last executing test programs: 18.367851663s ago: executing program 0 (id=1125): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000840)='cubic\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x4, 0x5, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100007, 0xfffffffffffffffc, 0xffffffffffffff4e, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffff7, 0x0, 0x200000000000000, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc5a, 0x2, 0x1, 0x0, 0x85, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0, 0x1, 0x6, 0x0, 0x4000000000000000, 0x20000000000, 0x5e, 0x1, 0x100000000000000, 0x0, 0x4, 0x1000000000, 0x3, 0x200000000000, 0x3, 0x200, 0xfffffffffffffffe, 0x0, 0x4000000000000001, 0x3, 0xfffffffffffffffc, 0x4, 0x800, 0x6, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x10001, 0xebf, 0x6, 0x0, 0x751, 0x0, 0x0, 0x6b, 0x7, 0xfffffffffffffffd, 0x101, 0xb, 0x0, 0x0, 0x800, 0x0, 0x10008001, 0x3, 0x8, 0x80000000000000, 0x0, 0x0, 0xf31, 0x11, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4000b, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x1, 0x1553, 0x6, 0x0, 0x3]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x75ca, &(0x7f0000000400)={0x0, 0x9e61, 0x2, 0x2, 0x392, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@hci={0x1f, 0x6, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_io_uring_setup(0x560c, &(0x7f00000000c0)={0x0, 0x211a, 0x96c8380a3a8e1007, 0x1, 0x304}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8200) 15.596309711s ago: executing program 2 (id=1127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) keyctl$read(0x1f, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000001d00)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r4 = socket(0x1a, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x807, @empty, 'veth0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 14.168061269s ago: executing program 1 (id=1131): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000200)=0x1, 0x4) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000001380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x22d41, 0x3a) flock(r2, 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(r0, &(0x7f0000000000)=@llc, &(0x7f0000000080)=0x80, 0x800) 14.149335595s ago: executing program 0 (id=1132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4, 0x100}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 12.401676852s ago: executing program 4 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, 0xffffffffffffffff, 0x0, 0x5d2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x2c, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0x5, 0x0, &(0x7f00000026c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0xfffe, 0x8000000, @loopback}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='sched_switch\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x4c, 0x0, r3, 0x80, &(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x0, 0x0, 0x1}) socket$kcm(0xa, 0x3, 0x87) 12.17070202s ago: executing program 3 (id=1134): creat(0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x80000021, 0x800000000004}, 0x0) listen(0xffffffffffffffff, 0x1ad72f7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x26) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @rand_addr=0x64010102, {[@cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}]}}}}}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 11.454583247s ago: executing program 2 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x18) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB]) pipe(&(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310329bd7000ffffffff0900000008000300", @ANYRES32=r7, @ANYBLOB="080006000209"], 0x24}}, 0x4000) fcntl$setstatus(r0, 0x4, 0x42800) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, &(0x7f0000000140)={0x2, 0x3, 0x9, 0x2770, 0x2d2d, 0x4, 0xffff, 0x67b6}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x10]}, 0x8}) 11.374287654s ago: executing program 1 (id=1136): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44], 0x30}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x604400, 0x20, 0x32}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.994696204s ago: executing program 1 (id=1137): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.842770964s ago: executing program 0 (id=1138): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) 9.346326841s ago: executing program 4 (id=1139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) 9.345462134s ago: executing program 3 (id=1149): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 8.362112691s ago: executing program 3 (id=1140): pipe2(0x0, 0x800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, '5'}}, 0x4) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) epoll_create1(0x80000) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 8.341101678s ago: executing program 2 (id=1141): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6000000, 0x0, 0x0) 6.526943055s ago: executing program 4 (id=1142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) 6.302049994s ago: executing program 0 (id=1143): recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}], 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close_range(r2, r6, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 5.736453106s ago: executing program 2 (id=1144): ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x7fffc}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) 5.73060799s ago: executing program 1 (id=1145): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xc8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x200080c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r4, @ANYBLOB="00005cbd7000fcdbdf25880099210c00991669528b003a0000007d8cb2085b14c50bb0653febeb6a111a3069de56e61538516279b87c505b0da4340ea6c98c3d70037ccb21696c72564d7c87"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x4881) epoll_create(0x1) unshare(0x20000400) 5.573699526s ago: executing program 4 (id=1146): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0xf, 0x0, 0x8000000000000001, 0x48f, 0x5, 0xb, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x8, 0x3, 0x8001000000081, 0x5, 0x2, 0x3, 0x2, 0x9220000000000000, 0x3, 0x1, 0x80000001, 0x0, 0x7, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f00002c6000/0x1000)=nil, 0x1000, 0x1000002, 0x13, 0xffffffffffffffff, 0x20000) socket$netlink(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000799000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x40000) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) close_range(r0, 0xffffffffffffffff, 0x0) 5.457523588s ago: executing program 3 (id=1147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x14305, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f00000000c0)=0x80000000, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x128, 0x0, 0x2, 0x5, 0x0, 0x0, {0x8, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASTER={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20048010}, 0x24000000) set_robust_list(0x0, 0x0) close(r2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x2, 0x0, 0x0, 0xfff, 0xfffffffffffffffc}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@rand_addr=0x64010102}}, @algo_crypt={0x48, 0x2, {{'cbc-serpent-avx2\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.109336688s ago: executing program 3 (id=1148): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)='d', 0x1}], 0x1}}], 0x1, 0x2004c0d0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff785", 0xde}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) 3.595018645s ago: executing program 0 (id=1150): r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4040810) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.060013076s ago: executing program 2 (id=1151): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f00000003c0)="8c", 0x1}, {&(0x7f0000001080)="f67b7f1913e6967a98ecaf5be467c8b030ca9595aaa09c5a568727a0fbdf7ac1d00c78f66451a1ef58ff30f9ba22ca4806ea3a3a8de1c31d1fe6e11358b1246d0a0a9ab3ca18afc7dfc2f2e94cfec33045940020ed9e9aba429ab858ae4fca51c44dc874e8b47852346e7b9d6d2a0bb8", 0x70}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.978411697s ago: executing program 0 (id=1152): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff87}, 0x4000041) faccessat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x6, &(0x7f0000000000)="fa794bfa", 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e22, @broadcast}}) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) migrate_pages(0x0, 0x3, 0x0, 0x0) 2.482963189s ago: executing program 4 (id=1153): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) socket$kcm(0x10, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x801) 2.395421507s ago: executing program 3 (id=1154): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0xb0}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) socket(0x10, 0x3, 0x0) 1.242801853s ago: executing program 1 (id=1155): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80064d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, 0x0, 0x0) 169.100724ms ago: executing program 1 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x1, 0x97) r5 = openat(r4, &(0x7f0000002040)='./file0\x00', 0x800, 0x68) getdents64(r5, &(0x7f00000004c0)=""/55, 0x37) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) close_range(r0, r0, 0x2) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f7000000000000"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 48.861344ms ago: executing program 4 (id=1157): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'rti800\x00', [0x4f27, 0x5, 0x3, 0x37, 0x400, 0xcc7, 0xfff, 0x0, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x4, 0xe1cc, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfff7fdfd, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0xffffffff, 0x105, 0x8000000, 0xfffffff8]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6", 0x1f) r4 = accept4(r3, 0x0, 0x0, 0x80000) recvmsg$can_raw(r4, 0x0, 0x40010022) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="3f000000010040", 0x7) 0s ago: executing program 2 (id=1158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) utimes(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x3, @void}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10000000000, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x8) kernel console output (not intermixed with test programs): _io_error: 25 callbacks suppressed [ 292.865536][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 292.908463][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.917650][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 292.950633][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.959766][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 292.968663][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.977821][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 293.009967][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.019131][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 293.037434][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.046575][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 293.108289][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.117504][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 293.140909][ T8801] ldm_validate_partition_table(): Disk read failed. [ 293.166310][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.175527][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 293.184040][ T30] audit: type=1400 audit(1756966113.249:400): avc: denied { getopt } for pid=8789 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 293.210448][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.219604][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 293.229835][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 293.239073][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 293.301251][ T8801] Dev loop7: unable to read RDB block 0 [ 293.315887][ T8801] loop7: unable to read partition table [ 293.322887][ T8801] loop7: partition table beyond EOD, truncated [ 293.331559][ T8801] loop_reread_partitions: partition scan of loop7 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 293.403216][ T8790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.425060][ T8793] bond4: (slave geneve2): making interface the new active one [ 293.433375][ T8793] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 293.471048][ T71] net_ratelimit: 22 callbacks suppressed [ 293.471059][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.502262][ T8804] ldm_validate_partition_table(): Disk read failed. [ 293.503377][ T8817] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 293.522588][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 293.539484][ T8800] bridge0: entered allmulticast mode [ 293.542343][ T8804] Dev loop7: unable to read RDB block 0 [ 293.566892][ T8804] loop7: unable to read partition table [ 293.570349][ T8803] bridge_slave_1: left allmulticast mode [ 293.584190][ T8804] loop7: partition table beyond EOD, truncated [ 293.584246][ T8803] bridge_slave_1: left promiscuous mode [ 293.603210][ T5222] ldm_validate_partition_table(): Disk read failed. [ 293.612264][ T5222] Dev loop7: unable to read RDB block 0 [ 293.711505][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.808438][ T5222] loop7: unable to read partition table [ 293.819018][ T5222] loop7: partition table beyond EOD, truncated [ 293.819764][ T8803] bridge_slave_0: left allmulticast mode [ 293.851093][ T8803] bridge_slave_0: left promiscuous mode [ 293.863530][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.016045][ T8806] vlan2: entered allmulticast mode [ 294.022279][ T8806] bond4: entered allmulticast mode [ 294.027418][ T8806] geneve2: entered allmulticast mode [ 294.056621][ T8806] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 294.145617][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.161697][ T6195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.245674][ T8817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.724428][ T8818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.765007][ T8818] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 296.777792][ T8818] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 296.814072][ T8820] macvlan2: entered promiscuous mode [ 296.824573][ T8820] macvlan2: entered allmulticast mode [ 296.839166][ T8820] bond2: entered promiscuous mode [ 296.863342][ T8820] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 297.403632][ T8820] bond2: left promiscuous mode [ 297.419743][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 297.467643][ T6195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.508005][ T6195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.694207][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.716684][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 298.097004][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.297173][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 