last executing test programs: 1m13.160527729s ago: executing program 2 (id=2692): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0xf, 0x0, [@dev, @multicast1, @private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) setrlimit(0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380), 0x8) listen(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r5) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000100)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e21, 0x80000000, @empty, 0x8001}, 0x1c) sendmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400000036000b63d25a80648c0100000124fc60", 0x14}], 0x1}, 0x0) 1m6.70082649s ago: executing program 2 (id=2697): syz_open_dev$evdev(0x0, 0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="abbd7000fcdbdf090000000000000000", @ANYRES32=0x0, @ANYBLOB="0800090002ac0f000400280008000a00f85013e409000700aa3406da760000000800090001ac0f0004000b0009000700fb0d20c9da00000008003700020000000800090005ac0f00"], 0x64}, 0x1, 0x0, 0x0, 0x24040801}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000440), 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0xfffffffffffffffc, 0x0, 0x2000000}}}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) r5 = openat(0xffffffffffffffff, 0x0, 0x20002, 0x5) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000000c0)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x3, r7, 0x5}) geteuid() 1m5.009780444s ago: executing program 2 (id=2702): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000000001040000000000000000000000001400"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x0) 1m2.875176294s ago: executing program 2 (id=2705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = io_uring_setup(0x354a, &(0x7f0000000480)) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) pipe2$watch_queue(0x0, 0x80) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r8, 0x40047435, &(0x7f0000000280)) close_range(r4, 0xffffffffffffffff, 0x0) 1m1.6822279s ago: executing program 2 (id=2707): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$getown(r1, 0x9) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000100)='iocharset', 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00', @ANYRESOCT=r7, @ANYRESOCT=r6, @ANYRES32=r0, @ANYBLOB], 0x20}}, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 57.100318767s ago: executing program 2 (id=2714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000019080)='net/dev_mcast\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x80}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x80) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 34.700547764s ago: executing program 1 (id=2751): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xa7, 0x78, 0x28, 0x40, 0x93a, 0x2626, 0xdb4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x5d, 0xfa}}]}}]}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x10}}, 0x28}, 0x1, 0x2c}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r7, 0x80184153, &(0x7f0000000540)={0x0, &(0x7f0000000500)}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b8100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000007700), 0x300, 0x0, 0x0) 28.759824933s ago: executing program 1 (id=2748): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x15) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x47) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000300)={0x6, @raw_data="cf27184f0cc4f2f014af8a49fb22618800620165fa4353cc2ca72b8a16a8afba1c4f8974804c8deee70a415d940dbb667973f979fa3e782912d5a3984d3acd873400b61053764f47ad1cb235e5bd166e96f8722c45bfee138680d600a5d2c1f3316438fb74f6d3896214c7203788ac261d34c447680d2b3e214d78457b9e94aa1a5984546f92ad9f73d9166f49f0054d697513ff0823200507d7e2900bba510516dce6081dfaa823bf4d27a063df710009c78f0bf3137b6b5479cee8d5da99f9009e13a346744ed4"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(0xffffffffffffffff) 24.062535578s ago: executing program 1 (id=2762): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000240)={0x0, 0x8a, 0x6, {0x10001, 0x10000}, 0x0, 0xfffffffe}) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0xb0}, 0x1, 0x7}, 0x10880) 23.124104784s ago: executing program 1 (id=2756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = io_uring_setup(0x354a, &(0x7f0000000480)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) pipe2$watch_queue(0x0, 0x80) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r8, 0x40047435, &(0x7f0000000280)) close_range(r3, 0xffffffffffffffff, 0x0) 21.7181817s ago: executing program 1 (id=2758): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xa7, 0x78, 0x28, 0x40, 0x93a, 0x2626, 0xdb4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x5d, 0xfa}}]}}]}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x10}}, 0x28}, 0x1, 0x2c}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r7, 0x80184153, &(0x7f0000000540)={0x0, &(0x7f0000000500)}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b8100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000007700), 0x300, 0x0, 0x0) 17.554133613s ago: executing program 1 (id=2763): socket$netlink(0x10, 0x3, 0x4) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x14) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 13.495191111s ago: executing program 3 (id=2765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r5}}, 0x48) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x60000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) set_mempolicy(0x3, 0x0, 0x7) 12.727597082s ago: executing program 0 (id=2767): r0 = socket(0x11, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)='0', 0x1}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) r4 = socket(0x10, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x5, 0x2) write$evdev(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x2710}, 0x0, 0x7d00, 0xfffff001}, {{0x77359400}, 0x5, 0xc40, 0x8}, {{0x77359400}, 0x0, 0x40}, {{}, 0x0, 0x9}, {{}, 0x15, 0xffff, 0x3}, {{0x77359400}, 0x2, 0x1, 0x7}], 0x90) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000000001040000000000000000000000001400"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r7}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x140}, 0x0) 11.859863501s ago: executing program 3 (id=2768): open(&(0x7f00000003c0)='./file0\x00', 0x2643, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=':', @ANYBLOB], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1300, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000fe80000000000000000000000000000000000000010000000200010000000000000f1d000000000005000500000000000a00000000000000fe88000000000000000000000000000100000000000000001086b8a63e48f0b38896156a458f42d23d2120d610ff185aae3c2fc38df2f38044d59354a8f3654d21b1255dadc82168cdad509960f7e7402c2858e79a3a91e79bc2addbbccdeb0cd9875e82199b8803f9e1278fd1f806225d511e93c8a304ae3703609f8f69de88af5c9acb5b0292ba8e2958d28e6f9503"], 0x70}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008, r1}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) write$P9_RSTATu(r1, &(0x7f00000007c0)=ANY=[], 0x232) unshare(0x600) timer_settime(0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x3, 0x12) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000269000/0x1000)=nil, &(0x7f0000485000/0x1000)=nil, &(0x7f0000506000/0x1000)=nil, &(0x7f0000490000/0x4000)=nil, &(0x7f0000381000/0x3000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002b8000/0x3000)=nil, &(0x7f000018d000/0x2000)=nil, &(0x7f000075e000/0x1000)=nil, &(0x7f0000475000/0x4000)=nil, &(0x7f00000002c0)="e2dc8039141c78d661414d0fd7492941e7306d8db1e8f4665e50f767f2fc3f91a6fd5a76acffab4ec3f189fb0348956b1a3fea708b41ad646e0b33320b2853e0ba9d6d8394e83b794ba6dfaeb709a8a7a38a858245d7eb7ef6da86fefecade927e640cc0b13210631290b4ea8d06714b51f51dbc63bf3dd628569fcd418ff48131940695118a83fc0bda3494454365b5b47d2f43f88cc21f64fb5a80c016198edb01a7194fdde6df2ed580e6197b1a0e", 0xb0, r1}, 0x68) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 11.853183703s ago: executing program 4 (id=2769): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000100)='iocharset', 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000200)={0x48}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 11.377787483s ago: executing program 0 (id=2770): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80803, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x0, 0x1}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}, {0x6, 0x0, 0x4, 0x9}]}) r1 = timerfd_create(0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000000)={{0x0, 0x0}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xc3c}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0xff00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) socket$kcm(0x10, 0xa, 0x0) unshare(0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) 8.448639822s ago: executing program 0 (id=2771): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x5) io_setup(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000ac0)='ext4_mballoc_prealloc\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@mcast1, @broadcast, 0x16, 0x4}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0xe, 0x0, &(0x7f0000000440)="4d55472716f57e7f47b994878520", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r6, &(0x7f0000000300)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0xf, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x4}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)}, {&(0x7f0000000380)="20292ca388288b45851aae3a78ca74d7673ae41222bfd7d28e7e2fe513374bde94ff1b859fdf0b9ec1d8ce1731e1766c92978901c704bb185307bee06acd842b2feef5e2c41e7b88d8827a12931c12", 0x4f}, {&(0x7f0000000580)="a20f00bc5b2e86bf323b8852af4c149212dbde3093bfdc5dfff5f833fe479e6eea880f9dd6d4009a6a6acf918901f1cfee6ac3cb372651ffc8f228d1c8a4763bbad454784c238a17e5c2ede2c51e6fe006c39c65a89a49a42fe893a9c84158268855eb9f5b6d79d7e93b564d96b96c8826aa79201ee53b0ada072a500a2b24c2f575c498bec02c0d8e6d9f2eb55219346a4d23ce495f9639e3c898a9852b937afa257c308dd93176a63d9d962d09742759d3dd469581894d254ed2fe3444b39bc0c7790b5f5d47fc5898a418d267220cbf2fa7c6f49bb92d44da1be37047e819c44a93fbae7f522797e4f7f2378739c964a7", 0xf2}, {&(0x7f0000000680)="7eeedf3effea7cd4e328969f562b8a40c2950b437546eae5ebeb3d2ffb3d8a84d696f2875d29c4b2c0df69ef35b8ed2ed52af670aa5fa978553d79f6660eb402d45ca2d010c035a20c3eb4f2e0cd607107e320fa22b205336effb3aba71d09523d0b85b275513e88a864d202f7e7397b9201ce04d2c8cedd3bda51c2ddc4ec3c42fb46bb6f92b77e97ccab7b4c81db498ac8bb9517c82f97bc53e80e695cbb4180e407e6331a924a7b3af3ca7ed6568690df25eb2704b54e", 0xb8}, {&(0x7f0000000740)="a0578fa9184d7057b6a1a3bb1d90f282f8b5b2c40c6e65581a0bd7de04252b92619434d836ec8b1a09beab692acce7822083f2d1b7623bbc81d4dbc0ef5bcdc7ee2fbd4413c32165f22e6f9f4b1a95dd77867b638ce02adc4666f343cbf40d543a277fb6cfc6dc4346bc3fbbc14d26cf4f52bb155d1355c5d89b9575a346c0faee8e15c48cefadf90da28cd5160aedc67abd6ac9cc56dc1a833bde4560d1fa3396b6fe49e8498a5e328d3ec56ae460a2c3ab637937d8fd3dc03ac8008b9c3a77", 0xc0}], 0x5, &(0x7f0000000880)=ANY=[], 0x190}, 0x40000) r7 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="f3", 0x1, 0xfffffffffffffffc) keyctl$read(0x17, r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000140)) listen(r3, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 8.411879544s ago: executing program 3 (id=2772): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xa7, 0x78, 0x28, 0x40, 0x93a, 0x2626, 0xdb4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x5d, 0xfa}}]}}]}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x10}}, 0x28}, 0x1, 0x2c}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r7, 0x80184153, &(0x7f0000000540)={0x0, &(0x7f0000000500)}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b8100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) recvmmsg(r9, &(0x7f0000007700), 0x300, 0x0, 0x0) 4.384242634s ago: executing program 4 (id=2774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000000001040000000000000000000000001400"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x0) 3.842892716s ago: executing program 3 (id=2775): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000300)={0x30, r3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x4d, 0x0, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400"}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000001200)={0x1d, r9, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r8, &(0x7f0000000080)={0x1d, r9}, 0x18) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x62}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002700)={0x44, 0x0, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x400}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x10000}]}, 0x44}}, 0x40) 3.549364547s ago: executing program 0 (id=2776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003f9000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30}, 0x30) socket$inet6(0xa, 0x3, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r5 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='/dev/null\x00', &(0x7f0000000080)='/dev/null\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) io_setup(0x6, &(0x7f00000005c0)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x600) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x0) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) 3.394071757s ago: executing program 4 (id=2777): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r5}}, 0x48) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x60000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) set_mempolicy(0x3, 0x0, 0x7) 2.21037872s ago: executing program 0 (id=2778): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000240)={0x0, 0x8a, 0x6, {0x10001, 0x10000}, 0x0, 0xfffffffe}) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0xb0}, 0x1, 0x7}, 0x10880) 1.437465143s ago: executing program 4 (id=2779): r0 = socket(0x11, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)='0', 0x1}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) r4 = socket(0x10, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x5, 0x2) write$evdev(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x2710}, 0x0, 0x7d00, 0xfffff001}, {{0x77359400}, 0x5, 0xc40, 0x8}, {{0x77359400}, 0x0, 0x40}, {{}, 0x0, 0x9}, {{}, 0x15, 0xffff, 0x3}, {{0x77359400}, 0x2, 0x1, 0x7}], 0x90) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000000001040000000000000000000000001400"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r7}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x140}, 0x0) 1.415715491s ago: executing program 3 (id=2780): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000240)={0x0, 0x8a, 0x6, {0x10001, 0x10000}, 0x0, 0xfffffffe}) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0xb0}, 0x1, 0x7}, 0x10880) 1.221248487s ago: executing program 0 (id=2781): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x601, &(0x7f0000000380)={0x0, 0x33c5, 0x10, 0x3, 0x27b}, &(0x7f00000000c0), &(0x7f0000000400)) syz_io_uring_setup(0x1, &(0x7f0000000300)={0x0, 0x4000000, 0x800, 0x20803, 0x0, 0x0, r0}, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="4900330080000000ffffffffffff08021100000050505050505000000000000000000000000000000100040600000000000025030000002a01003c0400"], 0x68}}, 0x40080) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1f"], 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01010000000000000000020000050c0002400000000000000001"], 0x5c}}, 0x0) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x2c, &(0x7f0000000140)={0x10000, 0x16, 0xd2000000}, 0x4) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x221, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 582.437404ms ago: executing program 3 (id=2782): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000100)='iocharset', 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000200)={0x48}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 355.890076ms ago: executing program 4 (id=2783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = io_uring_setup(0x354a, &(0x7f0000000480)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) pipe2$watch_queue(0x0, 0x80) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r7, 0x40047435, &(0x7f0000000280)) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2784): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb63}, 0x90) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201", @ANYBLOB="0bfbf6c0e8053f0616a09664c1749787015a251bf487738d697e060324824de75a"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000000000000000000000000001050016000200000014000700ff"], 0xa4}}, 0x0) socket$inet6(0xa, 0x0, 0xff) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001e00)={'bond0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) kernel