last executing test programs: 39.185901412s ago: executing program 3 (id=1640): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="f42a7e72c3d4eba891629578b6a313bd67f64b198201cc353680dd91a6f4bf871a8b6bc16a049f1491a5f52b1cc1589ca310bf3e05db72403388440dc9d62df83637f9480e56e8285705be7477e2d74d981a3ddda12114ef7655e262a285fb831ba905765b3fd9822b28dc9cc25fd0", 0x6f}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="80340700ffffffffffff08021100000187272bc59a224900ffffffffffffff7f06002280000453ec897a040600f7f00e05002503000b040f0105720603030303030371070101ffffffd2037606018012000080ddab9a0e39463b2ba80935bf1b37a54e546794b021745027b18373942fd1d14cda4c9d44cbf31fea475a58fd92213d713d1be12280926891587c7665c5886726003876b5a8c6095cd4e599d4b58ac6049a000f90ad5b755f5011374ddbbe7a82fe24c484c7fddcb5ec48abf0d512b3d7e5dd651219d5dec918e6f0e8c2fdc68115bd8747df18666ad832976d8e1b7bed77e6a26127a51a95df98b778a3107e1b0edd49e6fd50b547e6fa18a0b73dcb", @ANYRES32=r0, @ANYBLOB="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"], 0x404) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="05000000450000000000000600070000000300", @ANYRES32=r9, @ANYBLOB="080005000c000000080005000900000005005300000000001c00e700af9c63e5a52435bed416ac96cac0a5dc4069b7c27b0fe09614001780040001000400020004000400040003001c00e7000c64c06d5b9afe9364ab56818174c962f4264724d7b571df0a00e800ffffffffffff00000a00e80008021100000000001c00e700f6cabdd2272d231c614a31a454e7372e68d5b134e0f7ac8820001780040001000400040004000100040005000400050004000500040005000a00e80008021100000100001c00e7007b6605cd55008c10a6ecfdeae7df4f4c69f4ce0f2715ca660a00e8000802110000000000"], 0x108}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="11002a00dd0b6162636465666768696aff6d000010002d800a0000000202020202020000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="7490e8b2f1b948675d4a0700be000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf257f00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900001000001d0000000a00f50050505050505000000a00340002020202020200000a00f50008021100000100000a003400010101010101000014005500790f797105ff193ad50b1b230198aebe060048002b000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7b29, 0x18}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040040}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="04490280b812e58223ed2c179363926efd1afd19c86e628bebc9e86813ec188b1f312cf8b0f3fa935c21b8cf7628b18c57f02df3c9261aead4af0f70ac052c93451774"], 0x20}}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08002cbd7000fbdbdf2504000000ec44020003000000080002000700000030000680060005004e2100000800030000000000060005004e22000014000400fe8000000020000000000000000000aa080002000800000005000500810000000800020003000000"], 0x6c}}, 0x8180) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x0, 0x47}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041810) 38.187814841s ago: executing program 3 (id=1647): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[], 0xd) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x5c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/130, 0x82}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x1608d87, 0x4, 0x10001, 0x4, 0x8000, 0x9, 0x5, 0x0, 0xffffffff, 0x0, 0x414, 0x2, 0x10001, 0xfffffffffffff924], 0x1, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 36.472853281s ago: executing program 3 (id=1654): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000280)="a42f0871e8e458b516f3bb9dab8011a3bb63") ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) bind$can_raw(r3, &(0x7f0000000600), 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000634a482110280000000001d4000000009500000c00000000edf1929f3a095a2197aac35e0ad92b7925bf84b8e66a5d088a7945e4a7835cbbb1d7f55a1cf05507782073ea28ea0d05c1399f7007a21f0c7f116afe44577eee08de2bf836b04332eb1f00003ecae48deebf583635478a784a158fde"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x151002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x17, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000240)='GPL\x00'}, 0x90) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) 35.965001018s ago: executing program 3 (id=1657): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="f42a7e72c3d4eba891629578b6a313bd67f64b198201cc353680dd91a6f4bf871a8b6bc16a049f1491a5f52b1cc1589ca310bf3e05db72403388440dc9d62df83637f9480e56e8285705be7477e2d74d981a3ddda12114ef7655e262a285fb831ba905765b3fd9822b28dc9cc25fd0", 0x6f}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="80340700ffffffffffff08021100000187272bc59a224900ffffffffffffff7f06002280000453ec897a040600f7f00e05002503000b040f0105720603030303030371070101ffffffd2037606018012000080ddab9a0e39463b2ba80935bf1b37a54e546794b021745027b18373942fd1d14cda4c9d44cbf31fea475a58fd92213d713d1be12280926891587c7665c5886726003876b5a8c6095cd4e599d4b58ac6049a000f90ad5b755f5011374ddbbe7a82fe24c484c7fddcb5ec48abf0d512b3d7e5dd651219d5dec918e6f0e8c2fdc68115bd8747df18666ad832976d8e1b7bed77e6a26127a51a95df98b778a3107e1b0edd49e6fd50b547e6fa18a0b73dcb", @ANYRES32=r0, @ANYBLOB="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"], 0x404) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="05000000450000000000000600070000000300", @ANYRES32=r9, @ANYBLOB="080005000c000000080005000900000005005300000000001c00e700af9c63e5a52435bed416ac96cac0a5dc4069b7c27b0fe09614001780040001000400020004000400040003001c00e7000c64c06d5b9afe9364ab56818174c962f4264724d7b571df0a00e800ffffffffffff00000a00e80008021100000000001c00e700f6cabdd2272d231c614a31a454e7372e68d5b134e0f7ac8820001780040001000400040004000100040005000400050004000500040005000a00e80008021100000100001c00e7007b6605cd55008c10a6ecfdeae7df4f4c69f4ce0f2715ca660a00e8000802110000000000"], 0x108}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="11002a00dd0b6162636465666768696aff6d000010002d800a0000000202020202020000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="7490e8b2f1b948675d4a0700be000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf257f00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900001000001d0000000a00f50050505050505000000a00340002020202020200000a00f50008021100000100000a003400010101010101000014005500790f797105ff193ad50b1b230198aebe060048002b000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7b29, 0x18}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040040}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="04490280b812e58223ed2c179363926efd1afd19c86e628bebc9e86813ec188b1f312cf8b0f3fa935c21b8cf7628b18c57f02df3c9261aead4af0f70ac052c93451774"], 0x20}}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08002cbd7000fbdbdf2504000000ec44020003000000080002000700000030000680060005004e2100000800030000000000060005004e22000014000400fe8000000020000000000000000000aa080002000800000005000500810000000800020003000000"], 0x6c}}, 0x8180) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x0, 0x47}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041810) 34.822103779s ago: executing program 3 (id=1664): r0 = socket$inet6(0xa, 0x6, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r3 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x1000) io_setup(0x3, &(0x7f0000000180)=0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r5 = socket(0x22, 0x2, 0x2) ioctl$IMGETCOUNT(r5, 0x80044944, &(0x7f0000000000)) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020660145b01036c0000000000040000000000050001000600000005000400000000"], 0x54}}, 0x0) 32.013538143s ago: executing program 3 (id=1672): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffc5ffb7000000330000009560207a285f82086e4db9cae8bdd969240c9ce2157e803d8d09890f70e524da201af98b40a873b57027e312d0922769dbb1b6b4f5fd8d64ce63900540141b9c0d3ae7cee36b5b79c939e83b27aea2be199aa3b1c8d75e1c301c2dc07274eff11a2ddaa88f26bc11d898d549f48c32f3bd09000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) socket$nl_route(0x10, 0x3, 0x0) 21.793959791s ago: executing program 1 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0xc00) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) r2 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3701, 0x0, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r12, 0x5646, 0x0) 15.825987501s ago: executing program 0 (id=1697): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f0a5fc9000400fffffffffffffffffffeffff000000000000ff07858aff0105"], 0x22) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0604ea00000000000054679202"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc8, @any, 0x0, 0x1, 0x9, 0x1, 0x7ff, 0x2}}}, 0x14) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03c90058cd294fbcedc17ccfa4025a1e5777b4814b0663f4852deb97559d7624bd505e611ef8a55937ffffffffffffff7f293408287051702a79e7442da8de9e11bf6e9357e6edea2d50e82f055f6f923cd4e59e223193d487cfa619"], 0x5c) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ftruncate(r0, 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/121, 0x79}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x1608d87, 0x4, 0x10001, 0x4, 0x8000, 0x0, 0x5, 0x7, 0x7b7, 0x0, 0x414, 0x0, 0x10001, 0xfffffffffffff924, 0xffffffff7fffffff], 0x10000, 0x286381}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x80984120, &(0x7f0000000080)) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ab9000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000377000/0x4000)=nil, 0x4000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="044206000000000000"], 0x9) socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040504f1a6f10b"], 0x7) r2 = socket$xdp(0x2c, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000, 0x2}, 0x1c) 15.680124194s ago: executing program 1 (id=1699): close(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84000002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYBLOB="000125bd7000fbdbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2000c095) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="bc0000001000090500000000000000006f6d8864d22a3f2ffaa46c88bc940000002b0613e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f28bdda0a9423debbb86f9dba4a2dba4dbe076c02262800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e08000080040000000000"], 0xbc}], 0x1}, 0x0) unshare(0x2c060000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) 15.389117892s ago: executing program 1 (id=1701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400008024000100000000000100000000000000fdffff01000000000000000000000000000000001400040002000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r3], 0x22c}}, 0x0) 15.054545823s ago: executing program 1 (id=1702): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="f42a7e72c3d4eba891629578b6a313bd67f64b198201cc353680dd91a6f4bf871a8b6bc16a049f1491a5f52b1cc1589ca310bf3e05db72403388440dc9d62df83637f9480e56e8285705be7477e2d74d981a3ddda12114ef7655e262a285fb831ba905765b3fd9822b28dc9cc25fd0", 0x6f}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x404) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="05000000450000000000000600070000000300", @ANYRES32=r9, @ANYBLOB="080005000c000000080005000900000005005300000000001c00e700af9c63e5a52435bed416ac96cac0a5dc4069b7c27b0fe09614001780040001000400020004000400040003001c00e7000c64c06d5b9afe9364ab56818174c962f4264724d7b571df0a00e800ffffffffffff00000a00e80008021100000000001c00e700f6cabdd2272d231c614a31a454e7372e68d5b134e0f7ac8820001780040001000400040004000100040005000400050004000500040005000a00e80008021100000100001c00e7007b6605cd55008c10a6ecfdeae7df4f4c69f4ce0f2715ca660a00e8000802110000000000"], 0x108}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="11002a00dd0b6162636465666768696aff6d000010002d800a0000000202020202020000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="7490e8b2f1b948675d4a0700be000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf257f00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900001000001d0000000a00f50050505050505000000a00340002020202020200000a00f50008021100000100000a003400010101010101000014005500790f797105ff193ad50b1b230198aebe060048002b000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7b29, 0x18}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x54}, 0x1, 0x0, 0x0, 0x24040040}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="04490280b812e58223ed2c179363926efd1afd19c86e628bebc9e86813ec188b1f312cf8b0f3fa935c21b8cf7628b18c57f02df3c9261aead4af0f70ac052c93451774"], 0x20}}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08002cbd7000fbdbdf2504000000ec44020003000000080002000700000030000680060005004e2100000800030000000000060005004e22000014000400fe8000000020000000000000000000aa080002000800000005000500810000000800020003000000"], 0x6c}}, 0x8180) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x0, 0x47}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041810) 13.786665364s ago: executing program 2 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x98}}, 0x0) 13.685786596s ago: executing program 0 (id=1705): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="f42a7e72c3d4eba891629578b6a313bd67f64b198201cc353680dd91a6f4bf871a8b6bc16a049f1491a5f52b1cc1589ca310bf3e05db72403388440dc9d62df83637f9480e56e8285705be7477e2d74d981a3ddda12114ef7655e262a285fb831ba905765b3fd9822b28dc9cc25fd0", 0x6f}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ba5bccbf8cfdb5f2fd99e254685e7c0a9e170d854254942f8af81b66089104828bbbbf5dd514c51caf3287f2f3369bd3159d91639b94547a8fbd6a11c0d8af663d3a9b31d16d5161e2b1377c8883b9f47d7b4d174097e87350067f80880a5dcaa57708175e30e9b5281fefbc07ee08d5e618955fff87976ce1075a5c9aa756013d595001ed27e89fc6024e6d58f7c022ed7d6b8ece223841453325cd5e4c628c02b2a1dba81882d4b670e12b96a1943b0f80bf5e10e8d1ab0e5954b146a1dc386ab3c149604bdb814d0c7c768d381b160c8b50a21b5de07a483b5a604cf71241dfacaddc86d6fca5056970af08200c2696cb8c695c5eb120a1837f5a3a7a954a1ced93d3f7555e39c1f0a6b74833848e233755208b9f47776ded4e612de0fc672396422db5e1247591a7094e807f947dae5eda2097eefc08640824fd256d8cf291989d52acff567bcfb3f932af7a9ce8f4a84620eb4e5d8205bdb320d037e64f86fcd93bdebba0e3a8418730c55907cf9da4b28cc196085cc4a0d38c2b60fa09e54b172769d55ef477249048dfc119971c67d66d1c649147b7c11d6f20201f0096caa9225d7d3fac56e5eba612e99857b510418cb7c0d72eadfe731cf5f5729851c2f618c2aeed2c1bbaa2939e4fa2a785d7f3a2a555124e80142de12cab0d4bb8f3a71ce3352fd35630aa110803cf81ed6e594319e24b4a1e640ce6b9cfd2b6d9f03a01b776ec01921dd6b570d58e5d711609dc9f1ba8be6c1e56573a984297d784792f07"], 0x404) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="05000000450000000000000600070000000300", @ANYRES32=r9, @ANYBLOB="080005000c000000080005000900000005005300000000001c00e700af9c63e5a52435bed416ac96cac0a5dc4069b7c27b0fe09614001780040001000400020004000400040003001c00e7000c64c06d5b9afe9364ab56818174c962f4264724d7b571df0a00e800ffffffffffff00000a00e80008021100000000001c00e700f6cabdd2272d231c614a31a454e7372e68d5b134e0f7ac8820001780040001000400040004000100040005000400050004000500040005000a00e80008021100000100001c00e7007b6605cd55008c10a6ecfdeae7df4f4c69f4ce0f2715ca660a00e8000802110000000000"], 0x108}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="11002a00dd0b6162636465666768696aff6d000010002d800a0000000202020202020000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="7490e8b2f1b948675d4a0700be000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf257f00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900001000001d0000000a00f50050505050505000000a00340002020202020200000a00f50008021100000100000a003400010101010101000014005500790f797105ff193ad50b1b230198aebe060048002b000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7b29, 0x18}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x58}}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="04490280b812e58223ed2c179363926efd1afd19c86e628bebc9e86813ec188b1f312cf8b0f3fa935c21b8cf7628b18c57f02df3c9261aead4af0f70ac052c93451774"], 0x20}}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08002cbd7000fbdbdf2504000000ec44020003000000080002000700000030000680060005004e2100000800030000000000060005004e22000014000400fe8000000020000000000000000000aa080002000800000005000500810000000800020003000000"], 0x6c}}, 0x8180) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x0, 0x47}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041810) 13.389517898s ago: executing program 2 (id=1706): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x3}}, './bus\x00'}) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0xffffffffffffffff, 0x0, r2}, 0xc) lchown(0x0, 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt$nfc_llcp(r6, 0x118, 0x3, &(0x7f0000000140)=""/192, 0x20000057) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) sendmmsg$inet(r5, 0x0, 0x0, 0x8040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) 8.652414537s ago: executing program 1 (id=1708): syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x804000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002024207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440)="ed3e4bf3d7fa8f8452f3e788b7e9d798dc7804c393ecdc08dd00b86e84d135553da0405dcb9c995d9438b9ed9511217f355da97cec073ccc664f682ac188ad6d84a3a3", 0x43, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = dup(r2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000180)={0x0, r5}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="d9f6f30f2b5d560f01d1b8d6008ec80f011a66b9460800000f3266b8006000000f23c00f21f8663501000e000f23f866b8005000000f23d80f21f86635000000700f23f80f20120f2293", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000140)={0x0, r5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r3, 0x0) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 8.561875225s ago: executing program 0 (id=1709): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x178, 0x2, [@TCA_GRED_DPS={0x10}, @TCA_GRED_DPS={0x10}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x1}}, @TCA_GRED_STAB={0xfffffffffffffe37, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_PARMS={0x38}]}}]}, 0x1a8}}, 0x0) 8.360597038s ago: executing program 2 (id=1710): close(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84000002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYBLOB="000125bd7000fbdbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2000c095) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="bc0000001000090500000000000000006f6d8864d22a3f2ffaa46c88bc940000002b0613e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f28bdda0a9423debbb86f9dba4a2dba4dbe076c02262800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e0800008004000000000000"], 0xbc}], 0x1}, 0x0) unshare(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) 8.137718276s ago: executing program 2 (id=1712): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x178, 0x2, [@TCA_GRED_DPS={0x10}, @TCA_GRED_DPS={0x10}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x1}}, @TCA_GRED_STAB={0xfffffffffffffe37, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_PARMS={0x38}]}}]}, 0x1a8}}, 0x0) 7.922046319s ago: executing program 4 (id=1713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) 7.861736856s ago: executing program 4 (id=1714): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f0a5fc9000400fffffffffffffffffffeffff000000000000ff07858aff0105"], 0x22) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0604ea00000000000054679202"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc8, @any, 0x0, 0x1, 0x9, 0x1, 0x7ff, 0x2}}}, 0x14) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03c90058cd294fbcedc17ccfa4025a1e5777b4814b0663f4852deb97559d7624bd505e611ef8a55937ffffffffffffff7f293408287051702a79e7442da8de9e11bf6e9357e6edea2d50e82f055f6f923cd4e59e223193d487cfa619"], 0x5c) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ftruncate(r0, 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/121, 0x79}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x1608d87, 0x4, 0x10001, 0x4, 0x8000, 0x0, 0x5, 0x7, 0x7b7, 0x0, 0x414, 0x0, 0x10001, 0xfffffffffffff924, 0xffffffff7fffffff], 0x10000, 0x286381}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x80984120, &(0x7f0000000080)) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ab9000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000377000/0x4000)=nil, 0x4000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="044206000000000000"], 0x9) socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040504f1a6f10b"], 0x7) r2 = socket$xdp(0x2c, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000, 0x2}, 0x1c) 7.778774502s ago: executing program 1 (id=1715): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x4}, &(0x7f0000000540)=[{}, {}, {}, {}]) r1 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x354a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x8a, @mcast2}}}, 0xfffffffffffffcaa) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000), 0x4) sendto$inet(r3, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 7.607406623s ago: executing program 0 (id=1716): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x2d6f, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r3, 0x0, 0xfb68, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000002c0)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.961394303s ago: executing program 2 (id=1717): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$l2tp(0x2, 0x2, 0x73) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000001340)=@mgmt_frame=@beacon={{}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x6, 