last executing test programs: 4m1.937137256s ago: executing program 2 (id=423): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffe86, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_IOCTL(r3, 0xc0185500, &(0x7f00000000c0)=@usbdevfs_connect) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4m0.330452436s ago: executing program 3 (id=431): pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0d"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) syz_open_procfs(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 3m24.311674785s ago: executing program 3 (id=431): pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0d"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) syz_open_procfs(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 3m23.322330737s ago: executing program 2 (id=423): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffe86, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_IOCTL(r3, 0xc0185500, &(0x7f00000000c0)=@usbdevfs_connect) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m37.713216924s ago: executing program 2 (id=423): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffe86, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_IOCTL(r3, 0xc0185500, &(0x7f00000000c0)=@usbdevfs_connect) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m34.149290047s ago: executing program 3 (id=431): pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0d"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) syz_open_procfs(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 1m58.46880436s ago: executing program 2 (id=423): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffe86, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_IOCTL(r3, 0xc0185500, &(0x7f00000000c0)=@usbdevfs_connect) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m55.118034159s ago: executing program 3 (id=431): pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0d"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) syz_open_procfs(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 1m25.349692322s ago: executing program 2 (id=423): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffe86, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_IOCTL(r3, 0xc0185500, &(0x7f00000000c0)=@usbdevfs_connect) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m23.489329119s ago: executing program 3 (id=431): pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0d"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) syz_open_procfs(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 27.118119709s ago: executing program 3 (id=431): pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0d"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) read$snddsp(r0, &(0x7f0000000740)=""/56, 0x38) syz_open_procfs(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 26.398915756s ago: executing program 2 (id=423): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffe86, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_IOCTL(r3, 0xc0185500, &(0x7f00000000c0)=@usbdevfs_connect) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.861856912s ago: executing program 0 (id=990): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x0, {0x1}}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, &(0x7f00000002c0)='sockfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@dyn}, {@flock_openafs}, {}]}) 7.48827063s ago: executing program 0 (id=992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x7, 0x401) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7) capset(&(0x7f0000000080), &(0x7f0000000040)={0x200000}) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000f40)='\t', 0x1}], 0x1, 0x800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f00000000c0)=ANY=[], 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)}], 0x1) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r6, &(0x7f0000000380)='./cgroup\x00', r6, &(0x7f00000003c0)='./mnt\x00', 0x0) listen(0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)=ANY=[@ANYBLOB="9eaa8aaaaaaa0180c200000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x40084503, &(0x7f0000ffcffc)) 7.109315947s ago: executing program 1 (id=993): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) io_setup(0xa4, &(0x7f0000000300)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r4, 0x0}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000a00)={r9}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c40)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0d0600000000000000000700000014000200fc0200000000000000000000000000001400030000000000000000000000ffff00000000"], 0x3c}}, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) 5.816129501s ago: executing program 1 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002700)=@newtaction={0x1c88, 0x30, 0x25, 0x0, 0x0, {}, [{0x1c74, 0x1, [@m_pedit={0x1c70, 0x1, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x45}, [{0x10000, 0x5, 0x81, 0x7, 0xa732, 0x2}, {0x5, 0x8, 0x20000000, 0xffffffff, 0x80, 0xcb0}, {0x7, 0x1, 0xfffffffb, 0x5, 0x8001, 0x100}, {0x0, 0x6, 0x8, 0x10001, 0x2, 0x6}, {0x4, 0xc, 0x80000000, 0x4, 0x7, 0x6}, {0x6, 0xa, 0xd, 0x1, 0x3b4e9d9, 0x1000}, {0xd, 0x2, 0x28, 0x3c, 0x2, 0x9}, {0x40, 0x6, 0x4, 0x3, 0x326, 0xee44}, {0x3, 0x8000, 0x3, 0x1, 0x2, 0x5480}, {0x1, 0x43c0, 0x1, 0x8000, 0xfffffffe, 0x9}, {0x9, 0x9, 0x9, 0x7c8b, 0x1, 0x8}, {0x8, 0x7, 0x3, 0x9, 0x7, 0x3}, {0x9, 0xffffffff, 0x1, 0x7, 0x8c7, 0x6669}, {0x7fc00000, 0x4, 0x7f, 0xc7c, 0xfff, 0x7}, {0x5, 0x2, 0xb2, 0x0, 0x64c, 0x47}, {0xffffffff, 0x8, 0x8, 0x30, 0x1ff, 0xffffffff}, {0x5, 0x5, 0x1, 0x40, 0x3, 0x3ff}, {0xfff, 0x7, 0x1, 0x4, 0x9, 0x81}, {0x9, 0x6, 0x449c, 0x7, 0xffffffff, 0xf942}, {0x1, 0x7, 0x5, 0x200, 0xfffffffc, 0xc}, {0x7, 0x90, 0x2, 0x8, 0x1000, 0xd}, {0x8, 0x100, 0x0, 0x80000001, 0x40, 0x1}, {0xb, 0x7, 0x9, 0x2, 0xb0}, {0x7, 0x5, 0x6, 0xfffffff6, 0x9}, {0x3, 0xa0c, 0x400, 0x0, 0x9, 0x5}, {0x8001, 0x9, 0x6, 0x8, 0x6}, {0x436, 0x6ba, 0x100, 0x9, 0x0, 0x1}, {0x0, 0x8, 0x3, 0x7, 0x3, 0xfffffff7}, {0xae, 0x5, 0x2, 0x6f4e, 0x8b1, 0xa}, {0x2, 0x0, 0x6, 0x7e888bcb, 0x363dbab0}, {0x1ff, 0x1, 0x8, 0x2, 0x0, 0x9}, {0x401, 0x7, 0x8, 0x3ff, 0x9}, {0x6, 0xa, 0x3, 0x6, 0x3b, 0x401}, {0x7, 0xf3, 0x8, 0x100, 0x8001, 0x10000}, {0x4, 0x8, 0x8, 0x6d3a, 0x9, 0x9}, {0x80, 0xd4d, 0x7fffffff, 0x3, 0x5, 0x9}, {0xc4, 0xa38, 0x0, 0x3, 0xc000, 0x2}, {0x9, 0x8001, 0x0, 0x3f691450, 0x0, 0x5}, {0x48800, 0xb97, 0x200, 0xffff, 0x1, 0x2}, {0xfffff001, 0xde0, 0x6, 0x200, 0x1, 0x5}, {0x1, 0x9, 0x200, 0x7, 0x7}, {0x1, 0x7, 0x1, 0x4, 0x7ff, 0x1}, {0x80, 0x7fff, 0x0, 0x8, 0x5780000}, {0x7ff, 0x1, 0x2, 0x8, 0x4, 0x1}, {0x80000000, 0xf, 0x8242, 0xd69, 0x5}, {0x4, 0xfffffffc, 0x29, 0x0, 0x9, 0x2}, {0x8, 0x3, 0xa741, 0x1, 0x4f, 0x1}, {0x3, 0x32d, 0xfffffff8, 0xc, 0x2, 0x9}, {0x2, 0x10, 0x9, 0x4, 0x3, 0x7}, {0x4, 0x0, 0x91, 0xfffffffc, 0x8, 0x9}, {0x11, 0x5, 0x5, 0x3ff, 0x0, 0x5}, {0x107, 0x2, 0x5, 0x8, 0x2, 0xae44}, {0xffff, 0x3, 0x2, 0xce, 0xf629, 0x4}, {0x92f8, 0x0, 0xfffff98b, 0x1000, 0x8, 0x7ff}, {0xfffffff8, 0xb, 0x8548, 0x8, 0x8, 0x28}, {0x6, 0x7, 0xb66a, 0xc00, 0xffffff43, 0xfffffffa}, {0x100, 0x3, 0x80b2, 0x800, 0x7, 0x7}, {0x3, 0x9, 0x2, 0x2, 0x1, 0xe1}, {0x7, 0x40, 0xfff, 0x2, 0x0, 0x1400000}, {0x2, 0x2, 0xa7a1, 0x0, 0x8, 0xbf}, {0x8000, 0x0, 0x5, 0x5, 0x8}, {0x6, 0x1ff, 0x7, 0xd92b, 0xa43, 0x8}, {0x6, 0x3, 0x6, 0x0, 0x6, 0x7fffffff}, {0x0, 0x5, 0xf561, 0x7, 0x8, 0xfffff001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], [{0x3, 0x1}, {0x1}, {0x2}, {0x6}, {0x0, 0x1}, {0x3}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x5, 0xe95c699a81f75b75}, {0x4, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2}, {0x4}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0xee5261729883686c}, {0x3}, {0x5}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0x3}, {0x4}, {}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0xb}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x3}, {0x4}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1c88}}, 0x0) 5.268062769s ago: executing program 4 (id=995): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)="f1"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2) dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r9, 0x118, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0}) 4.301032115s ago: executing program 4 (id=996): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000003c0), 0x77, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x1, 0x8}, {0x4, 0x432a, 0x1, 0xe8d}}}}, 0x15) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="43707511a0ccac586e704a8f22a41d46f166", 0x12}, {&(0x7f0000000180)="1bdfb42a7490c4b1cff6c4b96b7cd03c0300fbc7111fb483f60000efd12fce12fa3199355b2e204b2d9a909329cdde97dcf4563e398e601cccbae1d92fd91385f1ecd9dc746e482d2f1decd7cd216c519af9a0cbb022fb400c3725e2dff1336a3a0c1b3f90e644acd913853a2b23c599a9bbfdb5f9cf081d194a9c6132d31f3856ddaa4d2672778d4350f23a043f7795e1f618ecc61a", 0x96}, {&(0x7f0000000080)="919e4819964e98a1e651d3167d444745c7524283ee4ad51008b30b0ab039d1f5583201f481b45ae7c431ed4c1f8d470bcdb272", 0x33}], 0x3}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000140), 0x1b, 0x40000) close_range(0xffffffffffffffff, r4, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/94, 0x5e}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/167, 0xa7}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001d00)=""/159, 0x9f}], 0x2, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x4, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) fcntl$dupfd(r7, 0x0, r7) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 3.440906458s ago: executing program 1 (id=997): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.300376957s ago: executing program 0 (id=998): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 2.947808815s ago: executing program 0 (id=999): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x6ae6, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.725014475s ago: executing program 4 (id=1000): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x90) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000280)=0x14) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0x5}}, './file0\x00'}) r5 = socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000a08000/0x4000)=nil, 0x4000, 0x65) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000000008000020010000000000000000000000000002ff0200000000000000001200000000010400080967000000"], 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "e9ba5e2aa16ad69cc1949a715ca053fc29b49a290bda425b57b873629e61cb2d0cb9bca0fe271b70a54d7176b0515f44fe3cd6af09b0f7773c2ded90661b7a46"}, 0x48, 0xffffffffffffffff) 2.311017242s ago: executing program 1 (id=1001): r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230318000aff6000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000001440)) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(r1, &(0x7f0000001340)={0xa, 0x0, 0x10000, @local}, 0x1c) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) r3 = socket(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x24000854) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000001400)) socket$nl_route(0x10, 0x3, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='/dev/null\x00', 0x0) 1.978030454s ago: executing program 0 (id=1002): syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000001540)=@HCI_SCODATA_PKT={0x3, {0x0, 0x90}, "e0ec62c122083e14aeaa774fee50006a43d42682c6e82cdd220e05e29fa3f79c7b52b61a7e6f41d7aa43b598739d826c249396af41527f8e5a7c4ff297919ed04f1a71c5ccae02a5b2ccd8000100124c70a9f4272923e50d1c98e119318d87e86909069b85fe955b12ed6a3118676eab414767f6a6bc2a99eb1f00cd9d143103d8d1e3fd211f7812b283cbc2517b3aeb"}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x30, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@nop, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "c2e0cf77670fc549219d603aa25bcb40"}]}}}}}}}}, 0x0) 1.698634972s ago: executing program 4 (id=1003): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x90) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000280)=0x14) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0x5}}, './file0\x00'}) r5 = socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000a08000/0x4000)=nil, 0x4000, 0x65) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x8, 0x8002, 0xd0a7, 0x0, 0x7, 0x523, 0x1}, 0x20) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000000008000020010000000000000000000000000002ff0200000000000000001200000000010400080967000000"], 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "e9ba5e2aa16ad69cc1949a715ca053fc29b49a290bda425b57b873629e61cb2d0cb9bca0fe271b70a54d7176b0515f44fe3cd6af09b0f7773c2ded90661b7a46"}, 0x48, 0xffffffffffffffff) 712.961496ms ago: executing program 4 (id=1004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x28c}]}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x104, 0x2, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00', {}, {}, 0x2}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r6, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) 633.550867ms ago: executing program 0 (id=1005): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) write$char_usb(r1, &(0x7f0000000100)='k', 0x1) 236.455918ms ago: executing program 4 (id=1006): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x1, 0x0, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x65, 0x0, 0x4a, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x8, 0x2, [{0x0, 0x2}]}]}}}}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x5fa89b0e, 0xffffffc1, 0x0, 0x220, 0x1, 0xffffffff, '\x00', r1, r2, 0x2, 0x0, 0x4, 0xe}, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 227.829087ms ago: executing program 1 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002700)=@newtaction={0x1c88, 0x30, 0x25, 0x0, 0x0, {}, [{0x1c74, 0x1, [@m_pedit={0x1c70, 0x1, 0x0, 0x0, {{0xa}, {0x1c44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x45}, [{0x10000, 0x5, 0x81, 0x7, 0xa732, 0x2}, {0x5, 0x8, 0x20000000, 0xffffffff, 0x80, 0xcb0}, {0x7, 0x1, 0xfffffffb, 0x5, 0x8001, 