0 [ 570.372954][ T31] ? __lock_acquire+0x622/0x1c90 [ 570.377922][ T31] ? __pfx___schedule+0x10/0x10 [ 570.382761][ T31] ? find_held_lock+0x2b/0x80 [ 570.387547][ T31] ? schedule+0x2d7/0x3a0 [ 570.391874][ T31] schedule+0xe7/0x3a0 [ 570.395977][ T31] schedule_preempt_disabled+0x13/0x30 [ 570.401435][ T31] __mutex_lock+0x6c7/0xb90 [ 570.406313][ T31] ? misc_open+0x63/0x420 [ 570.410658][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 570.415723][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 570.420844][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 570.426527][ T31] ? __pfx_misc_open+0x10/0x10 [ 570.431295][ T31] ? misc_open+0x63/0x420 [ 570.435810][ T31] misc_open+0x63/0x420 [ 570.439969][ T31] ? __pfx_misc_open+0x10/0x10 [ 570.444769][ T31] chrdev_open+0x234/0x6a0 [ 570.449200][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 570.454185][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 570.460957][ T31] do_dentry_open+0x744/0x1c10 [ 570.465761][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 570.470707][ T31] vfs_open+0x82/0x3f0 [ 570.474804][ T31] path_openat+0x1de4/0x2cb0 [ 570.479409][ T31] ? __pfx_path_openat+0x10/0x10 [ 570.484394][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 570.489349][ T31] do_filp_open+0x20b/0x470 [ 570.493935][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 570.498972][ T31] ? alloc_fd+0x471/0x7d0 [ 570.503342][ T31] do_sys_openat2+0x11b/0x1d0 [ 570.508012][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 570.513287][ T31] __x64_sys_openat+0x174/0x210 [ 570.518135][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 570.523544][ T31] do_syscall_64+0xcd/0x4c0 [ 570.528054][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.533963][ T31] RIP: 0033:0x7f8df938e929 [ 570.538380][ T31] RSP: 002b:00007f8dfa17e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.546815][ T31] RAX: ffffffffffffffda RBX: 00007f8df95b5fa0 RCX: 00007f8df938e929 [ 570.554822][ T31] RDX: 0000000000000043 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 570.562771][ T31] RBP: 00007f8df9410b39 R08: 0000000000000000 R09: 0000000000000000 [ 570.570748][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.579028][ T31] R13: 0000000000000000 R14: 00007f8df95b5fa0 R15: 00007ffcac4a18d8 [ 570.587048][ T31] [ 570.590092][ T31] [ 570.590092][ T31] Showing all locks held in the system: [ 570.597843][ T31] 7 locks held by kworker/u8:0/12: [ 570.602974][ T31] 1 lock held by khungtaskd/31: [ 570.607811][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 570.617700][ T31] 2 locks held by getty/5576: [ 570.622361][ T31] #0: ffff888032c730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 570.632207][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 570.642336][ T31] 4 locks held by kworker/0:5/5896: [ 570.647559][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 570.658039][ T31] #1: ffffc90003e3fd10 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 570.668433][ T31] #2: ffffffff907ee148 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 570.677957][ T31] #3: ffff88807db13100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 570.686940][ T31] 3 locks held by kworker/0:7/5987: [ 570.692135][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 570.702590][ T31] #1: ffffc9000416fd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 570.715647][ T31] #2: ffffffff907ee148 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 570.727365][ T31] 2 locks held by syz-executor/9270: [ 570.732666][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.741225][ T31] #1: ffffffff907ee148 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x136/0x750 [ 570.751363][ T31] 2 locks held by syz.4.810/9593: [ 570.756501][ T31] #0: ffff88807db13100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 570.766308][ T31] #1: ffffffff907ee148 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 570.776409][ T31] 1 lock held by syz.1.820/9674: [ 570.781342][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.790183][ T31] 1 lock held by syz.3.821/9679: [ 570.795331][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.803957][ T31] 1 lock held by syz.0.826/9696: [ 570.808891][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.817369][ T31] 1 lock held by syz-executor/9703: [ 570.822564][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.831159][ T31] 1 lock held by syz-executor/9706: [ 570.836410][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.844990][ T31] 1 lock held by syz-executor/9707: [ 570.850184][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.858724][ T31] 1 lock held by syz-executor/9709: [ 570.864760][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.873281][ T31] 1 lock held by syz-executor/9711: [ 570.878463][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.886987][ T31] 1 lock held by syz-executor/9717: [ 570.892435][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.900925][ T31] 1 lock held by syz-executor/9721: [ 570.906268][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.914752][ T31] 1 lock