298.973874][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 299.075384][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 299.324747][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 299.550947][ T30] audit: type=1400 audit(1756966119.409:401): avc: denied { ioctl } for pid=8858 comm="syz.2.567" path="/108/file0" dev="tmpfs" ino=575 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 299.703808][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 299.722407][ T30] audit: type=1400 audit(1756966119.769:402): avc: denied { bind } for pid=8861 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.820252][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 300.055023][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 300.206941][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 300.400148][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 300.523251][ T8872] tipc: Enabled bearer , priority 0 [ 300.541746][ T8872] syzkaller0: entered promiscuous mode [ 300.547199][ T8872] syzkaller0: entered allmulticast mode [ 300.651976][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 300.760273][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 301.325530][ T8877] tipc: Resetting bearer [ 301.429261][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 301.511365][ T8870] tipc: Resetting bearer [ 301.539924][ T8870] tipc: Disabling bearer [ 301.605978][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 301.784188][ T8882] Illegal XDP return value 65535 on prog (id 72) dev N/A, expect packet loss! [ 302.407833][ T30] audit: type=1400 audit(1756966122.439:403): avc: denied { setopt } for pid=8890 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 302.615726][ T8899] loop2: detected capacity change from 0 to 7 [ 302.626918][ T8899] loop2: p1 p4 [ 302.640237][ T8899] loop2: partition table partially beyond EOD, truncated [ 302.707917][ T8899] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 302.769066][ T8899] loop2: p4 start 2495 is beyond EOD, truncated [ 304.122439][ T3535] net_ratelimit: 22 callbacks suppressed [ 304.122452][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.193225][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.391170][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.398545][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.712848][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.786431][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 304.971693][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 305.009639][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 305.012445][ T6207] Bluetooth: hci5: Frame reassembly failed (-84) [ 305.030485][ T8919] ALSA: seq fatal error: cannot create timer (-19) [ 305.078561][ T8923] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 305.237907][ T30] audit: type=1400 audit(1756966125.289:404): avc: denied { read } for pid=8924 comm="syz.2.583" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 305.272561][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 305.279962][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 305.299846][ T30] audit: type=1400 audit(1756966125.329:405): avc: denied { open } for pid=8924 comm="syz.2.583" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 305.333343][ T8927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.583'. [ 305.343901][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.583'. [ 305.358123][ T8927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.583'. [ 305.367733][ T8927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.583'. [ 305.379924][ T30] audit: type=1400 audit(1756966125.329:406): avc: denied { ioctl } for pid=8924 comm="syz.2.583" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 305.423156][ T8928] pim6reg1: entered promiscuous mode [ 305.428667][ T8928] pim6reg1: entered allmulticast mode [ 306.779054][ T30] audit: type=1400 audit(1756966125.979:407): avc: denied { kexec_image_load } for pid=8931 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 307.553183][ T8936] kexec: Could not allocate control_code_buffer [ 307.560685][ T5173] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 309.400476][ T6195] net_ratelimit: 16 callbacks suppressed [ 309.613546][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.633593][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 309.754443][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.768781][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 309.937369][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.950833][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 310.409146][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 310.419880][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 310.421356][ T30] audit: type=1400 audit(1756966130.239:408): avc: denied { wake_alarm } for pid=8949 comm="syz.3.590" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.656668][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 310.730669][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 313.833707][ T8988] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 314.372834][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.383827][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.480876][ T71] net_ratelimit: 30 callbacks suppressed [ 314.480893][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.542097][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 314.678194][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.767413][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.347224][ T30] audit: type=1400 audit(1756966136.029:409): avc: denied { map } for pid=8998 comm="syz.3.601" path="socket:[16906]" dev="sockfs" ino=16906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.490567][ T30] audit: type=1400 audit(1756966136.029:410): avc: denied { accept } for pid=8998 comm="syz.3.601" path="socket:[16906]" dev="sockfs" ino=16906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.810738][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.817446][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.106678][ T8984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.140793][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 317.154466][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.270755][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 317.299228][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.423562][ T30] audit: type=1400 audit(1756966137.479:411): avc: denied { bind } for pid=9008 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 317.472789][ T30] audit: type=1400 audit(1756966137.479:412): avc: denied { name_bind } for pid=9008 comm="syz.0.603" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 317.501323][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 317.535425][ T30] audit: type=1400 audit(1756966137.479:413): avc: denied { node_bind } for pid=9008 comm="syz.0.603" saddr=172.30.64.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 319.666372][ T6207] net_ratelimit: 23 callbacks suppressed [ 319.666392][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.720143][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 319.858980][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.866440][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 320.621787][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 320.838578][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.032109][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 321.039481][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.045382][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 322.053220][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.257629][ T9] Process accounting resumed [ 322.476866][ T9042] serio: Serial port ptm0 [ 323.211011][ T30] audit: type=1400 audit(1756966143.189:414): avc: denied { mounton } for pid=9050 comm="syz.0.615" path="/124/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 324.233400][ T9066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.248563][ T9066] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.564701][ T9071] block nbd3: Attempted send on invalid socket [ 324.571659][ T9071] blk_print_req_error: 40 callbacks suppressed [ 324.571692][ T9071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 324.733890][ T71] net_ratelimit: 22 callbacks suppressed [ 324.733931][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 324.894934][ T30] audit: type=1400 audit(1756966144.609:415): avc: denied { mounton } for pid=9068 comm="syz.3.618" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 324.931174][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.334880][ T9074] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 325.344232][ T9074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.620'. [ 325.355060][ T9074] dummy0: entered promiscuous mode [ 325.374478][ T9074] bridge0: port 1(dummy0) entered blocking state [ 325.383160][ T9074] bridge0: port 1(dummy0) entered disabled state [ 325.393258][ T9074] dummy0: entered allmulticast mode [ 325.430016][ T9074] bridge0: port 1(dummy0) entered blocking state [ 325.436564][ T9074] bridge0: port 1(dummy0) entered forwarding state [ 325.553812][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.591984][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.750772][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.758769][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.891777][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 325.933844][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 326.072664][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 326.091686][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 326.446252][ T9085] cgroup: fork rejected by pids controller in /syz4 [ 326.959511][ T30] audit: type=1400 audit(1756966146.999:416): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 327.450222][ T30] audit: type=1400 audit(1756966147.489:417): avc: denied { setopt } for pid=9307 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.690292][ T9469] 9pnet_fd: Insufficient options for proto=fd [ 327.771350][ T9469] block nbd3: shutting down sockets [ 328.772764][ T30] audit: type=1400 audit(1756966148.829:418): avc: denied { create } for pid=9481 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 329.253828][ T30] audit: type=1400 audit(1756966148.829:419): avc: denied { ioctl } for pid=9481 comm="syz.1.628" path="socket:[16097]" dev="sockfs" ino=16097 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 329.514635][ T30] audit: type=1400 audit(1756966148.929:420): avc: denied { ioctl } for pid=9487 comm="syz.0.629" path="socket:[16099]" dev="sockfs" ino=16099 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.798800][ T71] net_ratelimit: 42 callbacks suppressed [ 329.798817][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 329.835617][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.316790][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.378762][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.559933][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.685109][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.841094][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.889053][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 331.263142][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 331.277461][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 331.304431][ T9509] netlink: 'syz.4.633': attribute type 1 has an invalid length. [ 331.363513][ T9509] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.496748][ T9513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.538535][ T9513] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 331.553643][ T9513] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 331.714981][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.633'. [ 332.218276][ T9518] pimreg: entered allmulticast mode [ 332.228909][ T9519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 332.253515][ T9522] pimreg: left allmulticast mode [ 332.907909][ T9532] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 334.882800][ T3535] net_ratelimit: 22 callbacks suppressed [ 334.882813][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 334.918911][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.042855][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 335.152321][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.351576][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 335.386880][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.552697][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 335.775078][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.910238][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 335.918683][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.294138][ T30] audit: type=1400 audit(1756966157.039:421): avc: denied { mount } for pid=9566 comm="syz.3.646" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 337.562683][ T30] audit: type=1400 audit(1756966157.049:422): avc: denied { mounton } for pid=9566 comm="syz.3.646" path="/130/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 337.647798][ T30] audit: type=1400 audit(1756966157.689:423): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 337.788352][ T30] audit: type=1400 audit(1756966157.839:424): avc: denied { connect } for pid=9577 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.873644][ T9580] input: syz1 as /devices/virtual/input/input7 [ 337.882323][ T9580] input: failed to attach handler leds to device input7, error: -6 [ 339.060463][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 339.223585][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 339.250598][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 339.340488][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.390294][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 339.484464][ T5896] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 339.493956][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.537318][ T5896] usb 5-1: Product: syz [ 339.560466][ T5896] usb 5-1: Manufacturer: syz [ 339.565057][ T5896] usb 5-1: SerialNumber: syz [ 339.726600][ T5896] usb 5-1: config 0 descriptor?? [ 340.252015][ T5896] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 340.262031][ T6170] net_ratelimit: 48 callbacks suppressed [ 340.262045][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.452466][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.964367][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.974694][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.988056][ T5896] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 340.988070][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.029868][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.154248][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.280309][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 