0x100}, {0x0, 0x6, 0x8, 0x10001, 0x2, 0x6}, {0x4, 0xc, 0x80000000, 0x4, 0x7, 0x6}, {0x6, 0xa, 0xd, 0x1, 0x3b4e9d9, 0x1000}, {0xd, 0x2, 0x28, 0x3c, 0x2, 0x9}, {0x40, 0x6, 0x4, 0x3, 0x326, 0xee44}, {0x3, 0x8000, 0x3, 0x1, 0x2, 0x5480}, {0x1, 0x43c0, 0x1, 0x8000, 0xfffffffe, 0x9}, {0x9, 0x9, 0x9, 0x7c8b, 0x1, 0x8}, {0x8, 0x7, 0x3, 0x9, 0x7, 0x3}, {0x9, 0xffffffff, 0x1, 0x7, 0x8c7, 0x6669}, {0x7fc00000, 0x4, 0x7f, 0xc7c, 0xfff, 0x7}, {0x5, 0x2, 0xb2, 0x0, 0x64c, 0x47}, {0xffffffff, 0x8, 0x8, 0x30, 0x1ff, 0xffffffff}, {0x5, 0x5, 0x1, 0x40, 0x3, 0x3ff}, {0xfff, 0x7, 0x1, 0x4, 0x9, 0x81}, {0x9, 0x6, 0x449c, 0x7, 0xffffffff, 0xf942}, {0x1, 0x7, 0x5, 0x200, 0xfffffffc, 0xc}, {0x7, 0x90, 0x2, 0x8, 0x1000, 0xd}, {0x8, 0x100, 0x0, 0x80000001, 0x40, 0x1}, {0xb, 0x7, 0x9, 0x2, 0xb0}, {0x7, 0x5, 0x6, 0xfffffff6, 0x9}, {0x3, 0xa0c, 0x400, 0x0, 0x9, 0x5}, {0x8001, 0x9, 0x6, 0x8, 0x6}, {0x436, 0x6ba, 0x100, 0x9, 0x0, 0x1}, {0x0, 0x8, 0x3, 0x7, 0x3, 0xfffffff7}, {0xae, 0x5, 0x2, 0x6f4e, 0x8b1, 0xa}, {0x2, 0x0, 0x6, 0x7e888bcb, 0x363dbab0}, {0x1ff, 0x1, 0x8, 0x2, 0x0, 0x9}, {0x401, 0x7, 0x8, 0x3ff, 0x9}, {0x6, 0xa, 0x3, 0x6, 0x3b, 0x401}, {0x7, 0xf3, 0x8, 0x100, 0x8001, 0x10000}, {0x4, 0x8, 0x8, 0x6d3a, 0x9, 0x9}, {0x80, 0xd4d, 0x7fffffff, 0x3, 0x5, 0x9}, {0xc4, 0xa38, 0x0, 0x3, 0xc000, 0x2}, {0x9, 0x8001, 0x0, 0x3f691450, 0x0, 0x5}, {0x48800, 0xb97, 0x200, 0xffff, 0x1, 0x2}, {0xfffff001, 0xde0, 0x6, 0x200, 0x1, 0x5}, {0x1, 0x9, 0x200, 0x7, 0x7}, {0x1, 0x7, 0x1, 0x4, 0x7ff, 0x1}, {0x80, 0x7fff, 0x0, 0x8, 0x5780000}, {0x7ff, 0x1, 0x2, 0x8, 0x4, 0x1}, {0x80000000, 0xf, 0x8242, 0xd69, 0x5}, {0x4, 0xfffffffc, 0x29, 0x0, 0x9, 0x2}, {0x8, 0x3, 0xa741, 0x1, 0x4f, 0x1}, {0x3, 0x32d, 0xfffffff8, 0xc, 0x2, 0x9}, {0x2, 0x10, 0x9, 0x4, 0x3, 0x7}, {0x4, 0x0, 0x91, 0xfffffffc, 0x8, 0x9}, {0x11, 0x5, 0x5, 0x3ff, 0x0, 0x5}, {0x107, 0x2, 0x5, 0x8, 0x2, 0xae44}, {0xffff, 0x3, 0x2, 0xce, 0xf629, 0x4}, {0x92f8, 0x0, 0xfffff98b, 0x1000, 0x8, 0x7ff}, {0xfffffff8, 0xb, 0x8548, 0x8, 0x8, 0x28}, {0x6, 0x7, 0xb66a, 0xc00, 0xffffff43, 0xfffffffa}, {0x100, 0x3, 0x80b2, 0x800, 0x7, 0x7}, {0x3, 0x9, 0x2, 0x2, 0x1, 0xe1}, {0x7, 0x40, 0xfff, 0x2, 0x0, 0x1400000}, {0x2, 0x2, 0xa7a1, 0x0, 0x8, 0xbf}, {0x8000, 0x0, 0x5, 0x5, 0x8}, {0x6, 0x1ff, 0x7, 0xd92b, 0xa43, 0x8}, {0x6, 0x3, 0x6, 0x0, 0x6, 0x7fffffff}, {0x0, 0x5, 0xf561, 0x7, 0x8, 0xfffff001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], [{0x3, 0x1}, {0x1}, {0x2}, {0x6}, {0x0, 0x1}, {0x3}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x5, 0xe95c699a81f75b75}, {0x4, 0x1}, {0x3, 0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2}, {0x4}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0xee5261729883686c}, {0x3}, {0x5}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0x3}, {0x4}, {}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0xb}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x3}, {0x4}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1c88}}, 0x0) 0s ago: executing program 1 (id=1008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x7, 0x401) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7) capset(&(0x7f0000000080), &(0x7f0000000040)={0x200000}) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000f40)='\t', 0x1}], 0x1, 0x800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f00000000c0)=ANY=[], 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)}], 0x1) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r6, &(0x7f0000000380)='./cgroup\x00', r6, &(0x7f00000003c0)='./mnt\x00', 0x0) listen(0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)=ANY=[@ANYBLOB="9eaa8aaaaaaa0180c200000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x40084503, &(0x7f0000ffcffc)) kernel console output (not intermixed with test programs): ocking state [ 570.549665][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.566172][ T9399] bridge_slave_1: entered allmulticast mode [ 570.574661][ T9399] bridge_slave_1: entered promiscuous mode [ 570.638509][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.657468][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.674879][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.691893][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.700403][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.716692][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.724964][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 570.746439][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.853304][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.017044][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.310229][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.404076][ T9399] team0: Port device team_slave_0 added [ 571.428758][ T9399] team0: Port device team_slave_1 added [ 571.566869][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 571.580623][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 571.590472][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 571.600237][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 571.610482][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 571.619543][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 571.787747][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.834247][ T5096] Bluetooth: hci0: command tx timeout [ 571.854205][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.877489][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.939533][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.998587][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.005610][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.091793][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.196507][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.676394][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.733700][ T9474] chnl_net:caif_netlink_parms(): no params data found [ 572.786303][ T5096] Bluetooth: hci1: command tx timeout [ 572.851975][ T9399] hsr_slave_0: entered promiscuous mode [ 572.868986][ T9399] hsr_slave_1: entered promiscuous mode [ 573.398315][ T5599] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 573.566491][ T5599] usb 5-1: device descriptor read/64, error -71 [ 573.669708][ T5096] Bluetooth: hci2: command tx timeout [ 573.712830][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.738830][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.747925][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.755218][ T9474] bridge_slave_0: entered allmulticast mode [ 573.763966][ T9474] bridge_slave_0: entered promiscuous mode [ 573.846081][ T5599] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 573.874407][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.883773][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.891635][ T9474] bridge_slave_1: entered allmulticast mode [ 573.900152][ T9474] bridge_slave_1: entered promiscuous mode [ 573.906437][ T5096] Bluetooth: hci0: command tx timeout [ 573.994909][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.005907][ T5599] usb 5-1: device descriptor read/64, error -71 [ 574.103044][ T9474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.127812][ T5599] usb usb5-port1: attempt power cycle [ 574.133402][ T9474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.212063][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.384607][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.442589][ T9513] chnl_net:caif_netlink_parms(): no params data found [ 574.515146][ T9474] team0: Port device team_slave_0 added [ 574.551596][ T9474] team0: Port device team_slave_1 added [ 574.557577][ T5599] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 574.606965][ T5599] usb 5-1: device descriptor read/8, error -71 [ 574.715866][ T9496] chnl_net:caif_netlink_parms(): no params data found [ 574.744994][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.754845][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.780986][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.788868][ T9474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.812261][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.819444][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.845386][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.852188][ T9474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.866747][ T5096] Bluetooth: hci1: command tx timeout [ 574.876051][ T5599] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 574.907305][ T5599] usb 5-1: device descriptor read/8, error -71 [ 575.027294][ T5599] usb usb5-port1: unable to enumerate USB device [ 575.274330][ T9474] hsr_slave_0: entered promiscuous mode [ 575.281460][ T9474] hsr_slave_1: entered promiscuous mode [ 575.288370][ T9474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.296415][ T9474] Cannot create hsr debugfs directory [ 575.332428][ T9513] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.340119][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.347844][ T9513] bridge_slave_0: entered allmulticast mode [ 575.356233][ T9513] bridge_slave_0: entered promiscuous mode [ 575.371582][ T9513] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.379072][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.386752][ T9513] bridge_slave_1: entered allmulticast mode [ 575.394612][ T9513] bridge_slave_1: entered promiscuous mode [ 575.561362][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.584180][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.598067][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.605377][ T9496] bridge_slave_0: entered allmulticast mode [ 575.614178][ T9496] bridge_slave_0: entered promiscuous mode [ 575.632074][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.639532][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.648211][ T9496] bridge_slave_1: entered allmulticast mode [ 575.656472][ T9496] bridge_slave_1: entered promiscuous mode [ 575.746665][ T5096] Bluetooth: hci2: command tx timeout [ 575.798587][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.827163][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.859178][ T9513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.873075][ T9513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.930975][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.985533][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.996530][ T5096] Bluetooth: hci0: command tx timeout [ 576.076131][ T9513] team0: Port device team_slave_0 added [ 576.214033][ T9399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 576.303077][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.358028][ T9513] team0: Port device team_slave_1 added [ 576.374752][ T9496] team0: Port device team_slave_0 added [ 576.390691][ T9496] team0: Port device team_slave_1 added [ 576.412430][ T9399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 576.511453][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.519423][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.545397][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.553888][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.576558][ T929] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 576.599638][ T9399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 576.643514][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.652891][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.678985][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.688784][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.726562][ T9399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 576.757405][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.764427][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.793841][ T9513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.815681][ T929] usb 5-1: not running at top speed; connect to a high speed hub [ 576.837796][ T929] usb 5-1: config 1 interface 0 has no altsetting 0 [ 576.853927][ T929] usb 5-1: New USB device found, idVendor=0eef, idProduct=480d, bcdDevice= 0.40 [ 576.883796][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.904060][ T929] usb 5-1: Product: syz [ 576.910190][ T929] usb 5-1: Manufacturer: 粘殙彥됋ꄧ廀쉛ʉ᭦⍈ꄙ귤寪펱῵혙鳂䦲瀰臰弄૙糠륄䧖뗿￐퓨ힽ眢⮔滸䚵꽠垭᷺℮豾㫏첃餅炇菉弸쎼ᕯ郋鉡塨뙾㦆㶗篿埦择鍧졕卍留ꌲ綊嶷폖뜆㗪橞줃툊헔귗夬鎁紼擮뼔Ꜩ⨋࡟ᔳ㻧辎便ꝉ쩝䛛駪ꖳᗆ╾迗돭ꦯ逳픔 [ 576.941283][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.956712][ T5096] Bluetooth: hci1: command tx timeout [ 576.969460][ T929] usb 5-1: SerialNumber: syz [ 576.974427][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.988894][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.030342][ T9513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.325038][ T9496] hsr_slave_0: entered promiscuous mode [ 577.343436][ T9496] hsr_slave_1: entered promiscuous mode [ 577.352718][ T9496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.362417][ T9496] Cannot create hsr debugfs directory [ 577.470571][ T9513] hsr_slave_0: entered promiscuous mode [ 577.488948][ T9513] hsr_slave_1: entered promiscuous mode [ 577.520433][ T9513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.539051][ T9513] Cannot create hsr debugfs directory [ 577.607402][ T929] usbhid 5-1:1.0: can't add hid device: -71 [ 577.618001][ T929] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 577.646337][ T929] usb 5-1: USB disconnect, device number 29 [ 577.828925][ T5096] Bluetooth: hci2: command tx timeout [ 577.890750][ T62] bridge_slave_1: left allmulticast mode [ 577.898483][ T62] bridge_slave_1: left promiscuous mode [ 577.904373][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.917896][ T62] bridge_slave_0: left allmulticast mode [ 577.923609][ T62] bridge_slave_0: left promiscuous mode [ 577.931575][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.958556][ T62] bridge_slave_1: left allmulticast mode [ 577.964273][ T62] bridge_slave_1: left promiscuous mode [ 577.971001][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.983981][ T62] bridge_slave_0: left allmulticast mode [ 577.990704][ T62] bridge_slave_0: left promiscuous mode [ 577.998442][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.011636][ T62] bridge_slave_1: left allmulticast mode [ 578.019194][ T62] bridge_slave_1: left promiscuous mode [ 578.025422][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.038392][ T62] bridge_slave_0: left allmulticast mode [ 578.044055][ T62] bridge_slave_0: left promiscuous mode [ 578.050219][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.370879][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 578.408183][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.754'. [ 579.027412][ T5096] Bluetooth: hci1: command tx timeout [ 579.916366][ T5096] Bluetooth: hci2: command tx timeout [ 587.985057][ T9590] binder: 9589:9590 ioctl 4018620d 0 returned -22 [ 588.199870][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 588.689283][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.702196][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.717247][ T62] bond0 (unregistering): Released all slaves [ 588.909941][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.925979][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.943553][ T62] bond0 (unregistering): Released all slaves [ 589.124132][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.140933][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.161227][ T62] bond0 (unregistering): Released all slaves [ 589.322653][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.331064][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.365882][ T9593] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.373606][ T9593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.383326][ T9593] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.390879][ T9593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.435635][ T9593] team0: Port device bridge0 added [ 590.996910][ T9474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 591.035532][ T9474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 591.081592][ T9474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 591.114106][ T9613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.762'. [ 591.250333][ T9474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 591.455967][ T62] hsr_slave_0: left promiscuous mode [ 591.490757][ T62] hsr_slave_1: left promiscuous mode [ 591.516918][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.524423][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.545279][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.555409][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.581430][ T62] hsr_slave_0: left promiscuous mode [ 591.614710][ T62] hsr_slave_1: left promiscuous mode [ 591.640137][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.656042][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.664683][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.673646][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.706283][ T62] hsr_slave_0: left promiscuous mode [ 591.726858][ T62] hsr_slave_1: left promiscuous mode [ 591.750129][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.767839][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.779835][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.796004][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.940337][ T62] veth1_macvtap: left promiscuous mode [ 591.946131][ T62] veth0_macvtap: left promiscuous mode [ 591.952101][ T62] veth1_vlan: left promiscuous mode [ 591.958322][ T62] veth0_vlan: left promiscuous mode [ 591.966406][ T62] veth1_macvtap: left promiscuous mode [ 591.972210][ T62] veth0_macvtap: left promiscuous mode [ 591.978168][ T62] veth1_vlan: left promiscuous mode [ 591.983859][ T62] veth0_vlan: left promiscuous mode [ 591.993973][ T62] veth1_macvtap: left promiscuous mode [ 591.999989][ T62] veth0_macvtap: left promiscuous mode [ 592.006427][ T62] veth1_vlan: left promiscuous mode [ 592.012077][ T62] veth0_vlan: left promiscuous mode [ 593.252953][ T62] team0 (unregistering): Port device team_slave_1 removed [ 593.327209][ T62] team0 (unregistering): Port device team_slave_0 removed [ 594.671266][ T62] team0 (unregistering): Port device team_slave_1 removed [ 594.752782][ T62] team0 (unregistering): Port device team_slave_0 removed [ 596.031699][ T62] team0 (unregistering): Port device team_slave_1 removed [ 596.101841][ T62] team0 (unregistering): Port device team_slave_0 removed [ 596.837350][ T9625] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 596.932600][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.312692][ T9399] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.408836][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.416191][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.505414][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.512776][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.945353][ T9474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.060791][ T9399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.086508][ T9399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.124581][ T9648] binder: 9647:9648 ioctl 4018620d 0 returned -22 [ 598.210406][ T9474] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.366954][ T9513] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 598.395370][ T9513] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 598.426650][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 598.525252][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.532889][ T9652] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.646284][ T9513] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 598.681470][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.688846][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.704364][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.711705][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.819888][ T9513] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 599.494902][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.109220][ T9496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 600.184552][ T9399] veth0_vlan: entered promiscuous mode [ 600.209027][ T9496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 600.320444][ T9496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 600.372254][ T9513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.439490][ T9496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 600.598857][ T9399] veth1_vlan: entered promiscuous mode [ 600.682284][ T9474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.847337][ T9513] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.945440][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.952882][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.032702][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.039962][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.075146][ T9399] veth0_macvtap: entered promiscuous mode [ 601.142762][ T9399] veth1_macvtap: entered promiscuous mode [ 601.316954][ T9694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.771'. [ 601.332868][ T9474] veth0_vlan: entered promiscuous mode [ 601.483122][ T9474] veth1_vlan: entered promiscuous mode [ 601.533112][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.551534][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.566332][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.582527][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.594931][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.628753][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.684182][ T9704] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 601.730026][ T9399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.742654][ T9399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.760769][ T9399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.770849][ T9399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.959593][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.004016][ T9474] veth0_macvtap: entered promiscuous mode [ 602.104739][ T9474] veth1_macvtap: entered promiscuous mode [ 602.266786][ T9496] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.314067][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.321401][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.373022][ T2484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.389332][ T2484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.431155][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.442145][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.455680][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.468245][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.490178][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.605161][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.612587][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.634226][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.647878][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.659976][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.673007][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.692529][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.725114][ T9513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.757656][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.765577][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.789406][ T9474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.806310][ T9474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.815118][ T9474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.847608][ T9474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.485008][ T9513] veth0_vlan: entered promiscuous mode [ 603.510183][ T2484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.567706][ T2484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.642353][ T9513] veth1_vlan: entered promiscuous mode [ 603.783607][ T9740] binder: 9739:9740 ioctl 4018620d 0 returned -22 [ 604.016519][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.029568][ T5096] Bluetooth: hci3: ACL packet for unknown connection handle 2047 [ 604.102501][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.232196][ T9513] veth0_macvtap: entered promiscuous mode [ 604.401496][ T9513] veth1_macvtap: entered promiscuous mode [ 604.585908][ T929] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 604.597047][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.642545][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.678784][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.712978][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.742969][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.780154][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.824359][ T929] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 604.844076][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.849516][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.878328][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.916251][ T929] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 604.939397][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.974964][ T929] usb 5-1: config 0 descriptor?? [ 605.008633][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.034436][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.044652][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.062241][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.072274][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.087670][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.114759][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.139305][ T9513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.160257][ T9513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.202912][ T9513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.225823][ T9513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.446763][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.634274][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.670469][ T929] corsair 0003:1B1C:1B3E.0022: unknown main item tag 0x0 [ 605.700725][ T929] corsair 0003:1B1C:1B3E.0022: unknown main item tag 0x0 [ 605.716135][ T929] corsair 0003:1B1C:1B3E.0022: item fetching failed at offset 2/5 [ 605.736681][ T929] corsair 0003:1B1C:1B3E.0022: parse failed [ 605.742814][ T929] corsair 0003:1B1C:1B3E.0022: probe with driver corsair failed with error -22 [ 605.755149][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.910152][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.054886][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.066335][ T5099] Bluetooth: hci3: command tx timeout [ 606.266272][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.277415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.461757][ T9496] veth0_vlan: entered promiscuous mode [ 606.504052][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.533187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.693469][ T9496] veth1_vlan: entered promiscuous mode [ 606.736042][ T61] bridge_slave_1: left allmulticast mode [ 606.741873][ T61] bridge_slave_1: left promiscuous mode [ 606.748854][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.782449][ T61] bridge_slave_0: left allmulticast mode [ 606.792861][ T61] bridge_slave_0: left promiscuous mode [ 606.803480][ T29] audit: type=1400 audit(1720874688.652:638): avc: denied { mount } for pid=9760 comm="syz.0.778" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 606.826830][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.523394][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 607.534627][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 607.544525][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 607.554515][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 607.565420][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 607.576181][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 607.706018][ T8] usb 5-1: USB disconnect, device number 30 [ 607.891122][ T9770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.780'. [ 