held by syz-executor/9722: [ 570.919953][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.928489][ T31] 1 lock held by syz-executor/9724: [ 570.933743][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.942202][ T31] 1 lock held by syz-executor/9726: [ 570.947437][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.955946][ T31] 1 lock held by syz-executor/9728: [ 570.961152][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.969657][ T31] 1 lock held by syz-executor/9734: [ 570.974940][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.983502][ T31] 1 lock held by syz-executor/9735: [ 570.988701][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 570.997361][ T31] 1 lock held by syz-executor/9737: [ 571.002550][ T31] #0: ffffffff8f3024e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 571.011105][ T31] [ 571.013586][ T31] ============================================= [ 571.013586][ T31] [ 571.021982][ T31] NMI backtrace for cpu 0 [ 571.021992][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 571.022005][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.022011][ T31] Call Trace: [ 571.022014][ T31] [ 571.022019][ T31] dump_stack_lvl+0x116/0x1f0 [ 571.022039][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 571.022052][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 571.022067][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 571.022080][ T31] watchdog+0xf70/0x12c0 [ 571.022095][ T31] ? __pfx_watchdog+0x10/0x10 [ 571.022105][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 571.022121][ T31] ? __kthread_parkme+0x19e/0x250 [ 571.022136][ T31] ? __pfx_watchdog+0x10/0x10 [ 571.022147][ T31] kthread+0x3c2/0x780 [ 571.022156][ T31] ? __pfx_kthread+0x10/0x10 [ 571.022166][ T31] ? rcu_is_watching+0x12/0xc0 [ 571.022178][ T31] ? __pfx_kthread+0x10/0x10 [ 571.022188][ T31] ret_from_fork+0x5d4/0x6f0 [ 571.022202][ T31] ? __pfx_kthread+0x10/0x10 [ 571.022211][ T31] ret_from_fork_asm+0x1a/0x30 [ 571.022228][ T31] [ 571.022232][ T31] Sending NMI from CPU 0 to CPUs 1: [ 571.140175][ C1] NMI backtrace for cpu 1 [ 571.140188][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 571.140206][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.140214][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 571.140237][ C1] Code: 6b 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 f0 29 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 571.140250][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 571.140262][ C1] RAX: 0000000001699baf RBX: 0000000000000001 RCX: ffffffff8b801c19 [ 571.140271][ C1] RDX: 0000000000000000 RSI: ffffffff8de1a168 RDI: ffffffff8c157aa0 [ 571.140279][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 571.140288][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 571.140296][ C1] R13: ffff88801e2b2440 R14: ffffffff90a81150 R15: 0000000000000000 [ 571.140304][ C1] FS: 0000000000000000(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 571.140318][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.140327][ C1] CR2: 00007fb9eaf14caa CR3: 000000000e382000 CR4: 00000000003526f0 [ 571.140335][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 571.140343][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 571.140351][ C1] Call Trace: [ 571.140356][ C1] [ 571.140360][ C1] default_idle+0x13/0x20 [ 571.140372][ C1] default_idle_call+0x6d/0xb0 [ 571.140384][ C1] do_idle+0x391/0x510 [ 571.140402][ C1] ? __pfx_do_idle+0x10/0x10 [ 571.140417][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 571.140436][ C1] cpu_startup_entry+0x4f/0x60 [ 571.140451][ C1] start_secondary+0x21d/0x2b0 [ 571.140468][ C1] ? __pfx_start_secondary+0x10/0x10 [ 571.140486][ C1] common_startup_64+0x13e/0x148 [ 571.140504][ C1] [ 571.141194][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 571.335763][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 571.347555][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.357609][ T31] Call Trace: [ 571.360887][ T31] [ 571.363824][ T31] dump_stack_lvl+0x3d/0x1f0 [ 571.368428][ T31] panic+0x71c/0x800 [ 571.372318][ T31] ? __pfx_panic+0x10/0x10 [ 571.376724][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 571.382088][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 571.388054][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 571.393414][ T31] ? watchdog+0xdda/0x12c0 [ 571.397814][ T31] ? watchdog+0xdcd/0x12c0 [ 571.402218][ T31] watchdog+0xdeb/0x12c0 [ 571.406447][ T31] ? __pfx_watchdog+0x10/0x10 [ 571.411124][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 571.416311][ T31] ? __kthread_parkme+0x19e/0x250 [ 571.421323][ T31] ? __pfx_watchdog+0x10/0x10 [ 571.426001][ T31] kthread+0x3c2/0x780 [ 571.430064][ T31] ? __pfx_kthread+0x10/0x10 [ 571.434663][ T31] ? rcu_is_watching+0x12/0xc0 [ 571.439434][ T31] ? __pfx_kthread+0x10/0x10 [ 571.444013][ T31] ret_from_fork+0x5d4/0x6f0 [ 571.448603][ T31] ? __pfx_kthread+0x10/0x10 [ 571.453178][ T31] ret_from_fork_asm+0x1a/0x30 [ 571.457945][ T31] [ 571.461145][ T31] Kernel Offset: disabled [ 571.465447][ T31] Rebooting in 86400 seconds..