341.462500][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.469874][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 341.543670][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.570469][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.601862][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.640419][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 341.669556][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.686763][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.121444][ T9] usb 5-1: USB disconnect, device number 4 [ 342.132785][ T9] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 342.172820][ T9] ti_usb_3410_5052 5-1:0.0: device disconnected [ 343.940592][ T9636] mmap: syz.4.659 (9636) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 345.356016][ T6225] net_ratelimit: 38 callbacks suppressed [ 345.356031][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.378971][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.490178][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.519570][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.675927][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.790605][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.922224][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.938938][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.072319][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 346.082541][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.642096][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 348.035351][ T5960] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 348.046876][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 348.180664][ T5960] usb 1-1: device descriptor read/64, error -32 [ 348.454692][ T5960] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 349.125949][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 350.443907][ T3535] net_ratelimit: 44 callbacks suppressed [ 350.443920][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 350.466028][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.173830][ T3535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.181835][ T3535] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.239281][ T5960] usb 1-1: device descriptor read/all, error -71 [ 351.247722][ T5960] usb usb1-port1: attempt power cycle [ 351.295610][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.313999][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.474033][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.493905][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.640670][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.877881][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 353.104983][ T30] audit: type=1400 audit(1756966173.139:425): avc: denied { bind } for pid=9729 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 353.196449][ T30] audit: type=1400 audit(1756966173.159:426): avc: denied { setopt } for pid=9729 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 353.588887][ T9732] macvtap0: entered allmulticast mode [ 353.599610][ T9732] veth0_macvtap: entered allmulticast mode [ 353.642040][ T30] audit: type=1400 audit(1756966173.669:427): avc: denied { read } for pid=9731 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 355.462055][ T6170] net_ratelimit: 39 callbacks suppressed [ 355.462072][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 355.462088][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.579554][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 355.598144][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.721625][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 355.733429][ T9763] gtp0: entered promiscuous mode [ 355.738473][ T9763] gtp0: entered allmulticast mode [ 355.743851][ T30] audit: type=1400 audit(1756966175.769:428): avc: denied { write } for pid=9762 comm="syz.2.687" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 355.771191][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 355.840906][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.945140][ T30] audit: type=1400 audit(1756966175.999:429): avc: denied { bind } for pid=9762 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.969367][ T30] audit: type=1400 audit(1756966176.019:430): avc: denied { write } for pid=9762 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.991871][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 355.991895][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 356.057568][ T9749] netlink: 'syz.1.683': attribute type 11 has an invalid length. [ 356.251113][ T6212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 356.251132][ T6212] bond1: (slave macvlan2): failed to get link speed/duplex [ 356.507844][ T30] audit: type=1326 audit(1756966176.559:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbacf8ebe9 code=0x7ffc0000 [ 357.440677][ T30] audit: type=1326 audit(1756966176.559:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbacf8ebe9 code=0x7ffc0000 [ 357.479223][ T30] audit: type=1326 audit(1756966176.559:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbacf8ebe9 code=0x7ffc0000 [ 357.503462][ T30] audit: type=1326 audit(1756966176.559:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbacf8ebe9 code=0x7ffc0000 [ 359.195506][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 359.195524][ T30] audit: type=1400 audit(1756966179.089:454): avc: denied { ioctl } for pid=9785 comm="syz.2.701" path="socket:[17765]" dev="sockfs" ino=17765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.328284][ T9791] netlink: 'syz.3.691': attribute type 10 has an invalid length. [ 359.337719][ T9791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.691'. [ 359.347002][ T30] audit: type=1400 audit(1756966179.099:455): avc: denied { bind } for pid=9785 comm="syz.2.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.372428][ T9791] dummy0: entered promiscuous mode [ 359.391547][ T9791] bridge0: port 3(dummy0) entered blocking state [ 359.407468][ T9791] bridge0: port 3(dummy0) entered disabled state [ 359.418185][ T9791] dummy0: entered allmulticast mode [ 359.467475][ T9791] bridge0: port 3(dummy0) entered blocking state [ 359.474171][ T9791] bridge0: port 3(dummy0) entered forwarding state [ 360.502307][ T6225] net_ratelimit: 46 callbacks suppressed [ 360.502322][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 360.534686][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 360.558542][ T30] audit: type=1400 audit(1756966180.609:456): avc: denied { read } for pid=9795 comm="syz.3.693" dev="sockfs" ino=18537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 360.679395][ T30] audit: type=1400 audit(1756966180.729:457): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 360.730971][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 360.745575][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 360.861979][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 360.875857][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 361.000623][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 361.063669][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 361.660088][ T30] audit: type=1400 audit(1756966181.369:458): avc: denied { getopt } for pid=9804 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 361.838641][ T9816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.698'. [ 361.861905][ T9816] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 362.081045][ T6212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.088592][ T30] audit: type=1400 audit(1756966182.079:459): avc: denied { read } for pid=9812 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 362.120665][ T6212] bond1: (slave macvlan2): failed to get link speed/duplex [ 362.166945][ T30] audit: type=1326 audit(1756966182.089:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 362.207365][ T30] audit: type=1326 audit(1756966182.089:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 362.258443][ T30] audit: type=1326 audit(1756966182.089:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 362.284769][ T30] audit: type=1326 audit(1756966182.089:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 363.504486][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 363.715323][ T5896] usb 5-1: config 0 has no interfaces? [ 363.766440][ T5896] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.866168][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.122212][ T5896] usb 5-1: config 0 descriptor?? [ 364.213996][ T9852] netlink: 'syz.0.705': attribute type 10 has an invalid length. [ 364.223373][ T9852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.705'. [ 364.233852][ T9852] dummy0: entered promiscuous mode [ 364.241719][ T9852] batman_adv: batadv0: Interface deactivated: dummy0 [ 364.248456][ T9852] batman_adv: batadv0: Removing interface: dummy0 [ 364.607233][ T9852] bridge0: port 3(dummy0) entered blocking state [ 364.614814][ T9852] bridge0: port 3(dummy0) entered disabled state [ 364.623628][ T9852] dummy0: entered allmulticast mode [ 364.632996][ T9852] bridge0: port 3(dummy0) entered blocking state [ 364.639412][ T9852] bridge0: port 3(dummy0) entered forwarding state [ 364.930439][ T9854] kthread_run failed with err -4 [ 365.871805][ T6200] net_ratelimit: 38 callbacks suppressed [ 365.871818][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 365.990441][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 366.224030][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.255088][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 366.430477][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.450458][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 366.561548][ T6197] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.602473][ T6197] bond1: (slave macvlan2): failed to get link speed/duplex [ 366.750493][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.787727][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 366.897403][ T5896] usb 5-1: USB disconnect, device number 5 [ 367.903257][ T9892] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.715'. [ 368.523812][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 368.523846][ T30] audit: type=1400 audit(1756966188.569:497): avc: denied { audit_read } for pid=9900 comm="syz.1.718" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.445507][ T9910] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 369.454872][ T9910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.719'. [ 369.465778][ T9910] dummy0: entered promiscuous mode [ 370.170739][ T5896] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 370.330782][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.440740][ T5896] usb 2-1: config 0 has no interfaces? [ 370.453137][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.515101][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.539302][ T5896] usb 2-1: config 0 descriptor?? [ 370.907728][ T6197] net_ratelimit: 47 callbacks suppressed [ 370.907744][ T6197] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 370.952829][ T6197] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.070694][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.078104][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.513784][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.530820][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.781976][ T6212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.794016][ T6212] bond1: (slave macvlan2): failed to get link speed/duplex [ 371.910576][ T6197] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 371.918044][ T6197] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.078371][ T30] audit: type=1400 audit(1756966194.079:498): avc: denied { bind } for pid=9954 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.108679][ T30] audit: type=1400 audit(1756966194.079:499): avc: denied { node_bind } for pid=9954 comm="syz.4.732" saddr=172.20.20.13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 374.281002][ T30] audit: type=1400 audit(1756966194.329:500): avc: denied { relabelfrom } for pid=9951 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.301293][ T30] audit: type=1400 audit(1756966194.329:501): avc: denied { relabelto } for pid=9951 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.534215][ T5925] usb 2-1: USB disconnect, device number 10 [ 376.480981][ T6197] net_ratelimit: 40 callbacks suppressed [ 376.480999][ T6197] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.323823][ T6197] bond1: (slave macvlan2): failed to get link speed/duplex [ 377.450319][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.470271][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 377.621123][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.642906][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 378.254189][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.380866][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.387808][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.424060][ T5851] Bluetooth: hci0: unexpected event for opcode 0x041c [ 378.556994][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 378.674910][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.729473][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.309660][T10023] trusted_key: syz.1.746 sent an empty control message without MSG_MORE. [ 380.868077][ T5960] IPVS: starting estimator thread 0... [ 381.081711][T10025] IPVS: using max 76 ests per chain, 182400 per kthread [ 381.772738][ T6200] net_ratelimit: 22 callbacks suppressed [ 381.772756][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.820670][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 381.930733][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.037244][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 382.728508][ T30] audit: type=1400 audit(1756966202.779:502): avc: denied { write } for pid=10034 comm="syz.3.750" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 382.816961][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.250839][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 383.362647][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.370378][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.392459][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 384.404997][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 386.968919][ T6195] net_ratelimit: 14 callbacks suppressed [ 386.968938][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.026968][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 387.635344][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.660738][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 387.781213][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.813569][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 388.071699][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.079249][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 