0x1}, {0x48}, {0x48}, {0x3}]}, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}, 0x37) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00L&', @ANYRES16=r3, @ANYBLOB="000326bd7000fcdbdf2503000000080002000200000008000100804d0db6"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) getsockname$l2tp(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10) syz_80211_inject_frame(&(0x7f0000001380), &(0x7f0000003c40)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_a, @broadcast, @initial, {0x8, 0x8}, "", @value={0x1, 0x0, 0x1, 0x1, 0x9}}, @a_msdu=[{@device_b, @device_b, 0xb9, "3c9a4704e97f90ac5ce67692fa8cb601327bf241c987222929db468261a7f8d70f129b58309a7ad8de6d1ff47712562665a115a085a3e47b5a5273e53fa13ee0087b13797a186e805e69409df0c6b0c35a55301d1a7f05a50e4418186ea6f9a111ced210b3b80742101944a72fde7425b2d70aea2ab5d33882e09c39734549ba1512cea7f405c11619ba190eaf7e5936bf68f26c682523c16056972b06d45c3395b05c11727841087c142225629bf3d97e5478050802ac2d15"}, {@device_b, @broadcast, 0xda, "76deb30350c22ae0fc9eea69719a874f2ab80a2eb81b6ba32c859861876c8a29b4d97d425927652437422acf7669c7416789e5d6821c5a905b91cfb4c8ebbc2d74150cc715b9b5b3ef9f111644671c44fc210fa7400694c626ab1be339029fb87a81ee5d7ff90b70737e5897a8f5ceb1942e09c136833b9e23114542ac1cb39f4e6e2110761d9be5417e4d242df411359d71149aadcfe8ec4ebc49383c0d85b96dab36566ea9ac4933451ba09c77cd7bee76ed28e323a59b4480f0fb83ca0ae4eac582a13414d7d425ebf82458aa91dfdf43c056558ef1f25fcc"}, {@device_a, @device_a, 0x75, "eafe8e4fab464cba60c7de2803686a0be9f36453c02f1197c3dfc5b84830414306a7987722d5921d72ff5bae089f99f56fb2485b031d6b51dfe034096f1ae9ced095b39f94dd8982eed1a38a00e4aae7045c9a72d0f8a864d23441c2e768a707181ae73377f4922e377a1ddeda51bbbfd7a5a40159"}, {@device_b, @device_b, 0x2, "ef8d"}, {@device_b, @broadcast, 0x94, "0761755dc2048e4883186357137ba9547c9340e15bee6d2c2983dae2ecd6cfc0b319852fa6d6423f7e3e2c97b7a3c9b9114c321dddec463c56e5030658ee791ed1aceed90b5b9e974e7899aba2bfca36993cba9f2729973830ce725c216223fd1fc652fe89888013bd1f7322ed0ff0fadd600a50679742bab8bc50803d6b0a984bd0bfe7bed4cfd0a75f73be36d763a23b9ac2e9"}, {@broadcast, @device_b, 0x1000, "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"}]}, 0x1312) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/69, 0x45}], 0x1}}], 0x2, 0x0, 0x0) bind$l2tp6(r6, &(0x7f0000001540)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x3}, 0x20) sendmmsg$inet6(r1, &(0x7f00000013c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000140)="6220fa1ccae970dbdbdcef032b2dfc42d4a89a7cee6fd18c6637aeed49bf07d42f2ffc38a535d187feb2349880384d909219e72fbdd57cfe9d8fdaab950a111231ff6a2c813efb3708c6fb379b9165b8b39b2386cb2b02bba04d84010014c7628025df859c1a8e1845b18909688aa27f5068cc38e0ba6bdbc7141ed3fdbf7a5fbeb4e183225b2a76243704bed2ddfbf0f59fc0a8906d8f2309b9ae6bb2454f7631d2aee731ca4921553d2273d2092f7fb26c276921bfd17a0fea856886626b2babbff67b80478f20", 0xc8}, {&(0x7f0000000240)="b18abe7d2d8cda46e84958b6a0967c96ca04e734c2fb5ccd501ed41e8395e2946e044cf826ea6b7198208cc8c3f87ba61410f9ee5fa2a57edc53f4b33050b015be4359b2d8c2a87c01b8477e75e258e64790a6ef68", 0x55}, {&(0x7f00000003c0)="75e6926ee1a5d8c9a5ba8efca6faaf7c753ac910e1950dfdbee31264e05b08145d88b581c3639e1c867a2e1080dd31d7900a5cf9214089f245f83fc3124cc86604c78d9aeae7c9de79c698ee26aee1477722878462339b9ab155", 0x5a}, {&(0x7f0000000440)="6e469b31fbb3d96c5284a41144eb98400524855ce73ac7d20b2c0f07fbbe7bb8ca535cdb0506189de20e2c9b7fb83cdc7778d4bcf90b66744cc8363e8245c6715d9938b67010e450c29058fb6e6a55125ab0277a073366be19178f55c88b2d7b4cc8b9cb905e7345f034564aa0e456111643fb956ec5f6a7c5d81eb51602136f0ec2be4b1292e3a41cfd8dc113a11ddfb99444b51b3247d864f008859b5b442eab3c85fac888f0eeebd0f7c136ca2c100d38938451c20384005a9795677e13c554f6f2b77261a572e8ae5ff789784e7d530a01675b404080ec3732ceabd8f773a1d74ea27a7a37d4fe2f8d", 0xeb}, {&(0x7f0000000540)="8298bbe6455473991a002195b62838cd6c1e56ab1aedadf30f831468341ae9a3c877045575580677b276fc2c2f3a1b56fdca406f51069be372cf990664ab9860772f53edd9280707c1b8ea66102db0461abd0257fe71d78724ac25d6d29ec925c516da29d11871dcebab65e06455bbe9ca13c73b344ad632aa8bf61dd56232c37b231b0d704a371f827cfe9ea00890f05b88e4c42a2d60b7e64be5e84cf1be4581c6db352cdf0ae40cf38fa16613237fcdc89faf10b779bd6b77d9baa192441888d009f124ce537f28876a819afba96a8d276cdb88b2587046996794c89ce260a4fd30c58f13433a259eed8fc26ff078d7f023d2e6", 0xf5}, {&(0x7f0000000640)="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", 0x256}], 0x6}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000008c0)="636abfce608a475a0b45a25707c106d6e906cc09cd0c8c4afc714515ca87d090d987af3ae650673176be0e042d6f5ce3098dc5ed98d809f44cfee04b5d275b", 0x3f}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000000900)="8d0aec5a5a4c2595374da154a369399a12d4e1af6af90eabf538ac91141d1dae560ccf769490a37888f4034e96f9992aa4d52a61b95a5bd5cbc094dea684c8b033752e164d240aac8f66be85c19b93ec03fd98e263c9e1", 0x57}], 0x3, &(0x7f00000009c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x48}}, {{&(0x7f0000000a40)={0xa, 0x4e22, 0x1, @loopback, 0x9d}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000a80)="153adf2281073848838498d21438fac056ddc6cecef014ca4a927143909b7de18f0149cf50cd49a0a3c32796", 0x2c}, {&(0x7f0000000ac0)="a55545da902fa04e04219be32385425a7d45a5592c05d4e30d4ebc2cd536d2b76eb63b8463a3bc9d45d13eb4e5c02fbde86db336daf57b41b9da2bf5d9affbff056fdaa496b2d510c19d9c136258b952f5d444bf78903e585b383df40b61159b708174a9a6f8ba5454faa46cf115e0a0c19df94b5c8f90d46eceb5770e66ad4df7d0a7b0e6059a464ff3682c389390b5c2", 0x91}, {&(0x7f0000000b80)="22677e1772bbd474b5c3cf04209b3eab5230170f9f1c5445668e538bc8e72eb894f732419823ba8c098f36aaeb02362a699f12be1ea7ee487d5b0246f1baa520b737a5ced041bbc8897eb322efff620c6a76e0a5fb41245c4deae56a911a46269ec891d4677a11e47f9284086e1d0d6938e7d224934a455abc7144e64a053ee39da1c9f92a4368ea00270664b17d08411df8d186339f91cd5a9939a69082924e52f77e1eca6c4be23d189cf998224934073ab8268adb252f56696729d897b8", 0xbf}, {&(0x7f0000000c40)="00f5384c072190a8a5f8faa97bfb34147a017dd4277971c34f846f7be518a0066e5bf0ea", 0x24}, {&(0x7f0000000c80)="814f5d29a1fa97364f8b6ecdfe61dcce2dccb77bec208339c845433091fb65003ca33305384e9d029f7e8c5fe1f5775e761a5d0f0cf698f878c64f5c4171f8aea0296560aa9799b2a3a3277944b4cea9263d8cb7ba79cbba0c189bb222f685411685a71c1c1b5f7a130c718f6520624d512fe7981e15b0307422700cb9c7e5f8e1d7e8682afda9f080427d31bd2b886ea8208d847c5b522bdfe1daeba4f4c8fd63698c34a56253", 0xa7}, {&(0x7f0000000d40)="2bff4ca04096ff2a3279ec5c2ac225311a0ab73764e29394fafc6e49601c420c48695cde8e73d8957d89996b1885d58359ca4d02bbca46fb0c7f1d7249a144720417d32f2ba7d303223da003a70008f788503a01fdaf437bbe3aaaff48bb5da4b42d2e9eb331d73e38cbdcd8d48cb2904449f8f33b8bc92cd1275590b6350fd907e0cca45dbeb98e98084af7c62e40f8d9c49dd501d873118bdf84b59c91b2cc1b4a01ad620d8f40eb03", 0xaa}], 0x6, &(0x7f0000000e80)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{&(0x7f0000000ec0)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="d7c967e14883c28d60ff2d744b6ca0d096e391a123c1daa0ec493517a4530b90baa6c5f23d9e0082d9ec722300a95a46dac51a8aee967b6dba152abe4a211931dcf8c7a0a3ca2d5b2e14844ec8fd26154394e728ae1674c37a415d21f8e1049a9703a40057fa16a30fa7bf2d0f2d4612be000fea6a3d9d4880bd2f52ad37b59f46e120", 0x83}, {&(0x7f0000002c40)="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", 0x1000}], 0x2, &(0x7f0000001000)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x18}}, {{&(0x7f0000001040)={0xa, 0x4e22, 0x80000001, @empty, 0x43}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001080)="ef21484182", 0x5}, {&(0x7f00000010c0)="e9a76e6af6af3d83592f2a54c664c8fd27aff0aa8d9ef17337181eb04cb2a3e6f5c0a2d0377811a29f6f71e874a7a643942e26032de8b3d9f00b343942f554902eaadf3fa643b19e7528b1c74ed4e9d9559e60f160f1bf0e002a123002d4ba9b9c873721deb1114ff0c46d", 0x6b}, {&(0x7f0000001140)="55b3c860dedf3536fefb5d7e4c750924c35c26c8d45a0cad2b92bee0c0284b7cecb05b029d620c19601e4e374e93d1aa1fe376f4436103c5ff93ebdfda0ea98335f6c3feea51fc759956ec3c2a8415bbe01fb6cd41843b507a0930e9a1124016a65c67b89b6837e3a5a449946face1505a283d424252baca46832792935005098698f5e2f0b8be5cb36d2166e90167a82cd85ca5c8a0e21edee636bb63c7a9aba63e1487d3462d640b06fe1ea6cd44f07656458c758d685a754e5fed", 0xbc}, {&(0x7f0000001200)="4113189e2628a94218a61f96a598905dc556e703ccdb6fdd4229ea67a48b742acb62bd", 0x23}], 0x4, &(0x7f0000001280)=[@hoplimit={{0x14, 0x29, 0x34, 0x3ffc}}, @dontfrag={{0x14, 0x29, 0x3e, 0x20008000}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x9b4}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x78}}, {{&(0x7f0000001300)={0xa, 0x4e21, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc8be}, 0x1c, &(0x7f0000001340), 0x0, &(0x7f0000001380)}}], 0x6, 0x4000) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.557895172s ago: executing program 0 (id=1719): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x3}}, './bus\x00'}) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) lstat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0xffffffffffffffff, 0x0, r2}, 0xc) lchown(0x0, 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt$nfc_llcp(r6, 0x118, 0x3, &(0x7f0000000140)=""/192, 0x20000057) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) sendmmsg$inet(r5, 0x0, 0x0, 0x8040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) 2.394813475s ago: executing program 4 (id=1720): r0 = open(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x7, 0x742, {0xffffffffffffffff}, {0xee01}, 0x9, 0x85}) r3 = getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000001e00)={0x1738, 0x40, 0x4, 0x70bd2a, 0x25dfdbfb, {0xe}, [@generic="6de1867373cda719c2791c969010de8a3508619109df26e6aaf9e9ae3fcdbacaa0b11b701e89227aa6d67f31704e946d1f5325066113a189eee25242456cefdd881510c3d5348f91f515f449452d8094f5740179ef20e875ca1f4616502cf9efab9ab91007e31cfe6e7a35a55b7a0fd0d03e3791295aa36e490661161db85f9887ccde4554451bb0fbc778740420966bc7813c29b5b4d515740e7dea361bf818aef8bae52fe83515ffac9cc830478639608134f54f2baab36080786dff23a6014fd43d97ca64096bddc8bd99f8fa4af73c2be55d5d61fccc", @typed={0x8, 0xa8, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x2d4, 0x58, 0x0, 0x1, [@generic="ece6a4fd808af20c164315a2a696efafa6eabf9192a6431b3fa3a80c1af13e46018f1f275680e667536e4199f6a4d5f019df8dac3942a395ec8401", @typed={0x5, 0xea, 0x0, 0x0, @str='\x00'}, @generic="d82fd2307d7cfdbc84e1d0db02ad8a2c6078989971831b9fc1ff3780c7763121dd295166227c264cb9255b5f1ce2b095a06058f6cdcb3e0c57540bf29f4e7eb6abd6d39f83ccefda1a51eb1de78fc28fda051a426f57c06007776837179dc333b8db799e5457fd9116b85eae7d78e21849ec085079a3ece4d25e86ed00677ee72349f8aa394b747dc46fd4dbdf46980668ab5d1b807c480f1c503d057ed7a525baeefe061178b3ceab0918f9b9", @generic="b3290ec86c1e03411c3e704bea56b933f1a34502c3a66ae5b2a16b72c8985990105b9365fd559236b4d403a33cf3ceeb747f0ff504f19c09f06046fab15cab274e53eebb8fa69baccd6a2c40c55c4d3744e62cd200a0d1841f3ebd7cd9f6b8d9248298e03f10aa76dfd0290fb8db1b6bb2d3ec65408a4594bc588f485f51ab39836e33318d082720366865291ae78261b1107ee2184871158c88c459870d6ed2dcb238e6410cbad22c5c97580cc517d89f9dda4ed1004cd655", @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x100}, @generic="59f3ec6c7812661a77ba00fdd137bc1eb572524da8957adeda8c8d3a77ce65e5ae00a23630780f8790545d9bea9f2762e4a3b2db27ecc24c963f33f1d2e257739859f6fe821eb0dee46eb7d123b73b68e7f371ad7607eb5e20a08f18c9e82dcea725f86e68335af44eccfded3430fad0d2dd71f1d0158dd61aa57e9bf73f48a0fbd4a39db1a352162e02d88314795afbed2118b8a59d510f114bd4bfee995e7014313ecafea23d1d23ec69b361e7355df11aedf55fb19c15a2bfe2b7a0eba2de585f4c101ab46162dafd51ad1c5b9c9810a8", @generic="c52986511ab3c560ba4601aee2b5633fc93fb4fc379a0697f1775037374bd2eca00ed58cd2840be9cd6f618698ec16ae17db43348c256c5802c4dc2b50c1b7ab8469ba266a594e7c87e393f155"]}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@private1}, @nested={0x1342, 0x13b, 0x0, 0x1, [@generic="0ad9b9037aaa44bcabd3eb2c447ce9d399ea67f00f64d16e1e500bda8460912cbc21f4cb5a33fc7fd6b1cf50d92bc2a575b6784faa32534bd5935aeae8cfd8efe9a59fc096ee135fb2fbb1f372aec340c2a1f3bf908679ed2f3d476afd41efe5be238a50f27b83136c197fa9b904792f935c35571121c7295d824c5cb56de61edf9169a2fc5b9d713f62c839f6cc14eef2acc782cb8f1ac2adfb53a082c5e3a8a3d2d2e46844cdf4a97d3adfc8998e21c60eb6a90fdd0cf0762202a44b3d9d77d618815c6665d531d5b72350de94b826f53dce4d43a85da70cefb9b4d55b0e690a29c011f27f7ff266bc4e6395ccd89603d910af0c642304", @typed={0xa, 0xad, 0x0, 0x0, @str=':*}@,\x00'}, @generic="50bd853768554bac518168c964cf40560d2a8ff7b3dfd4519cd2a5e7c036f6a516b4ffd9cdf8d6edc500e0ff8fef3575babccf8c81b317d667eb57d62104329553258bcba5c1c3e052d2a4ff3e4b11e679b052f1b29d5cc50ee971920a9cdc54474d51defde798c6b62aa5de1fb55e8d7c1d2e93ded8eef51e3fbca1d939687fab6935ca6fb2a095ffddb0ce679ed727554f8da4dd9b4d4024e1f6b3188de343dcaaf3fad85920694bd3ccfc46c0515d576095652b92d787b497ff26478cd2c05a01a93de1c940aa9e312841fa0ac367", @typed={0x8, 0x5e, 0x0, 0x0, @pid=r2}, @generic="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", @generic="bfc606db9775bc128de2e2e7d1e2e42577a5362b720fcb4f78802fb3739acf9f2ee1a4bfee9a21d501054e96b823ce245111f0830ba11655d8a75b466df71f0ebea820c561fab9a3cae267bd3d9dad8c3528ae3aa59cf0c0a6632c587705fbc25541c546da29e4d51716cad5149eb6d634229990eb8a6d6d2a64", @typed={0x8, 0xb, 0x0, 0x0, @pid=r3}, @generic="dc89aa3ed9c32557cbf0f46d0a7dd5a815103be5b876975a8c198dca5e6ea930e4efe7ca57c1d7d376b42a142245a05ab19fa91134b493b54201b12e0c1d8fa3228345ef6497095bd18a24c55f27e473de7b59", @generic="af43ed6a3050cfcf14b49da7e8eb83e5b89025f431c52a0d6d92c0f716918d9acb13ecec9aadc59b2e88da3089d4211c586cd23787cdde22392d3b7158fc4e18fe2854b12d3d232bcfcaabe496d7bb2f948f783568c767002b7ffe304e451505002a894b729016c0d711235eb0cae98707a6e6c0d8b42c192a0e219f25237f07627a120103", @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@local}]}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@remote}, @typed={0xe, 0x46, 0x0, 0x0, @str='syzkaller\x00'}]}, 0x1738}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) setsockopt(r1, 0x1, 0x4c, &(0x7f0000000100)="971a4c43", 0x4) listen(0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket(0x0, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) vmsplice(r7, &(0x7f00000009c0)=[{&(0x7f0000000580)="bf8f4d7229c7f570955abf853f947382b45fa8092fe4907b994d8e998b43f0feddaccb9dbce2ba89cfbbf04b5d25c2e7dad9f34080591bb00c65b232e6d8803d8d1ed3429d7b5f5c513de067c736581bdc2868a7ecc4e3220391a14954048e8cd1e4547c560bd767ca4630757b10eb0a15e1401e27c125bfbd2ce426840dbde6c6ec4fdcc6b3a8991bc257cc69ef78c8a4fd2cd1505580316a759b003616edadd1a30b0b0239cf8e6d7ef25fc7649d636ddaa12a59767dc0dae991402e9b6f26afabe9e8a5fbc9a4040c832f5300a5280a5734d9", 0xd4}, {&(0x7f00000003c0)="266a999d0d1deb082a492877a756200afc5689d4ff5af06b59a69b5216894239ac993c90749b850e4e793778b3fbff1fbbf1f26faf2c0b55089cdbb6b1c50651a0af6f1de4dd0a8468f0bedc7eb244f5cb6052c325f4175d7dc93c1a74cda0d1a253267cc71ed3d9", 0x68}, {&(0x7f0000000740)="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", 0xfd}, {&(0x7f00000004c0)}, {&(0x7f0000000840)="efcd9f0763fbeb916c0bfb0836b92fa0441e96f0e2ad2df9d0fd9ac1b90b652adb3095ff0a3b137e361b75dd88457e31aa46d88a271aa3957d404c6ba83e704beb7c827a4398890ec888e0f5c2807008cc98c4a0027ead88b9af877567cd25f9c4fd356f4fa3a5e691570429fd2a0c29e2aeca6bcf03e29eb71798ff407124e6ae14e8ad969e2997d94aafe76bf3028ece1765f8eb16729f289eadcf05a13274a362753bc6bafd7b4e01657b0908c0b369958503e5ebd71575ddbeb0127f892a58d8", 0xc2}, {&(0x7f0000000500)}, {&(0x7f0000000940)="80fdfbfc4be9", 0x6}, {&(0x7f0000000980)="68dfb6f674", 0x5}], 0x8, 0x2) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000012000100"/56, @ANYRES32=0x0, @ANYBLOB="010c00000000000000000800080003001100000000000000c94d37"], 0x54}}, 0x0) 1.213752752s ago: executing program 4 (id=1721): close(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84000002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYBLOB="000125bd7000fbdbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2000c095) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="bc0000001000090500000000000000006f6d8864d22a3f2ffaa46c88bc940000002b0613e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f28bdda0a9423debbb86f9dba4a2dba4dbe076c02262800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e0800008004000000000000"], 0xbc}], 0x1}, 0x0) unshare(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) 1.05188774s ago: executing program 4 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = semget$private(0x0, 0xc, 0x0) semtimedop(r1, &(0x7f0000000100)=[{0x0, 0x4}], 0x1, 0x0) semtimedop(r1, &(0x7f0000000080)=[{}, {}], 0x2, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) 851.220241ms ago: executing program 4 (id=1723): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="f42a7e72c3d4eba891629578b6a313bd67f64b198201cc353680dd91a6f4bf871a8b6bc16a049f1491a5f52b1cc1589ca310bf3e05db72403388440dc9d62df83637f9480e56e8285705be7477e2d74d981a3ddda12114ef7655e262a285fb831ba905765b3fd9822b28dc9cc25fd0", 0x6f}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="80340700ffffffffffff08021100000187272bc59a224900ffffffffffffff7f06002280000453ec897a040600f7f00e05002503000b040f0105720603030303030371070101ffffffd2037606018012000080ddab9a0e39463b2ba80935bf1b37a54e546794b021745027b18373942fd1d14cda4c9d44cbf31fea475a58fd92213d713d1be12280926891587c7665c5886726003876b5a8c6095cd4e599d4b58ac6049a000f90ad5b755f5011374ddbbe7a82fe24c484c7fddcb5ec48abf0d512b3d7e5dd651219d5dec918e6f0e8c2fdc68115bd8747df18666ad832976d8e1b7bed77e6a26127a51a95df98b778a3107e", @ANYRES32=r0, @ANYBLOB="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"], 0x404) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="05000000450000000000000600070000000300", @ANYRES32=r9, @ANYBLOB="080005000c000000080005000900000005005300000000001c00e700af9c63e5a52435bed416ac96cac0a5dc4069b7c27b0fe09614001780040001000400020004000400040003001c00e7000c64c06d5b9afe9364ab56818174c962f4264724d7b571df0a00e800ffffffffffff00000a00e80008021100000000001c00e700f6cabdd2272d231c614a31a454e7372e68d5b134e0f7ac8820001780040001000400040004000100040005000400050004000500040005000a00e80008021100000100001c00e7007b6605cd55008c10a6ecfdeae7df4f4c69f4ce0f2715ca660a00e8000802110000000000"], 0x108}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="11002a00dd0b6162636465666768696aff6d000010002d800a0000000202020202020000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="7490e8b2f1b948675d4a0700be000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf257f00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900001000001d0000000a00f50050505050505000000a00340002020202020200000a00f50008021100000100000a003400010101010101000014005500790f797105ff193ad50b1b230198aebe060048002b000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7b29, 0x18}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x54}, 0x1, 0x0, 0x0, 0x24040040}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="04490280b812e58223ed2c179363926efd1afd19c86e628bebc9e86813ec188b1f312cf8b0f3fa935c21b8cf7628b18c57f02df3c9261aead4af0f70ac052c93451774"], 0x20}}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08002cbd7000fbdbdf2504000000ec44020003000000080002000700000030000680060005004e2100000800030000000000060005004e22000014000400fe8000000020000000000000000000aa080002000800000005000500810000000800020003000000"], 0x6c}}, 0x8180) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x0, 0x47}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041810) 1.149874ms ago: executing program 2 (id=1724): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000c80)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2}, 0x0) socket(0x10, 0x803, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) close(r1) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', 0x0]) (fail_nth: 1) 0s ago: executing program 0 (id=1725): syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x804000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002024207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440)="ed3e4bf3d7fa8f8452f3e788b7e9d798dc7804c393ecdc08dd00b86e84d135553da0405dcb9c995d9438b9ed9511217f355da97cec073ccc664f682ac188ad6d84a3a3", 0x43, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = dup(r2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000180)={0x0, r5}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x3) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="d9f6f30f2b5d560f01d1b8d6008ec80f011a66b9460800000f3266b8006000000f23c00f21f8663501000e000f23f866b8005000000f23d80f21f86635000000700f23f80f20120f2293", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x3, 0x4}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000140)={0x0, r5}) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): (bridge_slave_1) entered disabled state [ 484.451983][ T1105] bridge_slave_0: left allmulticast mode [ 484.470661][ T1105] bridge_slave_0: left promiscuous mode [ 484.503665][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.523494][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.542126][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.558706][ T1105] bond0 (unregistering): Released all slaves [ 486.633035][ T8928] team0: Port device team_slave_0 added [ 486.668805][ T8928] team0: Port device team_slave_1 added [ 487.078844][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.086251][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.123420][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.225858][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.232963][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.262802][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.608165][ T8928] hsr_slave_0: entered promiscuous mode [ 487.628826][ T8928] hsr_slave_1: entered promiscuous mode [ 487.675126][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 487.722365][ T1105] hsr_slave_0: left promiscuous mode [ 487.766405][ T1105] hsr_slave_1: left promiscuous mode [ 487.773582][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.785093][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.802030][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.813337][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.850299][ T1105] veth1_macvtap: left promiscuous mode [ 487.855967][ T1105] veth0_macvtap: left promiscuous mode [ 487.861691][ T1105] veth1_vlan: left promiscuous mode [ 487.869159][ T1105] veth0_vlan: left promiscuous mode [ 488.564581][ T5147] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 488.875721][ T5147] usb 5-1: Using ep0 maxpacket: 16 [ 488.914738][ T5147] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 488.924539][ T5147] usb 5-1: config 0 has no interface number 0 [ 488.930710][ T5147] usb 5-1: config 0 interface 215 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 488.962235][ T5147] usb 5-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 488.978269][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.004186][ T5147] usb 5-1: Product: syz [ 489.008401][ T5147] usb 5-1: Manufacturer: syz [ 489.013031][ T5147] usb 5-1: SerialNumber: syz [ 489.035705][ T5147] usb 5-1: config 0 descriptor?? [ 489.471192][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 489.518132][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 490.106460][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.181195][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.588203][ T8733] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.689572][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.696878][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.825193][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.832471][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.059889][ T5145] usb 5-1: USB disconnect, device number 14 [ 491.079679][ T8688] veth0_vlan: entered promiscuous mode [ 491.248897][ T8688] veth1_vlan: entered promiscuous mode [ 491.620145][ T8688] veth0_macvtap: entered promiscuous mode [ 491.687366][ T8688] veth1_macvtap: entered promiscuous mode [ 491.927472][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.996901][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.048884][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.078585][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.145464][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.259233][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.288519][ T9133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.294145][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.315783][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.326775][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.340223][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.438291][ T8688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.459218][ T8688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.468858][ T8688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.478059][ T8688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.621615][ T8928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 492.652485][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.693597][ T8928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 492.739050][ T8928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.797791][ T8928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 492.879529][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.903161][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.002616][ T2842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.036728][ T2842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.289936][ T8733] veth0_vlan: entered promiscuous mode [ 494.787654][ T8733] veth1_vlan: entered promiscuous mode [ 494.822389][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.907875][ T9160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.069554][ T8733] veth0_macvtap: entered promiscuous mode [ 495.135489][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.246869][ T8733] veth1_macvtap: entered promiscuous mode [ 495.284297][ T5208] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 495.338837][ T9167] lo speed is unknown, defaulting to 1000 [ 495.344937][ T9167] lo speed is unknown, defaulting to 1000 [ 495.351754][ T9167] lo speed is unknown, defaulting to 1000 [ 495.381932][ T9167] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 495.423554][ T9167] lo speed is unknown, defaulting to 1000 [ 495.431825][ T9167] lo speed is unknown, defaulting to 1000 [ 495.439945][ T9167] lo speed is unknown, defaulting to 1000 [ 495.443965][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.566027][ T5208] usb 4-1: Using ep0 maxpacket: 16 [ 495.619711][ T5208] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 495.666467][ T5208] usb 4-1: config 0 has no interface number 0 [ 495.692589][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.784507][ T5208] usb 4-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 495.850354][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.917692][ T5208] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 495.939468][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.959068][ T5208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.974398][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.997562][ T5208] usb 4-1: Product: syz [ 496.001768][ T5208] usb 4-1: Manufacturer: syz [ 496.015383][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.034268][ T5208] usb 4-1: SerialNumber: syz [ 496.055946][ T5208] usb 4-1: config 0 descriptor?? [ 496.065604][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.123546][ T9167] lo speed is unknown, defaulting to 1000 [ 496.131814][ T9167] lo speed is unknown, defaulting to 1000 [ 496.262931][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.270182][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.374194][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.381450][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.417620][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.442384][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.463090][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.731755][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.776061][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.835931][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.863686][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.456969][ T8733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.498460][ T9193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.504762][ T5145] usb 4-1: USB disconnect, device number 11 [ 497.520619][ T8733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.538783][ T9195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.570268][ T8733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.583018][ T8733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.811399][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 498.112709][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.165911][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.223655][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.241077][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.134471][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.365334][ T8928] veth0_vlan: entered promiscuous mode [ 499.447641][ T8928] veth1_vlan: entered promiscuous mode [ 499.701735][ T8928] veth0_macvtap: entered promiscuous mode [ 499.759384][ T8928] veth1_macvtap: entered promiscuous mode [ 499.886862][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.923811][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.949943][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.997288][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.044322][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.069682][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.100772][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.134247][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.190221][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.279727][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.454397][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.142451][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.173015][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.346985][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.367976][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.385538][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.398125][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.412006][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.460722][ T8928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.470989][ T8928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.529072][ T8928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.565322][ T8928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.158891][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.174385][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.884456][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.965752][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.941409][ T2842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.999762][ T2842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.284322][ T5208] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 506.474632][ T5208] usb 5-1: Using ep0 maxpacket: 32 [ 506.489900][ T5208] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 506.512846][ T5208] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 506.547399][ T5208] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 506.569301][ T5208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.582199][ T5208] usb 5-1: Product: syz [ 506.680848][ T5208] usb 5-1: Manufacturer: syz [ 506.686715][ T5208] usb 5-1: SerialNumber: syz [ 507.482216][ T9312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.678345][ T5208] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 508.533462][ T9202] usb 5-1: USB disconnect, device number 15 [ 508.568660][ T9202] usblp0: removed [ 508.649923][ T5106] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 508.669392][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 509.274917][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 509.634754][ T29] audit: type=1400 audit(1720382033.736:323): avc: denied { write } for pid=4521 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.664296][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 509.672735][ T8] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 509.697174][ T8] usb 4-1: config 0 has no interface number 0 [ 509.716391][ T8] usb 4-1: config 0 interface 215 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 509.773508][ T29] audit: type=1400 audit(1720382033.736:324): avc: denied { remove_name } for pid=4521 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.805671][ T8] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 509.841412][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.880634][ T8] usb 4-1: Product: syz [ 509.895138][ T29] audit: type=1400 audit(1720382033.746:325): avc: denied { add_name } for pid=4521 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.897019][ T8] usb 4-1: Manufacturer: syz [ 509.958152][ T8] usb 4-1: SerialNumber: syz [ 510.000173][ T8] usb 4-1: config 0 descriptor?? [ 510.261447][ T29] audit: type=1400 audit(1720382034.366:326): avc: denied { read } for pid=9336 comm="syz.1.987" name="rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 510.393632][ T29] audit: type=1400 audit(1720382034.366:327): avc: denied { open } for pid=9336 comm="syz.1.987" path="/dev/rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 510.422175][ T29] audit: type=1400 audit(1720382034.416:328): avc: denied { ioctl } for pid=9336 comm="syz.1.987" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 512.355660][ T5145] usb 4-1: USB disconnect, device number 12 [ 512.506199][ T9363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.036242][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 514.180421][ T9202] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 514.625289][ T9202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 514.657988][ T9202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.739821][ T9202] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.819110][ T9202] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.835091][ T9202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.967589][ T9202] usb 5-1: config 0 descriptor?? [ 515.495532][ T9202] usbhid 5-1:0.0: can't add hid device: -71 [ 515.501606][ T9202] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 515.517521][ T9202] usb 5-1: USB disconnect, device number 16 [ 516.249998][ T9405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.278931][ T9388] kvm: kvm [9387]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x24df00000080 [ 516.307386][ T9388] kvm: kvm [9387]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4d0000000000 [ 516.332628][ T9388] kvm: kvm [9387]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4d4500000081 [ 516.341272][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 520.305615][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 520.700335][ T9467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.989531][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 525.237466][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 525.824642][ T5147] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 526.290141][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 526.371019][ T5147] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 526.404432][ T5147] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 526.413811][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.440153][ T5147] usb 2-1: config 0 descriptor?? [ 526.502886][ T9517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 526.724265][ T5208] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 526.787853][ T5147] usbhid 2-1:0.0: can't add hid device: -71 [ 526.815543][ T5147] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 526.844604][ T5147] usb 2-1: USB disconnect, device number 13 [ 526.940880][ T5208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 526.965030][ T5208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.019483][ T5208] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.223349][ T5208] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.232701][ T5208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.584850][ T5208] usb 1-1: config 0 descriptor?? [ 528.015223][ T5208] usbhid 1-1:0.0: can't add hid device: -71 [ 528.030595][ T5208] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 528.114660][ T5208] usb 1-1: USB disconnect, device number 15 [ 529.270655][ T9557] vivid-007: ================= START STATUS ================= [ 529.278508][ T9557] vivid-007: Enable Output Cropping: true [ 529.284397][ T9557] vivid-007: Enable Output Composing: true [ 529.290254][ T9557] vivid-007: Enable Output Scaler: true [ 529.296492][ T9557] vivid-007: Tx RGB Quantization Range: Automatic [ 529.303523][ T9557] vivid-007: Transmit Mode: HDMI [ 529.308563][ T9557] vivid-007: Display Present: true inactive [ 529.314649][ T9557] vivid-007: Hotplug Present: 0x00000001 [ 529.320329][ T9557] vivid-007: RxSense Present: 0x00000001 [ 529.326079][ T9557] vivid-007: EDID Present: 0x00000001 [ 529.331494][ T9557] vivid-007: ================== END STATUS ================== [ 529.506342][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 530.444371][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 530.714212][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 530.728740][ T8] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 530.764957][ T8] usb 3-1: config 0 has no interface number 0 [ 530.774210][ T8] usb 3-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 530.807138][ T8] usb 3-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 530.826629][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.856651][ T8] usb 3-1: Product: syz [ 530.866705][ T8] usb 3-1: Manufacturer: syz [ 530.875682][ T8] usb 3-1: SerialNumber: syz [ 530.928862][ T8] usb 3-1: config 0 descriptor?? [ 532.936533][ T5208] usb 3-1: USB disconnect, device number 14 [ 533.242022][ T25] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 533.454265][ T8] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 533.527516][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 533.558177][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.738984][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.753850][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.376553][ T25] usb 4-1: config 0 descriptor?? [ 534.396474][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 534.408015][ T9589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 534.435924][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 534.477849][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.499268][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.554632][ T8] usb 1-1: config 0 descriptor?? [ 534.573427][ T9592] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 534.719627][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 534.738737][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 534.786140][ T25] usb 4-1: USB disconnect, device number 13 [ 534.906232][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 534.935119][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 534.963556][ T8] usb 1-1: USB disconnect, device number 16 [ 535.140825][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 540.827493][ T9652] Bluetooth: MGMT ver 1.22 [ 540.875383][ T9652] overlayfs: failed to resolve './file2': -2 [ 541.494749][ T9655] kvm: kvm [9654]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2f000092b3 [ 541.536852][ T9655] kvm: kvm [9654]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2f000088b6 [ 541.664277][ T5208] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 541.884241][ T5208] usb 2-1: Using ep0 maxpacket: 16 [ 541.923317][ T5208] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 542.387002][ T5208] usb 2-1: config 0 has no interface number 0 [ 542.415450][ T5208] usb 2-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 542.748555][ T5208] usb 2-1: string descriptor 0 read error: -71 [ 542.784631][ T5208] usb 2-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 542.810156][ T9668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.829175][ T5208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.852838][ T5208] usb 2-1: config 0 descriptor?? [ 542.867833][ T5208] usb 2-1: can't set config #0, error -71 [ 542.905658][ T5208] usb 2-1: USB disconnect, device number 14 [ 543.327012][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 546.102072][ T9675] kvm: kvm [9673]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5830 [ 546.125406][ T9675] kvm: kvm [9673]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xd01c [ 546.886569][ T5106] Bluetooth: hci4: link tx timeout [ 546.893155][ T5106] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 548.073994][ T8] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 548.455318][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 548.466734][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.476664][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 548.485271][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.498812][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.508239][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.520632][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 548.531449][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 548.541984][ T8] usb 3-1: config 0 descriptor?? [ 548.548671][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 548.557452][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.576208][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 548.802509][ T930] usb 3-1: USB disconnect, device number 15 [ 548.828718][ T9712] lo speed is unknown, defaulting to 1000 [ 548.914333][ T5092] Bluetooth: hci4: command 0x0406 tx timeout [ 549.504213][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 549.781145][ T9729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.791193][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 549.793657][ T8] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 549.824707][ T8] usb 5-1: config 0 has no interface number 0 [ 549.830884][ T8] usb 5-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 549.887470][ T8] usb 5-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 549.928320][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.962964][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 