console output (not intermixed with test programs): 60 bytes leftover after parsing attributes in process `syz.2.2474'. [ 3136.605465][T24014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3136.613102][T24014] Cannot create hsr debugfs directory [ 3137.176605][T24171] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3137.682955][T11705] bridge_slave_1: left allmulticast mode [ 3137.709007][T11705] bridge_slave_1: left promiscuous mode [ 3137.725669][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3137.766261][T11705] bridge_slave_0: left allmulticast mode [ 3137.772009][T11705] bridge_slave_0: left promiscuous mode [ 3137.785280][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3137.799790][T11705] bridge_slave_1: left allmulticast mode [ 3137.818199][T11705] bridge_slave_1: left promiscuous mode [ 3137.824111][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3137.911046][T11705] bridge_slave_0: left allmulticast mode [ 3137.935283][T11705] bridge_slave_0: left promiscuous mode [ 3137.941195][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3140.954174][T24197] xt_connbytes: Forcing CT accounting to be enabled [ 3140.995257][T24197] Cannot find add_set index 0 as target [ 3141.629923][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3141.669917][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3141.700564][T11705] bond0 (unregistering): Released all slaves [ 3141.735308][T13445] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3141.774188][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3141.833142][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3141.862696][T11705] bond0 (unregistering): Released all slaves [ 3142.234015][ C0] vkms_vblank_simulate: vblank timer overrun [ 3142.243508][T13445] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3142.254114][T13445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3142.296581][T13445] usb 3-1: config 0 descriptor?? [ 3142.310342][T13445] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3142.991432][T13445] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3143.001031][T13445] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3143.209452][T24090] bridge0: port 1(bridge_slave_0) entered blocking state [ 3143.235798][T24090] bridge0: port 1(bridge_slave_0) entered disabled state [ 3143.243179][T24090] bridge_slave_0: entered allmulticast mode [ 3143.275196][T24090] bridge_slave_0: entered promiscuous mode [ 3143.542541][T24090] bridge0: port 2(bridge_slave_1) entered blocking state [ 3143.557712][T24090] bridge0: port 2(bridge_slave_1) entered disabled state [ 3143.579959][T24090] bridge_slave_1: entered allmulticast mode [ 3143.602071][T24090] bridge_slave_1: entered promiscuous mode [ 3143.860664][T24090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3143.906422][T11705] hsr_slave_0: left promiscuous mode [ 3143.922957][T11705] hsr_slave_1: left promiscuous mode [ 3143.981640][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3144.004592][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3144.035771][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3144.043258][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3144.090647][T11705] hsr_slave_0: left promiscuous mode [ 3144.103009][T11705] hsr_slave_1: left promiscuous mode [ 3144.137260][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3144.186219][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3144.339083][T11705] veth1_macvtap: left promiscuous mode [ 3144.347252][T11705] veth0_macvtap: left promiscuous mode [ 3144.375544][T11705] veth1_vlan: left promiscuous mode [ 3144.381046][T11705] veth0_vlan: left promiscuous mode [ 3146.007408][ T942] usb 3-1: USB disconnect, device number 39 [ 3149.405719][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3149.412088][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 3149.604247][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3149.732929][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3149.867154][T22283] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3150.088682][T22283] usb 1-1: Using ep0 maxpacket: 32 [ 3150.106403][T22283] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 3150.130653][T22283] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3150.140102][T22283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3150.169583][T22283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3150.179805][T22283] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3150.189907][T22283] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3150.220394][T22283] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3150.250498][T22283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.299468][T22283] usb 1-1: config 0 descriptor?? [ 3150.579684][T22283] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3150.875326][ T29] audit: type=1400 audit(1723952113.682:1214): avc: denied { read write } for pid=24244 comm="syz.0.2487" name="lp0" dev="devtmpfs" ino=2960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 3150.934916][ T29] audit: type=1400 audit(1723952113.682:1215): avc: denied { open } for pid=24244 comm="syz.0.2487" path="/dev/usb/lp0" dev="devtmpfs" ino=2960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 3151.433768][T24253] binder: BINDER_SET_CONTEXT_MGR already set [ 3151.440135][T24253] binder: 24244:24253 ioctl 4018620d 20000100 returned -16 [ 3151.449502][T24253] binder: 24244:24253 ioctl c018620c 20000000 returned -1 [ 3151.548606][ T29] audit: type=1400 audit(1723952114.242:1216): avc: denied { set_context_mgr } for pid=24244 comm="syz.0.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3151.568654][ C0] vkms_vblank_simulate: vblank timer overrun [ 3152.301373][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3152.374541][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3152.833504][T24090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3153.104423][ T29] audit: type=1400 audit(1723952115.912:1217): avc: denied { read write } for pid=21978 comm="syz-executor" name="loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3153.225480][T15774] usb 1-1: USB disconnect, device number 35 [ 3153.235452][ T29] audit: type=1400 audit(1723952115.912:1218): avc: denied { open } for pid=21978 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3153.253025][T15774] usblp0: removed [ 3153.303446][ T29] audit: type=1400 audit(1723952115.912:1219): avc: denied { ioctl } for pid=21978 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3154.002747][T24090] team0: Port device team_slave_0 added [ 3154.140213][T24090] team0: Port device team_slave_1 added [ 3154.391771][T24090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3154.451936][T24090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3154.574948][T24090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3154.608257][T24090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3154.615418][T24090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3154.642764][T24090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3154.765679][T13445] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3154.952281][T24090] hsr_slave_0: entered promiscuous mode [ 3154.971282][T13445] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3155.002773][T24090] hsr_slave_1: entered promiscuous mode [ 3155.015028][T13445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3155.049665][T13445] usb 3-1: config 0 descriptor?? [ 3155.109848][T13445] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3155.649345][T23910] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3155.659444][T13445] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3155.725685][T13445] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3155.880404][T23910] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3155.914311][T23910] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3156.057168][T23910] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3156.882125][T11705] bridge_slave_1: left allmulticast mode [ 3156.888873][T11705] bridge_slave_1: left promiscuous mode [ 3156.894747][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3156.943666][T11705] bridge_slave_0: left allmulticast mode [ 3156.965447][T11705] bridge_slave_0: left promiscuous mode [ 3156.971488][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3157.262727][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3157.292852][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3157.326750][T11705] bond0 (unregistering): Released all slaves [ 3157.645307][T11705] hsr_slave_0: left promiscuous mode [ 3157.664899][T11705] hsr_slave_1: left promiscuous mode [ 3157.672771][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3157.693664][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3159.052901][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3159.615407][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3159.981247][T22283] usb 3-1: USB disconnect, device number 40 [ 3164.042037][T24014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3164.146915][T24014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3164.333488][T24014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3164.379170][T20818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3164.396135][T20818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3164.420232][T20818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3164.463855][T20818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3164.473667][T20818] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3164.484578][T20818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3164.565193][T24014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3164.970184][T24329] netlink: 'syz.0.2499': attribute type 4 has an invalid length. [ 3165.947350][T24090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3166.647557][T20818] Bluetooth: hci5: command tx timeout [ 3167.020652][T24090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3167.056116][T24090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3168.220103][T24090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3168.577485][T22283] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3168.725788][T20818] Bluetooth: hci5: command tx timeout [ 3168.791611][T22283] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3168.812376][T22283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3168.829484][T22283] usb 3-1: config 0 descriptor?? [ 3168.860874][T22283] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3169.406734][T24014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3169.416389][T22283] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3169.423362][T22283] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3170.064659][T24014] 8021q: adding VLAN 0 to HW filter on device team0 [ 3170.278173][T24381] usb usb8: usbfs: process 24381 (syz.0.2505) did not claim interface 0 before use [ 3170.289811][T24381] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3170.457162][T11705] bridge_slave_1: left allmulticast mode [ 3170.481270][T11705] bridge_slave_1: left promiscuous mode [ 3170.788073][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3170.844987][T20818] Bluetooth: hci5: command tx timeout [ 3170.887960][T11705] bridge_slave_0: left allmulticast mode [ 3170.920368][T11705] bridge_slave_0: left promiscuous mode [ 3170.951296][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3171.175958][ T9117] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 3172.187491][ T9117] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 3172.649994][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3172.969572][T20818] Bluetooth: hci5: command tx timeout [ 3173.335599][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3173.456506][T11705] bond0 (unregistering): Released all slaves [ 3173.682742][T24325] chnl_net:caif_netlink_parms(): no params data found [ 3173.911968][T11705] hsr_slave_0: left promiscuous mode [ 3173.939326][T11705] hsr_slave_1: left promiscuous mode [ 3173.959026][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3173.982222][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3174.817645][T22283] usb 3-1: USB disconnect, device number 41 [ 3175.133984][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3175.341159][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3177.347294][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 3177.354621][T19556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3178.349445][T11736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3178.363524][T11736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3178.373922][T11736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3178.512429][T11736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3178.536254][T11736] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3178.543998][T11736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3178.902059][T24325] bridge0: port 1(bridge_slave_0) entered blocking state [ 3178.931815][T15774] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3178.951237][T24325] bridge0: port 1(bridge_slave_0) entered disabled state [ 3178.990024][T24325] bridge_slave_0: entered allmulticast mode [ 3179.024057][T24325] bridge_slave_0: entered promiscuous mode [ 3179.159298][T15774] usb 3-1: config 0 has no interfaces? [ 3179.267582][T15774] usb 3-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 3179.470114][T15774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3179.716926][T24325] bridge0: port 2(bridge_slave_1) entered blocking state [ 3179.767501][T24325] bridge0: port 2(bridge_slave_1) entered disabled state [ 3179.796550][T15774] usb 3-1: config 0 descriptor?? [ 3179.865225][T24325] bridge_slave_1: entered allmulticast mode [ 3179.950847][T24325] bridge_slave_1: entered promiscuous mode [ 3180.126009][T24425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3180.139252][T24425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3180.577546][T24325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3180.667118][T11736] Bluetooth: hci3: command tx timeout [ 3181.371971][T24325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3181.510610][T24090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3181.719922][T13445] usb 3-1: USB disconnect, device number 42 [ 3181.731009][T24325] team0: Port device team_slave_0 added [ 3182.748022][T11736] Bluetooth: hci3: command tx timeout [ 3182.792826][T24325] team0: Port device team_slave_1 added [ 3183.104884][T24325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3183.125533][T24325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3183.154975][T22283] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 3183.211073][T24325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3183.239566][T24325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3183.264925][T24325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3183.326743][T24325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3183.371066][T24090] 8021q: adding VLAN 0 to HW filter on device team0 [ 3183.394725][T22283] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3183.414412][T22283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3183.451016][T22283] usb 1-1: config 0 descriptor?? [ 3183.482441][T22283] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3183.513520][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 3183.520796][T19556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3183.637520][T24325] hsr_slave_0: entered promiscuous mode [ 3183.666203][T24325] hsr_slave_1: entered promiscuous mode [ 3183.735022][T24325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3183.745706][T24325] Cannot create hsr debugfs directory [ 3184.005280][T22283] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3184.012344][T22283] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3184.128596][T19556] bridge0: port 2(bridge_slave_1) entered blocking state [ 3184.135859][T19556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3184.806446][T11736] Bluetooth: hci3: command tx timeout [ 3186.885343][T11736] Bluetooth: hci3: command tx timeout [ 3188.532932][T20818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3188.552015][T20818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3188.567219][T20818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3188.579082][T20818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3188.587393][T20818] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3188.597683][T20818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3188.989978][ T9] usb 1-1: USB disconnect, device number 36 [ 3189.148848][T24427] chnl_net:caif_netlink_parms(): no params data found [ 3190.726828][T20818] Bluetooth: hci4: command tx timeout [ 3191.718947][T11705] bridge_slave_1: left allmulticast mode [ 3191.724656][T11705] bridge_slave_1: left promiscuous mode [ 3191.753961][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3191.782570][T11705] bridge_slave_0: left allmulticast mode [ 3191.805338][T11705] bridge_slave_0: left promiscuous mode [ 3191.811310][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3192.104973][ T25] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3192.337704][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3192.354668][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 3192.392095][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 3192.409207][T22283] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 3192.445082][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3192.470538][ T25] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 3192.493596][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3192.513856][ T25] usb 3-1: Product: syz [ 3192.547458][ T25] usb 3-1: Manufacturer: syz [ 3192.552113][ T25] usb 3-1: SerialNumber: syz [ 3192.572644][ T25] usb 3-1: config 0 descriptor?? [ 3192.601669][ T25] redrat3 3-1:0.0: Couldn't find all endpoints [ 3192.685627][T22283] usb 1-1: string descriptor 0 read error: -22 [ 3192.692178][T22283] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3192.723409][T22283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3192.739757][T22283] usb 1-1: config 0 descriptor?? [ 3192.752563][T22283] usb 1-1: Found UVC 0.00 device (18ec:3288) [ 3192.774548][T22283] usb 1-1: No valid video chain found. [ 3192.809604][T20818] Bluetooth: hci4: command tx timeout [ 3193.147135][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3193.183900][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3193.206940][T11705] bond0 (unregistering): Released all slaves [ 3193.261030][T24522] netlink: 'syz.0.2524': attribute type 12 has an invalid length. [ 3193.613958][T11705] hsr_slave_0: left promiscuous mode [ 3193.631983][T11705] hsr_slave_1: left promiscuous mode [ 3193.653823][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3193.674114][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3193.846537][T13398] SELinux: failure in sel_netif_sid_slow(), invalid network interface (16) [ 3193.924024][T13398] SELinux: failure in sel_netif_sid_slow(), invalid network interface (16) [ 3194.142562][T13398] usb 3-1: USB disconnect, device number 43 [ 3194.652620][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3195.595672][T20818] Bluetooth: hci4: command tx timeout [ 3195.824151][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3195.835457][ T942] usb 1-1: USB disconnect, device number 37 [ 3196.134215][ T29] audit: type=1400 audit(1723952158.922:1220): avc: denied { accept } for pid=24534 comm="syz.0.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3197.747399][T20818] Bluetooth: hci4: command tx timeout [ 3197.950873][T24427] bridge0: port 1(bridge_slave_0) entered blocking state [ 3198.255263][T24427] bridge0: port 1(bridge_slave_0) entered disabled state [ 3198.262588][T24427] bridge_slave_0: entered allmulticast mode [ 3198.295183][T24427] bridge_slave_0: entered promiscuous mode [ 3198.314614][T24427] bridge0: port 2(bridge_slave_1) entered blocking state [ 3198.330155][T24427] bridge0: port 2(bridge_slave_1) entered disabled state [ 3198.340919][T24427] bridge_slave_1: entered allmulticast mode [ 3198.367170][T24427] bridge_slave_1: entered promiscuous mode [ 3198.802325][T24427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3198.834366][ T29] audit: type=1326 audit(1723952161.622:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24545 comm="syz.0.2529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc1e379e79 code=0x0 [ 3198.893609][T24325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3199.214745][T24427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3199.318553][T24552] random: crng reseeded on system resumption [ 3200.238129][ T29] audit: type=1400 audit(1723952162.132:1222): avc: denied { append } for pid=24545 comm="syz.0.2529" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3200.818175][T24325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3201.052567][T24427] team0: Port device team_slave_0 added [ 3201.092611][T24427] team0: Port device team_slave_1 added [ 3201.105708][T24325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3202.273328][T24325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3202.275423][ T942] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 3202.366618][T24427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3202.387528][T24427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3202.434466][T24427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3202.457807][T24427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3202.465048][T24427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3202.487771][ T942] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3202.498692][T24427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3202.526683][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3202.558687][ T942] usb 1-1: config 0 descriptor?? [ 3202.581895][ T942] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3203.185901][ T942] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3203.197214][ T942] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3203.408730][T24427] hsr_slave_0: entered promiscuous mode [ 3203.427821][T24427] hsr_slave_1: entered promiscuous mode [ 3203.443729][T24427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3203.461509][T24427] Cannot create hsr debugfs directory [ 3203.875437][T24497] chnl_net:caif_netlink_parms(): no params data found [ 3204.813919][T24581] serio: Serial port pts0 [ 3205.307366][T24497] bridge0: port 1(bridge_slave_0) entered blocking state [ 3205.314633][T24497] bridge0: port 1(bridge_slave_0) entered disabled state [ 3205.465700][T24497] bridge_slave_0: entered allmulticast mode [ 3205.628709][T24497] bridge_slave_0: entered promiscuous mode [ 3206.389731][T24497] bridge0: port 2(bridge_slave_1) entered blocking state [ 3206.415733][T24497] bridge0: port 2(bridge_slave_1) entered disabled state [ 3206.423019][T24497] bridge_slave_1: entered allmulticast mode [ 3206.459844][T24497] bridge_slave_1: entered promiscuous mode [ 3206.684334][ T942] usb 1-1: USB disconnect, device number 38 [ 3207.078019][T11705] bridge_slave_1: left allmulticast mode [ 3207.095815][T11705] bridge_slave_1: left promiscuous mode [ 3207.101852][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3207.138184][T11705] bridge_slave_0: left allmulticast mode [ 3207.170073][T11705] bridge_slave_0: left promiscuous mode [ 3207.194404][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3207.404008][T24606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'. [ 3208.375915][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3208.406808][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3208.422215][T11705] bond0 (unregistering): Released all slaves [ 3208.763478][T24497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3208.905235][T11705] hsr_slave_0: left promiscuous mode [ 3208.911973][T11705] hsr_slave_1: left promiscuous mode [ 3208.927375][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3208.937965][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3209.491523][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3209.648011][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3210.503190][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3210.593722][T23991] Bluetooth: hci2: Frame reassembly failed (-84) [ 3210.609356][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 3211.383280][T24497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3211.584694][T24325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3211.671514][T24497] team0: Port device team_slave_0 added [ 3211.770011][T24497] team0: Port device team_slave_1 added [ 3211.974474][T24497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3212.342718][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3212.566943][T20818] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3212.577103][T11736] Bluetooth: hci2: command 0x1003 tx timeout [ 3212.872000][T24497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3213.056494][T24325] 8021q: adding VLAN 0 to HW filter on device team0 [ 3213.327764][T24497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3213.357568][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3213.383555][ C0] vkms_vblank_simulate: vblank timer overrun [ 3214.318230][T24497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3214.401254][ T29] audit: type=1326 audit(1723952433.218:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24623 comm="syz.0.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1e379e79 code=0x7fc00000 [ 3214.719304][T23991] bridge0: port 1(bridge_slave_0) entered blocking state [ 3214.726661][T23991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3214.800911][T23991] bridge0: port 2(bridge_slave_1) entered blocking state [ 3214.808165][T23991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3215.105096][T24497] hsr_slave_0: entered promiscuous mode [ 3215.127420][T24497] hsr_slave_1: entered promiscuous mode [ 3215.763239][T24427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3216.595207][T24427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3216.678290][T24427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3217.740374][T24427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3218.005066][T24657] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3219.207474][T24674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3220.440055][T24680] input: syz0 as /devices/virtual/input/input38 [ 3220.766438][T24680] Cannot find set identified by id 0 to match [ 3220.862549][T24325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3221.298800][T24427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3221.441128][ T29] audit: type=1400 audit(1723952440.208:1224): avc: denied { relabelfrom } for pid=24687 comm="syz.2.2548" name="" dev="pipefs" ino=142786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 3222.286237][T24427] 8021q: adding VLAN 0 to HW filter on device team0 [ 3222.337320][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 3222.344559][T11705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3222.672932][T21100] bridge0: port 2(bridge_slave_1) entered blocking state [ 3222.680305][T21100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3224.222479][T24709] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3224.369756][T24497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3224.386321][T24707] overlayfs: failed to get inode (-116) [ 3224.393656][T24707] overlayfs: failed to get inode (-116) [ 3224.426993][T24497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3224.490116][T24497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3224.545828][T24497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3224.719375][T24714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2553'. [ 3224.816855][T11736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3224.860399][T11736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3224.881488][T11736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3224.906577][T11736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3224.928426][T11736] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3224.941605][T11736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3225.143501][ T29] audit: type=1400 audit(1723952443.958:1225): avc: denied { validate_trans } for pid=24717 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3226.348290][T24427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3233.325151][T11736] Bluetooth: hci2: command tx timeout [ 3234.305009][ C0] vkms_vblank_simulate: vblank timer overrun [ 3234.598510][T24741] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3235.454577][ T29] audit: type=1326 audit(1723952453.828:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24738 comm="syz.0.2558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc1e379e79 code=0x0 [ 3235.479902][T11736] Bluetooth: hci2: command tx timeout [ 3235.655312][T24744] virtio-fs: tag <(null)> not found [ 3236.288840][T24737] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 3236.295407][T24737] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3236.302980][T24737] vhci_hcd vhci_hcd.0: Device attached [ 3236.365781][T24749] vhci_hcd: connection closed [ 3236.366128][T21100] vhci_hcd: stop threads [ 3236.395310][T21100] vhci_hcd: release socket [ 3236.399868][T21100] vhci_hcd: disconnect device [ 3236.781395][T24754] netlink: 'syz.0.2559': attribute type 16 has an invalid length. [ 3236.789550][T24754] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2559'. [ 3238.345071][T11736] Bluetooth: hci2: command tx timeout [ 3238.819646][T24497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3238.980113][T24758] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3239.271144][T24497] 8021q: adding VLAN 0 to HW filter on device team0 [ 3239.335758][T24762] befs: (nullb0): No write support. Marking filesystem read-only [ 3239.344093][T24762] befs: (nullb0): invalid magic header [ 3239.697434][T21092] bridge0: port 1(bridge_slave_0) entered blocking state [ 3239.704848][T21092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3239.778653][T11705] bridge_slave_1: left allmulticast mode [ 3239.810667][T11705] bridge_slave_1: left promiscuous mode [ 3239.837060][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3239.884593][T11705] bridge_slave_0: left allmulticast mode [ 3239.904919][T11705] bridge_slave_0: left promiscuous mode [ 3239.910830][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3240.107569][T11736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3240.121831][T11736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3240.132809][T11736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3240.155197][T11736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3240.165947][T11736] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3240.178046][T11736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3240.442069][T11736] Bluetooth: hci2: command tx timeout [ 3242.273364][T11736] Bluetooth: hci3: command tx timeout [ 3244.425811][T11736] Bluetooth: hci3: command tx timeout [ 3244.820062][ T29] audit: type=1326 audit(1723952463.638:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24789 comm="syz.2.2567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x0 [ 3244.846135][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3244.994555][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3245.024514][T11705] bond0 (unregistering): Released all slaves [ 3245.908221][ T29] audit: type=1400 audit(1723952464.728:1228): avc: denied { read } for pid=24789 comm="syz.2.2567" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3245.931321][ C0] vkms_vblank_simulate: vblank timer overrun [ 3246.748250][T11736] Bluetooth: hci3: command tx timeout [ 3246.771629][ T29] audit: type=1400 audit(1723952464.728:1229): avc: denied { open } for pid=24789 comm="syz.2.2567" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3246.954535][T23991] bridge0: port 2(bridge_slave_1) entered blocking state [ 3246.961908][T23991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3247.075733][T11705] hsr_slave_0: left promiscuous mode [ 3247.097659][T11705] hsr_slave_1: left promiscuous mode [ 3247.165512][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3247.236316][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3247.271218][T24803] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3247.427759][T24805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3248.765584][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806c9a7000: rx timeout, send abort [ 3248.808694][T11736] Bluetooth: hci3: command tx timeout [ 3248.951832][T20818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3248.966653][T20818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3248.980278][T20818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3248.992205][T20818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3249.007189][T20818] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3249.025245][T20818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3249.273997][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806c9a7000: abort rx timeout. Force session deactivation [ 3249.402488][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3249.510258][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3250.348014][T24715] chnl_net:caif_netlink_parms(): no params data found [ 3250.390240][T24805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2570'. [ 3250.691931][T24815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3251.405211][T20818] Bluetooth: hci4: command tx timeout [ 3251.668591][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2579'. [ 3251.901095][T24715] bridge0: port 1(bridge_slave_0) entered blocking state [ 3251.915452][T24715] bridge0: port 1(bridge_slave_0) entered disabled state [ 3251.922778][T24715] bridge_slave_0: entered allmulticast mode [ 3251.932091][T24715] bridge_slave_0: entered promiscuous mode [ 3251.967465][T24715] bridge0: port 2(bridge_slave_1) entered blocking state [ 3251.975189][T24715] bridge0: port 2(bridge_slave_1) entered disabled state [ 3251.982751][T24715] bridge_slave_1: entered allmulticast mode [ 3251.992138][T24715] bridge_slave_1: entered promiscuous mode [ 3252.941379][T24715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3252.972563][T24715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3253.073581][T24715] team0: Port device team_slave_0 added [ 3253.096454][T24715] team0: Port device team_slave_1 added [ 3253.365288][T11736] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 3253.470368][T11736] Bluetooth: hci4: command tx timeout [ 3253.575084][T24836] No such timeout policy "syz0" [ 3254.521664][T24838] binder: 24837:24838 ioctl c018620c 20000740 returned -22 [ 3254.616251][T24715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3254.654943][T24715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3254.680986][ C0] vkms_vblank_simulate: vblank timer overrun [ 3254.698166][T24715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3254.750646][T24715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3254.768857][T24715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3254.795180][ C0] vkms_vblank_simulate: vblank timer overrun [ 3255.740922][T11736] Bluetooth: hci4: command tx timeout [ 3255.812728][T24715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3257.435137][T15774] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 3257.579402][T24715] hsr_slave_0: entered promiscuous mode [ 3257.601347][T24715] hsr_slave_1: entered promiscuous mode [ 3257.612669][T24715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3257.621281][T24715] Cannot create hsr debugfs directory [ 3257.668916][T15774] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3257.678522][T15774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3257.716781][T15774] usb 1-1: config 0 descriptor?? [ 3257.741605][T15774] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3257.765834][T11736] Bluetooth: hci4: command tx timeout [ 3257.849700][T24861] wg2: entered promiscuous mode [ 3257.864500][T24861] wg2: entered allmulticast mode [ 3258.075220][T24770] chnl_net:caif_netlink_parms(): no params data found [ 3258.255985][T15774] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3258.263074][T15774] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3258.509306][T24812] chnl_net:caif_netlink_parms(): no params data found [ 3258.901208][T24869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3259.517312][T24875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'. [ 3259.739826][T24770] bridge0: port 1(bridge_slave_0) entered blocking state [ 3259.748165][T24770] bridge0: port 1(bridge_slave_0) entered disabled state [ 3259.757732][T24770] bridge_slave_0: entered allmulticast mode [ 3259.769658][T24770] bridge_slave_0: entered promiscuous mode [ 3259.816894][T24770] bridge0: port 2(bridge_slave_1) entered blocking state [ 3259.824655][T24770] bridge0: port 2(bridge_slave_1) entered disabled state [ 3259.943781][T24770] bridge_slave_1: entered allmulticast mode [ 3260.040867][T24770] bridge_slave_1: entered promiscuous mode [ 3261.073399][T24812] bridge0: port 1(bridge_slave_0) entered blocking state [ 3261.094010][T24812] bridge0: port 1(bridge_slave_0) entered disabled state [ 3261.102115][T24812] bridge_slave_0: entered allmulticast mode [ 3261.114428][T24812] bridge_slave_0: entered promiscuous mode [ 3261.244510][T24770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3261.273770][ T25] usb 1-1: USB disconnect, device number 39 [ 3261.441166][T24812] bridge0: port 2(bridge_slave_1) entered blocking state [ 3261.465942][T24812] bridge0: port 2(bridge_slave_1) entered disabled state [ 3261.474679][T24812] bridge_slave_1: entered allmulticast mode [ 3261.513580][T24812] bridge_slave_1: entered promiscuous mode [ 3261.543756][T24770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3261.784203][T24892] netlink: 'syz.0.2584': attribute type 1 has an invalid length. [ 3262.687202][T24770] team0: Port device team_slave_0 added [ 3262.937226][T24812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3262.972172][T24812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3263.008097][T24770] team0: Port device team_slave_1 added [ 3263.486565][T24770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3263.493713][T24770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3263.591343][T24770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3263.635188][T24770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3263.720674][T24770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3264.239517][T24770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3264.372529][T24812] team0: Port device team_slave_0 added [ 3264.400972][T24812] team0: Port device team_slave_1 added [ 3266.240620][T24812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3266.273320][T24812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3266.299525][ C0] vkms_vblank_simulate: vblank timer overrun [ 3266.368633][T24812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3266.392536][T11705] bridge_slave_1: left allmulticast mode [ 3266.405108][T11705] bridge_slave_1: left promiscuous mode [ 3266.432093][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3266.453390][T11705] bridge_slave_0: left allmulticast mode [ 3266.465727][T11705] bridge_slave_0: left promiscuous mode [ 3266.471538][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3266.573921][T11705] bridge_slave_1: left allmulticast mode [ 3266.595150][T11705] bridge_slave_1: left promiscuous mode [ 3266.610957][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3266.673810][T11705] bridge_slave_0: left allmulticast mode [ 3266.702065][T11705] bridge_slave_0: left promiscuous mode [ 3266.729095][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3267.585668][T24944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3268.195422][T15774] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 3268.433503][T15774] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3268.468055][T15774] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3268.514961][T15774] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3268.564070][T15774] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3268.614921][T15774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3268.671274][T24944] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3268.856469][T13445] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3269.068150][T13445] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3269.084912][T13445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3269.141961][T13445] usb 3-1: config 0 descriptor?? [ 3269.196229][T13445] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3269.768364][T13445] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3269.785051][T13445] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3269.874207][T15774] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 3269.904028][T15774] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input39 [ 3270.026031][T15774] usb 1-1: USB disconnect, device number 40 [ 3270.032037][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3270.305643][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3270.365213][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3270.397222][T11705] bond0 (unregistering): Released all slaves [ 3270.582739][T24971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3271.189826][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3271.220355][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3271.240962][T11705] bond0 (unregistering): Released all slaves [ 3271.302739][T24770] hsr_slave_0: entered promiscuous mode [ 3271.328333][T24770] hsr_slave_1: entered promiscuous mode [ 3271.341564][T24770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3271.367567][T24770] Cannot create hsr debugfs directory [ 3271.537113][T24812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3271.544315][T24812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3271.635622][T24812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3271.702052][T24979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2592'. [ 3271.921179][T11705] hsr_slave_0: left promiscuous mode [ 3271.933963][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.934066][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 3271.970585][T11705] hsr_slave_1: left promiscuous mode [ 3271.987521][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3272.016060][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3272.071559][T11705] hsr_slave_0: left promiscuous mode [ 3272.087300][T11705] hsr_slave_1: left promiscuous mode [ 3272.125566][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3272.147273][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3272.472347][ T9] usb 3-1: USB disconnect, device number 44 [ 3273.231842][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3273.341197][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3273.385180][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3273.602132][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3273.624345][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3273.640806][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 3273.652308][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3273.705571][ T9] usb 3-1: config 0 descriptor?? [ 3274.189319][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 3274.213379][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 3274.221850][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 3274.229811][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 3274.254999][ T9] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 3274.506692][ T9] hid-rmi 0003:06CB:81A7.0006: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 3275.233405][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3275.399701][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3276.059273][ T9] usb 3-1: USB disconnect, device number 45 [ 3276.126386][ C0] vkms_vblank_simulate: vblank timer overrun [ 3276.595762][T25000] usb usb9: usbfs: process 25000 (syz.2.2595) did not claim interface 0 before use [ 3277.100669][T24812] hsr_slave_0: entered promiscuous mode [ 3277.119213][T24812] hsr_slave_1: entered promiscuous mode [ 3278.037254][T24715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3278.163395][T24715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3278.296413][T24715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3278.530471][T24715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3278.764971][T13445] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3278.981811][T13445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3279.018652][T13445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3279.206613][T13445] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 3279.224333][T13445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3279.240089][T13445] usb 3-1: config 0 descriptor?? [ 3281.989598][T13445] usbhid 3-1:0.0: can't add hid device: -71 [ 3282.016923][T13445] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3282.072910][T13445] usb 3-1: USB disconnect, device number 46 [ 3283.607904][T25035] No such timeout policy "syz0" [ 3286.202332][T25043] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2600'. [ 3286.239908][T25043] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 3286.311610][T13445] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3286.557868][T13445] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3286.577722][T13445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3286.629386][T13445] usb 3-1: config 0 descriptor?? [ 3286.668152][T13445] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3286.892530][T20818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3286.915105][T20818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3286.925482][T20818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3286.960812][T20818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3286.977219][T20818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3286.985948][T20818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3287.142217][T24770] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3287.195408][T13445] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3287.202460][T13445] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3287.214528][T25056] rdma_op ffff8880698271f0 conn xmit_rdma 0000000000000000 [ 3287.359813][T24770] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3287.392251][T24770] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3287.526274][T24770] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3287.726814][T20045] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3287.894016][T24812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3287.917837][T20045] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3287.958577][T20045] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3288.014400][T24812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3288.023922][T20045] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3288.060015][T20045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3288.081444][T20045] usb 1-1: Product: syz [ 3288.100573][T20045] usb 1-1: Manufacturer: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 3288.128193][T20045] usb 1-1: SerialNumber: syz [ 3288.143323][T24812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3288.197598][T24812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3288.320620][T11705] bridge_slave_1: left allmulticast mode [ 3288.332253][T11705] bridge_slave_1: left promiscuous mode [ 3288.341164][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3288.389390][T11705] bridge_slave_0: left allmulticast mode [ 3288.409642][T11705] bridge_slave_0: left promiscuous mode [ 3288.427339][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3288.525962][T15774] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 3288.905583][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3288.930743][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3288.946921][T11705] bond0 (unregistering): Released all slaves [ 3289.032848][T20045] usb 1-1: 0:2 : does not exist [ 3289.125253][T20818] Bluetooth: hci2: command tx timeout [ 3289.139754][T20045] usb 1-1: USB disconnect, device number 41 [ 3289.286484][T24927] udevd[24927]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3289.500722][T11705] hsr_slave_0: left promiscuous mode [ 3289.518640][T11705] hsr_slave_1: left promiscuous mode [ 3289.546339][T20045] usb 3-1: USB disconnect, device number 47 [ 3289.572351][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3289.605571][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3290.283972][T11705] team0 (unregistering): Port device team_slave_1 removed [ 3291.991485][T20818] Bluetooth: hci2: command tx timeout [ 3292.418702][T11705] team0 (unregistering): Port device team_slave_0 removed [ 3292.780253][T25072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3293.231184][T25052] chnl_net:caif_netlink_parms(): no params data found [ 3293.969519][T25096] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 3294.154928][T20818] Bluetooth: hci2: command tx timeout [ 3294.404410][T24770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3295.122724][T24770] 8021q: adding VLAN 0 to HW filter on device team0 [ 3295.153672][T25052] bridge0: port 1(bridge_slave_0) entered blocking state [ 3295.164586][T25052] bridge0: port 1(bridge_slave_0) entered disabled state [ 3295.176788][T25052] bridge_slave_0: entered allmulticast mode [ 3295.186644][T25052] bridge_slave_0: entered promiscuous mode [ 3295.204260][T21081] bridge0: port 1(bridge_slave_0) entered blocking state [ 3295.211596][T21081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3295.260596][T21081] bridge0: port 2(bridge_slave_1) entered blocking state [ 3295.267898][T21081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3295.288391][T25107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2608'. [ 3295.593684][T25052] bridge0: port 2(bridge_slave_1) entered blocking state [ 3295.736313][T25052] bridge0: port 2(bridge_slave_1) entered disabled state [ 3295.862571][T25052] bridge_slave_1: entered allmulticast mode [ 3296.064859][T25052] bridge_slave_1: entered promiscuous mode [ 3296.155022][T25111] netlink: 'syz.2.2608': attribute type 4 has an invalid length. [ 3296.162827][T25111] netlink: 'syz.2.2608': attribute type 5 has an invalid length. [ 3296.251021][T11736] Bluetooth: hci2: command tx timeout [ 3296.573361][T25052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3296.649978][T25052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3296.721887][T24812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3296.739633][T13445] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 3296.977861][T13445] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3297.017321][T13445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3297.076410][T13445] usb 1-1: config 0 descriptor?? [ 3297.145908][T13445] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3297.600291][T25052] team0: Port device team_slave_0 added [ 3297.634085][T20818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3297.650851][T20818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3297.658373][T13445] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3297.670675][T13445] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3297.680231][T20818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3297.724237][T20818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3297.735599][T20818] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3297.744402][T20818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3298.053011][T25052] team0: Port device team_slave_1 added [ 3298.133632][T24812] 8021q: adding VLAN 0 to HW filter on device team0 [ 3298.401430][T23991] bridge0: port 1(bridge_slave_0) entered blocking state [ 3298.408706][T23991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3298.485952][T25052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3298.492967][T25052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3298.526800][T25052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3298.551293][T25052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3298.569250][T25052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3298.595225][ C0] vkms_vblank_simulate: vblank timer overrun [ 3298.602148][T25052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3298.816339][T23991] bridge0: port 2(bridge_slave_1) entered blocking state [ 3298.823624][T23991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3299.845236][T11736] Bluetooth: hci3: command tx timeout [ 3299.955859][T25052] hsr_slave_0: entered promiscuous mode [ 3299.976132][T25052] hsr_slave_1: entered promiscuous mode [ 3299.985150][T25052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3299.992749][T25052] Cannot create hsr debugfs directory [ 3301.850995][T20045] usb 1-1: USB disconnect, device number 42 [ 3301.925624][T11736] Bluetooth: hci3: command tx timeout [ 3307.194126][T11736] Bluetooth: hci3: command tx timeout [ 3307.252345][T25130] chnl_net:caif_netlink_parms(): no params data found [ 3310.524869][T20818] Bluetooth: hci3: command tx timeout [ 3311.073053][T21100] bridge_slave_1: left allmulticast mode [ 3311.085746][T21100] bridge_slave_1: left promiscuous mode [ 3311.113746][T21100] bridge0: port 2(bridge_slave_1) entered disabled state [ 3311.159848][T21100] bridge_slave_0: left allmulticast mode [ 3312.025613][T21100] bridge_slave_0: left promiscuous mode [ 3312.031638][T21100] bridge0: port 1(bridge_slave_0) entered disabled state [ 3312.108635][T11736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3312.131626][T11736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3312.142905][T11736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3312.151633][T11736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3312.160056][T11736] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3312.167651][T11736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3312.432913][T25202] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3313.545063][ T9490] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 3313.748249][ T9490] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3313.758195][ T9490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3313.792045][ T9490] usb 1-1: config 0 descriptor?? [ 3313.824177][ T9490] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3314.025854][T21100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3314.052367][T21100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3314.082398][T21100] bond0 (unregistering): Released all slaves [ 3314.253742][T20818] Bluetooth: hci4: command tx timeout [ 3314.347187][ T9490] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3314.370969][ T9490] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3315.537962][T21100] hsr_slave_0: left promiscuous mode [ 3315.546197][T21100] hsr_slave_1: left promiscuous mode [ 3315.554174][T21100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3315.572327][T21100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3315.814311][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (16) [ 3315.875263][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (16) [ 3316.271808][T21100] team0 (unregistering): Port device team_slave_1 removed [ 3316.333985][T20818] Bluetooth: hci4: command tx timeout [ 3316.358043][T21100] team0 (unregistering): Port device team_slave_0 removed [ 3316.744674][ T9] usb 1-1: USB disconnect, device number 43 [ 3318.405045][T20818] Bluetooth: hci4: command tx timeout [ 3318.521458][T25130] bridge0: port 1(bridge_slave_0) entered blocking state [ 3318.582955][T25130] bridge0: port 1(bridge_slave_0) entered disabled state [ 3318.605243][T25130] bridge_slave_0: entered allmulticast mode [ 3318.613736][T25130] bridge_slave_0: entered promiscuous mode [ 3318.707792][T25130] bridge0: port 2(bridge_slave_1) entered blocking state [ 3318.775926][T25130] bridge0: port 2(bridge_slave_1) entered disabled state [ 3318.783270][T25130] bridge_slave_1: entered allmulticast mode [ 3318.833638][T25228] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3318.859097][T25130] bridge_slave_1: entered promiscuous mode [ 3319.005403][T25229] befs: (nullb0): No write support. Marking filesystem read-only [ 3319.014379][T25229] befs: (nullb0): invalid magic header [ 3319.102210][T25130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3319.221984][T25130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3319.616097][T25130] team0: Port device team_slave_0 added [ 3319.768779][T25130] team0: Port device team_slave_1 added [ 3320.169850][T25052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3320.213369][T25052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3320.317895][T25241] xt_policy: too many policy elements [ 3320.559983][T20818] Bluetooth: hci4: command tx timeout [ 3320.656704][T25130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3320.942644][T25130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3321.021245][T25130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3321.090853][T25130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3321.124011][T25130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3321.200840][T25130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3321.216421][T25052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3321.235864][T25052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3321.532035][T25130] hsr_slave_0: entered promiscuous mode [ 3321.581268][T25130] hsr_slave_1: entered promiscuous mode [ 3321.611606][T25130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3321.635343][T25130] Cannot create hsr debugfs directory [ 3321.663726][T25247] overlay: ./file0 is not a directory [ 3322.288699][T25249] tun0: tun_chr_ioctl cmd 35108 [ 3322.707120][T25196] chnl_net:caif_netlink_parms(): no params data found [ 3323.677925][T25274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2631'. [ 3323.997843][T25196] bridge0: port 1(bridge_slave_0) entered blocking state [ 3324.025546][T25196] bridge0: port 1(bridge_slave_0) entered disabled state [ 3324.050653][T25196] bridge_slave_0: entered allmulticast mode [ 3324.069171][T25196] bridge_slave_0: entered promiscuous mode [ 3324.313374][T25196] bridge0: port 2(bridge_slave_1) entered blocking state [ 3324.341564][T25196] bridge0: port 2(bridge_slave_1) entered disabled state [ 3324.376067][T25196] bridge_slave_1: entered allmulticast mode [ 3324.404213][T25196] bridge_slave_1: entered promiscuous mode [ 3324.410886][T22283] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 3324.626795][T22283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3324.665933][T22283] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 3324.694959][T22283] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 3324.712961][T22283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3324.765198][T22283] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 3324.799854][T22283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3324.819581][T22283] usb 1-1: Product: syz [ 3324.823911][T22283] usb 1-1: Manufacturer: syz [ 3324.838723][T22283] usb 1-1: SerialNumber: syz [ 3324.854416][T22283] usb 1-1: config 0 descriptor?? [ 3324.874630][T22283] redrat3 1-1:0.0: Couldn't find all endpoints [ 3324.891158][T25196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3324.952491][T21100] bridge_slave_1: left allmulticast mode [ 3324.964119][T21100] bridge_slave_1: left promiscuous mode [ 3324.980935][T21100] bridge0: port 2(bridge_slave_1) entered disabled state [ 3325.006261][T21100] bridge_slave_0: left allmulticast mode [ 3325.012178][T21100] bridge_slave_0: left promiscuous mode [ 3325.024529][T21100] bridge0: port 1(bridge_slave_0) entered disabled state [ 3325.183006][T25289] syz.2.2633: attempt to access beyond end of device [ 3325.183006][T25289] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3325.222700][T25289] efs: cannot read volume header [ 3326.021664][T21100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3326.040575][T21100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3326.059873][T21100] bond0 (unregistering): Released all slaves [ 3326.115874][T25196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3326.198324][T25288] netlink: 'syz.2.2633': attribute type 1 has an invalid length. [ 3326.336685][T21100] hsr_slave_0: left promiscuous mode [ 3326.347416][T21100] hsr_slave_1: left promiscuous mode [ 3326.377512][T21100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3326.397914][T21100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3326.684308][T20045] usb 1-1: USB disconnect, device number 44 [ 3327.043472][T21100] team0 (unregistering): Port device team_slave_1 removed [ 3327.135563][T21100] team0 (unregistering): Port device team_slave_0 removed [ 3327.940597][T25052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3327.964324][T25196] team0: Port device team_slave_0 added [ 3328.051860][T25196] team0: Port device team_slave_1 added [ 3328.101715][T25052] 8021q: adding VLAN 0 to HW filter on device team0 [ 3328.259543][T25196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3328.270933][T25196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3328.308048][T25196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3328.329625][T23991] bridge0: port 1(bridge_slave_0) entered blocking state [ 3328.336921][T23991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3328.424125][T25196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3328.431453][T25196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3328.457480][ C0] vkms_vblank_simulate: vblank timer overrun [ 3328.476589][T25196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3328.518323][T23991] bridge0: port 2(bridge_slave_1) entered blocking state [ 3328.525697][T23991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3328.543199][T25130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3328.588434][T25130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3328.692436][T25130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3328.776468][T25130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3328.837324][T25196] hsr_slave_0: entered promiscuous mode [ 3328.846496][T25196] hsr_slave_1: entered promiscuous mode [ 3329.649822][T25130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3329.692151][T25052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3329.897078][T25130] 8021q: adding VLAN 0 to HW filter on device team0 [ 3329.937741][T23987] bridge0: port 1(bridge_slave_0) entered blocking state [ 3329.945056][T23987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3329.993072][T23987] bridge0: port 2(bridge_slave_1) entered blocking state [ 3330.000345][T23987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3330.127297][T25052] veth0_vlan: entered promiscuous mode [ 3330.208358][T25052] veth1_vlan: entered promiscuous mode [ 3330.478817][T25196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3330.522308][T25196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3330.539881][T25196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3330.556837][T25196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3330.616736][T25052] veth0_macvtap: entered promiscuous mode [ 3330.697635][T25052] veth1_macvtap: entered promiscuous mode [ 3330.743525][T25052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3330.759705][T25052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3330.775086][T25052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3330.793570][T25052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3330.809215][T25052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3330.848746][T25052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3330.865198][T25052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3330.881294][T25052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3330.892479][T25052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3330.905943][T25052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3330.947299][T25052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3330.962505][T25052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3330.972460][T25052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3330.981583][T25052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3331.058697][T25130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3331.370625][T25196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3331.443969][T23991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3331.465649][T23991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3331.514186][T25196] 8021q: adding VLAN 0 to HW filter on device team0 [ 3331.640692][T23991] bridge0: port 1(bridge_slave_0) entered blocking state [ 3331.648013][T23991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3331.680778][T19556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3331.690788][T23991] bridge0: port 2(bridge_slave_1) entered blocking state [ 3331.698100][T23991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3331.723236][T19556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3332.140623][ T29] audit: type=1400 audit(3332.109:1230): avc: denied { read } for pid=25346 comm="syz.3.2357" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 3332.232818][T25130] veth0_vlan: entered promiscuous mode [ 3332.242699][ T29] audit: type=1400 audit(3332.109:1231): avc: denied { open } for pid=25346 comm="syz.3.2357" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 3332.332756][ T29] audit: type=1400 audit(3332.209:1232): avc: denied { ioctl } for pid=25346 comm="syz.3.2357" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3332.369537][T11736] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 3332.430859][T25130] veth1_vlan: entered promiscuous mode [ 3332.501007][ T29] audit: type=1400 audit(3332.289:1233): avc: denied { setattr } for pid=25345 comm="syz.0.2641" name="PACKET" dev="sockfs" ino=148183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3333.496969][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3333.503861][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 3334.002114][T25130] veth0_macvtap: entered promiscuous mode [ 3334.127281][T25130] veth1_macvtap: entered promiscuous mode [ 3334.243503][T25196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3334.320411][T25130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3334.457399][T22283] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 3334.518389][T25367] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3334.695717][T25130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3334.792428][T22283] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3334.836968][T22283] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3334.844878][T25130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3334.846977][T22283] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 3334.873609][T22283] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3334.882914][T22283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3334.995029][T25130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3335.012235][T22283] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3335.039972][T25130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3335.098216][T25130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3335.177046][T25130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3335.350353][T22283] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 3335.389131][T25152] udevd[25152]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3335.407846][T25130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3335.518256][T25130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3335.552947][T25130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3335.566064][T25130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3335.611335][T25130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3336.674914][T25130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3336.790409][T25130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3336.805165][ T9490] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 3336.909853][T15774] usb 4-1: USB disconnect, device number 29 [ 3336.975548][T25130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3336.989927][T25130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3337.013297][T25130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3337.028977][T25130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3337.053451][ T9490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3337.080260][ T9490] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 3337.123093][ T9490] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 3337.140435][ T9490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3337.179795][ T9490] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 3337.193930][ T9490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.211524][ T9490] usb 1-1: Product: syz [ 3337.221210][ T9490] usb 1-1: Manufacturer: syz [ 3337.245226][ T9490] usb 1-1: SerialNumber: syz [ 3337.296909][ T9490] usb 1-1: config 0 descriptor?? [ 3337.342767][ T9490] redrat3 1-1:0.0: Couldn't find all endpoints [ 3337.439071][T25196] veth0_vlan: entered promiscuous mode [ 3337.581413][T25196] veth1_vlan: entered promiscuous mode [ 3337.778326][T19556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3337.817178][T19556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3337.879754][T25393] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3338.192983][T25393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2649'. [ 3344.466160][ T25] usb 1-1: USB disconnect, device number 45 [ 3344.611902][T23987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3344.675351][T23987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3345.562112][T25196] veth0_macvtap: entered promiscuous mode [ 3345.689985][T25196] veth1_macvtap: entered promiscuous mode [ 3345.966995][T25196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3345.995463][ T29] audit: type=1400 audit(3345.959:1234): avc: denied { map } for pid=25411 comm="syz.3.2645" path="socket:[149528]" dev="sockfs" ino=149528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3346.254959][T25196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.284982][T25196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3348.316536][ T29] audit: type=1400 audit(3345.959:1235): avc: denied { read } for pid=25411 comm="syz.3.2645" path="socket:[149528]" dev="sockfs" ino=149528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3348.339471][ C0] vkms_vblank_simulate: vblank timer overrun [ 3348.524847][T25196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3348.540755][T25196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3348.704814][T25196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3348.783706][T25196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3348.820759][T25196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3348.904101][T25196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3349.121285][T25196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3349.168754][T25196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3349.214583][T25196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3349.301196][T25196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3349.341221][T25196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3349.383377][T25196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3349.424839][T25196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3349.457660][T25196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3349.486873][T25196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3349.872021][T25432] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 3349.985066][ T29] audit: type=1326 audit(3349.939:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25426 comm="syz.4.2647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4651d79e79 code=0x0 [ 3350.007552][ C0] vkms_vblank_simulate: vblank timer overrun [ 3350.482863][ T29] audit: type=1400 audit(3350.029:1237): avc: denied { connect } for pid=25426 comm="syz.4.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3350.590451][T20818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3350.629339][T20818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3350.638795][T20818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3350.654291][T20818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3350.669337][T20818] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3350.677631][T20818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3350.855278][T25196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3350.871265][T25196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3350.894871][T25196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3350.914917][T25196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3350.948456][T25440] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3351.695925][T23991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3352.780589][T20818] Bluetooth: hci1: command tx timeout [ 3353.368565][T23991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3353.437562][T25447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 3353.547483][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 3353.707303][T23991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3353.970677][ T29] audit: type=1400 audit(3353.919:1238): avc: denied { watch_sb } for pid=25450 comm="syz.2.2660" path="/192" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3354.805311][T20818] Bluetooth: hci1: command tx timeout [ 3356.885025][T20818] Bluetooth: hci1: command tx timeout [ 3358.978075][T11736] Bluetooth: hci1: command tx timeout [ 3361.194089][T23991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3361.371623][T25452] netlink: 'syz.2.2660': attribute type 2 has an invalid length. [ 3361.395056][T25452] netlink: 46 bytes leftover after parsing attributes in process `syz.2.2660'. [ 3363.385002][T21092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3363.445372][T21092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3363.731350][T23991] team0: left allmulticast mode [ 3363.746279][T23991] team_slave_0: left allmulticast mode [ 3363.790215][T23991] team_slave_1: left allmulticast mode [ 3363.810648][T23991] bridge0: port 3(team0) entered disabled state [ 3363.870208][T23991] bridge_slave_1: left allmulticast mode [ 3363.889031][T23991] bridge_slave_1: left promiscuous mode [ 3363.929759][T23991] bridge0: port 2(bridge_slave_1) entered disabled state [ 3363.976239][T23991] bridge_slave_0: left allmulticast mode [ 3363.981929][T23991] bridge_slave_0: left promiscuous mode [ 3364.027016][T23991] bridge0: port 1(bridge_slave_0) entered disabled state [ 3364.412222][T25485] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3365.017188][T25480] cgroup: No subsys list or none specified [ 3365.794861][ T942] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3365.997296][ T942] usb 5-1: Using ep0 maxpacket: 16 [ 3366.006594][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3366.019683][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3366.037445][ T942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3366.074976][ T942] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 3366.084599][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3366.163215][ T942] usb 5-1: config 0 descriptor?? [ 3366.538860][T23991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3366.560430][T23991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3366.579432][T23991] bond0 (unregistering): Released all slaves [ 3366.613363][T25436] chnl_net:caif_netlink_parms(): no params data found [ 3366.633937][T21092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3366.662248][T21092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3366.691553][ T942] ryos 0003:1E7D:31CE.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.4-1/input0 [ 3366.957135][ T942] usb 5-1: USB disconnect, device number 20 [ 3367.121010][T23991] IPVS: stopping backup sync thread 22409 ... [ 3367.152191][ T29] audit: type=1400 audit(3367.119:1239): avc: denied { accept } for pid=25501 comm="syz.3.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 3368.419687][T25436] bridge0: port 1(bridge_slave_0) entered blocking state [ 3368.450158][T25436] bridge0: port 1(bridge_slave_0) entered disabled state [ 3368.489789][T25436] bridge_slave_0: entered allmulticast mode [ 3368.507606][T25436] bridge_slave_0: entered promiscuous mode [ 3368.692121][T25521] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2663'. [ 3368.710023][T23991] hsr_slave_0: left promiscuous mode [ 3368.996942][T23991] hsr_slave_1: left promiscuous mode [ 3369.003619][T23991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3369.011653][T23991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3369.020274][T23991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3369.028743][T23991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3370.237026][T23991] veth1_macvtap: left promiscuous mode [ 3370.317679][T23991] veth0_macvtap: left promiscuous mode [ 3370.375189][T23991] veth1_vlan: left promiscuous mode [ 3370.418283][T23991] veth0_vlan: left promiscuous mode [ 3373.951480][T23991] team_slave_1 (unregistering): left promiscuous mode [ 3373.976900][T23991] team0 (unregistering): Port device team_slave_1 removed [ 3374.057438][T23991] team_slave_0 (unregistering): left promiscuous mode [ 3374.074933][T23991] team0 (unregistering): Port device team_slave_0 removed [ 3375.073516][T25436] bridge0: port 2(bridge_slave_1) entered blocking state [ 3375.082927][T25436] bridge0: port 2(bridge_slave_1) entered disabled state [ 3375.090417][T25436] bridge_slave_1: entered allmulticast mode [ 3375.100014][T25436] bridge_slave_1: entered promiscuous mode [ 3375.269073][T25550] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2666'. [ 3375.581241][T25436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3376.095735][T25436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3376.682969][T25563] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3376.782026][T25564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3377.625010][T25571] orangefs_mount: mount request failed with -4 [ 3377.725252][ T942] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 3377.790009][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 3378.108602][T25436] team0: Port device team_slave_0 added [ 3378.145615][ T942] usb 4-1: device descriptor read/64, error -32 [ 3378.232032][T25436] team0: Port device team_slave_1 added [ 3378.495149][ T942] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 3378.661534][ C0] vkms_vblank_simulate: vblank timer overrun [ 3379.122805][ C0] vkms_vblank_simulate: vblank timer overrun [ 3379.165706][ C0] vkms_vblank_simulate: vblank timer overrun [ 3379.331702][T25436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3379.360590][T25436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3379.414478][T25436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3379.490388][T25436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3379.545022][T25436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3379.590750][T25436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3379.655810][T23991] IPVS: stop unused estimator thread 0... [ 3380.856669][T25436] hsr_slave_0: entered promiscuous mode [ 3380.957134][T25436] hsr_slave_1: entered promiscuous mode [ 3380.993539][T25436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3381.007575][T25436] Cannot create hsr debugfs directory [ 3381.785039][T13445] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3382.058984][T13445] usb 5-1: Using ep0 maxpacket: 8 [ 3382.095569][T13445] usb 5-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=47.b7 [ 3382.104691][T13445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3382.184320][T13445] usb 5-1: config 0 descriptor?? [ 3382.239943][T13445] usb 5-1: selecting invalid altsetting 1 [ 3382.287508][T13445] snd-usb-caiaq 5-1:0.0: can't set alt interface. [ 3382.294073][T13445] usb 5-1: unable to init card! (ret=-5) [ 3382.412665][T13445] snd-usb-caiaq 5-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 3383.088206][T25612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3383.128265][T25612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3383.457543][T25620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3383.784501][ T9490] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3384.039071][ T9490] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3384.077012][ T9490] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3384.115218][ T9490] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3384.138986][ T9490] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3384.158998][ T9490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3384.203671][T25620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3384.642070][ T25] usb 5-1: USB disconnect, device number 21 [ 3384.964842][ C0] hrtimer: interrupt took 162513 ns [ 3386.640201][T25436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3386.737815][T25436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3386.800249][T25436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3387.049966][T25436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3387.759744][ T9490] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 3387.772707][T25637] all: renamed from bridge_slave_0 (while UP) [ 3387.793104][ T9490] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input44 [ 3388.378463][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3389.035188][ T9490] usb 3-1: USB disconnect, device number 48 [ 3390.020616][T25436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3390.174465][T25661] netlink: 'syz.1.2685': attribute type 2 has an invalid length. [ 3391.232383][T25436] 8021q: adding VLAN 0 to HW filter on device team0 [ 3391.267871][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 3391.345254][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 3391.352795][T11705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3391.504863][T21081] bridge0: port 2(bridge_slave_1) entered blocking state [ 3391.512157][T21081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3391.544995][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 