388.252499][T10081] block nbd0: Attempted send on invalid socket [ 388.258803][T10081] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 388.312396][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.319769][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 388.971989][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 388.983215][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 392.111337][ T6207] net_ratelimit: 54 callbacks suppressed [ 392.111351][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.596857][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 392.884028][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.394735][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 393.605053][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.640090][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 393.770119][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.777528][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 394.363313][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 394.373787][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 394.443054][ T30] audit: type=1326 audit(1756966214.499:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 394.468720][ T30] audit: type=1326 audit(1756966214.499:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 394.493360][ T30] audit: type=1326 audit(1756966214.499:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 394.639238][ T30] audit: type=1326 audit(1756966214.499:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 394.885060][T10124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.892609][T10124] IPv6: NLM_F_CREATE should be set when creating new route [ 395.004302][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 395.480624][ T30] audit: type=1326 audit(1756966214.499:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 395.528420][ T30] audit: type=1326 audit(1756966214.689:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 396.586571][ T30] audit: type=1326 audit(1756966214.689:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 396.692011][ T30] audit: type=1326 audit(1756966214.689:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 396.752909][T10148] pimreg: entered allmulticast mode [ 396.846083][T10148] pimreg: left allmulticast mode [ 397.043935][ T30] audit: type=1326 audit(1756966214.689:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 397.541172][ T6197] net_ratelimit: 24 callbacks suppressed [ 397.541189][ T6197] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.554332][ T30] audit: type=1326 audit(1756966214.689:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10129 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec118ebe9 code=0x7ffc0000 [ 397.855713][ T6197] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.089530][T10166] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 398.132066][T10166] bridge1: entered allmulticast mode [ 398.154627][T10176] pim6reg: entered allmulticast mode [ 398.185026][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.240133][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.438972][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.460549][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.589309][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.597486][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.788678][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.791786][T10185] 9pnet_fd: Insufficient options for proto=fd [ 399.160689][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 399.714190][T10196] nfs: Deprecated parameter 'nointr' [ 401.528904][T10219] ALSA: mixer_oss: invalid OSS volume 'u' [ 402.650837][ T6225] net_ratelimit: 34 callbacks suppressed [ 402.650854][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.681459][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 403.310728][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.319344][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 403.542353][ T6225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.577880][ T6225] bond1: (slave macvlan2): failed to get link speed/duplex [ 404.042709][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.149448][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.281632][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.289050][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 406.070927][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 406.810329][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 406.810347][ T30] audit: type=1400 audit(1756966482.509:518): avc: denied { open } for pid=10253 comm="syz.3.799" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 407.773657][T10269] pimreg: entered allmulticast mode [ 407.779763][T10270] pimreg: left allmulticast mode [ 407.903230][ T6197] net_ratelimit: 18 callbacks suppressed [ 407.903310][ T6197] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.928693][ T30] audit: type=1400 audit(1756966483.979:519): avc: denied { setopt } for pid=10271 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.005467][ T6197] bond1: (slave macvlan2): failed to get link speed/duplex [ 408.171467][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.192201][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 408.523060][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.533701][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 408.731186][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.738592][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 409.284732][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 409.299511][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 409.533920][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 409.691360][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 409.702171][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 409.710776][ T9] usb 5-1: config 0 has no interface number 0 [ 409.728975][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 409.740641][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.750618][ T9] usb 5-1: Product: syz [ 409.759419][ T9] usb 5-1: Manufacturer: syz [ 409.853886][ T9] usb 5-1: SerialNumber: syz [ 409.915717][ T9] usb 5-1: config 0 descriptor?? [ 409.935397][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 410.045745][T10298] loop4: detected capacity change from 0 to 2560 [ 410.060480][ T30] audit: type=1400 audit(1756966486.099:520): avc: denied { append } for pid=10283 comm="syz.2.815" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.069772][T10298] buffer_io_error: 40 callbacks suppressed [ 410.069788][T10298] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 410.103812][ T5839] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 410.113710][ T5839] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 410.123369][ T5839] Buffer I/O error on dev loop4, logical block 258, lost async page write [ 410.133386][T10298] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 410.145534][ T5839] Buffer I/O error on dev loop4, logical block 259, lost async page write [ 410.169675][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 410.181907][T10298] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 410.182586][T10297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 410.191010][ T5839] Buffer I/O error on dev loop4, logical block 260, lost async page write [ 410.247196][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 410.282582][T10297] block device autoloading is deprecated and will be removed. [ 410.291517][ T5839] Buffer I/O error on dev loop4, logical block 261, lost async page write [ 410.324747][ T5839] Buffer I/O error on dev loop4, logical block 262, lost async page write [ 410.971655][T10307] syz!: rxe_newlink: already configured on team_slave_0 [ 412.905409][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 412.905709][ T24] usb 5-1: USB disconnect, device number 6 [ 412.930892][ T6170] net_ratelimit: 44 callbacks suppressed [ 412.930906][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.056481][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 413.071034][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 413.091379][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 413.104011][ T24] quatech2 5-1:0.51: device disconnected [ 413.190941][ T6170] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.334528][ T6170] bond1: (slave macvlan2): failed to get link speed/duplex [ 413.430150][ T30] audit: type=1400 audit(1756966489.449:521): avc: denied { read } for pid=10321 comm="syz.1.811" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 413.599513][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 414.320323][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 414.431772][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 414.446078][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 414.596376][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 414.640889][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 414.940415][T10337] No source specified [ 415.601103][T10346] netlink: 'syz.3.816': attribute type 4 has an invalid length. [ 415.608804][T10346] netlink: 17 bytes leftover after parsing attributes in process `syz.3.816'. [ 416.348610][T10352] IPv6: Can't replace route, no match found [ 416.988060][T10363] overlayfs: failed to resolve './file0': -2 [ 417.360473][ T30] audit: type=1400 audit(1756966493.399:522): avc: denied { listen } for pid=10341 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.483791][ T30] audit: type=1400 audit(1756966493.399:523): avc: denied { accept } for pid=10341 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.555620][ T30] audit: type=1400 audit(1756966493.529:524): avc: denied { nlmsg_write } for pid=10341 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 417.716650][ T30] audit: type=1400 audit(1756966493.529:525): avc: denied { read } for pid=10364 comm="syz.1.821" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 417.773361][ T30] audit: type=1400 audit(1756966493.529:526): avc: denied { open } for pid=10364 comm="syz.1.821" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 418.059551][ T6197] net_ratelimit: 24 callbacks suppressed [ 418.059568][ T6197] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 418.137485][ T6197] bond1: (slave macvlan2): failed to get link speed/duplex [ 418.158761][T10373] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.821'. [ 418.361973][T10373] debugfs: '`] Iq!>s*!)\' already exists in 'ieee80211' [ 418.571485][ T6195] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 418.590545][ T6195] bond1: (slave macvlan2): failed to get link speed/duplex [ 419.112779][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.498830][T10367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.514814][T10367] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 419.531300][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 419.579282][T10367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 419.591012][ T5173] Bluetooth: hci1: command 0x0406 tx timeout [ 419.597320][T10367] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 419.652087][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.757096][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.208647][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.262878][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.539134][T10397] syz.4.828 uses obsolete (PF_INET,SOCK_PACKET) [ 421.590151][ T5173] Bluetooth: hci0: command 0x0406 tx timeout [ 421.670255][ T5173] Bluetooth: hci1: command 0x0406 tx timeout [ 421.735736][T10367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 421.749276][T10367] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 421.853851][T10367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 421.881119][T10367] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 422.370358][T10410] netlink: 260 bytes leftover after parsing attributes in process `syz.4.828'. [ 422.379366][T10410] netlink: 260 bytes leftover after parsing attributes in process `syz.4.828'. [ 423.078175][ T6200] net_ratelimit: 16 callbacks suppressed [ 423.078192][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.309149][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.591373][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.670819][ T5173] Bluetooth: hci0: command 0x0406 tx timeout [ 423.760205][ T5173] Bluetooth: hci2: command 0x0406 tx timeout [ 423.802757][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.910224][ T5173] Bluetooth: hci4: command 0x0406 tx timeout [ 423.923063][ T6212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 424.017034][ T6212] bond1: (slave macvlan2): failed to get link speed/duplex [ 424.289908][ T6212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.090640][ T6212] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.222592][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.366513][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.736749][ T30] audit: type=1400 audit(1756966501.659:527): avc: denied { map } for pid=10438 comm="syz.0.836" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 425.978569][ T5173] Bluetooth: hci2: command 0x0406 tx timeout [ 425.990256][ T5173] Bluetooth: hci4: command 0x0406 tx timeout [ 426.000549][ T30] audit: type=1400 audit(1756966501.659:528): avc: denied { execute } for pid=10438 comm="syz.0.836" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 426.025387][ T30] audit: type=1400 audit(1756966501.669:529): avc: denied { ioctl } for pid=10438 comm="syz.0.836" path="/dev/usbmon8" dev="devtmpfs" ino=740 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 426.734894][T10449] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.838'. [ 426.772939][T10449] debugfs: '`] Iq!>s*!)