550.002926][ T8] usb 5-1: Product: syz [ 550.025527][ T9712] chnl_net:caif_netlink_parms(): no params data found [ 550.028702][ T8] usb 5-1: Manufacturer: syz [ 550.063264][ T8] usb 5-1: SerialNumber: syz [ 550.077183][ T8] usb 5-1: config 0 descriptor?? [ 550.197006][ T5106] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 550.206476][ T5106] Bluetooth: hci4: Injecting HCI hardware error event [ 550.214943][ T5106] Bluetooth: hci4: hardware error 0x00 [ 550.595788][ T5092] Bluetooth: hci2: command tx timeout [ 550.612459][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.626672][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.642133][ T9712] bridge_slave_0: entered allmulticast mode [ 550.655164][ T9712] bridge_slave_0: entered promiscuous mode [ 550.677812][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.691350][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.704059][ T9712] bridge_slave_1: entered allmulticast mode [ 550.792294][ T9712] bridge_slave_1: entered promiscuous mode [ 551.667772][ T9712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.723472][ T9712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.833860][ T25] usb 5-1: USB disconnect, device number 17 [ 552.032666][ T5092] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 552.123127][ T9712] team0: Port device team_slave_0 added [ 552.203498][ T9712] team0: Port device team_slave_1 added [ 552.274667][ T5106] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 552.408893][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.438176][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.540711][ T9712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.583466][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.599765][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.659305][ T9712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.688198][ T5106] Bluetooth: hci2: command tx timeout [ 553.065932][ T9712] hsr_slave_0: entered promiscuous mode [ 553.124622][ T9712] hsr_slave_1: entered promiscuous mode [ 553.205909][ T9712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.255868][ T9712] Cannot create hsr debugfs directory [ 554.762464][ T5106] Bluetooth: hci2: command tx timeout [ 554.828535][ T9712] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.981935][ T9770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.028147][ T5145] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 555.045612][ T9712] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.237281][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 555.261036][ T5145] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.308507][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 555.328071][ T5145] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.356277][ T9712] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.385321][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.835209][ T5106] Bluetooth: hci2: command tx timeout [ 557.777084][ T5145] usb 2-1: config 0 descriptor?? [ 558.282101][ T5106] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 558.294356][ T5106] Bluetooth: hci1: Injecting HCI hardware error event [ 558.319869][ T5106] Bluetooth: hci1: hardware error 0x00 [ 559.777891][ T5145] usb 2-1: can't set config #0, error -71 [ 559.805069][ T5145] usb 2-1: USB disconnect, device number 15 [ 560.252374][ T9712] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.946828][ T2842] bridge_slave_1: left allmulticast mode [ 560.985929][ T2842] bridge_slave_1: left promiscuous mode [ 561.007373][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.039123][ T2842] bridge_slave_0: left allmulticast mode [ 561.063826][ T2842] bridge_slave_0: left promiscuous mode [ 561.089883][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.104328][ T5106] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 563.415578][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.422166][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.500382][ T9202] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 563.774380][ T9202] usb 3-1: Using ep0 maxpacket: 16 [ 563.872958][ T9202] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 563.881841][ T9202] usb 3-1: config 0 has no interface number 0 [ 563.889510][ T9202] usb 3-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 564.043569][ T9202] usb 3-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 564.054305][ T9202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.064249][ T9202] usb 3-1: Product: syz [ 564.068934][ T9202] usb 3-1: Manufacturer: syz [ 564.074629][ T9202] usb 3-1: SerialNumber: syz [ 564.181303][ T9202] usb 3-1: config 0 descriptor?? [ 564.944224][ T5208] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 565.170882][ T5208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 565.285954][ T5208] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.427531][ T5208] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.501872][ T5208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.556380][ T45] usb 3-1: USB disconnect, device number 16 [ 565.741050][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.755498][ T5208] usb 1-1: config 0 descriptor?? [ 565.784658][ T9819] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 565.811345][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.842773][ T2842] bond0 (unregistering): Released all slaves [ 565.905671][ T9712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 568.231177][ T5208] usbhid 1-1:0.0: can't add hid device: -71 [ 568.313935][ T5208] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 569.036591][ T9712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 569.234692][ T5208] usb 1-1: USB disconnect, device number 17 [ 570.598287][ T5106] Bluetooth: hci0: command 0x0406 tx timeout [ 571.767059][ T9712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 571.890703][ T9712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 572.396131][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.406376][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.414669][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.423129][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.566374][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 572.575456][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.646512][ T9848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.947298][ T2842] hsr_slave_0: left promiscuous mode [ 573.983088][ T2842] hsr_slave_1: left promiscuous mode [ 574.001902][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.018190][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.067549][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 574.085341][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.092802][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.185688][ T2842] veth1_macvtap: left promiscuous mode [ 574.242686][ T2842] veth0_macvtap: left promiscuous mode [ 574.368629][ T2842] veth1_vlan: left promiscuous mode [ 574.481847][ T2842] veth0_vlan: left promiscuous mode [ 574.595812][ T5092] Bluetooth: hci3: command tx timeout [ 575.153575][ T9860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.589192][ T9862] siw: device registration error -23 [ 576.364975][ T9864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.649376][ T2842] team0 (unregistering): Port device team_slave_1 removed [ 576.674220][ T5092] Bluetooth: hci3: command tx timeout [ 576.799883][ T9866] siw: device registration error -23 [ 577.059992][ T2842] team0 (unregistering): Port device team_slave_0 removed [ 577.794510][ T5147] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 577.992636][ T5147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 578.008793][ T5147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 578.023200][ T5147] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.053230][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.081609][ T5147] usb 3-1: config 0 descriptor?? [ 578.119568][ T9868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.332147][ T9840] lo speed is unknown, defaulting to 1000 [ 578.358776][ T5147] usbhid 3-1:0.0: can't add hid device: -71 [ 578.384989][ T5147] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 578.608893][ T5147] usb 3-1: USB disconnect, device number 17 [ 578.754292][ T5092] Bluetooth: hci3: command tx timeout [ 579.568162][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 579.613710][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.695947][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.889603][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.896861][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.549722][ T5208] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 580.744385][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 580.759335][ T8] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 580.774264][ T8] usb 5-1: config 0 has no interface number 0 [ 580.780438][ T8] usb 5-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 580.785491][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.798740][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.807648][ T8] usb 5-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 580.824590][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.832624][ T8] usb 5-1: Product: syz [ 580.837178][ T5092] Bluetooth: hci3: command tx timeout [ 580.844779][ T5208] usb 1-1: Using ep0 maxpacket: 16 [ 580.864387][ T8] usb 5-1: Manufacturer: syz [ 580.870132][ T8] usb 5-1: SerialNumber: syz [ 580.885247][ T5208] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 580.902198][ T8] usb 5-1: config 0 descriptor?? [ 580.964379][ T5208] usb 1-1: config 0 has no interface number 0 [ 580.987378][ T5208] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 581.056752][ T5208] usb 1-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 581.077300][ T5208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.085954][ T5208] usb 1-1: Product: syz [ 581.090351][ T5208] usb 1-1: Manufacturer: syz [ 581.091611][ T9889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.095738][ T5208] usb 1-1: SerialNumber: syz [ 581.116899][ T5208] usb 1-1: config 0 descriptor?? [ 581.181558][ T9840] chnl_net:caif_netlink_parms(): no params data found [ 581.593278][ T9891] siw: device registration error -23 [ 581.712360][ C1] hrtimer: interrupt took 53795 ns [ 582.150442][ T2842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.273236][ T5149] usb 5-1: USB disconnect, device number 18 [ 582.563752][ T2842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.413155][ T930] usb 1-1: USB disconnect, device number 18 [ 583.829672][ T9840] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.891019][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.914537][ T9910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.931467][ T9840] bridge_slave_0: entered allmulticast mode [ 584.085800][ T9840] bridge_slave_0: entered promiscuous mode [ 584.241988][ T2842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.371855][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1142'. [ 584.499308][ T9840] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.520878][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.540408][ T9840] bridge_slave_1: entered allmulticast mode [ 584.566576][ T9840] bridge_slave_1: entered promiscuous mode [ 584.697690][ T2842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.897345][ T9840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.935089][ T9840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.007355][ T9712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.136586][ T9840] team0: Port device team_slave_0 added [ 585.198098][ T9840] team0: Port device team_slave_1 added [ 585.386189][ T9917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.415588][ T9840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.424062][ T9840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.495196][ T9840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.527818][ T9840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.552978][ T9840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.586349][ T9840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.655578][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 586.604435][ T2842] bridge_slave_1: left allmulticast mode [ 586.610124][ T2842] bridge_slave_1: left promiscuous mode [ 586.623986][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.943209][ T2842] bridge_slave_0: left allmulticast mode [ 587.057915][ T2842] bridge_slave_0: left promiscuous mode [ 587.705484][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.864491][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 588.104298][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 588.131520][ T8] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 588.158593][ T8] usb 1-1: config 0 has no interface number 0 [ 588.180194][ T8] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 588.285024][ T8] usb 1-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 588.310692][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.320574][ T8] usb 1-1: Product: syz [ 588.327785][ T8] usb 1-1: Manufacturer: syz [ 588.333271][ T8] usb 1-1: SerialNumber: syz [ 588.352846][ T8] usb 1-1: config 0 descriptor?? [ 589.119053][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.202662][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.307865][ T2842] bond0 (unregistering): Released all slaves [ 589.748173][ T9840] hsr_slave_0: entered promiscuous mode [ 589.795317][ T9840] hsr_slave_1: entered promiscuous mode [ 589.823809][ T9840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.852352][ T9840] Cannot create hsr debugfs directory [ 590.200963][ T930] usb 1-1: USB disconnect, device number 19 [ 592.692455][ T9945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.904880][ T9712] veth0_vlan: entered promiscuous mode [ 592.911178][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 593.102018][ T9712] veth1_vlan: entered promiscuous mode [ 593.190467][ T2842] hsr_slave_0: left promiscuous mode [ 593.199871][ T2842] hsr_slave_1: left promiscuous mode [ 593.232937][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.263378][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.290638][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 593.291560][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.308945][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 593.324610][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.333160][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.341859][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 593.352277][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 593.359794][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.402209][ T2842] veth1_macvtap: left promiscuous mode [ 593.408646][ T2842] veth0_macvtap: left promiscuous mode [ 593.420766][ T2842] veth1_vlan: left promiscuous mode [ 593.468306][ T2842] veth0_vlan: left promiscuous mode [ 595.674246][ T5092] Bluetooth: hci0: command tx timeout [ 596.123080][ T2842] team0 (unregistering): Port device team_slave_1 removed [ 596.302502][ T2842] team0 (unregistering): Port device team_slave_0 removed [ 596.311807][ T9976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.481157][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 597.337495][ T9954] lo speed is unknown, defaulting to 1000 [ 597.573231][ T9712] veth0_macvtap: entered promiscuous mode [ 597.714529][ T5092] Bluetooth: hci0: command tx timeout [ 597.730974][ T9712] veth1_macvtap: entered promiscuous mode [ 597.904005][ T9993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.109423][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 598.219486][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.247910][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.271778][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.290934][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.303838][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.321754][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.341707][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.791223][ T2842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.305069][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.344472][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.380331][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.397739][T10015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.415458][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.425499][ T9712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.436104][ T9712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.449254][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.462927][ T9712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.471838][ T9712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.480797][ T9712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.491572][ T9712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.547116][ T2842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.642958][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'. [ 599.700187][ T2842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.763577][ T9954] chnl_net:caif_netlink_parms(): no params data found [ 599.795174][ T5092] Bluetooth: hci0: command tx timeout [ 599.828109][ T9840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 599.877812][ T2842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.921931][ T9840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 600.008507][ T9840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 600.033713][ T9840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 600.150354][ T2858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.169540][ T2858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.391092][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.594705][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.603468][ T9954] bridge_slave_0: entered allmulticast mode [ 600.618253][ T9954] bridge_slave_0: entered promiscuous mode [ 601.574755][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.747060][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.764419][ T9954] bridge_slave_1: entered allmulticast mode [ 601.782634][ T9954] bridge_slave_1: entered promiscuous mode [ 601.807175][ T2858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.874209][ T5092] Bluetooth: hci0: command tx timeout [ 601.874434][ T2858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.029717][ T9954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.225568][ T9954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.312540][ T2842] bridge_slave_1: left allmulticast mode [ 602.323306][ T2842] bridge_slave_1: left promiscuous mode [ 602.363259][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.405464][ T2842] bridge_slave_0: left allmulticast mode [ 602.442147][ T2842] bridge_slave_0: left promiscuous mode [ 602.481584][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.618080][T10051] overlayfs: failed to resolve './file2': -2 [ 603.073867][T10058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.270015][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 603.617710][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.631099][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.667239][ T2842] bond0 (unregistering): Released all slaves [ 603.845460][ T9954] team0: Port device team_slave_0 added [ 603.988089][T10079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.069333][ T9954] team0: Port device team_slave_1 added [ 604.226117][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 604.385383][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.404363][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.457166][ T9954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.653301][T10092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.763657][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 604.779056][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.817582][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.843635][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.110587][ T9954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.206538][ T5208] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 605.535595][ T5208] usb 1-1: Using ep0 maxpacket: 16 [ 605.567102][ T5208] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 605.604145][ T5208] usb 1-1: config 0 has no interface number 0 [ 605.624291][ T5208] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 605.658654][ T2842] hsr_slave_0: left promiscuous mode [ 605.663285][ T5208] usb 1-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 605.683985][ T2842] hsr_slave_1: left promiscuous mode [ 605.685775][ T5208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.709834][ T5208] usb 1-1: Product: syz [ 605.714783][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.722349][ T5208] usb 1-1: Manufacturer: syz [ 605.731480][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.734024][ T5208] usb 1-1: SerialNumber: syz [ 605.751965][ T5208] usb 1-1: config 0 descriptor?? [ 605.768867][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.777770][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.836274][ T2842] veth1_macvtap: left promiscuous mode [ 605.843162][ T2842] veth0_macvtap: left promiscuous mode [ 605.861184][ T2842] veth1_vlan: left promiscuous mode [ 605.876203][ T2842] veth0_vlan: left promiscuous mode [ 607.327553][ T2842] team0 (unregistering): Port device team_slave_1 removed [ 607.442846][ T2842] team0 (unregistering): Port device team_slave_0 removed [ 607.584495][ T5208] usb 1-1: USB disconnect, device number 20 [ 608.131431][T10121] overlayfs: failed to resolve './file2': -2 [ 609.362471][ T9954] hsr_slave_0: entered promiscuous mode [ 609.370685][T10129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.384332][ T9954] hsr_slave_1: entered promiscuous mode [ 609.563589][ T9840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.565128][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 609.835634][ T9840] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.905854][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.913048][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.019833][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.027085][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.065107][T10144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.272451][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.539449][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 612.501903][ T9954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.624836][ T5142] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 612.826845][ T9954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 612.885957][ T5106] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 612.900216][ T9954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.938780][ T9954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.984527][ T5142] usb 5-1: Using ep0 maxpacket: 16 [ 612.991288][ T9840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.000739][ T5142] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 613.012400][ T5142] usb 5-1: config 0 has no interface number 0 [ 613.055896][T10177] overlayfs: failed to resolve './file2': -2 [ 613.062100][ T5142] usb 5-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 613.107310][ T5142] usb 5-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 613.137439][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.166403][ T5142] usb 5-1: Product: syz [ 613.171690][ T5142] usb 5-1: Manufacturer: syz [ 613.185130][ T5142] usb 5-1: SerialNumber: syz [ 613.203149][ T5142] usb 5-1: config 0 descriptor?? [ 613.359803][ T9840] veth0_vlan: entered promiscuous mode [ 613.426719][ T9840] veth1_vlan: entered promiscuous mode [ 613.589013][T10184] overlayfs: failed to resolve './file2': -2 [ 613.702019][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.118853][ T9840] veth0_macvtap: entered promiscuous mode [ 614.267166][ T9840] veth1_macvtap: entered promiscuous mode [ 614.312821][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.426930][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.434164][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.477060][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.484330][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.500943][ T9840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.526468][ T9840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.539504][ T9840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.562312][ T9840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.611376][ T9840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.646632][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.668899][ T9840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.712107][ T5149] usb 5-1: USB disconnect, device number 19 [ 614.785598][ T9840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.850377][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 614.977630][ T9840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.081148][ T9840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.113904][ T9840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.141100][ T9840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.164590][ T9840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.199082][ T9840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.231761][ T9840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.248993][ T9840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.258064][ T9840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.267007][ T9840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.276897][ T9840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.605208][T10204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.654682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.673341][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.786901][T10215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.860863][ T9925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.886253][ T9925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.957937][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 617.241249][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.421405][ T9954] veth0_vlan: entered promiscuous mode [ 617.475804][ T9954] veth1_vlan: entered promiscuous mode [ 617.593759][ T9954] veth0_macvtap: entered promiscuous mode [ 617.658249][ T9954] veth1_macvtap: entered promiscuous mode [ 617.768082][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.963374][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.984388][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.000448][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.029069][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.044839][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.084185][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.127898][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.195073][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.241095][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.322467][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.359268][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.371297][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.381220][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.395880][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.412241][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.423035][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.441684][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.717752][ T9954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.766473][ T9954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.791792][ T9954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.844290][ T9954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.024452][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 620.314846][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 620.364742][ T25] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 620.428103][ T25] usb 1-1: config 0 has no interface number 0 [ 620.458848][ T25] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 620.502609][ T25] usb 1-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 620.551210][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.563822][ T25] usb 1-1: Product: syz [ 620.592309][ T25] usb 1-1: Manufacturer: syz [ 620.613756][ T25] usb 1-1: SerialNumber: syz [ 620.639286][ T25] usb 1-1: config 0 descriptor?? [ 620.731720][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.757674][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.930566][ T9357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.955177][ T9357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.238448][T10244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.364691][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 621.439294][ T5106] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 621.609926][ T29] audit: type=1400 audit(1720382145.716:329): avc: denied { ioctl } for pid=10248 comm="syz.1.1199" path="/dev/usbmon0" dev="devtmpfs" ino=701 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 621.820333][T10252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.469510][ T5145] usb 1-1: USB disconnect, device number 21 [ 626.403024][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.409773][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.831062][T10300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.398188][T10303] overlayfs: failed to resolve './file2': -2 [ 631.068107][T10321] siw: device registration error -23 [ 637.589089][T10357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.624313][ T5142] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 638.874440][ T5142] usb 2-1: Using ep0 maxpacket: 16 [ 638.958245][ T5142] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 639.018124][ T5142] usb 2-1: config 0 has no interface number 0 [ 639.085159][ T5142] usb 2-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 639.176159][ T5142] usb 2-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 639.223530][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.238432][T10374] overlayfs: failed to resolve './file2': -2 [ 639.263640][ T5142] usb 2-1: Product: syz [ 639.297754][ T5142] usb 2-1: Manufacturer: syz [ 639.334940][ T5142] usb 2-1: SerialNumber: syz [ 639.399407][ T5142] usb 2-1: config 0 descriptor?? [ 640.060030][T10393] vivid-007: ================= START STATUS ================= [ 640.067959][T10393] vivid-007: Enable Output Cropping: true [ 640.073753][T10393] vivid-007: Enable Output Composing: true [ 640.079663][T10393] vivid-007: Enable Output Scaler: true [ 640.085305][T10393] vivid-007: Tx RGB Quantization Range: Automatic [ 640.091789][T10393] vivid-007: Transmit Mode: HDMI [ 640.096845][T10393] vivid-007: Display Present: true inactive [ 640.102787][T10393] vivid-007: Hotplug Present: 0x00000001 [ 640.108502][T10393] vivid-007: RxSense Present: 0x00000001 [ 640.114612][T10393] vivid-007: EDID Present: 0x00000001 [ 640.120106][T10393] vivid-007: ================== END STATUS ================== [ 642.421936][ T5142] usb 2-1: can't set config #0, error -71 [ 642.606251][ T5142] usb 2-1: USB disconnect, device number 16 [ 644.471274][T10418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.810273][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 648.909938][T10454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.375357][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 649.715601][ T5092] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 649.731746][ T5092] Bluetooth: hci0: Injecting HCI hardware error event [ 649.749816][ T5092] Bluetooth: hci0: hardware error 0x00 [ 650.196618][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 650.204239][ T25] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 650.213141][ T25] usb 3-1: config 0 has no interface number 0 [ 650.221242][ T25] usb 3-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 650.249348][ T25] usb 3-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 650.262032][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.276903][ T25] usb 3-1: Product: syz [ 650.285368][ T25] usb 3-1: Manufacturer: syz [ 650.290044][ T25] usb 3-1: SerialNumber: syz [ 650.348125][ T25] usb 3-1: config 0 descriptor?? [ 650.760693][T10465] overlayfs: failed to resolve './file2': -2 [ 651.099494][T10474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.390453][ T783] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 651.535434][T10479] siw: device registration error -23 [ 651.926996][ T783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 652.064247][ T5092] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 652.120244][ T783] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.150685][ T783] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.160200][ T783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.176537][ T783] usb 5-1: config 0 descriptor?? [ 652.195322][T10470] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 652.439341][ T783] usbhid 5-1:0.0: can't add hid device: -71 [ 652.454457][ T783] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 652.636299][ T783] usb 5-1: USB disconnect, device number 20 [ 654.461161][ T5145] usb 3-1: USB disconnect, device number 18 [ 654.533084][T10503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.235272][T10510] overlayfs: failed to resolve './file2': -2 [ 657.355985][T10536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.457332][ T783] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 657.960528][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 658.024766][ T783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.050758][ T783] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.069916][ T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.218858][ T783] usb 4-1: config 0 descriptor?? [ 658.225337][T10532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 658.249339][T10541] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1278'. [ 658.309813][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 658.456991][ T783] usbhid 4-1:0.0: can't add hid device: -71 [ 658.472286][ T783] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 658.492476][ T783] usb 4-1: USB disconnect, device number 14 [ 659.126123][T10554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.587995][ T783] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 660.854206][ T783] usb 2-1: Using ep0 maxpacket: 16 [ 660.923556][ T783] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 660.970432][ T783] usb 2-1: config 0 has no interface number 0 [ 660.998122][ T783] usb 2-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 661.022122][ T783] usb 2-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 661.033920][ T783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.057760][ T783] usb 2-1: Product: syz [ 661.061990][ T783] usb 2-1: Manufacturer: syz [ 661.084387][ T783] usb 2-1: SerialNumber: syz [ 661.122886][ T783] usb 2-1: config 0 descriptor?? [ 661.621720][T10592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.747376][T10592] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1293'. [ 661.791205][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 662.284403][ T25] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 662.453556][ T25] usb 4-1: device descriptor read/64, error -71 [ 662.507406][ T5189] usb 2-1: USB disconnect, device number 17 [ 662.619905][T10601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.755658][ T25] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 662.944433][ T25] usb 4-1: device descriptor read/64, error -71 [ 663.149063][ T25] usb usb4-port1: attempt power cycle [ 663.705279][ T25] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 663.768686][ T25] usb 4-1: device descriptor read/8, error -71 [ 663.775131][ T5189] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 664.094541][ T5189] usb 2-1: Using ep0 maxpacket: 32 [ 664.102512][ T5189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 664.113252][ T5189] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 664.134700][ T25] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 664.146862][ T5189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 664.164410][ T5189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.196908][ T25] usb 4-1: device descriptor read/8, error -71 [ 664.213410][ T5189] usb 2-1: Product: syz [ 664.219073][ T5189] usb 2-1: Manufacturer: syz [ 664.229342][ T5189] usb 2-1: SerialNumber: syz [ 664.326521][ T25] usb usb4-port1: unable to enumerate USB device [ 664.674512][ T5189] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 665.842374][T10628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.695906][T10628] netlink: 'syz.0.1305': attribute type 72 has an invalid length. [ 666.733527][T10628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1305'. [ 666.776400][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 667.273616][ T5147] usb 2-1: USB disconnect, device number 18 [ 667.340619][ T5147] usblp0: removed [ 667.541283][T10647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.620238][T10669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.980188][T10671] siw: device registration error -23 [ 671.032834][T10682] siw: device registration error -23 [ 672.994242][ T5106] Bluetooth: hci2: command 0x0406 tx timeout [ 673.031005][T10689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.364187][T10697] siw: device registration error -23 [ 675.108741][T10716] siw: device registration error -23 [ 675.874578][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.103142][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 676.538960][T10742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.829956][T10744] siw: device registration error -23 [ 677.486015][T10738] kvm: kvm [10737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x1df00000508 [ 677.499664][T10738] kvm: kvm [10737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x23df00000082 [ 677.528056][T10738] kvm: kvm [10737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x344500000000 [ 677.612798][T10738] kvm_intel: kvm [10737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x464500000083 [ 677.652282][T10738] kvm: kvm [10737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x520000000096 [ 677.700669][T10738] kvm: kvm [10737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x524500000000 [ 677.729249][T10738] kvm: kvm [10737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x59000000008e [ 678.766277][T10767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.858867][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 679.539721][T10777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.829051][T10780] siw: device registration error -23 [ 681.134286][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 681.777650][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 681.794943][T10792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.801937][ T45] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 681.813022][ T45] usb 4-1: config 0 has no interface number 0 [ 681.839751][ T45] usb 4-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 681.911429][ T45] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 681.929075][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.939802][ T45] usb 4-1: Product: syz [ 681.944015][ T45] usb 4-1: Manufacturer: syz [ 681.949371][ T45] usb 4-1: SerialNumber: syz [ 681.965466][ T45] usb 4-1: config 0 descriptor?? [ 682.050808][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 682.144971][T10803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.275663][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 682.561198][T10805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.600546][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 682.672095][T10807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.750241][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 683.518585][T10816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.589134][ T5147] usb 4-1: USB disconnect, device number 19 [ 683.821877][T10816] lo speed is unknown, defaulting to 1000 [ 683.830199][T10816] lo speed is unknown, defaulting to 1000 [ 683.836622][T10816] lo speed is unknown, defaulting to 1000 [ 683.964895][T10816] infiniband syz1: set active [ 683.969923][T10816] infiniband syz1: added lo [ 683.980106][ T5145] lo speed is unknown, defaulting to 1000 [ 684.031822][T10816] RDS/IB: syz1: added [ 684.036834][T10816] smc: adding ib device syz1 with port count 1 [ 684.043155][T10816] smc: ib device syz1 port 1 has pnetid [ 684.053016][T10816] lo speed is unknown, defaulting to 1000 [ 684.120957][ T5145] lo speed is unknown, defaulting to 1000 [ 684.228638][T10816] lo speed is unknown, defaulting to 1000 [ 684.385399][T10816] lo speed is unknown, defaulting to 1000 [ 684.519361][T10816] lo speed is unknown, defaulting to 1000 [ 684.651070][T10816] lo speed is unknown, defaulting to 1000 [ 686.279055][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.285652][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.013324][T10870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.039876][T10872] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 688.532065][T10875] rdma_rxe: rxe_newlink: failed to add lo [ 689.936755][ T5147] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 690.884696][ T5147] usb 2-1: Using ep0 maxpacket: 32 [ 691.030976][ T5147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 691.041655][ T5147] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 691.058643][ T5147] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 691.097506][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.127373][ T5147] usb 2-1: Product: syz [ 691.147617][ T5147] usb 2-1: Manufacturer: syz [ 691.171990][ T5147] usb 2-1: SerialNumber: syz [ 691.283425][T10888] overlayfs: failed to resolve './file2': -2 [ 691.495556][ T5147] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 691.547654][ T29] audit: type=1400 audit(1720382215.626:330): avc: denied { read } for pid=10896 comm="syz.3.1378" path="socket:[41520]" dev="sockfs" ino=41520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 692.271478][T10906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.377690][ T5147] usb 2-1: USB disconnect, device number 19 [ 694.401504][ T5147] usblp0: removed [ 694.558904][T10916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.878782][T10921] rdma_rxe: rxe_newlink: failed to add lo [ 695.325445][ T5092] Bluetooth: hci2: unexpected event for opcode 0x041c [ 695.735264][ T5092] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 698.597302][ T5092] Bluetooth: hci3: command 0x0406 tx timeout [ 698.768239][ T930] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 698.955351][T10966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.004329][ T5142] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 699.122031][ T930] usb 5-1: Using ep0 maxpacket: 16 [ 699.155227][ T930] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 699.286496][T10971] siw: device registration error -23 [ 699.804267][ T5106] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 699.814014][ T5106] Bluetooth: hci2: Injecting HCI hardware error event [ 699.826490][ T5092] Bluetooth: hci2: hardware error 0x00 [ 699.833884][ T930] usb 5-1: config 0 has no interface number 0 [ 699.903791][ T930] usb 5-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 699.934191][ T5142] usb 4-1: Using ep0 maxpacket: 32 [ 699.966352][ T5142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 700.006144][ T930] usb 5-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 700.015859][ T5142] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 700.034543][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.045653][ T930] usb 5-1: Product: syz [ 700.049878][ T930] usb 5-1: Manufacturer: syz [ 700.055587][ T930] usb 5-1: SerialNumber: syz [ 700.064501][ T5142] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 700.075415][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.088388][ T930] usb 5-1: config 0 descriptor?? [ 700.102232][ T5142] usb 4-1: Product: syz [ 700.111802][ T5142] usb 4-1: Manufacturer: syz [ 700.124260][ T5142] usb 4-1: SerialNumber: syz [ 700.412423][ T5142] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 701.452400][ T930] usb 5-1: USB disconnect, device number 21 [ 701.781979][ T5145] usb 4-1: USB disconnect, device number 20 [ 701.828160][ T5145] usblp0: removed [ 701.874605][ T5092] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 702.904573][T11003] vivid-007: ================= START STATUS ================= [ 702.912345][T11003] vivid-007: Enable Output Cropping: true [ 702.918485][T11003] vivid-007: Enable Output Composing: true [ 702.924499][T11003] vivid-007: Enable Output Scaler: true [ 702.931106][T11003] vivid-007: Tx RGB Quantization Range: Automatic [ 702.938503][T11003] vivid-007: Transmit Mode: HDMI [ 702.943590][T11003] vivid-007: Display Present: true inactive [ 702.949792][T11003] vivid-007: Hotplug Present: 0x00000001 [ 702.955794][T11003] vivid-007: RxSense Present: 0x00000001 [ 702.961661][T11003] vivid-007: EDID Present: 0x00000001 [ 702.967385][T11003] vivid-007: ================== END STATUS ================== [ 703.374180][ T5147] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 703.501327][T11008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.544213][ T5147] usb 1-1: device descriptor read/64, error -71 [ 703.844521][ T5147] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 703.933854][T11012] siw: device registration error -23 [ 704.476859][ T5147] usb 1-1: device descriptor read/64, error -71 [ 704.624884][ T5147] usb usb1-port1: attempt power cycle [ 705.124311][ T5147] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 705.168313][ T5147] usb 1-1: device descriptor read/8, error -71 [ 705.410910][T11028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.484804][ T5147] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 705.784186][ T5147] usb 1-1: device not accepting address 25, error -71 [ 705.834819][ T5147] usb usb1-port1: unable to enumerate USB device [ 705.974990][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 707.276532][T11054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.824530][T11060] siw: device registration error -23 [ 708.110074][T11064] vivid-007: ================= START STATUS ================= [ 708.118309][T11064] vivid-007: Enable Output Cropping: true [ 708.124354][T11064] vivid-007: Enable Output Composing: true [ 708.130302][T11064] vivid-007: Enable Output Scaler: true [ 708.136106][T11064] vivid-007: Tx RGB Quantization Range: Automatic [ 708.142665][T11064] vivid-007: Transmit Mode: HDMI [ 708.147986][T11064] vivid-007: Display Present: true inactive [ 708.155078][T11064] vivid-007: Hotplug Present: 0x00000001 [ 708.162019][T11064] vivid-007: RxSense Present: 0x00000001 [ 708.168089][T11064] vivid-007: EDID Present: 0x00000001 [ 708.173697][T11064] vivid-007: ================== END STATUS ================== [ 708.352682][ T45] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 708.576847][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 65535, setting to 64 [ 708.620936][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 708.912313][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 708.923189][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.040863][ T45] usb 5-1: config 0 descriptor?? [ 709.047179][T11048] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 709.204301][ T930] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 709.254345][ T5147] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 709.369727][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 709.384265][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 709.405221][ T45] usb 5-1: USB disconnect, device number 22 [ 709.418725][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64 [ 709.446025][ T930] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 709.473124][ T5147] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.502773][T11080] siw: device registration error -23 [ 709.560404][ T930] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 709.639097][ T5147] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 709.741223][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.837998][ T5147] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 709.985751][ T930] usb 1-1: config 0 descriptor?? [ 709.993506][T11073] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 710.003087][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.043732][ T5147] usb 4-1: config 0 descriptor?? [ 710.612868][ T5147] usb 4-1: string descriptor 0 read error: -71 [ 710.839014][ T5147] usb 4-1: USB disconnect, device number 21 [ 711.171121][ T930] usbhid 1-1:0.0: can't add hid device: -71 [ 711.209688][ T930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 711.240104][ T930] usb 1-1: USB disconnect, device number 26 [ 711.974683][T11100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.248481][T11102] siw: device registration error -23 [ 713.541950][T11112] vivid-007: ================= START STATUS ================= [ 713.549827][T11112] vivid-007: Enable Output Cropping: true [ 713.560577][T11112] vivid-007: Enable Output Composing: true [ 713.566609][T11112] vivid-007: Enable Output Scaler: true [ 713.572292][T11112] vivid-007: Tx RGB Quantization Range: Automatic [ 713.580256][T11112] vivid-007: Transmit Mode: HDMI [ 713.586463][T11112] vivid-007: Display Present: true inactive [ 713.592620][T11112] vivid-007: Hotplug Present: 0x00000001 [ 713.598487][T11112] vivid-007: RxSense Present: 0x00000001 [ 713.604418][T11112] vivid-007: EDID Present: 0x00000001 [ 713.610008][T11112] vivid-007: ================== END STATUS ================== [ 714.521988][ T5092] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 714.699851][T11120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.256922][ T930] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 716.556791][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 716.617186][ T930] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 716.627157][ T930] usb 4-1: config 0 has no interface number 0 [ 716.634233][ T930] usb 4-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 716.740246][ T930] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 716.749834][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.777821][ T930] usb 4-1: Product: syz [ 716.784576][ T930] usb 4-1: Manufacturer: syz [ 716.790152][ T930] usb 4-1: SerialNumber: syz [ 717.039022][ T930] usb 4-1: config 0 descriptor?? [ 717.367910][ T930] usb 4-1: USB disconnect, device number 22 [ 717.387524][T11138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.416280][T11135] vivid-007: ================= START STATUS ================= [ 717.424012][T11135] vivid-007: Enable Output Cropping: true [ 717.430010][T11135] vivid-007: Enable Output Composing: true [ 717.435961][T11135] vivid-007: Enable Output Scaler: true [ 717.441554][T11135] vivid-007: Tx RGB Quantization Range: Automatic [ 717.448103][T11135] vivid-007: Transmit Mode: HDMI [ 717.453087][T11135] vivid-007: Display Present: true inactive [ 717.459128][T11135] vivid-007: Hotplug Present: 0x00000001 [ 717.465098][T11135] vivid-007: RxSense Present: 0x00000001 [ 717.471736][T11135] vivid-007: EDID Present: 0x00000001 [ 717.478060][T11135] vivid-007: ================== END STATUS ================== [ 717.512337][T11141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.552116][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 719.143540][T11153] overlayfs: failed to resolve './file2': -2 [ 719.678769][T11169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.033800][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'. [ 720.129597][T11178] syz1: rxe_newlink: already configured on lo [ 722.704457][ T5189] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 723.034506][ T5189] usb 3-1: Using ep0 maxpacket: 16 [ 723.055270][ T5189] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 723.094170][ T5189] usb 3-1: config 0 has no interface number 0 [ 723.120439][ T5189] usb 3-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 723.178796][ T5189] usb 3-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 723.216161][ T5189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.289248][ T5189] usb 3-1: Product: syz [ 723.313329][ T5189] usb 3-1: Manufacturer: syz [ 723.319743][ T5189] usb 3-1: SerialNumber: syz [ 723.357365][ T5189] usb 3-1: config 0 descriptor?? [ 723.623190][ T5189] usb 3-1: USB disconnect, device number 19 [ 724.366148][T11202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.595511][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 724.800920][T11205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.076796][T11208] siw: device registration error -23 [ 725.818422][T11213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.810994][T11220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.445109][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'. [ 728.153690][T11238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.409662][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 728.533456][T11242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.946889][T11250] siw: device registration error -23 [ 729.532981][T11249] siw: device registration error -23 [ 730.558077][T11257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.211324][T11271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.428647][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 733.185781][T11291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.257186][T11293] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 734.000945][T11295] siw: device registration error -23 [ 734.032205][T11296] rdma_rxe: rxe_newlink: failed to add lo [ 734.095430][T11301] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 734.638295][T11310] rdma_rxe: rxe_newlink: failed to add lo [ 735.194500][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1491'. [ 736.559198][T11322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.608491][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 738.772527][T11347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.030175][T11357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.565369][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 741.851592][T11371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.920077][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 742.902545][T11392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.428924][T11404] kvm: kvm [11403]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 746.458254][T11415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.461387][T11404] kvm: kvm [11403]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 746.801511][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'. [ 747.261442][T11429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.357389][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 747.543937][T11434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.722725][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.729260][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.812693][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 748.058828][T11445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.727604][ T29] audit: type=1400 audit(1720382272.766:331): avc: denied { write } for pid=11451 comm="syz.0.1529" path="socket:[43647]" dev="sockfs" ino=43647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 748.750847][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.020224][ T29] audit: type=1400 audit(1720382274.116:332): avc: denied { open } for pid=11466 comm="syz.1.1532" path="/dev/ptyq7" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 750.162957][ T29] audit: type=1400 audit(1720382274.176:333): avc: denied { ioctl } for pid=11466 comm="syz.1.1532" path="/dev/ptyq7" dev="devtmpfs" ino=128 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 750.187995][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.304496][ T5147] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 750.534248][ T5147] usb 3-1: Using ep0 maxpacket: 32 [ 750.551253][ T5147] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 750.588797][ T5147] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 750.628077][ T5147] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 750.669205][ T5147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.705785][ T5147] usb 3-1: Product: syz [ 750.710011][ T5147] usb 3-1: Manufacturer: syz [ 750.788294][ T5147] usb 3-1: SerialNumber: syz [ 750.983338][T11481] FAULT_INJECTION: forcing a failure. [ 750.983338][T11481] name failslab, interval 1, probability 0, space 0, times 1 [ 751.019296][T11481] CPU: 0 PID: 11481 Comm: syz.0.1534 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 751.029510][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 751.039598][T11481] Call Trace: [ 751.042894][T11481] [ 751.045888][T11481] dump_stack_lvl+0x16c/0x1f0 [ 751.050606][T11481] should_fail_ex+0x497/0x5b0 [ 751.055317][T11481] should_failslab+0x9/0x20 [ 751.059862][T11481] __kmalloc_noprof+0xcf/0x410 [ 751.064645][T11481] ? __pfx_lock_acquire+0x10/0x10 [ 751.069685][T11481] tomoyo_realpath_from_path+0xb9/0x720 [ 751.075238][T11481] ? tomoyo_profile+0x47/0x60 [ 751.079917][T11481] tomoyo_path_number_perm+0x245/0x590 [ 751.085384][T11481] ? tomoyo_path_number_perm+0x232/0x590 [ 751.091023][T11481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 751.097019][T11481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 751.103004][T11481] ? __fget_files+0x256/0x400 [ 751.107684][T11481] security_file_ioctl+0x75/0xc0 [ 751.112620][T11481] __x64_sys_ioctl+0xbb/0x220 [ 751.117336][T11481] do_syscall_64+0xcd/0x250 [ 751.121844][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.127750][T11481] RIP: 0033:0x7f6807575bd9 [ 751.132170][T11481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.151776][T11481] RSP: 002b:00007f6806fff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.160191][T11481] RAX: ffffffffffffffda RBX: 00007f6807703f60 RCX: 00007f6807575bd9 [ 751.168160][T11481] RDX: 0000000020000000 RSI: 0000000040204706 RDI: 0000000000000003 [ 751.176129][T11481] RBP: 00007f6806fff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 751.184105][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.192073][T11481] R13: 000000000000000b R14: 00007f6807703f60 R15: 00007ffec8ae7118 [ 751.200050][T11481] [ 751.203217][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.211855][T11481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 751.367881][ T5147] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 752.063748][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.245265][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 752.782927][ T45] usb 3-1: USB disconnect, device number 20 [ 752.823032][ T45] usblp0: removed [ 752.969465][ T5189] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 753.174377][ T5189] usb 4-1: Using ep0 maxpacket: 32 [ 753.227305][ T5189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 753.284264][ T5189] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 753.340832][ T5189] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 753.373045][ T5189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.395494][ T5189] usb 4-1: Product: syz [ 753.442005][ T5189] usb 4-1: Manufacturer: syz [ 753.472251][ T5189] usb 4-1: SerialNumber: syz [ 753.760909][ T5189] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 754.206518][ T45] usb 4-1: USB disconnect, device number 23 [ 754.249698][ T45] usblp0: removed [ 754.613630][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.676324][ T5106] Bluetooth: hci3: SCO packet for unknown connection handle 1039 [ 755.065609][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 755.801397][ T29] audit: type=1400 audit(1720382279.856:334): avc: denied { connect } for pid=11534 comm="syz.2.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 755.983780][ T29] audit: type=1400 audit(1720382279.936:335): avc: denied { write } for pid=11534 comm="syz.2.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 756.134461][T11544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.258972][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 762.247305][T11577] overlayfs: failed to resolve './file2': -2 [ 764.415611][T11594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.169034][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 765.297724][ T29] audit: type=1400 audit(1720382289.406:336): avc: denied { bind } for pid=11607 comm="syz.4.