3391.598347][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=b4.99 [ 3391.636146][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3391.657045][ T25] usb 2-1: Product: syz [ 3391.661718][ T25] usb 2-1: Manufacturer: syz [ 3391.691858][ T25] usb 2-1: SerialNumber: syz [ 3391.767231][ T25] usb 2-1: config 0 descriptor?? [ 3391.974619][ T25] rtsx_usb 2-1:0.0: probe with driver rtsx_usb failed with error -22 [ 3392.687817][ T29] audit: type=1326 audit(3392.659:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25673 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7ffc0000 [ 3392.711199][ T29] audit: type=1326 audit(3392.659:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25673 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7ffc0000 [ 3393.195224][ T9490] usb 2-1: USB disconnect, device number 30 [ 3396.227003][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3396.233401][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 3396.635840][T25436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3396.743599][T25710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3397.359324][T25436] veth0_vlan: entered promiscuous mode [ 3397.560521][T25436] veth1_vlan: entered promiscuous mode [ 3397.906945][ T9490] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 3399.461402][ T9490] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3399.545913][ T9490] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3399.639528][T25714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2694'. [ 3399.648838][ T9490] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3399.682896][T25436] veth0_macvtap: entered promiscuous mode [ 3399.707779][ T9490] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3399.750568][ T9490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3399.759940][T25436] veth1_macvtap: entered promiscuous mode [ 3399.866728][T25436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3399.922585][T25436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.960928][T25436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3399.982565][T25436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3400.013729][T25436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3400.059857][T25436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3400.093323][T25436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3400.145071][T25436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3400.183859][T25436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3400.195882][T25726] binder: 25724:25726 ioctl c0306201 200001c0 returned -14 [ 3400.322902][T25436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3400.343803][T25436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3400.370497][T25436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3400.397579][T25436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3400.472296][T25436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3400.511049][T25436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3400.615110][T25436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3400.685635][T25436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3400.739445][ T9490] usb 2-1: can't set config #17, error -71 [ 3400.753928][T25436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3400.800885][ T9490] usb 2-1: USB disconnect, device number 31 [ 3400.919436][T25436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.957581][ T29] audit: type=1326 audit(3400.909:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3400.999912][T25436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.012628][ T29] audit: type=1326 audit(3400.979:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3401.058915][T25436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.108700][T25436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3401.233610][ T29] audit: type=1400 audit(3401.199:1244): avc: denied { map } for pid=25742 comm="syz.3.2699" path="/dev/ttyS3" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 3401.422074][ T29] audit: type=1326 audit(3401.329:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3401.556465][ T29] audit: type=1326 audit(3401.329:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3401.655040][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2700'. [ 3401.664491][T21092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3401.673780][T21092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3401.702464][ T29] audit: type=1326 audit(3401.329:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3401.763870][T20818] Bluetooth: Wrong link type (-71) [ 3401.803907][ T29] audit: type=1326 audit(3401.329:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3401.965102][ T29] audit: type=1326 audit(3401.329:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3402.314879][ T29] audit: type=1326 audit(3401.329:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3403.439829][T25771] 9pnet_fd: Insufficient options for proto=fd [ 3403.488081][ T29] audit: type=1326 audit(3401.329:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25733 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f4979e79 code=0x7fc00000 [ 3403.556764][T21081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3403.642656][T21081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3405.794471][T20818] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 3405.821475][T20818] Bluetooth: hci4: Injecting HCI hardware error event [ 3405.838274][T20818] Bluetooth: hci4: hardware error 0x00 [ 3406.245963][T25797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3406.305137][T25800] netlink: 'syz.4.2708': attribute type 12 has an invalid length. [ 3407.055371][T17478] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3407.965641][T17478] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3407.996545][T17478] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3408.067304][T17478] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3409.184697][T20818] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 3409.282663][T17478] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3409.334689][T17478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3409.375004][T22283] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3409.392286][T17478] usb 3-1: can't set config #17, error -71 [ 3409.424521][T17478] usb 3-1: USB disconnect, device number 49 [ 3410.561525][T25828] Invalid ELF header magic: != ELF [ 3411.074878][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 3411.074905][ T29] audit: type=1804 audit(3410.449:1264): pid=25828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2712" name="/newroot/17/bus/bus" dev="overlay" ino=113 res=1 errno=0 [ 3411.596622][T11736] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 3412.494988][T16891] Bluetooth: hci2: command 0x0406 tx timeout [ 3413.087836][T25839] /dev/sg0: Can't lookup blockdev [ 3417.624659][T25877] netlink: 'syz.3.2721': attribute type 2 has an invalid length. [ 3418.414821][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 3419.531197][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 3419.602469][ T9] usb 4-1: device descriptor read/all, error -71 [ 3419.959099][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 3420.004916][ T9117] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3420.011084][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 3420.066851][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 3420.215053][ T9117] usb 5-1: Using ep0 maxpacket: 8 [ 3420.223970][ T9117] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 3420.281931][ T9117] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3420.356663][ T9117] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3420.398087][ T9117] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3420.435869][ T9117] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3420.474983][ T9117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3420.752205][ T9117] usb 5-1: usb_control_msg returned -71 [ 3420.787194][ T9117] usbtmc 5-1:16.0: can't read capabilities [ 3420.870403][ T9117] usb 5-1: USB disconnect, device number 22 [ 3421.212943][T25899] input: syz0 as /devices/virtual/input/input45 [ 3421.536205][T11736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3421.572780][T11736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3421.585324][T11736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3421.617927][T11736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3421.645617][T11736] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3421.653561][T11736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3422.490205][T11736] Bluetooth: hci3: command 0x0406 tx timeout [ 3422.880790][ T29] audit: type=1400 audit(3422.849:1265): avc: denied { write } for pid=25915 comm="syz.0.2728" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 3422.906525][T21103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3423.005183][ T9117] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3423.265812][ T9117] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3423.312916][ T9117] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3423.356279][ T9117] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3423.460339][ T9117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3423.503716][T25925] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3423.582218][ T9117] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3423.765716][T16891] Bluetooth: hci0: command tx timeout [ 3423.784490][T21103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3424.068119][T25936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3424.258943][T21103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3424.511730][T25940] fuse: Bad value for 'fd' [ 3424.565397][T25925] binder: 25924:25925 ioctl ae41 0 returned -22 [ 3424.890530][T22283] usb 5-1: USB disconnect, device number 23 [ 3425.325506][T25937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2732'. [ 3425.844929][T16891] Bluetooth: hci0: command tx timeout [ 3425.845292][T21103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.004992][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 3427.843035][ T9] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3427.881338][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3427.900684][T25908] chnl_net:caif_netlink_parms(): no params data found [ 3427.926583][T16891] Bluetooth: hci0: command tx timeout [ 3428.102944][ T9] usb 2-1: config 0 descriptor?? [ 3428.537021][ T9] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3431.477732][T25969] 9pnet_fd: Insufficient options for proto=fd [ 3431.487535][T16891] Bluetooth: hci0: command tx timeout [ 3431.488463][ T29] audit: type=1326 audit(3430.349:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25963 comm="syz.0.2740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe8dd79e79 code=0x0 [ 3431.577723][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 3431.735340][ T9] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 3431.759870][ T9] usb 2-1: USB disconnect, device number 32 [ 3432.784877][ T9490] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3432.829886][T21103] bridge_slave_1: left allmulticast mode [ 3433.040146][ T9490] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3433.053054][T21103] bridge_slave_1: left promiscuous mode [ 3433.068634][T21103] bridge0: port 2(bridge_slave_1) entered disabled state [ 3433.116750][ T9490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3433.158346][T21103] bridge_slave_0: left allmulticast mode [ 3433.167027][ T9490] usb 2-1: config 0 descriptor?? [ 3433.185074][T21103] bridge_slave_0: left promiscuous mode [ 3433.220309][ T9490] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3433.227817][T21103] bridge0: port 1(bridge_slave_0) entered disabled state [ 3433.629635][T25995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3435.013209][T25997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3435.296598][T26006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3435.433259][T25997] kAFS: No cell specified [ 3436.334895][ T9490] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 3436.341952][ T9490] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3437.073003][ T9117] usb 2-1: USB disconnect, device number 33 [ 3437.201900][T26019] input: syz0 as /devices/virtual/input/input46 [ 3437.710212][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c18cc00: rx timeout, send abort [ 3438.435136][ T9490] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 3438.573668][T21103] bridge0 (unregistering): left allmulticast mode [ 3438.627420][ T9490] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3438.645493][ T9490] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 3438.655096][ T9490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3438.663244][ T9490] usb 2-1: Product: syz [ 3438.669358][ T9490] usb 2-1: Manufacturer: syz [ 3438.678021][ T9490] usb 2-1: SerialNumber: syz [ 3438.721145][ T9490] usb 2-1: config 0 descriptor?? [ 3438.824456][T26034] input: syz1 as /devices/virtual/input/input47 [ 3440.141213][T21103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3440.184803][T21103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3440.239256][T21103] bond0 (unregistering): Released all slaves [ 3440.461461][T26006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 3440.903146][T11736] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 3441.022131][T25908] bridge0: port 1(bridge_slave_0) entered blocking state [ 3441.662813][T17478] usb 2-1: USB disconnect, device number 34 [ 3441.705089][T25908] bridge0: port 1(bridge_slave_0) entered disabled state [ 3441.712437][T25908] bridge_slave_0: entered allmulticast mode [ 3441.816201][T25908] bridge_slave_0: entered promiscuous mode [ 3442.377626][T25908] bridge0: port 2(bridge_slave_1) entered blocking state [ 3442.405445][T25908] bridge0: port 2(bridge_slave_1) entered disabled state [ 3442.425081][T25908] bridge_slave_1: entered allmulticast mode [ 3442.432737][T25908] bridge_slave_1: entered promiscuous mode [ 3444.710091][T25908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3444.788796][T26063] bridge0: port 3(erspan0) entered blocking state [ 3444.788984][T26063] bridge0: port 3(erspan0) entered disabled state [ 3444.789219][T26063] erspan0: entered allmulticast mode [ 3444.791508][T26063] erspan0: entered promiscuous mode [ 3444.792610][T26063] bridge0: port 3(erspan0) entered blocking state [ 3444.792799][T26063] bridge0: port 3(erspan0) entered forwarding state [ 3445.035274][T25908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3445.314259][T21103] hsr_slave_0: left promiscuous mode [ 3445.422779][T21103] hsr_slave_1: left promiscuous mode [ 3445.499320][T21103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3445.508335][T21103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3445.524968][ T9490] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3445.552489][T21103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3445.606849][T21103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3445.803286][ T9490] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3445.838918][ T9490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3445.903108][T21103] veth1_macvtap: left promiscuous mode [ 3445.909911][ T9490] usb 2-1: config 0 descriptor?? [ 3445.918053][T21103] veth0_macvtap: left promiscuous mode [ 3446.022759][ T9490] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3446.046418][T21103] veth1_vlan: left promiscuous mode [ 3446.051911][T21103] veth0_vlan: left promiscuous mode [ 3448.105125][ T9490] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 3448.112263][ T9490] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3448.251624][T26099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3448.335044][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 3448.561107][ T25] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 3448.578312][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3448.593218][ T25] usb 4-1: Product: syz [ 3448.599157][ T25] usb 4-1: Manufacturer: syz [ 3448.603960][ T25] usb 4-1: SerialNumber: syz [ 3448.620060][ T25] usb 4-1: config 0 descriptor?? [ 3448.677779][ T25] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 3448.720731][ T25] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 3448.863870][T13398] usb 2-1: USB disconnect, device number 35 [ 3449.533913][ T29] audit: type=1400 audit(3449.499:1267): avc: denied { append } for pid=26091 