\' already exists in 'ieee80211' [ 427.464977][T10459] : entered promiscuous mode [ 428.487181][ T6200] net_ratelimit: 16 callbacks suppressed [ 428.487201][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 428.596211][T10454] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 428.604393][T10454] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.612693][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 428.615518][T10454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 428.791712][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 428.791994][ T5173] Bluetooth: hci1: command 0x0406 tx timeout [ 428.913848][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 429.224935][ T30] audit: type=1400 audit(1756966504.909:530): avc: denied { write } for pid=10473 comm="syz.0.842" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 429.269288][ T6207] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 429.282977][ T6207] bond1: (slave macvlan2): failed to get link speed/duplex [ 429.292743][T10454] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 429.494372][ T71] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 430.114045][ T71] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.231616][ T6212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 430.267492][ T6212] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.630204][ T5173] Bluetooth: hci2: command 0x0406 tx timeout [ 430.639765][ T5861] Bluetooth: hci0: command 0x0406 tx timeout [ 431.350321][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 431.399164][ T30] audit: type=1400 audit(1756966507.449:531): avc: denied { load_policy } for pid=10492 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 431.485437][T10496] SELinux: failed to load policy [ 431.938878][T10494] tty tty2: ldisc open failed (-12), clearing slot 1 [ 432.309259][T10508] ptrace attach of "./syz-executor exec"[5856] was attempted by "./syz-executor exec"[10508] [ 432.922419][ T5971] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 433.164585][ T5971] usb 2-1: config 3 has an invalid interface number: 249 but max is 0 [ 433.173365][ T5971] usb 2-1: config 3 has no interface number 0 [ 433.179543][ T5971] usb 2-1: config 3 interface 249 has no altsetting 0 [ 433.188922][ T5971] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=8f.c9 [ 433.221050][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.229283][ T5971] usb 2-1: Product: syz [ 433.300049][ T5971] usb 2-1: Manufacturer: syz [ 433.326360][ T5971] usb 2-1: SerialNumber: syz [ 433.490794][ T6212] net_ratelimit: 34 callbacks suppressed [ 433.490811][ T6212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.504796][ T6212] bond1: (slave macvlan2): failed to get link speed/duplex [ 433.814751][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.828981][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 434.014980][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 434.029714][ T6200] bond1: (slave macvlan2): failed to get link speed/duplex [ 434.111463][ T5971] comedi comedi5: Wrong number of endpoints [ 434.133229][ T5971] dt9812 2-1:3.249: driver 'dt9812' failed to auto-configure device. [ 434.181015][ T6212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 435.299365][ T6212] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.408651][ T5971] usb 2-1: USB disconnect, device number 11 [ 435.414666][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 435.460293][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 436.347497][T10557] loop4: detected capacity change from 0 to 2560 [ 436.883787][ T5839] buffer_io_error: 315 callbacks suppressed [ 436.883799][ T5839] Buffer I/O error on dev loop4, logical block 256, async page read [ 436.901825][T10557] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 437.349783][T10557] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 437.360171][T10557] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 437.369160][T10557] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 437.391083][T10562] lo: entered allmulticast mode [ 437.399069][ T30] audit: type=1400 audit(1756966513.449:532): avc: denied { getopt } for pid=10560 comm="syz.1.860" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.429236][T10557] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 437.442934][T10557] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 437.454707][T10557] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 437.468089][T10557] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 437.476908][T10557] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 437.497026][T10563] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 437.928964][T10562] veth0_macvtap: left allmulticast mode [ 439.123670][T10590] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 439.150208][ T5971] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 439.329661][ T5971] usb 2-1: not running at top speed; connect to a high speed hub [ 439.340581][ T5971] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 439.352831][ T5971] usb 2-1: config 1 interface 0 has no altsetting 0 [ 439.375219][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'. [ 439.602304][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.608686][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.786326][ T5971] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 439.801516][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.887752][ T5971] usb 2-1: Product: syz [ 439.918183][ T5971] usb 2-1: Manufacturer: syz [ 439.965469][ T5971] usb 2-1: SerialNumber: syz [ 440.126521][T10587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 440.336633][T10599] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 440.345919][T10599] bridge1: entered allmulticast mode [ 440.795263][ T30] audit: type=1400 audit(1756966516.849:533): avc: denied { execheap } for pid=10604 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 441.368693][ T30] audit: type=1326 audit(1756966517.169:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 441.517853][ T30] audit: type=1326 audit(1756966517.179:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 442.031194][ T30] audit: type=1326 audit(1756966517.179:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 442.136468][ T30] audit: type=1326 audit(1756966517.179:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 442.361951][ T30] audit: type=1326 audit(1756966517.179:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 442.387086][ T30] audit: type=1326 audit(1756966517.179:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 442.951963][ T30] audit: type=1326 audit(1756966517.179:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 442.976009][ T30] audit: type=1326 audit(1756966517.179:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 443.414124][ T30] audit: type=1326 audit(1756966517.179:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 443.460612][ T30] audit: type=1326 audit(1756966517.179:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 443.570520][ T30] audit: type=1326 audit(1756966517.179:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 443.665505][ T30] audit: type=1326 audit(1756966517.179:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 443.730595][ T30] audit: type=1326 audit(1756966517.189:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 443.757669][ T30] audit: type=1326 audit(1756966517.189:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 443.820089][ T30] audit: type=1326 audit(1756966517.189:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 443.900958][ T30] audit: type=1326 audit(1756966517.189:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30b598ebe9 code=0x7ffc0000 [ 444.192126][ T5971] usb 2-1: USB disconnect, device number 12 [ 445.760638][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 445.927549][T10654] vxfs: WRONG superblock magic 00000000 at 1 [ 445.935155][T10654] vxfs: WRONG superblock magic 00000000 at 8 [ 445.941244][T10654] vxfs: can't find superblock. [ 446.162108][ T5971] libceph: connect (1)[c::]:6789 error -101 [ 446.182378][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 446.270798][T10629] mkiss: ax0: crc mode is auto. [ 446.311317][T10652] ceph: No mds server is up or the cluster is laggy [ 446.344794][T10660] netlink: 'syz.4.879': attribute type 5 has an invalid length. [ 446.440527][ T43] libceph: connect (1)[c::]:6789 error -101 [ 446.446593][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 446.745946][T10637] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 447.504898][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.883'. [ 448.252264][T10679] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 448.345058][T10688] bridge3: entered promiscuous mode [ 448.546895][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 448.546914][ T30] audit: type=1400 audit(1756966524.509:564): avc: denied { getopt } for pid=10681 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 448.618930][T10679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.166656][T10679] ip6tnl1: entered allmulticast mode [ 450.219657][T10679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.257297][T10679] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 450.762743][T10679] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 452.067847][T10711] rtc_cmos 00:00: Alarms can be up to one day in the future [ 452.453984][ T30] audit: type=1400 audit(1756966528.139:565): avc: denied { nlmsg_read } for pid=10708 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 453.254750][ T30] audit: type=1400 audit(1756966529.009:566): avc: denied { getopt } for pid=10712 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 454.521570][T10729] : Can't lookup blockdev [ 454.894018][T10729] macsec2: entered promiscuous mode [ 454.916638][T10729] bridge0: entered promiscuous mode [ 454.935242][T10729] bridge0: port 3(macsec2) entered blocking state [ 454.959943][T10729] bridge0: port 3(macsec2) entered disabled state [ 454.984265][T10729] macsec2: entered allmulticast mode [ 455.000820][T10729] bridge0: entered allmulticast mode [ 455.020828][T10729] macsec2: left allmulticast mode [ 455.037106][T10729] bridge0: left allmulticast mode [ 455.058044][T10729] bridge0: left promiscuous mode [ 457.645631][ T30] audit: type=1400 audit(1756966533.639:567): avc: denied { lock } for pid=10763 comm="syz.2.904" path="socket:[21404]" dev="sockfs" ino=21404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 459.428782][ T5861] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 459.491104][T10785] binder: 10782:10785 ioctl c00c620f 2000000002c0 returned -22 [ 461.405442][ T30] audit: type=1400 audit(1756966537.129:568): avc: denied { read write } for pid=10789 comm="syz.0.911" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 461.427864][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.450454][ T30] audit: type=1400 audit(1756966537.129:569): avc: denied { open } for pid=10789 comm="syz.0.911" path="/187/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 461.473327][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.819333][ T30] audit: type=1400 audit(1756966537.829:570): avc: denied { create } for pid=10790 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 462.071799][ T30] audit: type=1400 audit(1756966537.829:571): avc: denied { setopt } for pid=10790 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 462.143170][T10807] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 462.224310][T10807] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 462.725535][ T30] audit: type=1400 audit(1756966538.759:572): avc: denied { connect } for pid=10812 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 463.630638][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 463.813461][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 463.825076][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.856573][ T9] usb 1-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 464.089901][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.131841][ T9] usb 1-1: config 0 descriptor?? [ 464.209142][T10824] SELinux: failed to load policy [ 464.317671][ T30] audit: type=1400 audit(1756966540.369:573): avc: denied { append } for pid=10833 comm="syz.4.920" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 464.456846][ T30] audit: type=1400 audit(1756966540.419:574): avc: denied { write } for pid=10819 comm="syz.0.916" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 464.690746][T10839] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 465.999081][ T9] usb 1-1: string descriptor 0 read error: -71 [ 466.042792][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 466.075118][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 466.156850][ T9] usb 1-1: USB disconnect, device number 9 [ 466.581987][ T30] audit: type=1400 audit(1756966542.609:575): avc: denied { module_request } for pid=10847 comm="syz.0.922" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 467.541888][T10868] netlink: 'syz.0.924': attribute type 4 has an invalid length. [ 467.549588][T10868] netlink: 17 bytes leftover after parsing attributes in process `syz.0.924'. [ 468.367006][T10870] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.925'. [ 468.513932][T10878] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 468.549545][ T30] audit: type=1800 audit(1756966544.599:576): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.1.923" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 468.906054][T10859] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 469.033804][ T30] audit: type=1400 audit(1756966544.959:577): avc: denied { firmware_load } for pid=10850 comm="syz.1.923" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 469.094982][T10859] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 469.107886][ T30] audit: type=1400 audit(1756966545.159:578): avc: denied { firmware_load } for pid=10850 comm="syz.1.923" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 469.132391][T10859] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 469.160099][ T5971] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 469.367469][ T5971] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 469.396935][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.438669][ T5971] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 469.484836][ T5971] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.506211][ T5971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.515429][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.549480][ T5971] usb 1-1: Product: syz [ 470.566572][ T5971] usb 1-1: Manufacturer: syz [ 470.577290][ T5971] usb 1-1: SerialNumber: syz [ 470.793733][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 470.806467][T10901] IPVS: Error connecting to the multicast addr [ 471.606794][T10903] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.930'. [ 471.635070][T10903] sysfs: cannot create duplicate filename '/class/ieee80211/`] Iq!>s*!)