608.140587][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.153525][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.166942][ T61] bond0 (unregistering): Released all slaves [ 608.275544][ T9774] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 608.734388][ T29] audit: type=1400 audit(1720874690.582:639): avc: denied { setopt } for pid=9776 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 608.964856][ T9496] veth0_macvtap: entered promiscuous mode [ 609.088903][ T61] hsr_slave_0: left promiscuous mode [ 609.108851][ T61] hsr_slave_1: left promiscuous mode [ 609.118092][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.125600][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.134200][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.145582][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.174843][ T61] veth1_macvtap: left promiscuous mode [ 609.180589][ T61] veth0_macvtap: left promiscuous mode [ 609.186484][ T61] veth1_vlan: left promiscuous mode [ 609.191982][ T61] veth0_vlan: left promiscuous mode [ 609.668849][ T5096] Bluetooth: hci0: command tx timeout [ 610.145292][ T61] team0 (unregistering): Port device team_slave_1 removed [ 610.338719][ T61] team0 (unregistering): Port device team_slave_0 removed [ 610.614964][ T5136] IPVS: starting estimator thread 0... [ 610.644841][ T9787] binder: 9784:9787 ioctl 4018620d 0 returned -22 [ 610.762160][ T9786] IPVS: using max 22 ests per chain, 52800 per kthread [ 610.784895][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.899138][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 610.917763][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 610.927567][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 610.937553][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 610.945292][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 611.751547][ T5099] Bluetooth: hci0: command tx timeout [ 612.009052][ T9496] veth1_macvtap: entered promiscuous mode [ 612.275598][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.298848][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.313148][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.332433][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.344042][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.365457][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.388787][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.627265][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.661155][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.704119][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.752638][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.782163][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.817399][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.854056][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.993023][ T9496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.026744][ T5099] Bluetooth: hci2: command tx timeout [ 613.051910][ T9496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.081229][ T9496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.104954][ T9496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.221190][ T9767] chnl_net:caif_netlink_parms(): no params data found [ 613.269550][ T5136] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 613.504881][ T5136] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 613.548710][ T5136] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 613.611770][ T5136] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.660839][ T5136] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.676380][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.826304][ T5099] Bluetooth: hci0: command tx timeout [ 613.960374][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.982730][ T9767] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.999502][ T9767] bridge_slave_0: entered allmulticast mode [ 614.016686][ T9767] bridge_slave_0: entered promiscuous mode [ 614.038238][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.045583][ T9767] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.061140][ T9767] bridge_slave_1: entered allmulticast mode [ 614.083111][ T9767] bridge_slave_1: entered promiscuous mode [ 614.125661][ T9814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9814 comm=syz.0.786 [ 614.334230][ T5136] usb 1-1: 0:2 : does not exist [ 614.418983][ T9767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.428953][ T5136] usb 1-1: USB disconnect, device number 24 [ 614.484336][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.521752][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.572736][ T9788] chnl_net:caif_netlink_parms(): no params data found [ 614.644722][ T9767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.746461][ T9632] udevd[9632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.822657][ T9821] tmpfs: Bad value for 'mpol' [ 615.054858][ T9767] team0: Port device team_slave_0 added [ 615.112556][ T5099] Bluetooth: hci2: command tx timeout [ 615.139940][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.216137][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.224023][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.280138][ T9767] team0: Port device team_slave_1 added [ 615.394953][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.402435][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.438575][ T9767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.470357][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.482723][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.519521][ T9767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.655214][ T9767] hsr_slave_0: entered promiscuous mode [ 615.678650][ T9767] hsr_slave_1: entered promiscuous mode [ 615.685528][ T9767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.702523][ T9767] Cannot create hsr debugfs directory [ 615.787660][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.840472][ T9826] syzkaller0: entered allmulticast mode [ 615.909365][ T5099] Bluetooth: hci0: command tx timeout [ 616.142146][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.089579][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.167243][ T9859] FAULT_INJECTION: forcing a failure. [ 617.167243][ T9859] name failslab, interval 1, probability 0, space 0, times 0 [ 617.188668][ T5099] Bluetooth: hci2: command tx timeout [ 617.238996][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.261212][ T9859] CPU: 0 PID: 9859 Comm: syz.0.793 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 617.271270][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 617.281371][ T9859] Call Trace: [ 617.284675][ T9859] [ 617.286376][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.287602][ T9859] dump_stack_lvl+0x16c/0x1f0 [ 617.299347][ T9859] should_fail_ex+0x497/0x5b0 [ 617.304078][ T9859] should_failslab+0x9/0x20 [ 617.306247][ T9788] bridge_slave_0: entered allmulticast mode [ 617.308623][ T9859] kmem_cache_alloc_node_noprof+0x71/0x310 [ 617.320348][ T9859] ? __alloc_skb+0x2b1/0x380 [ 617.324990][ T9859] __alloc_skb+0x2b1/0x380 [ 617.325579][ T9788] bridge_slave_0: entered promiscuous mode [ 617.329433][ T9859] ? __pfx___alloc_skb+0x10/0x10 [ 617.329478][ T9859] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 617.329544][ T9859] netlink_alloc_large_skb+0x69/0x130 [ 617.329596][ T9859] netlink_sendmsg+0x689/0xd70 [ 617.329647][ T9859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.329694][ T9859] ? __import_iovec+0x1fd/0x6e0 [ 617.366676][ T9859] ____sys_sendmsg+0xab5/0xc90 [ 617.371473][ T9859] ? copy_msghdr_from_user+0x10b/0x160 [ 617.376963][ T9859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.382269][ T9859] ? find_held_lock+0x2d/0x110 [ 617.387060][ T9859] ? __pfx___lock_acquire+0x10/0x10 [ 617.392292][ T9859] ___sys_sendmsg+0x135/0x1e0 [ 617.397004][ T9859] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.402238][ T9859] ? ksys_write+0x21c/0x260 [ 617.406794][ T9859] ? __fget_light+0x173/0x210 [ 617.411517][ T9859] __sys_sendmsg+0x117/0x1f0 [ 617.416143][ T9859] ? __pfx___sys_sendmsg+0x10/0x10 [ 617.421294][ T9859] do_syscall_64+0xcd/0x250 [ 617.425838][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.431848][ T9859] RIP: 0033:0x7fb6ae575bd9 [ 617.436301][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.455945][ T9859] RSP: 002b:00007fb6af412048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.464495][ T9859] RAX: ffffffffffffffda RBX: 00007fb6ae703f60 RCX: 00007fb6ae575bd9 [ 617.472507][ T9859] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 617.480523][ T9859] RBP: 00007fb6af4120a0 R08: 0000000000000000 R09: 0000000000000000 [ 617.488535][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.496544][ T9859] R13: 000000000000000b R14: 00007fb6ae703f60 R15: 00007fffb04ecdc8 [ 617.504563][ T9859] [ 617.597843][ T9856] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 617.706099][ T29] audit: type=1400 audit(1720874699.502:640): avc: denied { write } for pid=9861 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 617.831280][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.839389][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.847258][ T9788] bridge_slave_1: entered allmulticast mode [ 617.900036][ T9788] bridge_slave_1: entered promiscuous mode [ 618.498413][ T9788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.609304][ T9788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.735286][ T29] audit: type=1400 audit(1720874700.582:641): avc: denied { ioctl } for pid=9874 comm="syz.1.797" path="socket:[45867]" dev="sockfs" ino=45867 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 618.759871][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.958222][ T9788] team0: Port device team_slave_0 added [ 619.012649][ T9875] veth0_macvtap: left promiscuous mode [ 619.175406][ T9788] team0: Port device team_slave_1 added [ 619.267988][ T5099] Bluetooth: hci2: command tx timeout [ 620.342162][ T29] audit: type=1400 audit(1720874702.192:642): avc: denied { bind } for pid=9893 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 620.361415][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.470642][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.500989][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.526976][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.596190][ T9788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.007274][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.038111][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.064146][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.146016][ T9788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.566474][ T61] bridge_slave_1: left allmulticast mode [ 621.576130][ T61] bridge_slave_1: left promiscuous mode [ 621.594547][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.636629][ T61] bridge_slave_0: left allmulticast mode [ 621.642479][ T61] bridge_slave_0: left promiscuous mode [ 621.654008][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.748778][ T29] audit: type=1400 audit(1720874703.602:643): avc: denied { map } for pid=9922 comm="syz.1.809" path="socket:[46036]" dev="sockfs" ino=46036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 621.818847][ T29] audit: type=1400 audit(1720874703.602:644): avc: denied { read } for pid=9922 comm="syz.1.809" path="socket:[46036]" dev="sockfs" ino=46036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 621.893246][ T5599] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 622.117454][ T5599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.131460][ T5599] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 622.144820][ T5599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.159163][ T5599] usb 5-1: config 0 descriptor?? [ 622.406111][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.423185][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.438672][ T61] bond0 (unregistering): Released all slaves [ 622.483422][ T9788] hsr_slave_0: entered promiscuous mode [ 622.495171][ T9788] hsr_slave_1: entered promiscuous mode [ 622.502450][ T9788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.539658][ T9788] Cannot create hsr debugfs directory [ 622.591762][ T5599] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 622.650747][ T5599] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0023/input/input38 [ 622.842426][ T5599] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 622.868627][ T9929] kvm: emulating exchange as write [ 622.910750][ T29] audit: type=1400 audit(1720874704.762:645): avc: denied { getopt } for pid=9932 comm="syz.1.