comm="syz.3.2760" name="event3" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3450.376975][ T25] usb 4-1: USB disconnect, device number 35 [ 3450.759661][T21103] team0 (unregistering): Port device team_slave_1 removed [ 3450.870798][T21103] team0 (unregistering): Port device team_slave_0 removed [ 3453.589155][T26082] tipc: Started in network mode [ 3453.596989][T26082] tipc: Node identity 002d0000000000000000000000000001, cluster identity 4711 [ 3453.621648][T26082] tipc: Enabling of bearer rejected, failed to enable media [ 3453.645193][T26108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 3453.911982][T25908] team0: Port device team_slave_0 added [ 3454.017533][T25908] team0: Port device team_slave_1 added [ 3455.095214][T26141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3455.129602][T25908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3455.147108][T25908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3455.241214][T25908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3455.290741][T25908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3455.322518][T25908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3455.437393][ T29] audit: type=1326 audit(3455.409:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3455.492640][T25908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3455.594832][ T29] audit: type=1326 audit(3455.449:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3455.917839][ T9490] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3456.477775][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3457.785097][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 3458.110948][ T29] audit: type=1326 audit(3455.449:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3458.222594][ T29] audit: type=1326 audit(3455.449:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3458.330506][ T29] audit: type=1326 audit(3455.459:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3458.460934][T25908] hsr_slave_0: entered promiscuous mode [ 3458.463983][ T29] audit: type=1326 audit(3455.459:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3458.492518][T25908] hsr_slave_1: entered promiscuous mode [ 3458.530314][T25908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3458.558203][ T29] audit: type=1326 audit(3455.469:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3458.558235][T25908] Cannot create hsr debugfs directory [ 3458.558357][ T29] audit: type=1326 audit(3455.489:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3458.632665][ T29] audit: type=1326 audit(3455.489:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3458.673150][ T29] audit: type=1326 audit(3455.489:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26143 comm="syz.0.2770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8dd79e79 code=0x7ffc0000 [ 3458.704902][T22283] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3458.725032][T15774] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3458.935616][T22283] usb 1-1: Using ep0 maxpacket: 32 [ 3458.953279][T22283] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 3458.963252][T22283] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3458.972250][T21103] IPVS: stop unused estimator thread 0... [ 3459.018873][T22283] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3459.037026][T15774] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 3459.074477][T15774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3459.123122][T22283] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3459.169018][T15774] usb 4-1: config 0 descriptor?? [ 3459.198799][T22283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3459.231724][T15774] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 3459.279014][T22283] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3459.339771][T22283] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3459.394564][T22283] usb 1-1: Product: syz [ 3459.423587][T22283] usb 1-1: Manufacturer: syz [ 3459.484423][T22283] usb 1-1: SerialNumber: syz [ 3459.573019][T22283] usb 1-1: config 0 descriptor?? [ 3459.617490][T22283] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3459.695559][T22283] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3459.807054][T15774] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 3459.836267][T15774] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 3460.991117][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 3460.991171][ T29] audit: type=1400 audit(3460.929:1304): avc: denied { getopt } for pid=26150 comm="syz.0.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3461.917971][ T29] audit: type=1400 audit(3460.939:1305): avc: denied { listen } for pid=26150 comm="syz.0.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 3462.005085][ T9490] usb 5-1: device descriptor read/64, error -110 [ 3462.269760][T13398] usb 4-1: USB disconnect, device number 36 [ 3462.832755][T16891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3462.856305][T16891] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3462.914478][T22283] usb 1-1: USB disconnect, device number 46 [ 3462.917419][T16891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3462.933609][T16891] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3463.038384][T22283] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 3463.045313][T16891] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3463.057563][T16891] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3463.198845][T26176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3463.448051][T26177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 3465.125775][T11736] Bluetooth: hci4: command tx timeout [ 3465.483723][T26195] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 3466.159579][T26199] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2781'. [ 3466.364306][T26205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3466.689747][T26173] chnl_net:caif_netlink_parms(): no params data found [ 3467.051235][T25908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3467.164782][T15774] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3467.272301][T11736] Bluetooth: hci4: command tx timeout [ 3572.124680][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3572.131723][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23987/1:b..l [ 3572.141097][ C1] rcu: (detected by 1, t=10502 jiffies, g=319469, q=189 ncpus=2) [ 3572.148937][ C1] task:kworker/u8:3 state:R running task stack:24008 pid:23987 tgid:23987 ppid:2 flags:0x00004000 [ 3572.163287][ C1] Workqueue: bat_events batadv_nc_worker [ 3572.169016][ C1] Call Trace: [ 3572.172325][ C1] [ 3572.175290][ C1] __schedule+0xe37/0x5490 [ 3572.179947][ C1] ? __pfx___schedule+0x10/0x10 [ 3572.184849][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 3572.190122][ C1] ? mark_held_locks+0x9f/0xe0 [ 3572.194941][ C1] preempt_schedule_irq+0x51/0x90 [ 3572.200019][ C1] irqentry_exit+0x36/0x90 [ 3572.204488][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3572.210552][ C1] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 3572.215897][ C1] Code: c7 80 62 4e 8b e8 80 46 a0 09 65 8a 05 95 25 93 7e 0f b6 c0 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 ff 05 0b 02 93 7e e8 1e 46 a0 09 48 c7 c3 c8 [ 3572.235556][ C1] RSP: 0000:ffffc9000343fb88 EFLAGS: 00000293 [ 3572.241668][ C1] RAX: 0000000000000000 RBX: ffff88806fe95230 RCX: ffffffff8ad597ab [ 3572.249670][ C1] RDX: ffff8880123e3c00 RSI: ffffffff8ad5a22d RDI: 0000000000000005 [ 3572.257695][ C1] RBP: 0000000000000246 R08: 0000000000000005 R09: 0000000000000000 [ 3572.265698][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 3572.273703][ C1] R13: 000000000003db0c R14: 0000000000000000 R15: dffffc0000000000 [ 3572.281727][ C1] ? batadv_nc_worker+0x17b/0x1060 [ 3572.286909][ C1] ? batadv_nc_worker+0xbfd/0x1060 [ 3572.292084][ C1] ? batadv_nc_worker+0x17b/0x1060 [ 3572.297259][ C1] batadv_nc_worker+0xc02/0x1060 [ 3572.302268][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 3572.307695][ C1] ? __pfx_lock_release+0x10/0x10 [ 3572.312767][ C1] process_one_work+0x9c5/0x1b40 [ 3572.317759][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 3572.323202][ C1] ? __pfx_process_one_work+0x10/0x10 [ 3572.328626][ C1] ? assign_work+0x1a0/0x250 [ 3572.333256][ C1] worker_thread+0x6c8/0xf20 [ 3572.337916][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3572.343104][ C1] kthread+0x2c1/0x3a0 [ 3572.347232][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3572.352512][ C1] ? __pfx_kthread+0x10/0x10 [ 3572.357146][ C1] ret_from_fork+0x45/0x80 [ 3572.361634][ C1] ? __pfx_kthread+0x10/0x10 [ 3572.366264][ C1] ret_from_fork_asm+0x1a/0x30 [ 3572.371105][ C1] [ 3572.374169][ C1] rcu: rcu_preempt kthread starved for 10250 jiffies! g319469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 3572.385501][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3572.395510][ C1] rcu: RCU grace-period kthread stack dump: [ 3572.401421][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 3572.413201][ C1] Call Trace: [ 3572.416506][ C1] [ 3572.419491][ C1] __schedule+0xe37/0x5490 [ 3572.423971][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 3572.429221][ C1] ? __pfx___schedule+0x10/0x10 [ 3572.434115][ C1] ? schedule+0x298/0x350 [ 3572.438495][ C1] ? __pfx_lock_release+0x10/0x10 [ 3572.443561][ C1] ? __pfx___mod_timer+0x10/0x10 [ 3572.448546][ C1] ? lock_acquire+0x1b1/0x560 [ 3572.453269][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 3572.458785][ C1] schedule+0xe7/0x350 [ 3572.462908][ C1] schedule_timeout+0x136/0x2a0 [ 3572.467817][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 3572.473249][ C1] ? __pfx_process_timeout+0x10/0x10 [ 3572.478589][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3572.484457][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 3572.490006][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 3572.494796][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 3572.500101][ C1] ? rcu_gp_init+0xc82/0x1630 [ 3572.504794][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3572.510644][ C1] rcu_gp_kthread+0x271/0x380 [ 3572.515339][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3572.520563][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 3572.525779][ C1] ? __kthread_parkme+0x148/0x220 [ 3572.530837][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3572.536087][ C1] kthread+0x2c1/0x3a0 [ 3572.540194][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3572.545407][ C1] ? __pfx_kthread+0x10/0x10 [ 3572.550005][ C1] ret_from_fork+0x45/0x80 [ 3572.554441][ C1] ? __pfx_kthread+0x10/0x10 [ 3572.559037][ C1] ret_from_fork_asm+0x1a/0x30 [ 3572.563824][ C1] [ 3572.566854][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 3572.573188][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0 [ 3572.583521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3572.593594][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 3572.598916][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 78 a7 f2 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 28 cb aa 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3572.618539][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 3572.624632][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b1116a9 [ 3572.632625][ C1] RDX: 0000000000000001 RSI: ffff888019ecc800 RDI: ffff888019ecc864 [ 3572.640601][ C1] RBP: ffff888019ecc864 R08: 0000000000000001 R09: ffffed1017266fd9 [ 3572.648588][ C1] R10: ffff8880b9337ecb R11: 0000000000000000 R12: ffff88801b388800 [ 3572.656559][ C1] R13: ffffffff8e952780 R14: 0000000000000001 R15: 0000000000000000 [ 3572.664537][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 3572.673477][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3572.680067][ C1] CR2: 00007f09337bb270 CR3: 000000005dfcc000 CR4: 00000000003506f0 [ 3572.688060][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3572.696035][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3572.704022][ C1] Call Trace: [ 3572.707305][ C1] [ 3572.710155][ C1] ? show_regs+0x8c/0xa0 [ 3572.714416][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 3572.720750][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 3572.725969][ C1] ? rcu_sched_clock_irq+0x24f4/0x33e0 [ 3572.731456][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 3572.737109][ C1] ? tmigr_requires_handle_remote+0x141/0x480 [ 3572.743200][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 3572.749638][ C1] ? hrtimer_run_queues+0x97/0x450 [ 3572.754787][ C1] ? update_process_times+0x175/0x220 [ 3572.760177][ C1] ? __pfx_update_process_times+0x10/0x10 [ 3572.765921][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 3572.771404][ C1] ? update_wall_time+0x1c/0x40 [ 3572.776260][ C1] ? tick_nohz_handler+0x376/0x530 [ 3572.781396][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 3572.786868][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 3572.792252][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 3572.797998][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 3572.804086][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 3572.809215][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 3572.815378][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 3572.821201][ C1] [ 3572.824130][ C1] [ 3572.827060][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3572.833222][ C1] ? ct_kernel_exit+0x139/0x190 [ 3572.838091][ C1] ? acpi_safe_halt+0x1a/0x20 [ 3572.842826][ C1] acpi_idle_enter+0xc5/0x160 [ 3572.847519][ C1] cpuidle_enter_state+0x85/0x500 [ 3572.852560][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 3572.858391][ C1] cpuidle_enter+0x4e/0xa0 [ 3572.862824][ C1] do_idle+0x313/0x3f0 [ 3572.866927][ C1] ? __pfx_do_idle+0x10/0x10 [ 3572.871533][ C1] cpu_startup_entry+0x4f/0x60 [ 3572.876314][ C1] start_secondary+0x220/0x2b0 [ 3572.881093][ C1] ? __pfx_start_secondary+0x10/0x10 [ 3572.886394][ C1] common_startup_64+0x13e/0x148 [ 3572.891340][ C1] [ 3572.914392][T11736] Bluetooth: hci4: command tx timeout [ 3572.964807][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P23987 } 10570 jiffies s: 189681 root: 0x0/T [ 3573.055132][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.061522][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.174879][T15774] usb 4-1: device descriptor read/64, error -110 [ 3573.534729][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 3573.849375][T15774] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3573.870797][T25908] netdevsim netdevsim2 netdevsim1: renamed from eth1 SYZFAIL: failed to send rpc fd=3 want=3152 sent=0 n=-1 (errno 32: Broken pipe) [ 3574.788238][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 3574.797289][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 3575.108092][T24823] Bluetooth: hci0: command 0x0406 tx timeout [ 3575.118335][T24823] Bluetooth: hci4: command tx timeout [ 3575.123931][T24823] Bluetooth: hci1: command 0x0406 tx timeout [ 3578.112007][T21092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3578.401188][T21092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3578.616910][T21092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3578.785781][T21092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3579.132286][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 3579.141231][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 3579.248231][T21092] bridge_slave_1: left allmulticast mode [ 3579.253928][T21092] bridge_slave_1: left promiscuous mode [ 3579.285148][T21092] bridge0: port 2(bridge_slave_1) entered disabled state [ 3579.297902][T21092] bridge_slave_0: left allmulticast mode [ 3579.303586][T21092] bridge_slave_0: left promiscuous mode [ 3579.332925][T21092] bridge0: port 1(bridge_slave_0) entered disabled state [ 3580.352123][T21092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3580.369335][T21092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3580.388253][T21092] bond0 (unregistering): Released all slaves [ 3580.998903][T21092] hsr_slave_0: left promiscuous mode [ 3581.013638][T21092] hsr_slave_1: left promiscuous mode [ 3581.023958][T21092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3581.039608][T21092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3581.048892][T21092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3581.068782][T21092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3581.129657][T21092] veth1_macvtap: left promiscuous mode [ 3581.143399][T21092] veth0_macvtap: left promiscuous mode [ 3581.149329][T21092] veth1_vlan: left promiscuous mode [ 3581.155221][T21092] veth0_vlan: left promiscuous mode