\' [ 471.646972][T10903] CPU: 0 UID: 0 PID: 10903 Comm: syz.1.930 Not tainted syzkaller #0 PREEMPT(full) [ 471.647000][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.647012][T10903] Call Trace: [ 471.647018][T10903] [ 471.647026][T10903] dump_stack_lvl+0x16c/0x1f0 [ 471.647053][T10903] sysfs_warn_dup+0x7f/0xa0 [ 471.647078][T10903] sysfs_do_create_link_sd+0x124/0x140 [ 471.647107][T10903] sysfs_create_link+0x61/0xc0 [ 471.647132][T10903] device_add+0x62c/0x1aa0 [ 471.647157][T10903] ? __pfx_device_add+0x10/0x10 [ 471.647180][T10903] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 471.647205][T10903] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 471.647240][T10903] wiphy_register+0x1df4/0x29f0 [ 471.647257][T10903] ? netdev_run_todo+0x864/0x1320 [ 471.647274][T10903] ? __dev_printk+0x270/0x270 [ 471.647295][T10903] ? __pfx_wiphy_register+0x10/0x10 [ 471.647323][T10903] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 471.647348][T10903] ieee80211_register_hw+0x24a9/0x4060 [ 471.647380][T10903] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 471.647403][T10903] ? find_held_lock+0x2b/0x80 [ 471.647426][T10903] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 471.647448][T10903] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 471.647466][T10903] ? __hrtimer_setup+0x176/0x280 [ 471.647489][T10903] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 471.647535][T10903] ? trace_kmalloc+0x2b/0xd0 [ 471.647553][T10903] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 471.647571][T10903] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 471.647592][T10903] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 471.647614][T10903] ? __asan_memcpy+0x3c/0x60 [ 471.647642][T10903] hwsim_new_radio_nl+0xb51/0x12c0 [ 471.647667][T10903] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 471.647697][T10903] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 471.647720][T10903] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 471.647747][T10903] genl_family_rcv_msg_doit+0x209/0x2f0 [ 471.647768][T10903] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.647795][T10903] ? bpf_lsm_capable+0x9/0x10 [ 471.647817][T10903] ? security_capable+0x7e/0x260 [ 471.647836][T10903] ? ns_capable+0xd7/0x110 [ 471.647855][T10903] genl_rcv_msg+0x55c/0x800 [ 471.647877][T10903] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.647896][T10903] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 471.647918][T10903] ? __lock_acquire+0x62e/0x1ce0 [ 471.647946][T10903] netlink_rcv_skb+0x158/0x420 [ 471.647963][T10903] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.647984][T10903] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.648010][T10903] ? netlink_deliver_tap+0x1ae/0xd30 [ 471.648024][T10903] ? selinux_netlink_send+0x578/0x830 [ 471.648042][T10903] ? is_vmalloc_addr+0x86/0xa0 [ 471.648058][T10903] genl_rcv+0x28/0x40 [ 471.648077][T10903] netlink_unicast+0x5a7/0x870 [ 471.648097][T10903] ? __pfx_netlink_unicast+0x10/0x10 [ 471.648112][T10903] ? __asan_memset+0x23/0x50 [ 471.648133][T10903] ? __build_skb_around+0x278/0x3b0 [ 471.648160][T10903] netlink_sendmsg+0x8d1/0xdd0 [ 471.648180][T10903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.648206][T10903] ____sys_sendmsg+0xa95/0xc70 [ 471.648228][T10903] ? copy_msghdr_from_user+0x10a/0x160 [ 471.648243][T10903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.648273][T10903] ___sys_sendmsg+0x134/0x1d0 [ 471.648290][T10903] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.648333][T10903] __sys_sendmsg+0x16d/0x220 [ 471.648352][T10903] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.648376][T10903] ? __secure_computing+0x28e/0x3b0 [ 471.648401][T10903] do_syscall_64+0xcd/0x4c0 [ 471.648420][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.648435][T10903] RIP: 0033:0x7feec118ebe9 [ 471.648449][T10903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.648463][T10903] RSP: 002b:00007feebebb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.648478][T10903] RAX: ffffffffffffffda RBX: 00007feec13c6360 RCX: 00007feec118ebe9 [ 471.648490][T10903] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 471.648498][T10903] RBP: 00007feec1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 471.648507][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.648515][T10903] R13: 00007feec13c63f8 R14: 00007feec13c6360 R15: 00007ffe5d125218 [ 471.648542][T10903] [ 472.407114][ T5971] usb 1-1: USB disconnect, device number 10 [ 472.931307][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 472.968116][T10899] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 473.099763][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.566909][T10899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.573076][T10899] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 473.586783][T10899] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 473.594044][T10924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 473.920454][T10852] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 474.091195][T10852] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.104244][T10852] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.114698][T10852] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.125861][T10852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.161997][T10923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.187379][T10852] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.442764][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.455277][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.544212][ T30] audit: type=1326 audit(1756966550.549:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 474.642040][T10852] usb 5-1: USB disconnect, device number 7 [ 474.648043][ T30] audit: type=1326 audit(1756966550.559:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 474.676513][ T30] audit: type=1326 audit(1756966550.559:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 474.721156][ T30] audit: type=1326 audit(1756966550.559:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 474.748371][ T30] audit: type=1326 audit(1756966550.559:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 474.849676][ T30] audit: type=1326 audit(1756966550.559:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 475.050815][ T5173] Bluetooth: hci0: command 0x0406 tx timeout [ 475.077694][ T30] audit: type=1326 audit(1756966550.569:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 475.102941][ T30] audit: type=1326 audit(1756966550.569:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 475.128343][ T30] audit: type=1326 audit(1756966550.569:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 475.153461][ T30] audit: type=1326 audit(1756966550.569:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6d9858ebe9 code=0x7ffc0000 [ 475.785794][ T5173] Bluetooth: hci4: command 0x0406 tx timeout [ 475.806055][ T5173] Bluetooth: hci2: command 0x0406 tx timeout [ 476.357207][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 476.520773][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 476.571274][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.770863][ T24] usb 4-1: config 8 has an invalid interface number: 132 but max is 0 [ 476.789205][ T24] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 477.276928][ T24] usb 4-1: config 8 has no interface number 0 [ 477.288205][ T24] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.394801][ T24] usb 4-1: config 8 interface 132 has no altsetting 0 [ 477.422070][ T24] usb 4-1: string descriptor 0 read error: -22 [ 477.428449][ T24] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 477.438563][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.628177][ T24] usb-storage 4-1:8.132: USB Mass Storage device detected [ 477.671770][ T24] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a [ 478.351842][ T5925] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 478.571650][ T5925] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 478.583382][ T5925] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 478.592542][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.604289][ T5925] usb 3-1: Product: syz [ 478.645819][ T5925] usb 3-1: Manufacturer: syz [ 478.653800][ T5925] usb 3-1: SerialNumber: syz [ 478.691020][ T5925] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 479.420686][ T5925] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 479.593694][ T5925] usb 4-1: USB disconnect, device number 5 [ 480.168096][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 480.180429][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.946'. [ 480.738127][ T5971] usb 3-1: USB disconnect, device number 3 [ 482.139050][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 482.139066][ T30] audit: type=1400 audit(1756966558.189:592): avc: denied { mount } for pid=10983 comm="syz.4.949" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 482.270232][T11007] tipc: New replicast peer: 0.0.0.0 [ 482.277885][T11007] tipc: Enabled bearer , priority 10 [ 483.390087][ T24] tipc: Node number set to 839576534 [ 483.718342][T11016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 483.725142][T11016] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 483.733721][T11016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 483.793511][T11016] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.540610][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 485.718210][T11049] bridge2: entered promiscuous mode [ 485.821917][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 485.828482][ T5861] Bluetooth: hci0: command 0x0406 tx timeout [ 485.842147][ T5173] Bluetooth: hci4: command 0x0406 tx timeout [ 489.183585][T11077] netlink: 'syz.4.960': attribute type 11 has an invalid length. [ 492.613327][T11110] net_ratelimit: 14 callbacks suppressed [ 492.613364][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.630388][T11116] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[11116] [ 493.928386][ T5925] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 494.040949][ T30] audit: type=1400 audit(1756966570.089:593): avc: denied { accept } for pid=11130 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.148019][ T5925] usb 4-1: not running at top speed; connect to a high speed hub [ 494.160608][ T5925] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 494.176617][ T5925] usb 4-1: config 1 interface 0 has no altsetting 0 [ 494.198767][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 494.207900][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.217412][ T5925] usb 4-1: Product: syz [ 494.221783][ T5925] usb 4-1: Manufacturer: syz [ 494.226857][ T5925] usb 4-1: SerialNumber: syz [ 494.263216][T11124] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 494.565162][T11138] GUP no longer grows the stack in syz.0.976 (11138): 200000004000-20000000a000 (200000002000) [ 494.576252][T11138] CPU: 0 UID: 0 PID: 11138 Comm: syz.0.976 Not tainted syzkaller #0 PREEMPT(full) [ 494.576277][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.576288][T11138] Call Trace: [ 494.576295][T11138] [ 494.576302][T11138] dump_stack_lvl+0x16c/0x1f0 [ 494.576327][T11138] gup_vma_lookup+0x1d2/0x220 [ 494.576351][T11138] __get_user_pages+0x243/0x34a0 [ 494.576372][T11138] ? find_held_lock+0x2b/0x80 [ 494.576388][T11138] ? __pfx___get_user_pages+0x10/0x10 [ 494.576415][T11138] get_user_pages_remote+0x243/0xab0 [ 494.576437][T11138] ? mas_parent_gap+0x6f0/0x7b0 [ 494.576458][T11138] ? __pfx_get_user_pages_remote+0x10/0x10 [ 494.576483][T11138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 494.576499][T11138] __access_remote_vm+0x24d/0x850 [ 494.576515][T11138] ? do_raw_spin_lock+0x12c/0x2b0 [ 494.576527][T11138] ? __pfx___access_remote_vm+0x10/0x10 [ 494.576547][T11138] proc_pid_cmdline_read+0x4de/0x8e0 [ 494.576571][T11138] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 494.576593][T11138] ? rw_verify_area+0xcf/0x6c0 [ 494.576621][T11138] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 494.576634][T11138] vfs_readv+0x5be/0x8b0 [ 494.576647][T11138] ? __pfx_vfs_readv+0x10/0x10 [ 494.576658][T11138] ? kmem_cache_free+0x2d1/0x4d0 [ 494.576677][T11138] ? __fget_files+0x20e/0x3c0 [ 494.576698][T11138] ? do_preadv+0x1a6/0x270 [ 494.576713][T11138] do_preadv+0x1a6/0x270 [ 494.576729][T11138] ? __pfx_do_preadv+0x10/0x10 [ 494.576752][T11138] do_syscall_64+0xcd/0x4c0 [ 494.576771][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.576782][T11138] RIP: 0033:0x7f98bcd8ebe9 [ 494.576792][T11138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.576803][T11138] RSP: 002b:00007f98bdb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 494.576814][T11138] RAX: ffffffffffffffda RBX: 00007f98bcfc5fa0 RCX: 00007f98bcd8ebe9 [ 494.576821][T11138] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 494.576827][T11138] RBP: 00007f98bce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.576836][T11138] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 494.576846][T11138] R13: 00007f98bcfc6038 R14: 00007f98bcfc5fa0 R15: 00007ffeee00c118 [ 494.576870][T11138] [ 496.663369][ T5925] usb 4-1: USB disconnect, device number 6 [ 497.108248][T11169] xt_policy: too many policy elements [ 497.934240][T11174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'. [ 497.953806][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.982'. [ 499.990655][ T30] audit: type=1400 audit(1756966576.039:594): avc: denied { ioctl } for pid=11196 comm="syz.0.988" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 500.562428][T11198] ======================================================= [ 500.562428][T11198] WARNING: The mand mount option has been deprecated and [ 500.562428][T11198] and is ignored by this kernel. Remove the mand [ 500.562428][T11198] option from the mount to silence this warning. [ 500.562428][T11198] ======================================================= [ 500.598702][T11198] 9p: Unknown access argument 18446744073709551615: -34 [ 501.490826][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.497649][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.686913][T11216] team0: Port device gtp1 added [ 501.749133][T11211] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 501.819451][T11211] overlayfs: missing 'lowerdir' [ 502.171660][ T5925] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 502.370169][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 502.401492][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 502.407903][ T5925] usb 3-1: config 239 has an invalid interface number: 45 but max is 0 [ 502.416777][ T5925] usb 3-1: config 239 has no interface number 0 [ 502.429761][ T5925] usb 3-1: config 239 interface 45 has no altsetting 0 [ 502.489682][ T5925] usb 3-1: New USB device found, idVendor=048d, idProduct=9135, bcdDevice=ff.f3 [ 502.499429][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.508933][ T5925] usb 3-1: Product: syz [ 502.524430][ T5925] usb 3-1: Manufacturer: syz [ 502.529016][ T5925] usb 3-1: SerialNumber: syz [ 502.542066][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 502.662024][ T24] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 502.727277][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 502.784028][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 502.793480][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.950828][ T30] audit: type=1400 audit(1756966578.959:595): avc: denied { getopt } for pid=11229 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 503.031000][ T24] usb 1-1: Product: syz [ 503.037411][ T24] usb 1-1: Manufacturer: syz [ 503.050591][ T24] usb 1-1: SerialNumber: syz [ 503.090144][T11223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 503.184183][ T30] audit: type=1400 audit(1756966579.239:596): avc: denied { getopt } for pid=11219 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 503.205684][ T5173] Bluetooth: unknown link type 83 [ 503.212359][ T5173] Bluetooth: hci2: connection err: -111 [ 503.258346][ T5925] usb 3-1: USB disconnect, device number 4 [ 505.556200][ T24] usb 1-1: USB disconnect, device