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 623.034548][ T29] audit: type=1326 audit(1720874704.882:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.148604][ T29] audit: type=1326 audit(1720874704.882:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.204823][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.213292][ T29] audit: type=1326 audit(1720874704.882:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.213380][ T29] audit: type=1326 audit(1720874704.882:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.213469][ T29] audit: type=1326 audit(1720874704.882:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.213552][ T29] audit: type=1326 audit(1720874704.922:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.213633][ T29] audit: type=1326 audit(1720874704.922:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.213715][ T29] audit: type=1326 audit(1720874704.932:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.213796][ T29] audit: type=1326 audit(1720874704.942:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1df2975bd9 code=0x7ffc0000 [ 623.515012][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.571947][ T5136] usb 5-1: USB disconnect, device number 31 [ 623.809600][ T61] hsr_slave_0: left promiscuous mode [ 623.838581][ T61] hsr_slave_1: left promiscuous mode [ 623.860582][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.885055][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.912080][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.930923][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.016084][ T61] veth1_macvtap: left promiscuous mode [ 624.021753][ T61] veth0_macvtap: left promiscuous mode [ 624.038345][ T61] veth1_vlan: left promiscuous mode [ 624.043825][ T61] veth0_vlan: left promiscuous mode [ 625.361086][ T61] team0 (unregistering): Port device team_slave_1 removed [ 625.430372][ T61] team0 (unregistering): Port device team_slave_0 removed [ 626.215901][ T9964] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 626.559113][ T9767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 626.590716][ T9767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 627.006540][ T9767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 627.052166][ T9767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.670492][ T9767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.822266][ T9788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 628.884469][ T9767] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.892351][ T9788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 628.978592][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.985958][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.040102][ T9788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 629.122902][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.130284][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.185134][ T9788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 630.002366][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.009468][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.268292][ T9788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.464624][ T9788] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.557528][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.564854][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.679914][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.687271][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.038148][ T9767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.184024][T10060] raw_sendmsg: syz.1.849 forgot to set AF_INET. Fix it! [ 631.199893][ T9788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.276897][T10060] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 631.456650][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 631.456677][ T29] audit: type=1400 audit(1720874713.272:675): avc: denied { listen } for pid=10059 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 631.712240][ T9767] veth0_vlan: entered promiscuous mode [ 631.832388][ T9767] veth1_vlan: entered promiscuous mode [ 632.309381][ T9767] veth0_macvtap: entered promiscuous mode [ 632.358115][ T29] audit: type=1400 audit(1720874714.182:676): avc: denied { create } for pid=10068 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 632.530470][ T9767] veth1_macvtap: entered promiscuous mode [ 632.594341][ T29] audit: type=1400 audit(1720874714.302:677): avc: denied { view } for pid=10068 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 632.912112][ T9767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.983974][ T9767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.048112][ T9767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.095999][ T9767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.153680][ T9767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.203800][ T9767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.249577][ T9767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.430445][ T9767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.486035][ T9767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.513490][ T29] audit: type=1400 audit(1720874715.362:678): avc: denied { ioctl } for pid=10078 comm="syz.0.853" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 633.554767][ T9767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.604005][ T9767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.645789][ T29] audit: type=1400 audit(1720874715.482:679): avc: denied { create } for pid=10064 comm="syz.1.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 633.646701][ T9767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.726605][ T29] audit: type=1400 audit(1720874715.492:680): avc: denied { getopt } for pid=10064 comm="syz.1.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 633.764162][ T9767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.785329][ T29] audit: type=1400 audit(1720874715.492:681): avc: denied { setattr } for pid=10064 comm="syz.1.850" name="RDS" dev="sockfs" ino=47797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 633.828907][ T9767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.910355][ T9767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.910422][ T9767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.910474][ T9767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.910526][ T9767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.001793][ T9788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.802864][ T29] audit: type=1400 audit(1720874716.652:682): avc: denied { ioctl } for pid=10101 comm="syz.0.856" path="socket:[48729]" dev="sockfs" ino=48729 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.886658][ T29] audit: type=1400 audit(1720874716.722:683): avc: denied { write } for pid=10102 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 634.948963][ T9788] veth0_vlan: entered promiscuous mode [ 634.973803][ T2456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.004910][ T2456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.108035][ T9788] veth1_vlan: entered promiscuous mode [ 635.146552][ T5599] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 635.194604][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.240664][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.362827][ T9788] veth0_macvtap: entered promiscuous mode [ 635.379986][ T5599] usb 1-1: config 0 has an invalid interface number: 227 but max is 1 [ 635.399119][ T5599] usb 1-1: config 0 has no interface number 1 [ 635.405338][ T5599] usb 1-1: config 0 interface 227 has no altsetting 0 [ 635.456212][ T5599] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=9a.91 [ 635.480257][ T9788] veth1_macvtap: entered promiscuous mode [ 635.494319][ T5599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.529484][ T5599] usb 1-1: config 0 descriptor?? [ 635.578847][ T9788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.589962][ T9788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.635032][ T9788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.650160][ T9788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.660795][ T9788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.678767][ T9788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.715808][ T9788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.745562][ T9788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.805092][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.926319][ T9] usb 1-1: USB disconnect, device number 25 [ 636.419426][ T29] audit: type=1400 audit(1720874718.122:684): avc: denied { create } for pid=10122 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 636.822444][ T9788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.860763][ T29] audit: type=1400 audit(1720874718.142:685): avc: denied { connect } for pid=10122 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 636.892802][ T9788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.941908][ T9788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.956262][ T29] audit: type=1400 audit(1720874718.232:686): avc: denied { write } for pid=10122 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 636.985826][ T9788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.014087][ T9788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.085971][ T9788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.136820][ T9788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.173728][ T9788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.198594][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.272805][ T9788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.309738][ T9788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.325923][ T9788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.334725][ T9788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.553637][ T29] audit: type=1400 audit(1720874719.402:687): avc: denied { setattr } for pid=10138 comm="syz.4.865" name="audio1" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 637.712643][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.758479][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.876108][ T5149] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 637.960218][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.016467][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.105892][ T5149] usb 2-1: Using ep0 maxpacket: 8 [ 638.114209][ T5149] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.125339][ T5149] usb 2-1: config 0 has no interface number 0 [ 638.138330][ T5149] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.192056][ T5149] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 638.224481][ T5149] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 638.251923][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.313825][ T5149] usb 2-1: config 0 descriptor?? [ 638.355355][ T5149] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 638.366645][T10157] serio: Serial port pts0 [ 638.687384][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.772652][T10142] iowarrior 2-1:0.1: Error -90 while submitting URB [ 638.821565][ T5149] usb 2-1: USB disconnect, device number 24 [ 638.955972][ T5149] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 639.573031][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.819317][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.957225][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.363684][ T35] bridge_slave_1: left allmulticast mode [ 640.387924][ T35] bridge_slave_1: left promiscuous mode [ 640.404999][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.447644][ T35] bridge_slave_0: left allmulticast mode [ 640.464020][ T35] bridge_slave_0: left promiscuous mode [ 640.486160][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.939562][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 640.957945][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 640.979028][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.014013][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.024468][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 641.043987][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.838870][ T29] audit: type=1400 audit(1720874723.662:688): avc: denied { read } for pid=10212 comm="syz.4.878" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 641.866601][ T5136] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 641.925955][ T29] audit: type=1400 audit(1720874723.682:689): avc: denied { open } for pid=10212 comm="syz.4.878" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 641.980586][ T29] audit: type=1400 audit(1720874723.692:690): avc: denied { nlmsg_read } for pid=10212 comm="syz.4.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 642.267125][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 642.321310][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 642.330266][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 642.344858][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 642.355042][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 642.364588][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.520236][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.542362][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.563910][ T35] bond0 (unregistering): Released all slaves [ 643.114428][ T5096] Bluetooth: hci0: command tx timeout [ 644.466548][ T5096] Bluetooth: hci2: command tx timeout [ 644.476713][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 644.485105][ T5136] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 644.507407][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.549492][ T5136] usb 2-1: config 0 descriptor?? [ 644.623615][ T5136] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 644.677806][ T5136] asix 2-1:0.0: probe with driver asix failed with error -71 [ 644.705352][ T5136] usb 2-1: USB disconnect, device number 25 [ 644.862996][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 644.975853][ T35] hsr_slave_0: left promiscuous mode [ 644.989583][ T35] hsr_slave_1: left promiscuous mode [ 645.011430][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.025949][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.045025][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.064756][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.118111][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.135780][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.145603][ T35] veth1_macvtap: left promiscuous mode [ 645.146855][ T35] veth0_macvtap: left promiscuous mode [ 645.166128][ T35] veth1_vlan: left promiscuous mode [ 645.172711][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 645.174896][ T35] veth0_vlan: left promiscuous mode [ 645.187557][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.195763][ T5096] Bluetooth: hci0: command tx timeout [ 645.225488][ T9] usb 5-1: config 0 descriptor?? [ 645.349406][ T5149] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 645.578050][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.608073][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.627309][ T5149] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 645.652769][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.669671][ T9] wacom 