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 765.511557][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'. [ 766.584404][T11631] Process accounting resumed [ 766.612042][T11629] overlayfs: failed to resolve './file2': -2 [ 766.962598][T11637] FAULT_INJECTION: forcing a failure. [ 766.962598][T11637] name failslab, interval 1, probability 0, space 0, times 0 [ 766.975370][T11637] CPU: 0 PID: 11637 Comm: syz.2.1574 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 766.985513][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 766.995568][T11637] Call Trace: [ 766.998859][T11637] [ 767.001791][T11637] dump_stack_lvl+0x16c/0x1f0 [ 767.006477][T11637] should_fail_ex+0x497/0x5b0 [ 767.011156][T11637] should_failslab+0x9/0x20 [ 767.015670][T11637] __kmalloc_noprof+0xcf/0x410 [ 767.020438][T11637] ? __pfx_lock_acquire+0x10/0x10 [ 767.025472][T11637] tomoyo_realpath_from_path+0xb9/0x720 [ 767.031033][T11637] ? tomoyo_profile+0x47/0x60 [ 767.035741][T11637] tomoyo_path_number_perm+0x245/0x590 [ 767.041212][T11637] ? tomoyo_path_number_perm+0x232/0x590 [ 767.046853][T11637] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 767.052843][T11637] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 767.058836][T11637] ? __fget_files+0x256/0x400 [ 767.063517][T11637] security_file_ioctl+0x75/0xc0 [ 767.068458][T11637] __x64_sys_ioctl+0xbb/0x220 [ 767.073137][T11637] do_syscall_64+0xcd/0x250 [ 767.077646][T11637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.083546][T11637] RIP: 0033:0x7f3705775bd9 [ 767.087960][T11637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.107568][T11637] RSP: 002b:00007f370659f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.115983][T11637] RAX: ffffffffffffffda RBX: 00007f3705904038 RCX: 00007f3705775bd9 [ 767.123953][T11637] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 767.131920][T11637] RBP: 00007f370659f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 767.139894][T11637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.147865][T11637] R13: 000000000000006e R14: 00007f3705904038 R15: 00007ffd37892188 [ 767.155838][T11637] [ 767.160437][T11637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 767.217736][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.420767][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 768.847149][T11662] FAULT_INJECTION: forcing a failure. [ 768.847149][T11662] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 768.880174][T11662] CPU: 0 PID: 11662 Comm: syz.0.1581 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 768.890378][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 768.900455][T11662] Call Trace: [ 768.903748][T11662] [ 768.906692][T11662] dump_stack_lvl+0x16c/0x1f0 [ 768.911405][T11662] should_fail_ex+0x497/0x5b0 [ 768.916116][T11662] _copy_from_user+0x30/0xf0 [ 768.920737][T11662] copy_msghdr_from_user+0x99/0x160 [ 768.925970][T11662] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 768.931812][T11662] ? __pfx___lock_acquire+0x10/0x10 [ 768.937042][T11662] ___sys_sendmsg+0xff/0x1e0 [ 768.941669][T11662] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.946893][T11662] ? __pfx_lock_release+0x10/0x10 [ 768.951941][T11662] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 768.957678][T11662] ? __fget_light+0x173/0x210 [ 768.962368][T11662] __sys_sendmmsg+0x1a1/0x450 [ 768.967059][T11662] ? __pfx___sys_sendmmsg+0x10/0x10 [ 768.972262][T11662] ? vfs_write+0x14d/0x1140 [ 768.976786][T11662] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 768.982792][T11662] ? fput+0x32/0x390 [ 768.986691][T11662] ? ksys_write+0x1ab/0x260 [ 768.991201][T11662] ? __pfx_ksys_write+0x10/0x10 [ 768.996059][T11662] __x64_sys_sendmmsg+0x9c/0x100 [ 769.001005][T11662] ? lockdep_hardirqs_on+0x7c/0x110 [ 769.006207][T11662] do_syscall_64+0xcd/0x250 [ 769.010716][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.016621][T11662] RIP: 0033:0x7f6807575bd9 [ 769.021035][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.040643][T11662] RSP: 002b:00007f6806fff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 769.049060][T11662] RAX: ffffffffffffffda RBX: 00007f6807703f60 RCX: 00007f6807575bd9 [ 769.057036][T11662] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 769.065005][T11662] RBP: 00007f6806fff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 769.072974][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.080943][T11662] R13: 000000000000000b R14: 00007f6807703f60 R15: 00007ffec8ae7118 [ 769.088923][T11662] [ 769.129876][T11655] syz.4.1579: attempt to access beyond end of device [ 769.129876][T11655] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 769.173399][T11655] (syz.4.1579,11655,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 769.207253][T11655] (syz.4.1579,11655,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 769.224761][T11655] (syz.4.1579,11655,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 769.245162][T11655] (syz.4.1579,11655,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 769.583695][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 769.724247][ T29] audit: type=1400 audit(1720382293.796:337): avc: denied { create } for pid=11671 comm="syz.3.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 775.516439][ T29] audit: type=1400 audit(1720382299.626:338): avc: denied { ioctl } for pid=11681 comm="syz.4.1587" path="socket:[46085]" dev="sockfs" ino=46085 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 775.620673][ T29] audit: type=1400 audit(1720382299.656:339): avc: denied { getopt } for pid=11681 comm="syz.4.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 776.937422][ T29] audit: type=1400 audit(1720382301.036:340): avc: denied { setopt } for pid=11706 comm="syz.0.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 776.983282][ T29] audit: type=1400 audit(1720382301.036:341): avc: denied { bind } for pid=11706 comm="syz.0.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 777.084819][ T5142] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 777.324552][ T5142] usb 4-1: Using ep0 maxpacket: 16 [ 777.366144][ T5142] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 777.412496][ T5142] usb 4-1: config 0 has no interface number 0 [ 777.464297][ T5142] usb 4-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 777.508027][ T5142] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 777.544223][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.592663][ T5142] usb 4-1: Product: syz [ 777.598766][ T5142] usb 4-1: Manufacturer: syz [ 777.603378][ T5142] usb 4-1: SerialNumber: syz [ 777.656995][ T5142] usb 4-1: config 0 descriptor?? [ 778.188863][T11720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.278472][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 779.142900][T11728] overlayfs: failed to resolve './file2': -2 [ 780.634373][ T5149] usb 4-1: USB disconnect, device number 24 [ 780.673632][T11741] ip6t_srh: unknown srh match flags 4000 [ 780.680064][ T29] audit: type=1400 audit(1720382304.776:342): avc: denied { bind } for pid=11740 comm="syz.2.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 780.936599][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 781.429066][T11756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 782.516938][ T29] audit: type=1400 audit(1720382306.626:343): avc: denied { ioctl } for pid=11765 comm="syz.1.1614" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 782.607413][ T29] audit: type=1400 audit(1720382306.666:344): avc: denied { set_context_mgr } for pid=11765 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 782.628728][ T29] audit: type=1400 audit(1720382306.726:345): avc: denied { setopt } for pid=11765 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 782.639473][T11764] overlayfs: failed to resolve './file2': -2 [ 782.670965][T11775] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 782.761131][T11766] IPVS: stopping backup sync thread 11775 ... [ 783.137670][T11787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.388989][T11790] rdma_rxe: rxe_newlink: failed to add lo [ 784.104948][ T5092] Bluetooth: hci3: SCO packet for unknown connection handle 1039 [ 784.265002][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 784.613742][T11807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.910507][ T5145] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 785.038080][T11811] siw: device registration error -23 [ 785.617537][T11813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.670855][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'. [ 785.684348][ T5145] usb 1-1: Using ep0 maxpacket: 16 [ 785.727762][ T5145] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 785.771633][ T5145] usb 1-1: config 0 has no interface number 0 [ 785.791220][ T5145] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 785.856073][ T5145] usb 1-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 785.889794][ T5145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.917207][ T5145] usb 1-1: Product: syz [ 785.961789][ T5145] usb 1-1: Manufacturer: syz [ 786.007471][ T5145] usb 1-1: SerialNumber: syz [ 786.053190][ T5145] usb 1-1: config 0 descriptor?? [ 786.442727][T11832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.735139][T11832] rdma_rxe: rxe_newlink: failed to add lo [ 786.774537][ T5145] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 787.006688][ T5145] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 787.045900][ T5145] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 787.099093][ T5145] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.135717][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.173929][ T5145] usb 4-1: config 0 descriptor?? [ 787.211787][ T5145] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 788.264925][ T5145] usb 4-1: USB disconnect, device number 25 [ 788.458193][T11849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.013922][T11855] siw: device registration error -23 [ 789.628244][ T5147] usb 1-1: USB disconnect, device number 27 [ 789.984432][T11863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.133833][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 790.245711][T11870] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 790.252580][T11869] IPVS: stopping backup sync thread 11870 ... [ 790.321868][T11872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.558961][T11872] syz1: rxe_newlink: already configured on lo [ 790.919568][T11889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1646'. [ 791.383283][T11893] overlayfs: failed to resolve './file2': -2 [ 791.645293][T11906] vivid-007: ================= START STATUS ================= [ 791.653058][T11906] vivid-007: Enable Output Cropping: true [ 791.659011][T11906] vivid-007: Enable Output Composing: true [ 791.665078][T11906] vivid-007: Enable Output Scaler: true [ 791.670800][T11906] vivid-007: Tx RGB Quantization Range: Automatic [ 791.677436][T11906] vivid-007: Transmit Mode: HDMI [ 791.682539][T11906] vivid-007: Display Present: true inactive [ 791.688702][T11906] vivid-007: Hotplug Present: 0x00000001 [ 791.694555][T11906] vivid-007: RxSense Present: 0x00000001 [ 791.700446][T11906] vivid-007: EDID Present: 0x00000001 [ 791.706188][T11906] vivid-007: ================== END STATUS ================== [ 793.363687][T11923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.500733][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'. [ 793.654305][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 794.438750][T11945] rdma_rxe: rxe_newlink: failed to add lo [ 795.371290][T11947] vivid-007: ================= START STATUS ================= [ 795.379101][T11947] vivid-007: Enable Output Cropping: true [ 795.384921][T11947] vivid-007: Enable Output Composing: true [ 795.390821][T11947] vivid-007: Enable Output Scaler: true [ 795.398254][T11947] vivid-007: Tx RGB Quantization Range: Automatic [ 795.404741][T11947] vivid-007: Transmit Mode: HDMI [ 795.409697][T11947] vivid-007: Display Present: true inactive [ 795.415669][T11947] vivid-007: Hotplug Present: 0x00000001 [ 795.421369][T11947] vivid-007: RxSense Present: 0x00000001 [ 795.427100][T11947] vivid-007: EDID Present: 0x00000001 [ 795.432520][T11947] vivid-007: ================== END STATUS ================== [ 796.597842][T11966] FAULT_INJECTION: forcing a failure. [ 796.597842][T11966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.616665][T11966] CPU: 1 PID: 11966 Comm: syz.1.1670 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 796.626863][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 796.636913][T11966] Call Trace: [ 796.640177][T11966] [ 796.643092][T11966] dump_stack_lvl+0x16c/0x1f0 [ 796.647776][T11966] should_fail_ex+0x497/0x5b0 [ 796.652454][T11966] _copy_from_user+0x30/0xf0 [ 796.657034][T11966] copy_msghdr_from_user+0x99/0x160 [ 796.662234][T11966] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 796.668038][T11966] ? find_held_lock+0x2d/0x110 [ 796.672796][T11966] ? __pfx___lock_acquire+0x10/0x10 [ 796.677995][T11966] ___sys_sendmsg+0xff/0x1e0 [ 796.682586][T11966] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.687783][T11966] ? ksys_write+0x21c/0x260 [ 796.692282][T11966] ? __fget_light+0x173/0x210 [ 796.696951][T11966] __sys_sendmsg+0x117/0x1f0 [ 796.701533][T11966] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.706665][T11966] do_syscall_64+0xcd/0x250 [ 796.711190][T11966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.717088][T11966] RIP: 0033:0x7fb3e3775bd9 [ 796.721491][T11966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.741096][T11966] RSP: 002b:00007fb3e44d5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.749503][T11966] RAX: ffffffffffffffda RBX: 00007fb3e3903f60 RCX: 00007fb3e3775bd9 [ 796.757466][T11966] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 796.765430][T11966] RBP: 00007fb3e44d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 796.773387][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.781344][T11966] R13: 000000000000000b R14: 00007fb3e3903f60 R15: 00007ffdf16ebf98 [ 796.789306][T11966] [ 798.595957][T11971] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 799.435402][ T5149] IPVS: starting estimator thread 0... [ 799.554908][T11972] IPVS: using max 15 ests per chain, 36000 per kthread [ 804.442564][T12011] vivid-007: ================= START STATUS ================= [ 804.450450][T12011] vivid-007: Enable Output Cropping: true [ 804.456415][T12011] vivid-007: Enable Output Composing: true [ 804.462369][T12011] vivid-007: Enable Output Scaler: true [ 804.468095][T12011] vivid-007: Tx RGB Quantization Range: Automatic [ 804.474715][T12011] vivid-007: Transmit Mode: HDMI [ 804.479790][T12011] vivid-007: Display Present: true inactive [ 804.485879][T12011] vivid-007: Hotplug Present: 0x00000001 [ 804.491671][T12011] vivid-007: RxSense Present: 0x00000001 [ 804.497556][T12011] vivid-007: EDID Present: 0x00000001 [ 804.503142][T12011] vivid-007: ================== END STATUS ================== [ 805.134980][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 805.147716][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 805.157395][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 805.165675][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 805.173426][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 805.184497][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 805.596807][T12016] hub 9-0:1.0: USB hub found [ 805.603713][T12016] hub 9-0:1.0: 8 ports detected [ 805.936115][ T2842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.076239][T12008] lo speed is unknown, defaulting to 1000 [ 806.116365][T12008] lo speed is unknown, defaulting to 1000 [ 806.257134][ T2842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.519747][T12033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.549049][ T2842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.983633][ T2842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.234577][ T5106] Bluetooth: hci1: command tx timeout [ 807.241320][T12042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.481467][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1693'. [ 808.001002][T12057] vivid-007: ================= START STATUS ================= [ 808.008761][T12057] vivid-007: Enable Output Cropping: true [ 808.014611][T12057] vivid-007: Enable Output Composing: true [ 808.020462][T12057] vivid-007: Enable Output Scaler: true [ 808.026128][T12057] vivid-007: Tx RGB Quantization Range: Automatic [ 808.032587][T12057] vivid-007: Transmit Mode: HDMI [ 808.037670][T12057] vivid-007: Display Present: true inactive [ 808.043614][T12057] vivid-007: Hotplug Present: 0x00000001 [ 808.049321][T12057] vivid-007: RxSense Present: 0x00000001 [ 808.055073][T12057] vivid-007: EDID Present: 0x00000001 [ 808.060490][T12057] vivid-007: ================== END STATUS ================== [ 809.202040][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.634066][ T5106] Bluetooth: hci1: command tx timeout [ 810.446720][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.977705][ T5106] Bluetooth: hci1: command tx timeout [ 813.476874][ T2842] bridge_slave_1: left allmulticast mode [ 813.482663][ T2842] bridge_slave_1: left promiscuous mode [ 813.498883][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.517266][ T2842] bridge_slave_0: left allmulticast mode [ 813.538829][ T2842] bridge_slave_0: left promiscuous mode [ 813.565990][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.157222][T12086] rdma_rxe: rxe_newlink: failed to add lo [ 814.299837][ T5106] Bluetooth: hci1: command tx timeout [ 814.649754][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.032428][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 815.515991][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.528250][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.540142][ T2842] bond0 (unregistering): Released all slaves [ 815.610078][T12108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.716271][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 815.723514][T12008] chnl_net:caif_netlink_parms(): no params data found [ 816.020359][T12116] overlayfs: failed to resolve './file0': -2 [ 820.695304][T12133] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1709'. [ 821.272214][ T29] audit: type=1400 audit(1720382345.376:346): avc: denied { read } for pid=12142 comm="syz.2.1712" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 821.731193][T12008] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.757105][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.790982][T12008] bridge_slave_0: entered allmulticast mode [ 821.823754][T12008] bridge_slave_0: entered promiscuous mode [ 821.853819][T12008] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.872075][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.889052][T12008] bridge_slave_1: entered allmulticast mode [ 821.982709][T12008] bridge_slave_1: entered promiscuous mode [ 822.232154][T12169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.297160][ T2842] hsr_slave_0: left promiscuous mode [ 822.316121][ T2842] hsr_slave_1: left promiscuous mode [ 822.338054][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.358496][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.395400][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.415896][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.540438][ T2842] veth1_macvtap: left promiscuous mode [ 822.558130][ T2842] veth0_macvtap: left promiscuous mode [ 822.574647][ T2842] veth1_vlan: left promiscuous mode [ 822.584673][ T2842] veth0_vlan: left promiscuous mode [ 822.712728][T12174] overlayfs: failed to resolve './file0': -2 [ 827.710148][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 827.757727][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 827.766460][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 827.778135][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 827.787318][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 827.794998][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 828.294389][T12192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.445419][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1723'. [ 828.461542][ T2842] team0 (unregistering): Port device team_slave_1 removed [ 828.510343][ T2842] team0 (unregistering): Port device team_slave_0 removed [ 828.967775][T12008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.985811][T12008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.270402][T12008] team0: Port device team_slave_0 added [ 829.292625][T12008] team0: Port device team_slave_1 added [ 829.493720][T12205] FAULT_INJECTION: forcing a failure. [ 829.493720][T12205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.494688][T12205] [ 829.494697][T12205] ====================================================== [ 829.494705][T12205] WARNING: possible circular locking dependency detected [ 829.494712][T12205] 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 Not tainted [ 829.494726][T12205] ------------------------------------------------------ [ 829.494733][T12205] syz.2.1724/12205 is trying to acquire lock: [ 829.494745][T12205] ffffffff8dabeea0 (console_owner){-...