number 11 [ 505.690841][ T30] audit: type=1400 audit(1756966581.699:597): avc: denied { write } for pid=11248 comm="syz.4.998" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 506.654833][T11255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.001510][T11269] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 507.406757][ T30] audit: type=1400 audit(1756966583.029:598): avc: denied { mount } for pid=11264 comm="syz.1.1002" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 508.006004][ T30] audit: type=1400 audit(1756966584.049:599): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 508.212220][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 508.756085][T11276] netlink: 'syz.2.1003': attribute type 21 has an invalid length. [ 508.791983][T11276] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1003'. [ 508.843431][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 508.877037][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 509.073470][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.126975][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 509.340143][ T30] audit: type=1800 audit(1756966585.329:600): pid=11290 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1004" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 509.374657][T11291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1006'. [ 509.729822][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.762111][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.779875][ T9] usb 5-1: invalid MIDI out EP 0 [ 510.413228][ T5173] Bluetooth: hci0: connection err: -111 [ 510.725665][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 511.077655][T11301] [U]  [ 511.082851][T11301] [U] K{ [ 511.109384][ T24] usb 5-1: USB disconnect, device number 8 [ 511.115728][T11301] [U] T 1ŠFFˊ`GJǘGO/MC [ 511.177792][T11301] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 511.196155][T11260] delete_channel: no stack [ 511.432063][T11301] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 511.466604][T11301] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 511.559817][T11301] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 511.588526][T11301] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 511.635724][T11301] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 511.661526][T11301] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 512.189884][T11301] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 512.477651][T11316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 512.488015][T11316] bond6: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 512.508683][T11316] bond6: (slave ip6tnl1): Error -95 calling set_mac_address [ 512.519892][T11301] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 512.671754][T11301] [U] 22Ʃ۩X?0;3U [ 512.684081][T11301] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 512.736687][T11301] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 512.913131][T11301] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 512.928140][T11301] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 512.965134][T11301] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 513.014602][T11301] [U] EC [ 513.019774][T11301] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 513.130818][T11300] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 515.594625][ T30] audit: type=1400 audit(1756966591.649:601): avc: denied { ioctl } for pid=11350 comm="syz.4.1018" path="socket:[23760]" dev="sockfs" ino=23760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 516.844906][ T30] audit: type=1400 audit(1756966592.889:602): avc: denied { setopt } for pid=11365 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 517.372069][T11376] netlink: 'syz.0.1022': attribute type 10 has an invalid length. [ 518.172086][T11376] team0: Port device netdevsim0 added [ 518.669733][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1027'. [ 521.110074][ T30] audit: type=1400 audit(1756966597.149:603): avc: denied { listen } for pid=11404 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 521.246322][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 521.477188][ T30] audit: type=1400 audit(1756966597.149:604): avc: denied { accept } for pid=11404 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 521.541740][T11410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 521.567571][ T30] audit: type=1400 audit(1756966597.609:605): avc: denied { accept } for pid=11404 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 522.204905][T11410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 522.224169][ T30] audit: type=1400 audit(1756966597.919:606): avc: denied { map } for pid=11414 comm="syz.0.1033" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 522.251236][T11410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 522.309597][T11410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 522.366826][ T30] audit: type=1400 audit(1756966597.929:607): avc: denied { execute } for pid=11414 comm="syz.0.1033" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 522.421106][ T30] audit: type=1400 audit(1756966598.309:608): avc: denied { create } for pid=11414 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 522.493588][T11419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.751949][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 522.967993][T11414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.062468][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 523.073745][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.090532][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 523.099589][ T24] usb 3-1: config 1 has no interface number 1 [ 523.110484][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 523.125887][ T24] usb 3-1: too many endpoints for config 1 interface 2 altsetting 116: 111, using maximum allowed: 30 [ 523.138140][ T24] usb 3-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 523.159480][ T24] usb 3-1: config 1 interface 2 has no altsetting 1 [ 523.169294][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.370540][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.378547][ T24] usb 3-1: Product: syz [ 523.424946][ T24] usb 3-1: Manufacturer: syz [ 523.429559][ T24] usb 3-1: SerialNumber: syz [ 523.615597][ T5173] Bluetooth: hci1: command 0x0406 tx timeout [ 524.558172][ T5173] Bluetooth: hci0: command 0x0406 tx timeout [ 524.564339][ T5173] Bluetooth: hci2: command 0x0406 tx timeout [ 524.570578][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 524.736264][ T24] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 524.749936][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 524.873342][ T24] usb 3-1: USB disconnect, device number 5 [ 525.098074][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.064965][ T30] audit: type=1400 audit(1756966603.119:609): avc: denied { read open } for pid=11473 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.299201][ T30] audit: type=1400 audit(1756966603.119:610): avc: denied { getattr } for pid=11473 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.493737][ T30] audit: type=1400 audit(1756966604.549:611): avc: denied { getopt } for pid=11481 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 529.057967][ T30] audit: type=1400 audit(1756966605.099:612): avc: denied { setopt } for pid=11492 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 529.237265][ T30] audit: type=1400 audit(1756966605.289:613): avc: denied { add_name } for pid=11467 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.305443][ T30] audit: type=1400 audit(1756966605.319:614): avc: denied { create } for pid=11467 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.080283][ T30] audit: type=1400 audit(1756966605.319:615): avc: denied { write } for pid=11467 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=5569 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.106263][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.143162][ T30] audit: type=1400 audit(1756966605.319:616): avc: denied { append } for pid=11467 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=5569 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 530.273022][ T30] audit: type=1400 audit(1756966606.269:617): avc: denied { remove_name } for pid=11505 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=5569 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.470701][ T30] audit: type=1400 audit(1756966606.269:618): avc: denied { unlink } for pid=11505 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=5569 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.107435][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 532.107449][ T30] audit: type=1326 audit(1756966607.589:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11517 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feec112adb9 code=0x7ffc0000 [ 532.137404][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.143907][T10852] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 532.562735][ T5896] IPVS: starting estimator thread 0... [ 532.716821][T10852] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.810242][T11534] IPVS: using max 38 ests per chain, 91200 per kthread [ 533.110939][T10852] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.412543][ T30] audit: type=1400 audit(1756966609.459:721): avc: denied { ioctl } for pid=11551 comm="syz.3.1054" path="socket:[24890]" dev="sockfs" ino=24890 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 533.809389][T10852] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 533.850599][T10852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.142541][T11527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 534.199138][T10852] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.343189][ T5981] usb 1-1: USB disconnect, device number 12 [ 536.574485][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 540.196731][ T30] audit: type=1400 audit(1756966615.859:722): avc: denied { write } for pid=11605 comm="syz.1.1066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 540.228856][ T30] audit: type=1400 audit(1756966615.869:723): avc: denied { read } for pid=11605 comm="syz.1.1066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 540.902724][T11607] netlink: 'syz.3.1065': attribute type 4 has an invalid length. [ 543.141950][T11645] syz.0.1073 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 543.160327][T11645] process 'syz.0.1073' launched './file0' with NULL argv: empty string added [ 543.923494][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 549.392278][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 549.429514][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 549.846467][T11716] tipc: Started in network mode [ 549.851449][T11716] tipc: Node identity 7f000001, cluster identity 4711 [ 549.868745][T11716] tipc: New replicast peer: 0.0.0.0 [ 549.875550][T11716] tipc: Enabled bearer , priority 10 [ 551.000061][ T24] tipc: Node number set to 2130706433 [ 551.503938][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 552.355606][T11442] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 554.401003][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 554.861942][T11763] comedi comedi2: c6xdigio: I/O port conflict (0x3c4,3) [ 555.078218][T11765] bond0: (slave bond_slave_1): Releasing backup interface [ 555.105610][T11772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 555.112249][T11772] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 555.121773][T11772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 555.127665][T11772] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 555.137009][T11772] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 555.142943][T11772] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 555.153342][T11772] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 555.159246][T11772] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 555.273832][T11772] batman_adv: batadv0: Interface deactivated: wlan0 [ 557.436453][ T30] audit: type=1400 audit(1756966633.479:724): avc: denied { append } for pid=11781 comm="syz.2.1105" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 557.461055][T11790] random: crng reseeded on system resumption [ 561.942752][T11868] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 562.134487][T11873] netlink: 'syz.1.1109': attribute type 21 has an invalid length. [ 562.185951][T11868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.565245][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.571621][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.592206][T11879] netlink: 'syz.1.1109': attribute type 21 has an invalid length. [ 562.992291][T11879] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1109'. [ 563.061045][T11873] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1109'. [ 563.179558][T11877] ip6tnl1: entered allmulticast mode [ 564.210538][T11877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.217655][T11877] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 564.228992][T11877] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 565.637936][T11911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 565.644463][T11911] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 565.652029][T11911] vhci_hcd vhci_hcd.0: Device attached [ 565.661193][T11914] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 566.147488][ T6212] vhci_hcd: stop threads [ 566.148426][T11917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.256899][ T6212] vhci_hcd: release socket [ 566.335227][ T6212] vhci_hcd: disconnect device [ 567.468670][T11938] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1117'. [ 568.052511][T11942] netlink: 'syz.3.1118': attribute type 5 has an invalid length. [ 570.580062][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 570.700094][ T5925] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 570.901144][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 570.939424][ T43] usb 4-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 571.050470][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 13888, setting to 1024 [ 571.061883][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 571.087946][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 571.122201][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 571.341419][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 571.354171][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.363013][ T43] usb 4-1: Product: syz [ 571.367276][ T43] usb 4-1: Manufacturer: syz [ 571.380165][ T43] usb 4-1: SerialNumber: syz [ 571.407708][T11977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 571.427752][ T43] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 571.775586][ T43] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 572.064755][ T43] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 572.083590][ T43] usb 4-1: USB disconnect, device number 7 [ 573.752454][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 