0003:056A:00B8.0024: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 645.701393][ T5149] usb 2-1: config 0 descriptor?? [ 645.724029][ T9] wacom 0003:056A:00B8.0024: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.4-1/input0 [ 645.780335][ T9] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B8.0024/input/input39 [ 645.952142][ T9] usb 5-1: USB disconnect, device number 32 [ 646.150458][ T5149] wacom 0003:056A:0029.0025: unknown main item tag 0x0 [ 646.168589][ T5149] wacom 0003:056A:0029.0025: unknown main item tag 0x0 [ 646.190027][ T5149] wacom 0003:056A:0029.0025: unknown main item tag 0x0 [ 646.203057][ T5149] wacom 0003:056A:0029.0025: unknown main item tag 0x0 [ 646.211885][ T5149] wacom 0003:056A:0029.0025: unknown main item tag 0x0 [ 646.224961][ T5149] wacom 0003:056A:0029.0025: unknown main item tag 0x0 [ 646.243838][ T5149] wacom 0003:056A:0029.0025: unknown main item tag 0x0 [ 646.253190][ T5149] wacom 0003:056A:0029.0025: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 646.274483][ T5149] wacom 0003:056A:0029.0025: hidraw0: USB HID v0.00 Device [HID 056a:0029] on usb-dummy_hcd.1-1/input0 [ 646.318592][ T5149] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0029.0025/input/input42 [ 646.540867][ T5149] usb 2-1: USB disconnect, device number 26 [ 646.557750][ T5096] Bluetooth: hci2: command tx timeout [ 646.955514][ T35] team0 (unregistering): Port device team_slave_1 removed [ 647.495077][ T5096] Bluetooth: hci0: command tx timeout [ 648.339718][ T35] team0 (unregistering): Port device team_slave_0 removed [ 648.650358][ T5096] Bluetooth: hci2: command tx timeout [ 649.507926][ T5096] Bluetooth: hci0: command tx timeout [ 650.306522][T10269] futex_wake_op: syz.1.891 tries to shift op by 32; fix this program [ 650.580804][ T29] audit: type=1326 audit(1720874732.432:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.4.893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df2975bd9 code=0x0 [ 650.736758][ T5096] Bluetooth: hci2: command tx timeout [ 651.317802][T10198] chnl_net:caif_netlink_parms(): no params data found [ 651.512741][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 651.851473][T10215] chnl_net:caif_netlink_parms(): no params data found [ 652.316024][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 652.376089][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 652.376176][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 652.376219][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.388515][ T8] usb 1-1: config 0 descriptor?? [ 652.479677][ T29] audit: type=1400 audit(1720874734.332:692): avc: denied { name_bind } for pid=10290 comm="syz.4.896" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 652.555705][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.649209][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.649387][T10198] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.649647][T10198] bridge_slave_0: entered allmulticast mode [ 652.666136][T10198] bridge_slave_0: entered promiscuous mode [ 652.809785][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.869874][T10198] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.911615][T10198] bridge_slave_1: entered allmulticast mode [ 652.941833][T10270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.958457][T10198] bridge_slave_1: entered promiscuous mode [ 652.985171][T10270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.033133][ T8] hid (null): report_id 2838798905 is invalid [ 653.070351][ T8] hid (null): unknown global tag 0xc [ 653.086299][ T8] hid (null): unknown global tag 0xa5 [ 653.098010][ T8] hid (null): unknown global tag 0xd [ 653.107346][ T8] hid (null): unknown global tag 0xe [ 653.145083][ T8] hid-generic 0003:0158:0100.0026: unknown main item tag 0x1 [ 653.170372][ T8] hid-generic 0003:0158:0100.0026: unexpected long global item [ 653.199056][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.209911][ T8] hid-generic 0003:0158:0100.0026: probe with driver hid-generic failed with error -22 [ 653.266097][ T5136] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 653.303110][ T8] usb 1-1: USB disconnect, device number 26 [ 653.488802][ T5136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 653.499318][ T5136] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 653.513930][ T5136] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.538702][ T5136] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 653.559450][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.568244][ T5136] usb 5-1: Product: syz [ 653.572467][ T5136] usb 5-1: Manufacturer: syz [ 653.578177][ T5136] usb 5-1: SerialNumber: syz [ 653.616787][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.760898][T10198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.894831][ T5136] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 654.144971][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.200157][T10198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.278584][T10215] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.299005][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.334869][T10215] bridge_slave_0: entered allmulticast mode [ 654.344434][T10215] bridge_slave_0: entered promiscuous mode [ 654.355333][ T5136] usb 5-1: USB disconnect, device number 33 [ 654.404738][ T5136] usblp0: removed [ 654.589186][T10215] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.596990][T10215] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.604279][T10215] bridge_slave_1: entered allmulticast mode [ 654.613060][T10215] bridge_slave_1: entered promiscuous mode [ 654.683601][T10198] team0: Port device team_slave_0 added [ 654.823570][T10215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.844055][T10198] team0: Port device team_slave_1 added [ 654.976862][T10215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.023132][T10198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.030378][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.057488][T10198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.307052][T10198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.314653][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.452154][T10198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.915338][T10215] team0: Port device team_slave_0 added [ 656.357074][T10215] team0: Port device team_slave_1 added [ 657.268280][T10215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.292836][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.434134][T10215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.520288][ T35] bridge_slave_1: left allmulticast mode [ 657.550809][ T35] bridge_slave_1: left promiscuous mode [ 657.582559][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.652141][ T35] bridge_slave_0: left allmulticast mode [ 657.679321][ T35] bridge_slave_0: left promiscuous mode [ 657.711901][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.629596][T10341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10341 comm=syz.4.903 [ 658.663003][T10343] futex_wake_op: syz.0.904 tries to shift op by 32; fix this program [ 659.036684][T10341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34316 sclass=netlink_route_socket pid=10341 comm=syz.4.903 [ 659.613734][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.640620][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.664140][ T35] bond0 (unregistering): Released all slaves [ 659.850522][T10215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.892043][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.967067][T10215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.071394][T10198] hsr_slave_0: entered promiscuous mode [ 660.110752][T10198] hsr_slave_1: entered promiscuous mode [ 660.125387][T10198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.171216][T10198] Cannot create hsr debugfs directory [ 661.430002][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 669.543580][T10215] hsr_slave_0: entered promiscuous mode [ 669.558437][T10215] hsr_slave_1: entered promiscuous mode [ 669.653640][T10215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.663723][T10215] Cannot create hsr debugfs directory [ 670.226969][ T35] hsr_slave_0: left promiscuous mode [ 670.233663][ T35] hsr_slave_1: left promiscuous mode [ 670.250788][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.259056][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.268276][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.277658][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.336472][ T35] veth1_macvtap: left promiscuous mode [ 670.360736][ T35] veth0_macvtap: left promiscuous mode [ 670.378853][ T35] veth1_vlan: left promiscuous mode [ 670.397161][ T35] veth0_vlan: left promiscuous mode [ 674.432526][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 674.486980][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 674.519206][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 674.535477][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 674.549703][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 674.568153][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 674.827186][ T35] team0 (unregistering): Port device team_slave_1 removed [ 674.904034][ T35] team0 (unregistering): Port device team_slave_0 removed [ 676.334285][ T5099] Bluetooth: hci3: unexpected event for opcode 0x202d [ 676.706182][ T5099] Bluetooth: hci1: command tx timeout [ 677.351938][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 677.557216][T10442] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 677.564629][T10442] vhci_hcd: invalid port number 10 [ 677.586411][ T29] audit: type=1400 audit(1720874759.432:693): avc: denied { setopt } for pid=10434 comm="syz.4.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 677.642285][T10442] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 677.993418][T10400] chnl_net:caif_netlink_parms(): no params data found [ 678.214826][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.471250][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.695656][T10455] autofs: Unknown parameter 'f-' [ 679.601226][ T5096] Bluetooth: hci1: command tx timeout [ 679.745240][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.826183][ T5096] Bluetooth: hci4: command 0x206a tx timeout [ 679.827436][ T5099] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 679.997556][T10460] FAULT_INJECTION: forcing a failure. [ 679.997556][T10460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.029755][T10460] CPU: 0 PID: 10460 Comm: syz.0.925 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 680.035205][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.039883][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 680.039907][T10460] Call Trace: [ 680.039920][T10460] [ 680.039934][T10460] dump_stack_lvl+0x16c/0x1f0 [ 680.039983][T10460] should_fail_ex+0x497/0x5b0 [ 680.040029][T10460] _copy_from_iter+0x2a1/0x1140 [ 680.040071][T10460] ? __pfx__copy_from_iter+0x10/0x10 [ 680.086210][T10460] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 680.092255][T10460] ? tun_build_skb.constprop.0+0x198/0x1250 [ 680.098210][T10460] ? __pfx_lock_release+0x10/0x10 [ 680.103272][T10460] ? mark_lock+0xb5/0xc60 [ 680.107633][T10460] copy_page_from_iter+0xa5/0x120 [ 680.112722][T10460] tun_build_skb.constprop.0+0x274/0x1250 [ 680.118505][T10460] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 680.124705][T10460] ? hlock_class+0x4e/0x130 [ 680.129242][T10460] ? __lock_acquire+0xc5d/0x3b30 [ 680.134214][T10460] tun_get_user+0x888/0x3c30 [ 680.138856][T10460] ? __pfx_tun_get_user+0x10/0x10 [ 680.143963][T10460] ? find_held_lock+0x2d/0x110 [ 680.149238][T10460] ? __pfx_lock_release+0x10/0x10 [ 680.154377][T10460] tun_chr_write_iter+0xe8/0x210 [ 680.159367][T10460] vfs_write+0x6b6/0x1140 [ 680.163733][T10460] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 680.169313][T10460] ? __pfx_vfs_write+0x10/0x10 [ 680.174128][T10460] ? __fget_files+0x256/0x400 [ 680.178842][T10460] ? __fget_light+0x173/0x210 [ 680.183559][T10460] ksys_write+0x12f/0x260 [ 680.187932][T10460] ? __pfx_ksys_write+0x10/0x10 [ 680.192847][T10460] do_syscall_64+0xcd/0x250 [ 680.197427][T10460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.203359][T10460] RIP: 0033:0x7fb6ae57475f [ 680.207785][T10460] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 680.227501][T10460] RSP: 002b:00007fb6af412010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 680.235946][T10460] RAX: ffffffffffffffda RBX: 00007fb6ae703f60 RCX: 00007fb6ae57475f [ 680.243973][T10460] RDX: 0000000000000066 RSI: 0000000020000340 RDI: 00000000000000c8 [ 680.252082][T10460] RBP: 00007fb6af4120a0 R08: 0000000000000000 R09: 0000000000000000 [ 680.260070][T10460] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 680.268418][T10460] R13: 000000000000000b R14: 00007fb6ae703f60 R15: 00007fffb04ecdc8 [ 680.276415][T10460] [ 680.449199][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.465212][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.473788][T10400] bridge_slave_0: entered allmulticast mode [ 680.495069][T10400] bridge_slave_0: entered promiscuous mode [ 680.527723][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.539098][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.558682][T10400] bridge_slave_1: entered allmulticast mode [ 680.577583][T10400] bridge_slave_1: entered promiscuous mode [ 680.740075][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.803516][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.067735][T10400] team0: Port device team_slave_0 added [ 681.128174][T10400] team0: Port device team_slave_1 added [ 681.425606][T10215] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 681.532888][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.556855][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.646304][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.666754][ T5099] Bluetooth: hci1: command tx timeout [ 