}-{0:0}, at: console_flush_all+0x4ff/0xd70 [ 829.494802][T12205] [ 829.494802][T12205] but task is already holding lock: [ 829.494807][T12205] ffff8880b933ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 829.494854][T12205] [ 829.494854][T12205] which lock already depends on the new lock. [ 829.494854][T12205] [ 829.494860][T12205] [ 829.494860][T12205] the existing dependency chain (in reverse order) is: [ 829.494867][T12205] [ 829.494867][T12205] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 829.494894][T12205] _raw_spin_lock_nested+0x31/0x40 [ 829.494917][T12205] raw_spin_rq_lock_nested+0x29/0x130 [ 829.494938][T12205] task_fork_fair+0x73/0x250 [ 829.494956][T12205] sched_cgroup_fork+0x3cf/0x510 [ 829.494983][T12205] copy_process+0x439b/0x8f10 [ 829.495011][T12205] kernel_clone+0xfd/0x980 [ 829.495037][T12205] user_mode_thread+0xb4/0xf0 [ 829.495066][T12205] rest_init+0x23/0x2b0 [ 829.495096][T12205] start_kernel+0x3df/0x4c0 [ 829.495124][T12205] x86_64_start_reservations+0x18/0x30 [ 829.495156][T12205] x86_64_start_kernel+0xb2/0xc0 [ 829.495185][T12205] common_startup_64+0x13e/0x148 [ 829.495209][T12205] [ 829.495209][T12205] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 829.495239][T12205] _raw_spin_lock_irqsave+0x3a/0x60 [ 829.495261][T12205] try_to_wake_up+0x9a/0x13e0 [ 829.495286][T12205] __wake_up_common+0x131/0x1e0 [ 829.495310][T12205] __wake_up+0x31/0x60 [ 829.495340][T12205] tty_port_default_wakeup+0x2a/0x40 [ 829.495367][T12205] serial8250_tx_chars+0x68e/0x860 [ 829.495395][T12205] serial8250_handle_irq+0x5d3/0x780 [ 829.495422][T12205] serial8250_default_handle_irq+0x9a/0x210 [ 829.495451][T12205] serial8250_interrupt+0x103/0x210 [ 829.495482][T12205] __handle_irq_event_percpu+0x229/0x7c0 [ 829.495505][T12205] handle_irq_event+0xab/0x1e0 [ 829.495526][T12205] handle_edge_irq+0x263/0xd10 [ 829.495558][T12205] __common_interrupt+0xdf/0x250 [ 829.495592][T12205] common_interrupt+0xab/0xd0 [ 829.495626][T12205] asm_common_interrupt+0x26/0x40 [ 829.495661][T12205] unwind_next_frame+0x1eb/0x23a0 [ 829.495694][T12205] __unwind_start+0x5aa/0x880 [ 829.495726][T12205] arch_stack_walk+0xb2/0x170 [ 829.495748][T12205] stack_trace_save+0x95/0xd0 [ 829.495777][T12205] save_stack+0x162/0x1f0 [ 829.495800][T12205] __reset_page_owner+0x8d/0x400 [ 829.495825][T12205] free_unref_page+0x64a/0xe40 [ 829.495851][T12205] vfree+0x181/0x7a0 [ 829.495878][T12205] delayed_vfree_work+0x56/0x70 [ 829.495907][T12205] process_one_work+0x9c5/0x1b40 [ 829.495929][T12205] worker_thread+0x6c8/0xf30 [ 829.495950][T12205] kthread+0x2c1/0x3a0 [ 829.495975][T12205] ret_from_fork+0x45/0x80 [ 829.496006][T12205] ret_from_fork_asm+0x1a/0x30 [ 829.496039][T12205] [ 829.496039][T12205] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 829.496068][T12205] _raw_spin_lock_irqsave+0x3a/0x60 [ 829.496091][T12205] __wake_up+0x1c/0x60 [ 829.496119][T12205] tty_port_default_wakeup+0x2a/0x40 [ 829.496146][T12205] serial8250_tx_chars+0x68e/0x860 [ 829.496173][T12205] serial8250_handle_irq+0x5d3/0x780 [ 829.496200][T12205] serial8250_default_handle_irq+0x9a/0x210 [ 829.496229][T12205] serial8250_interrupt+0x103/0x210 [ 829.496259][T12205] __handle_irq_event_percpu+0x229/0x7c0 [ 829.496281][T12205] handle_irq_event+0xab/0x1e0 [ 829.496302][T12205] handle_edge_irq+0x263/0xd10 [ 829.496333][T12205] __common_interrupt+0xdf/0x250 [ 829.496360][T12205] common_interrupt+0xab/0xd0 [ 829.496393][T12205] asm_common_interrupt+0x26/0x40 [ 829.496426][T12205] unwind_next_frame+0x1eb/0x23a0 [ 829.496458][T12205] __unwind_start+0x5aa/0x880 [ 829.496490][T12205] arch_stack_walk+0xb2/0x170 [ 829.496511][T12205] stack_trace_save+0x95/0xd0 [ 829.496539][T12205] save_stack+0x162/0x1f0 [ 829.496566][T12205] __reset_page_owner+0x8d/0x400 [ 829.496590][T12205] free_unref_page+0x64a/0xe40 [ 829.496616][T12205] vfree+0x181/0x7a0 [ 829.496642][T12205] delayed_vfree_work+0x56/0x70 [ 829.496671][T12205] process_one_work+0x9c5/0x1b40 [ 829.496693][T12205] worker_thread+0x6c8/0xf30 [ 829.496714][T12205] kthread+0x2c1/0x3a0 [ 829.496739][T12205] ret_from_fork+0x45/0x80 [ 829.496769][T12205] ret_from_fork_asm+0x1a/0x30 [ 829.496800][T12205] [ 829.496800][T12205] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 829.496829][T12205] _raw_spin_lock_irqsave+0x3a/0x60 [ 829.496852][T12205] serial8250_console_write+0xaa6/0x1090 [ 829.496882][T12205] console_flush_all+0x53f/0xd70 [ 829.496906][T12205] console_unlock+0xae/0x290 [ 829.496929][T12205] vprintk_emit+0x11a/0x5a0 [ 829.496953][T12205] vprintk+0x7f/0xa0 [ 829.496977][T12205] _printk+0xc8/0x100 [ 829.497008][T12205] register_console+0xaa2/0x10a0 [ 829.497033][T12205] univ8250_console_init+0x35/0x50 [ 829.497064][T12205] console_init+0xcc/0x680 [ 829.497093][T12205] start_kernel+0x295/0x4c0 [ 829.497122][T12205] x86_64_start_reservations+0x18/0x30 [ 829.497152][T12205] x86_64_start_kernel+0xb2/0xc0 [ 829.497180][T12205] common_startup_64+0x13e/0x148 [ 829.497203][T12205] [ 829.497203][T12205] -> #0 (console_owner){-...}-{0:0}: [ 829.497230][T12205] __lock_acquire+0x2478/0x3b30 [ 829.497263][T12205] lock_acquire+0x1b1/0x560 [ 829.497294][T12205] console_flush_all+0x514/0xd70 [ 829.497317][T12205] console_unlock+0xae/0x290 [ 829.497341][T12205] vprintk_emit+0x11a/0x5a0 [ 829.497364][T12205] vprintk+0x7f/0xa0 [ 829.497388][T12205] _printk+0xc8/0x100 [ 829.497418][T12205] should_fail_ex+0x46c/0x5b0 [ 829.497444][T12205] strncpy_from_user+0x38/0x300 [ 829.497465][T12205] strncpy_from_user_nofault+0x7f/0x180 [ 829.497501][T12205] bpf_probe_read_user_str+0x26/0x70 [ 829.497526][T12205] ___bpf_prog_run+0x3e51/0xabd0 [ 829.497550][T12205] __bpf_prog_run32+0xc1/0x100 [ 829.497582][T12205] bpf_trace_run4+0x245/0x5a0 [ 829.497611][T12205] __bpf_trace_sched_switch+0x13e/0x190 [ 829.497636][T12205] __traceiter_sched_switch+0x6c/0xc0 [ 829.497670][T12205] __schedule+0x252c/0x5d00 [ 829.497693][T12205] preempt_schedule_irq+0x51/0x90 [ 829.497717][T12205] irqentry_exit+0x36/0x90 [ 829.497744][T12205] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 829.497778][T12205] __x64_sys_execve+0x0/0xb0 [ 829.497808][T12205] do_syscall_64+0xcd/0x250 [ 829.497836][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.497869][T12205] [ 829.497869][T12205] other info that might help us debug this: [ 829.497869][T12205] [ 829.497876][T12205] Chain exists of: [ 829.497876][T12205] console_owner --> &p->pi_lock --> &rq->__lock [ 829.497876][T12205] [ 829.497907][T12205] Possible unsafe locking scenario: [ 829.497907][T12205] [ 829.497913][T12205] CPU0 CPU1 [ 829.497919][T12205] ---- ---- [ 829.497924][T12205] lock(&rq->__lock); [ 829.497937][T12205] lock(&p->pi_lock); [ 829.497951][T12205] lock(&rq->__lock); [ 829.497965][T12205] lock(console_owner); [ 829.497978][T12205] [ 829.497978][T12205] *** DEADLOCK *** [ 829.497978][T12205] [ 829.497983][T12205] 4 locks held by syz.2.1724/12205: [ 829.497998][T12205] #0: ffff8880b933ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 829.498052][T12205] #1: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 829.498112][T12205] #2: ffffffff8db9f2e0 (console_lock){+.+.}-{0:0}, at: vprintk+0x7f/0xa0 [ 829.498168][T12205] #3: ffffffff8db9f350 (console_srcu){....}-{0:0}, at: console_flush_all+0x12d/0xd70 [ 829.498223][T12205] [ 829.498223][T12205] stack backtrace: [ 829.498230][T12205] CPU: 1 PID: 12205 Comm: syz.2.1724 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 829.498256][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 829.498270][T12205] Call Trace: [ 829.498279][T12205] [ 829.498288][T12205] dump_stack_lvl+0x116/0x1f0 [ 829.498315][T12205] check_noncircular+0x31a/0x400 [ 829.498348][T12205] ? __pfx_check_noncircular+0x10/0x10 [ 829.498384][T12205] ? lockdep_lock+0xc6/0x200 [ 829.498412][T12205] ? __pfx_lockdep_lock+0x10/0x10 [ 829.498441][T12205] __lock_acquire+0x2478/0x3b30 [ 829.498478][T12205] ? __pfx___lock_acquire+0x10/0x10 [ 829.498514][T12205] lock_acquire+0x1b1/0x560 [ 829.498548][T12205] ? console_flush_all+0x4ff/0xd70 [ 829.498580][T12205] ? __pfx_lock_acquire+0x10/0x10 [ 829.498614][T12205] ? __pfx_lock_release+0x10/0x10 [ 829.498648][T12205] ? do_raw_spin_lock+0x12d/0x2c0 [ 829.498673][T12205] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 829.498701][T12205] console_flush_all+0x514/0xd70 [ 829.498727][T12205] ? console_flush_all+0x4ff/0xd70 [ 829.498755][T12205] ? __pfx_console_flush_all+0x10/0x10 [ 829.498783][T12205] ? __pfx_lock_acquire+0x10/0x10 [ 829.498818][T12205] console_unlock+0xae/0x290 [ 829.498844][T12205] ? __pfx_console_unlock+0x10/0x10 [ 829.498870][T12205] ? do_raw_spin_unlock+0x172/0x230 [ 829.498897][T12205] ? vprintk+0x7f/0xa0 [ 829.498924][T12205] vprintk_emit+0x11a/0x5a0 [ 829.498951][T12205] vprintk+0x7f/0xa0 [ 829.498978][T12205] _printk+0xc8/0x100 [ 829.499011][T12205] ? __pfx__printk+0x10/0x10 [ 829.499044][T12205] ? __pfx___lock_acquire+0x10/0x10 [ 829.499078][T12205] ? ___ratelimit+0x24c/0x580 [ 829.499103][T12205] ? __pfx____ratelimit+0x10/0x10 [ 829.499128][T12205] should_fail_ex+0x46c/0x5b0 [ 829.499156][T12205] ? __lock_acquire+0xc5d/0x3b30 [ 829.499189][T12205] strncpy_from_user+0x38/0x300 [ 829.499214][T12205] strncpy_from_user_nofault+0x7f/0x180 [ 829.499251][T12205] ? __pfx_bpf_probe_read_user_str+0x10/0x10 [ 829.499279][T12205] bpf_probe_read_user_str+0x26/0x70 [ 829.499308][T12205] ___bpf_prog_run+0x3e51/0xabd0 [ 829.499333][T12205] ? finish_task_switch.isra.0+0x217/0xcc0 [ 829.499360][T12205] __bpf_prog_run32+0xc1/0x100 [ 829.499388][T12205] ? __pfx___bpf_prog_run32+0x10/0x10 [ 829.499418][T12205] ? __pfx_lock_acquire+0x10/0x10 [ 829.499453][T12205] ? __pfx___cant_migrate+0x10/0x10 [ 829.499482][T12205] bpf_trace_run4+0x245/0x5a0 [ 829.499513][T12205] ? __pfx_bpf_trace_run4+0x10/0x10 [ 829.499546][T12205] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.499581][T12205] ? lock_acquire+0x1b1/0x560 [ 829.499616][T12205] __bpf_trace_sched_switch+0x13e/0x190 [ 829.499642][T12205] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 829.499667][T12205] ? plist_check_prev_next+0x12a/0x1a0 [ 829.499702][T12205] ? plist_check_prev_next+0xe1/0x1a0 [ 829.499736][T12205] ? __pfx_sched_clock_cpu+0x10/0x10 [ 829.499772][T12205] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 829.499810][T12205] __traceiter_sched_switch+0x6c/0xc0 [ 829.499846][T12205] ? lockdep_assert_rq_held+0x77/0xd0 [ 829.499881][T12205] __schedule+0x252c/0x5d00 [ 829.499906][T12205] ? ksys_write+0x21c/0x260 [ 829.499941][T12205] ? __pfx___schedule+0x10/0x10 [ 829.499965][T12205] ? __mutex_unlock_slowpath+0x164/0x650 [ 829.499999][T12205] preempt_schedule_irq+0x51/0x90 [ 829.500026][T12205] irqentry_exit+0x36/0x90 [ 829.500054][T12205] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 829.500091][T12205] RIP: 0010:__x64_sys_execve+0x0/0xb0 [ 829.500125][T12205] Code: e9 1a e6 ff ff 48 c7 c7 e8 1e c0 8d e8 09 f0 ed ff e9 01 f6 ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 54 55 53 48 89 fb e8 20 2d 92 ff 48 8d 7b 60 48 b8 [ 829.500148][T12205] RSP: 0018:ffffc9000326ff20 EFLAGS: 00000246 [ 829.500167][T12205] RAX: ffffffffffffffff RBX: ffffc9000326ff58 RCX: 1ffffffff1fc7e91 [ 829.500184][T12205] RDX: 0000000000000000 RSI: 000000000000003b RDI: ffffc9000326ff58 [ 829.500201][T12205] RBP: ffffc9000326ff48 R08: 0000000000000001 R09: 0000000000000001 [ 829.500217][T12205] R10: ffffffff8fe43717 R11: 0000000000000000 R12: 000000000000003b [ 829.500233][T12205] R13: 000000000000003b R14: 0000000000000000 R15: 0000000000000000 [ 829.500253][T12205] do_syscall_64+0xcd/0x250 [ 829.500286][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.500322][T12205] RIP: 0033:0x7f3705775bd9 [ 829.500340][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.500363][T12205] RSP: 002b:00007f370657e048 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 829.500386][T12205] RAX: ffffffffffffffda RBX: 00007f3705904110 RCX: 00007f3705775bd9 [ 829.500404][T12205] RDX: 00000000200001c0 RSI: 0000000020000100 RDI: 0000000020000000 [ 829.500420][T12205] RBP: 00007f370657e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 829.500436][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.500451][T12205] R13: 000000000000006e R14: 00007f3705904110 R15: 00007ffd37892188 [ 829.500472][T12205] [ 830.786637][T12205] CPU: 1 PID: 12205 Comm: syz.2.1724 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 830.796767][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 830.806801][T12205] Call Trace: [ 830.810062][T12205] [ 830.812974][T12205] dump_stack_lvl+0x116/0x1f0 [ 830.817641][T12205] should_fail_ex+0x497/0x5b0 [ 830.822301][T12205] ? __lock_acquire+0xc5d/0x3b30 [ 830.827228][T12205] strncpy_from_user+0x38/0x300 [ 830.832064][T12205] strncpy_from_user_nofault+0x7f/0x180 [ 830.837600][T12205] ? __pfx_bpf_probe_read_user_str+0x10/0x10 [ 830.843561][T12205] bpf_probe_read_user_str+0x26/0x70 [ 830.848830][T12205] ___bpf_prog_run+0x3e51/0xabd0 [ 830.853749][T12205] ? finish_task_switch.isra.0+0x217/0xcc0 [ 830.859551][T12205] __bpf_prog_run32+0xc1/0x100 [ 830.864299][T12205] ? __pfx___bpf_prog_run32+0x10/0x10 [ 830.869654][T12205] ? __pfx_lock_acquire+0x10/0x10 [ 830.874670][T12205] ? __pfx___cant_migrate+0x10/0x10 [ 830.879851][T12205] bpf_trace_run4+0x245/0x5a0 [ 830.884516][T12205] ? __pfx_bpf_trace_run4+0x10/0x10 [ 830.889699][T12205] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.894880][T12205] ? lock_acquire+0x1b1/0x560 [ 830.899544][T12205] __bpf_trace_sched_switch+0x13e/0x190 [ 830.905071][T12205] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 830.911118][T12205] ? plist_check_prev_next+0x12a/0x1a0 [ 830.916562][T12205] ? plist_check_prev_next+0xe1/0x1a0 [ 830.921919][T12205] ? __pfx_sched_clock_cpu+0x10/0x10 [ 830.927191][T12205] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 830.933854][T12205] __traceiter_sched_switch+0x6c/0xc0 [ 830.939217][T12205] ? lockdep_assert_rq_held+0x77/0xd0 [ 830.944581][T12205] __schedule+0x252c/0x5d00 [ 830.949067][T12205] ? ksys_write+0x21c/0x260 [ 830.953557][T12205] ? __pfx___schedule+0x10/0x10 [ 830.958390][T12205] ? __mutex_unlock_slowpath+0x164/0x650 [ 830.964013][T12205] preempt_schedule_irq+0x51/0x90 [ 830.969029][T12205] irqentry_exit+0x36/0x90 [ 830.973436][T12205] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 830.978890][T12205] RIP: 0010:__x64_sys_execve+0x0/0xb0 [ 830.984260][T12205] Code: e9 1a e6 ff ff 48 c7 c7 e8 1e c0 8d e8 09 f0 ed ff e9 01 f6 ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 54 55 53 48 89 fb e8 20 2d 92 ff 48 8d 7b 60 48 b8 [ 831.003849][T12205] RSP: 0018:ffffc9000326ff20 EFLAGS: 00000246 [ 831.009904][T12205] RAX: ffffffffffffffff RBX: ffffc9000326ff58 RCX: 1ffffffff1fc7e91 [ 831.017862][T12205] RDX: 0000000000000000 RSI: 000000000000003b RDI: ffffc9000326ff58 [ 831.025812][T12205] RBP: ffffc9000326ff48 R08: 0000000000000001 R09: 0000000000000001 [ 831.033763][T12205] R10: ffffffff8fe43717 R11: 0000000000000000 R12: 000000000000003b [ 831.041713][T12205] R13: 000000000000003b R14: 0000000000000000 R15: 0000000000000000 [ 831.049670][T12205] do_syscall_64+0xcd/0x250 [ 831.054162][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.060045][T12205] RIP: 0033:0x7f3705775bd9 [ 831.064438][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.084029][T12205] RSP: 002b:00007f370657e048 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 831.092423][T12205] RAX: ffffffffffffffda RBX: 00007f3705904110 RCX: 00007f3705775bd9 [ 831.100377][T12205] RDX: 00000000200001c0 RSI: 0000000020000100 RDI: 0000000020000000 [ 831.108329][T12205] RBP: 00007f370657e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 831.116279][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.124233][T12205] R13: 000000000000006e R14: 00007f3705904110 R15: 00007ffd37892188 [ 831.132188][T12205] [ 831.137349][T12205] process 'syz.2.1724' launched './file0' with NULL argv: empty string added SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 831.146551][ T29] audit: type=1400 audit(1720382355.246:347): avc: denied { execute } for pid=12199 comm="syz.2.1724" name="file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 831.150730][ T5092] Bluetooth: hci2: command tx timeout [ 831.192011][ T29] audit: type=1400 audit(1720382355.256:348): avc: denied { execute_no_trans } for pid=12199 comm="syz.2.1724" path="/105/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 831.387582][T12008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.434258][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.502761][T12008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.549080][T12181] lo speed is unknown, defaulting to 1000 [ 831.565721][T12181] lo speed is unknown, defaulting to 1000 [ 832.488639][ T2842] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.579575][ T2842] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.672501][ T2842] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.764931][ T2842] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.927674][ T2842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.999196][ T2842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.043110][ T2842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.123043][ T2842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.203527][ T29] audit: type=1400 audit(1720382357.306:349): avc: denied { setrlimit } for pid=12253 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 833.321286][ T2842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.372336][ T2842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.425689][ T2842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.483201][ T2842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.609391][ T2842] bridge_slave_1: left allmulticast mode [ 833.615151][ T2842] bridge_slave_1: left promiscuous mode [ 833.622586][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.632350][ T2842] bridge_slave_0: left allmulticast mode [ 833.638333][ T2842] bridge_slave_0: left promiscuous mode [ 833.644123][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.660603][ T2842] bridge_slave_1: left allmulticast mode [ 833.666562][ T2842] bridge_slave_1: left promiscuous mode [ 833.672235][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.681337][ T2842] bridge_slave_0: left allmulticast mode [ 833.687552][ T2842] bridge_slave_0: left promiscuous mode [ 833.694230][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.704591][ T2842] bridge_slave_1: left allmulticast mode [ 833.710269][ T2842] bridge_slave_1: left promiscuous mode [ 833.717889][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.728531][ T2842] bridge_slave_0: left allmulticast mode [ 833.734533][ T2842] bridge_slave_0: left promiscuous mode [ 833.740195][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.532170][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.542382][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.552877][ T2842] bond0 (unregistering): Released all slaves [ 834.569346][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.579960][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.589664][ T2842] bond0 (unregistering): Released all slaves [ 834.607127][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.622200][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.633214][ T2842] bond0 (unregistering): Released all slaves [ 835.953066][ T2842] hsr_slave_0: left promiscuous mode [ 835.963240][ T2842] hsr_slave_1: left promiscuous mode [ 835.969516][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.991496][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.999837][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.009370][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.019772][ T2842] hsr_slave_0: left promiscuous mode [ 836.026203][ T2842] hsr_slave_1: left promiscuous mode [ 836.032048][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.039595][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.049120][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.056591][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.070998][ T2842] hsr_slave_0: left promiscuous mode [ 836.077306][ T2842] hsr_slave_1: left promiscuous mode [ 836.083154][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.090766][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.098660][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.106679][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.118042][ T2842] veth1_macvtap: left promiscuous mode [ 836.123538][ T2842] veth0_macvtap: left promiscuous mode [ 836.129394][ T2842] veth1_vlan: left promiscuous mode [ 836.134688][ T2842] veth0_vlan: left promiscuous mode [ 836.140941][ T2842] veth1_macvtap: left promiscuous mode [ 836.146510][ T2842] veth0_macvtap: left promiscuous mode [ 836.152351][ T2842] veth1_vlan: left promiscuous mode [ 836.157930][ T2842] veth0_vlan: left promiscuous mode [ 836.164508][ T2842] veth1_macvtap: left promiscuous mode [ 836.170011][ T2842] veth0_macvtap: left promiscuous mode [ 836.176155][ T2842] veth1_vlan: left promiscuous mode [ 836.181438][ T2842] veth0_vlan: left promiscuous mode [ 836.494262][ T2842] team0 (unregistering): Port device team_slave_1 removed [ 836.509145][ T2842] team0 (unregistering): Port device team_slave_0 removed [ 836.769052][ T2842] team0 (unregistering): Port device team_slave_1 removed [ 836.782594][ T2842] team0 (unregistering): Port device team_slave_0 removed [ 837.017926][ T2842] team0 (unregistering): Port device team_slave_1 removed [ 837.035608][ T2842] team0 (unregistering): Port device team_slave_0 removed [ 837.173085][ T930] lo speed is unknown, defaulting to 1000 [ 837.907949][ T2842] IPVS: stop unused estimator thread 0... [ 838.044646][ T2842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.113042][ T2842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.208949][ T2842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.279084][ T2842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.399732][ T2842] bridge_slave_1: left allmulticast mode [ 838.406178][ T2842] bridge_slave_1: left promiscuous mode [ 838.411964][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.423806][ T2842] bridge_slave_0: left allmulticast mode [ 838.429896][ T2842] bridge_slave_0: left promiscuous mode [ 838.437550][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.448398][ T2842] bridge_slave_1: left allmulticast mode [ 838.454062][ T2842] bridge_slave_1: left promiscuous mode [ 838.460990][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.472458][ T2842] bridge_slave_0: left allmulticast mode [ 838.478870][ T2842] bridge_slave_0: left promiscuous mode [ 838.485160][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.771464][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.781654][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.791357][ T2842] bond0 (unregistering): Released all slaves [ 838.802647][ T2842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.814988][ T2842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.824972][ T2842] bond0 (unregistering): Released all slaves [ 839.391504][ T2842] hsr_slave_0: left promiscuous mode [ 839.411262][ T2842] hsr_slave_1: left promiscuous mode [ 839.465617][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.473034][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.487285][ T2842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.494743][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.502575][ T2842] batman_adv: batadv0: Removing interface: batadv_slave_0