574.523217][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 574.596122][ T5925] usb 2-1: no configurations [ 574.630307][ T5925] usb 2-1: can't read configurations, error -22 [ 575.094292][ T30] audit: type=1400 audit(1756966650.979:725): avc: denied { read write } for pid=12028 comm="syz.0.1132" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 575.270707][T12023] netlink: 'syz.3.1129': attribute type 21 has an invalid length. [ 575.278693][T12023] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1129'. [ 575.403296][ T30] audit: type=1400 audit(1756966650.979:726): avc: denied { open } for pid=12028 comm="syz.0.1132" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 575.426327][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.400192][ T30] audit: type=1400 audit(1756966650.979:727): avc: denied { map } for pid=12028 comm="syz.0.1132" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 576.450423][ T30] audit: type=1400 audit(1756966651.949:728): avc: denied { accept } for pid=12026 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 578.723044][T12041] IPv6: NLM_F_CREATE should be specified when creating new route [ 579.870042][ T5925] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 580.534334][ T5925] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 580.580627][ T5925] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.594622][ T5925] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.631686][ T5925] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.641039][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.755274][ T5925] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.905843][ T5925] usb 2-1: invalid MIDI out EP 0 [ 580.977081][T12068] delete_channel: no stack [ 581.405923][ T8037] udevd[8037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.406995][ T5925] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 581.501231][ T5925] usb 2-1: USB disconnect, device number 15 [ 583.780850][ T30] audit: type=1400 audit(1756966659.756:729): avc: denied { execute } for pid=12102 comm="syz.2.1144" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 584.615549][T12113] netlink: 'syz.3.1147': attribute type 32 has an invalid length. [ 585.048342][ T30] audit: type=1400 audit(1756966660.946:730): avc: denied { create } for pid=12096 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 585.209284][ T30] audit: type=1400 audit(1756966661.106:731): avc: denied { write } for pid=12096 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 586.072815][ T5971] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 586.331345][ T5971] usb 3-1: Using ep0 maxpacket: 8 [ 586.380781][ T5971] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 586.388894][ T5971] usb 3-1: config 0 has no interface number 0 [ 586.408610][ T5971] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 586.422950][ T5971] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 586.467864][ T5971] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 586.696754][ T5971] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 586.723993][ T5971] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 586.749521][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.776958][ T5971] usb 3-1: config 0 descriptor?? [ 586.787019][ T5971] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 586.803237][T12146] ceph: No mds server is up or the cluster is laggy [ 587.376786][ T5981] usb 3-1: USB disconnect, device number 6 [ 587.450378][T10852] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 587.516652][ T5981] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 587.721388][T10852] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 587.759203][T10852] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 587.769013][T10852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.778818][T10852] usb 4-1: Product: syz [ 587.783415][T10852] usb 4-1: Manufacturer: syz [ 587.787979][T10852] usb 4-1: SerialNumber: syz [ 587.910732][T10852] usb 4-1: config 0 descriptor?? [ 588.041569][T12163] pim6reg: entered allmulticast mode [ 588.476223][T10852] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 588.537117][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.762737][T12168] ================================================================== [ 588.770808][T12168] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 588.778796][T12168] Read of size 8 at addr ffff88801f2b4030 by task syz.4.1157/12168 [ 588.786681][T12168] [ 588.789000][T12168] CPU: 0 UID: 0 PID: 12168 Comm: syz.4.1157 Not tainted syzkaller #0 PREEMPT(full) [ 588.789024][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.789036][T12168] Call Trace: [ 588.789044][T12168] [ 588.789051][T12168] dump_stack_lvl+0x116/0x1f0 [ 588.789076][T12168] print_report+0xcd/0x630 [ 588.789096][T12168] ? __virt_addr_valid+0x81/0x610 [ 588.789118][T12168] ? __phys_addr+0xe8/0x180 [ 588.789141][T12168] ? sysfs_remove_file_ns+0x63/0x70 [ 588.789161][T12168] kasan_report+0xe0/0x110 [ 588.789180][T12168] ? sysfs_remove_file_ns+0x63/0x70 [ 588.789201][T12168] sysfs_remove_file_ns+0x63/0x70 [ 588.789220][T12168] driver_remove_file+0x4a/0x60 [ 588.789242][T12168] bus_remove_driver+0x224/0x2c0 [ 588.789259][T12168] driver_unregister+0x76/0xb0 [ 588.789279][T12168] comedi_device_detach_locked+0x12f/0xa50 [ 588.789302][T12168] do_devconfig_ioctl+0x555/0x710 [ 588.789324][T12168] ? __mutex_lock+0x1c5/0x1060 [ 588.789345][T12168] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 588.789375][T12168] ? find_held_lock+0x2b/0x80 [ 588.789397][T12168] comedi_unlocked_ioctl+0x165d/0x2f00 [ 588.789431][T12168] ? futex_wake+0x1ad/0x530 [ 588.789451][T12168] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 588.789482][T12168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 588.789503][T12168] ? do_vfs_ioctl+0x128/0x14f0 [ 588.789533][T12168] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 588.789560][T12168] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 588.789593][T12168] ? hook_file_ioctl_common+0x145/0x410 [ 588.789615][T12168] ? selinux_file_ioctl+0x180/0x270 [ 588.789640][T12168] ? selinux_file_ioctl+0xb4/0x270 [ 588.789664][T12168] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 588.789691][T12168] __x64_sys_ioctl+0x18b/0x210 [ 588.789718][T12168] do_syscall_64+0xcd/0x4c0 [ 588.789738][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.789754][T12168] RIP: 0033:0x7f6d9858ebe9 [ 588.789768][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.789785][T12168] RSP: 002b:00007f6d99422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.789802][T12168] RAX: ffffffffffffffda RBX: 00007f6d987c5fa0 RCX: 00007f6d9858ebe9 [ 588.789814][T12168] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 588.789824][T12168] RBP: 00007f6d98611e19 R08: 0000000000000000 R09: 0000000000000000 [ 588.789835][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.789845][T12168] R13: 00007f6d987c6038 R14: 00007f6d987c5fa0 R15: 00007fff47e6c448 [ 588.789861][T12168] [ 588.789868][T12168] [ 589.045636][T12168] Allocated by task 12092: [ 589.050025][T12168] kasan_save_stack+0x33/0x60 [ 589.054685][T12168] kasan_save_track+0x14/0x30 [ 589.059337][T12168] __kasan_kmalloc+0xaa/0xb0 [ 589.063906][T12168] __kmalloc_noprof+0x223/0x510 [ 589.068735][T12168] security_inode_init_security+0x13f/0x390 [ 589.074609][T12168] shmem_symlink+0x135/0x9f0 [ 589.079178][T12168] vfs_symlink+0x400/0x680 [ 589.083580][T12168] do_symlinkat+0x261/0x310 [ 589.088064][T12168] __x64_sys_symlinkat+0x93/0xc0 [ 589.092990][T12168] do_syscall_64+0xcd/0x4c0 [ 589.097493][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.103376][T12168] [ 589.105685][T12168] Freed by task 12092: [ 589.109744][T12168] kasan_save_stack+0x33/0x60 [ 589.114405][T12168] kasan_save_track+0x14/0x30 [ 589.119058][T12168] kasan_save_free_info+0x3b/0x60 [ 589.124065][T12168] __kasan_slab_free+0x60/0x70 [ 589.128808][T12168] kfree+0x2b4/0x4d0 [ 589.132685][T12168] security_inode_init_security+0x2eb/0x390 [ 589.138555][T12168] shmem_symlink+0x135/0x9f0 [ 589.143121][T12168] vfs_symlink+0x400/0x680 [ 589.147522][T12168] do_symlinkat+0x261/0x310 [ 589.152002][T12168] __x64_sys_symlinkat+0x93/0xc0 [ 589.156928][T12168] do_syscall_64+0xcd/0x4c0 [ 589.161429][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.167309][T12168] [ 589.169616][T12168] The buggy address belongs to the object at ffff88801f2b4000 [ 589.169616][T12168] which belongs to the cache kmalloc-256 of size 256 [ 589.183646][T12168] The buggy address is located 48 bytes inside of [ 589.183646][T12168] freed 256-byte region [ffff88801f2b4000, ffff88801f2b4100) [ 589.197356][T12168] [ 589.199665][T12168] The buggy address belongs to the physical page: [ 589.206060][T12168] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f2b4 [ 589.214796][T12168] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 589.223276][T12168] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 589.231237][T12168] page_type: f5(slab) [ 589.235199][T12168] raw: 00fff00000000040 ffff88801b841b40 ffffea0000bc0000 dead000000000005 [ 589.243767][T12168] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 589.252340][T12168] head: 00fff00000000040 ffff88801b841b40 ffffea0000bc0000 dead000000000005 [ 589.260992][T12168] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 589.269651][T12168] head: 00fff00000000001 ffffea00007cad01 00000000ffffffff 00000000ffffffff [ 589.278311][T12168] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 589.286965][T12168] page dumped because: kasan: bad access detected [ 589.293363][T12168] page_owner tracks the page as allocated [ 589.299053][T12168] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5847, tgid 5847 (syz-executor), ts 71056840675, free_ts 70910873638 [ 589.320397][T12168] post_alloc_hook+0x1c0/0x230 [ 589.325153][T12168] get_page_from_freelist+0x132b/0x38e0 [ 589.330677][T12168] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 589.336547][T12168] alloc_pages_mpol+0x1fb/0x550 [ 589.341377][T12168] new_slab+0x247/0x330 [ 589.345517][T12168] ___slab_alloc+0xcf2/0x1740 [ 589.350178][T12168] __slab_alloc.constprop.0+0x56/0xb0 [ 589.355532][T12168] __kmalloc_noprof+0x2f2/0x510 [ 589.360361][T12168] fib_create_info+0x53f/0x46b0 [ 589.365197][T12168] fib_table_insert+0x177/0x1c40 [ 589.370112][T12168] fib_magic+0x4d4/0x5c0 [ 589.374344][T12168] fib_add_ifaddr+0x16d/0x580 [ 589.379004][T12168] fib_netdev_event+0x38a/0x710 [ 589.383835][T12168] notifier_call_chain+0xb9/0x410 [ 589.388846][T12168] call_netdevice_notifiers_info+0xbe/0x140 [ 589.394719][T12168] __dev_notify_flags+0x12c/0x2e0 [ 589.399720][T12168] page last free pid 5854 tgid 5854 stack trace: [ 589.406017][T12168] __free_frozen_pages+0x7d5/0x10f0 [ 589.411202][T12168] qlist_free_all+0x4d/0x120 [ 589.415766][T12168] kasan_quarantine_reduce+0x195/0x1e0 [ 589.421200][T12168] __kasan_slab_alloc+0x69/0x90 [ 589.426031][T12168] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 589.431388][T12168] nsim_fib_event_work+0x8bb/0x2e80 [ 589.436572][T12168] process_one_work+0x9cc/0x1b70 [ 589.441489][T12168] worker_thread+0x6c8/0xf10 [ 589.446055][T12168] kthread+0x3c2/0x780 [ 589.450101][T12168] ret_from_fork+0x5d4/0x6f0 [ 589.454667][T12168] ret_from_fork_asm+0x1a/0x30 [ 589.459410][T12168] [ 589.461711][T12168] Memory state around the buggy address: [ 589.467314][T12168] ffff88801f2b3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 589.475356][T12168] ffff88801f2b3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 589.483409][T12168] >ffff88801f2b4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.491444][T12168] ^ [ 589.497049][T12168] ffff88801f2b4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.505084][T12168] ffff88801f2b4100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 589.513117][T12168] ================================================================== [ 590.041056][T12168] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 590.048285][T12168] CPU: 0 UID: 0 PID: 12168 Comm: syz.4.1157 Not tainted syzkaller #0 PREEMPT(full) [ 590.057637][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.067686][T12168] Call Trace: [ 590.070957][T12168] [ 590.073870][T12168] dump_stack_lvl+0x3d/0x1f0 [ 590.078446][T12168] vpanic+0x6e8/0x7a0 [ 590.082418][T12168] ? __pfx_vpanic+0x10/0x10 [ 590.086908][T12168] ? __pfx_vprintk_emit+0x10/0x10 [ 590.091916][T12168] ? sysfs_remove_file_ns+0x63/0x70 [ 590.097099][T12168] panic+0xca/0xd0 [ 590.100805][T12168] ? __pfx_panic+0x10/0x10 [ 590.105209][T12168] ? sysfs_remove_file_ns+0x63/0x70 [ 590.110387][T12168] ? preempt_schedule_common+0x44/0xc0 [ 590.115825][T12168] ? preempt_schedule_thunk+0x16/0x30 [ 590.121185][T12168] check_panic_on_warn+0xab/0xb0 [ 590.126099][T12168] end_report+0x107/0x170 [ 590.130422][T12168] kasan_report+0xee/0x110 [ 590.134840][T12168] ? sysfs_remove_file_ns+0x63/0x70 [ 590.140041][T12168] sysfs_remove_file_ns+0x63/0x70 [ 590.145060][T12168] driver_remove_file+0x4a/0x60 [ 590.149897][T12168] bus_remove_driver+0x224/0x2c0 [ 590.154814][T12168] driver_unregister+0x76/0xb0 [ 590.159559][T12168] comedi_device_detach_locked+0x12f/0xa50 [ 590.165350][T12168] do_devconfig_ioctl+0x555/0x710 [ 590.170359][T12168] ? __mutex_lock+0x1c5/0x1060 [ 590.175103][T12168] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 590.180639][T12168] ? find_held_lock+0x2b/0x80 [ 590.185315][T12168] comedi_unlocked_ioctl+0x165d/0x2f00 [ 590.190765][T12168] ? futex_wake+0x1ad/0x530 [ 590.195249][T12168] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 590.201045][T12168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 590.206936][T12168] ? do_vfs_ioctl+0x128/0x14f0 [ 590.211689][T12168] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 590.216715][T12168] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 590.223569][T12168] ? hook_file_ioctl_common+0x145/0x410 [ 590.229101][T12168] ? selinux_file_ioctl+0x180/0x270 [ 590.234283][T12168] ? selinux_file_ioctl+0xb4/0x270 [ 590.239381][T12168] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 590.245174][T12168] __x64_sys_ioctl+0x18b/0x210 [ 590.249925][T12168] do_syscall_64+0xcd/0x4c0 [ 590.254413][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.260285][T12168] RIP: 0033:0x7f6d9858ebe9 [ 590.264685][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.284274][T12168] RSP: 002b:00007f6d99422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.292667][T12168] RAX: ffffffffffffffda RBX: 00007f6d987c5fa0 RCX: 00007f6d9858ebe9 [ 590.300619][T12168] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 590.308566][T12168] RBP: 00007f6d98611e19 R08: 0000000000000000 R09: 0000000000000000 [ 590.316513][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.324474][T12168] R13: 00007f6d987c6038 R14: 00007f6d987c5fa0 R15: 00007fff47e6c448 [ 590.332428][T12168] [ 590.335624][T12168] Kernel Offset: disabled [ 590.339921][T12168] Rebooting in 86400 seconds..