681.714437][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.766462][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.863787][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.153409][T10215] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 682.197159][T10215] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 682.215011][ T61] bridge_slave_1: left allmulticast mode [ 682.230047][ T61] bridge_slave_1: left promiscuous mode [ 682.246738][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.261903][ T61] bridge_slave_0: left allmulticast mode [ 682.273122][ T61] bridge_slave_0: left promiscuous mode [ 682.280148][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.172699][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.185174][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.198671][ T61] bond0 (unregistering): Released all slaves [ 683.230726][T10215] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 683.686059][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 683.742725][T10400] hsr_slave_0: entered promiscuous mode [ 683.743609][ T5099] Bluetooth: hci3: unexpected event for opcode 0x202d [ 683.757127][ T5096] Bluetooth: hci1: command tx timeout [ 683.764604][T10400] hsr_slave_1: entered promiscuous mode [ 683.790374][T10400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.798288][T10400] Cannot create hsr debugfs directory [ 683.888970][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 683.910861][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 683.924135][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.952559][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 683.973263][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.992000][ T9] usb 1-1: Product: syz [ 684.002132][ T9] usb 1-1: Manufacturer: syz [ 684.012266][ T9] usb 1-1: SerialNumber: syz [ 684.246128][T10198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 684.283696][T10198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 684.340594][T10198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 684.370573][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 684.478472][ T5096] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 684.490902][ T61] hsr_slave_0: left promiscuous mode [ 684.514505][ T61] hsr_slave_1: left promiscuous mode [ 684.600917][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.617620][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.654917][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.670419][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.775143][ T61] veth1_macvtap: left promiscuous mode [ 684.793419][ T61] veth1_vlan: left promiscuous mode [ 684.806149][ T61] veth0_vlan: left promiscuous mode [ 684.935220][ T5096] Bluetooth: hci3: unexpected event for opcode 0x202a [ 685.223448][ T8] usb 1-1: USB disconnect, device number 27 [ 685.318566][ T8] usblp0: removed [ 686.354471][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 686.393578][ T61] team0 (unregistering): Port device team_slave_1 removed [ 686.503507][ T61] team0 (unregistering): Port device team_slave_0 removed [ 686.532454][ T8] IPVS: starting estimator thread 0... [ 686.654203][T10543] IPVS: using max 21 ests per chain, 50400 per kthread [ 687.235188][T10198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 687.579128][T10545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10545 comm=syz.4.932 [ 687.598292][T10545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34316 sclass=netlink_route_socket pid=10545 comm=syz.4.932 [ 687.693898][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 687.858283][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 687.935543][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 687.998462][T10552] FAULT_INJECTION: forcing a failure. [ 687.998462][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 688.023386][T10552] CPU: 0 PID: 10552 Comm: syz.4.934 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 688.033569][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 688.043777][T10552] Call Trace: [ 688.047109][T10552] [ 688.050079][T10552] dump_stack_lvl+0x16c/0x1f0 [ 688.054870][T10552] should_fail_ex+0x497/0x5b0 [ 688.059633][T10552] should_failslab+0x9/0x20 [ 688.064477][T10552] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 688.069913][T10552] ? skb_clone+0x190/0x3f0 [ 688.074434][T10552] skb_clone+0x190/0x3f0 [ 688.078897][T10552] netlink_deliver_tap+0xab3/0xd90 [ 688.084085][T10552] netlink_unicast+0x604/0x820 [ 688.088927][T10552] ? __pfx_netlink_unicast+0x10/0x10 [ 688.094734][T10552] netlink_sendmsg+0x8b8/0xd70 [ 688.099571][T10552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.104937][T10552] ? __import_iovec+0x1fd/0x6e0 [ 688.109887][T10552] ____sys_sendmsg+0xab5/0xc90 [ 688.114715][T10552] ? copy_msghdr_from_user+0x10b/0x160 [ 688.120258][T10552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.125618][T10552] ? find_held_lock+0x2d/0x110 [ 688.130459][T10552] ? __pfx___lock_acquire+0x10/0x10 [ 688.135736][T10552] ___sys_sendmsg+0x135/0x1e0 [ 688.140485][T10552] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.145764][T10552] ? ksys_write+0x21c/0x260 [ 688.150348][T10552] ? __fget_light+0x173/0x210 [ 688.155098][T10552] __sys_sendmsg+0x117/0x1f0 [ 688.159769][T10552] ? __pfx___sys_sendmsg+0x10/0x10 [ 688.164959][T10552] do_syscall_64+0xcd/0x250 [ 688.169537][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.175614][T10552] RIP: 0033:0x7f1df2975bd9 [ 688.180077][T10552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.199748][T10552] RSP: 002b:00007f1df3800048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.208230][T10552] RAX: ffffffffffffffda RBX: 00007f1df2b04038 RCX: 00007f1df2975bd9 [ 688.216256][T10552] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 688.224292][T10552] RBP: 00007f1df38000a0 R08: 0000000000000000 R09: 0000000000000000 [ 688.232317][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.240340][T10552] R13: 000000000000006e R14: 00007f1df2b04038 R15: 00007ffc8e9d3f38 [ 688.248374][T10552] [ 688.289999][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 688.300876][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.310983][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.340223][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.365340][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.387492][ T5099] Bluetooth: hci4: command 0x206a tx timeout [ 688.398411][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.424013][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.464262][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.485598][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.519846][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.560779][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.597910][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.621946][T10215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.633046][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.651942][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.668346][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.708404][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.734179][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.770561][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.812333][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.851766][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.860647][T10198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.884677][T10215] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.901476][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.942572][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.954855][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.991785][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 689.014620][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 689.032768][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.040100][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.052296][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 689.081628][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 689.107083][ T9] usb 1-1: Product: syz [ 689.113659][ T9] usb 1-1: Manufacturer: syz [ 689.119847][ T9] usb 1-1: SerialNumber: syz [ 689.120608][T10198] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.150939][ T9] usb 1-1: config 0 descriptor?? [ 689.170667][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.178021][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.203029][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 689.268780][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.276209][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.394009][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.401350][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.803948][T10400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 689.897167][T10400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 689.962910][T10400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 690.018133][T10400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 691.033703][ T9] usb 1-1: USB disconnect, device number 28 [ 691.061746][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 691.124083][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.173436][T10215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.297532][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.399780][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.407131][ T5228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.446718][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.453215][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.467640][T10599] trusted_key: encrypted_key: insufficient parameters specified [ 691.508894][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.516216][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.629229][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.940'. [ 691.659787][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.686011][ T5599] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 691.906763][ T5599] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 691.915546][ T5599] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 691.920653][T10215] veth0_vlan: entered promiscuous mode [ 691.951416][ T5599] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.990514][ T5599] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.018033][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.140048][T10215] veth1_vlan: entered promiscuous mode [ 692.174787][T10198] veth0_vlan: entered promiscuous mode [ 692.273998][T10198] veth1_vlan: entered promiscuous mode [ 692.408095][T10611] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.942'. [ 692.632819][T10215] veth0_macvtap: entered promiscuous mode [ 692.679614][ T5599] usb 5-1: 0:2 : does not exist [ 692.712276][T10198] veth0_macvtap: entered promiscuous mode [ 692.759532][ T5599] usb 5-1: USB disconnect, device number 34 [ 692.897465][T10215] veth1_macvtap: entered promiscuous mode [ 693.028164][T10198] veth1_macvtap: entered promiscuous mode [ 693.220813][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.251172][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.282812][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.314350][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.345509][T10198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.381023][T10215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.423704][T10215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.454782][T10215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.485928][T10215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.530327][T10215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.561548][T10215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.598772][T10215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.631629][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.727556][T10215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.748347][T10215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.768122][T10215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.780043][T10215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.793928][T10215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.817917][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.838102][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.854099][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.875679][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.886808][T10198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.922623][T10198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.958238][T10198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.010945][T10215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.026752][T10215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.035543][T10215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.052924][T10215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.107736][T10198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.125822][T10198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.134878][T10198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.156373][T10198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.257559][ T5096] Bluetooth: hci4: unexpected event for opcode 0x202d [ 694.541808][T10639] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 694.565292][T10400] veth0_vlan: entered promiscuous mode [ 694.569036][T10639] vhci_hcd: invalid port number 10 [ 694.616289][T10639] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 694.741725][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.759918][T10400] veth1_vlan: entered promiscuous mode [ 694.765477][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.915642][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.924711][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.139767][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.176193][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.229094][T10400] veth0_macvtap: entered promiscuous mode [ 695.418945][T10400] veth1_macvtap: entered promiscuous mode [ 695.460523][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.511073][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.699494][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.756399][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.814758][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.875824][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.915301][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.933382][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.954166][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.965121][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.014419][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.181075][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.236077][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.271155][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.312967][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.334509][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.345575][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.366109][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.371627][T10659] binder: 10658:10659 ioctl 4018620d 0 returned -22 [ 696.391474][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.415531][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.788934][ T5096] Bluetooth: hci3: command 0x0406 tx timeout [ 696.797767][ T5099] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 696.853675][ T3638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.941610][T10400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.958683][T10400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.976249][T10400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.002389][T10400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.164498][ T3638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.294177][ T3638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.371444][T10665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10665 comm=syz.0.950 [ 697.393455][T10665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34316 sclass=netlink_route_socket pid=10665 comm=syz.0.950 [ 697.503125][ T3638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.658436][ T2456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.695484][ T2456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.861547][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 697.878777][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 697.889934][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.900154][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.917810][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 697.926811][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 697.964958][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.013486][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.063599][ T3638] bridge_slave_1: left allmulticast mode [ 698.074499][ T3638] bridge_slave_1: left promiscuous mode [ 698.084518][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.119206][ T3638] bridge_slave_0: left allmulticast mode [ 698.124935][ T3638] bridge_slave_0: left promiscuous mode [ 698.132432][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.358206][ T29] audit: type=1400 audit(1720874780.212:694): avc: denied { name_bind } for pid=10677 comm="syz.0.952" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 698.442186][ T29] audit: type=1400 audit(1720874780.292:695): avc: denied { map } for pid=10677 comm="syz.0.952" path="socket:[53478]" dev="sockfs" ino=53478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 699.179971][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.205286][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.219538][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.234398][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.246500][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 699.254226][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 699.471510][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.486373][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.499107][ T3638] bond0 (unregistering): Released all slaves [ 699.891409][ T5099] Bluetooth: hci4: unexpected event for opcode 0x202d [ 699.986222][ T5099] Bluetooth: hci0: command tx timeout [ 700.466884][ T29] audit: type=1400 audit(1720874782.312:696): avc: denied { create } for pid=10713 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 700.468100][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'. [ 700.521536][ T29] audit: type=1400 audit(1720874782.372:697): avc: denied { ioctl } for pid=10713 comm="syz.1.956" path="socket:[52654]" dev="sockfs" ino=52654 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 700.697535][ T29] audit: type=1326 audit(1720874782.542:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10713 comm="syz.1.956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22b5f75bd9 code=0x0 [ 700.757624][ T5099] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 700.900947][ T3638] hsr_slave_0: left promiscuous mode [ 700.967003][ T3638] hsr_slave_1: left promiscuous mode [ 701.008157][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.029104][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.030638][T10726] fuse: Unknown parameter '?7v.ҙ]o{CՖ1@8 Cn!pgq4|xQV";%v0x000000000000000b' [ 701.072446][T10726] 9pnet_fd: Insufficient options for proto=fd [ 701.122409][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.140269][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.195135][ T3638] veth1_macvtap: left promiscuous mode [ 701.202172][ T3638] veth0_macvtap: left promiscuous mode [ 701.208271][ T3638] veth1_vlan: left promiscuous mode [ 701.213866][ T3638] veth0_vlan: left promiscuous mode [ 701.357099][ T5099] Bluetooth: hci2: command tx timeout [ 702.076007][ T5099] Bluetooth: hci0: command tx timeout [ 702.095558][ T3638] team0 (unregistering): Port device team_slave_1 removed [ 702.154394][ T3638] team0 (unregistering): Port device team_slave_0 removed [ 702.863714][T10729] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 703.257265][T10743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10743 comm=syz.1.961 [ 703.306926][T10743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34316 sclass=netlink_route_socket pid=10743 comm=syz.1.961 [ 703.426318][ T5099] Bluetooth: hci2: command tx timeout [ 703.464774][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 703.677675][T10668] chnl_net:caif_netlink_parms(): no params data found [ 703.951851][T10696] chnl_net:caif_netlink_parms(): no params data found [ 703.974726][ T5099] Bluetooth: hci1: ACL packet for unknown connection handle 2047 [ 704.156707][ T5099] Bluetooth: hci0: command tx timeout [ 704.270037][T10668] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.292489][T10668] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.305874][ T5599] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 704.323252][T10668] bridge_slave_0: entered allmulticast mode [ 704.333512][T10668] bridge_slave_0: entered promiscuous mode [ 704.381170][T10668] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.406757][T10668] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.423975][ T5099] Bluetooth: hci4: ACL packet for unknown connection handle 2047 [ 704.435430][T10668] bridge_slave_1: entered allmulticast mode [ 704.458088][T10668] bridge_slave_1: entered promiscuous mode [ 704.498604][ T5599] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 704.524580][ T5599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.558228][ T5599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.599562][ T5599] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 704.630498][ T5599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.662963][ T5599] usb 2-1: config 0 descriptor?? [ 704.707637][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 704.737881][T10696] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.745334][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.765519][T10696] bridge_slave_0: entered allmulticast mode [ 704.783682][T10696] bridge_slave_0: entered promiscuous mode [ 704.812366][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.831159][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.856154][T10696] bridge_slave_1: entered allmulticast mode [ 704.893802][T10696] bridge_slave_1: entered promiscuous mode [ 704.905350][ T9] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 704.924720][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.991352][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.004239][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 705.014223][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.029669][ T9] usb 1-1: config 0 descriptor?? [ 705.101852][ T3638] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.225572][T10668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.441806][ T3638] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.506883][ T5099] Bluetooth: hci2: command tx timeout [ 705.521922][T10668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.684778][ T29] audit: type=1400 audit(1720874787.532:699): avc: denied { listen } for pid=10787 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 705.722656][ T5599] corsair 0003:1B1C:1B3E.0027: unknown main item tag 0x0 [ 705.740301][ T5599] corsair 0003:1B1C:1B3E.0027: unknown main item tag 0x0 [ 705.759577][ T5599] corsair 0003:1B1C:1B3E.0027: item fetching failed at offset 2/5 [ 705.779170][ T5599] corsair 0003:1B1C:1B3E.0027: parse failed [ 705.781833][ T3638] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.785659][ T5599] corsair 0003:1B1C:1B3E.0027: probe with driver corsair failed with error -22 [ 705.838183][T10696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.886163][T10668] team0: Port device team_slave_0 added [ 705.912690][T10668] team0: Port device team_slave_1 added [ 705.986732][ T5099] Bluetooth: hci1: command tx timeout [ 706.024831][ T3638] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.097033][T10696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.192441][ T9] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 706.226353][ T5099] Bluetooth: hci0: command tx timeout [ 706.264751][ T9] corsair 0003:1B1C:1B3E.0028: unknown main item tag 0x0 [ 706.291777][ T9] corsair 0003:1B1C:1B3E.0028: item fetching failed at offset 2/5 [ 706.317859][T10668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.327357][ T9] corsair 0003:1B1C:1B3E.0028: parse failed [ 706.339428][T10668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.355933][ T9] corsair 0003:1B1C:1B3E.0028: probe with driver corsair failed with error -22 [ 706.365415][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.374682][T10668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.384160][T10668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.425585][T10668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.451666][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.468077][ T5099] Bluetooth: hci4: command 0x206a tx timeout [ 706.486455][T10668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.717669][T10696] team0: Port device team_slave_0 added [ 706.781015][T10696] team0: Port device team_slave_1 added [ 706.923517][ T9] usb 2-1: USB disconnect, device number 27 [ 707.615985][ T5099] Bluetooth: hci2: command tx timeout [ 707.708901][ T29] audit: type=1400 audit(1720874789.362:700): avc: denied { accept } for pid=10806 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 708.253016][T10696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.290742][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.317163][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.364294][T10696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.428253][T10668] hsr_slave_0: entered promiscuous mode [ 708.467957][ T5599] usb 1-1: USB disconnect, device number 29 [ 708.533609][T10668] hsr_slave_1: entered promiscuous mode [ 708.557898][T10668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.615873][T10668] Cannot create hsr debugfs directory [ 708.679294][T10696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.742404][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.768351][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.032796][T10696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.556355][T10816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.972'. [ 709.986285][ T29] audit: type=1400 audit(1720874791.822:701): avc: denied { validate_trans } for pid=10829 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 710.559559][ T29] audit: type=1400 audit(1720874792.412:702): avc: denied { write } for pid=10829 comm="syz.0.975" name="ns" dev="proc" ino=53860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 710.580992][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.919822][T10696] hsr_slave_0: entered promiscuous mode [ 710.982374][T10696] hsr_slave_1: entered promiscuous mode [ 711.017113][T10696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.042101][T10696] Cannot create hsr debugfs directory [ 711.115032][ T29] audit: type=1400 audit(1720874792.952:703): avc: denied { unlink } for pid=10841 comm="syz.4.978" name="#1" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 711.189518][ T5099] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 711.205210][ T5099] Bluetooth: hci1: Injecting HCI hardware error event [ 711.215539][ T5099] Bluetooth: hci1: hardware error 0x00 [ 711.221388][ T29] audit: type=1400 audit(1720874793.052:704): avc: denied { accept } for pid=10845 comm="iou-wrk-10846" lport=37977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 711.431292][ T3638] bridge_slave_1: left allmulticast mode [ 711.445316][ T3638] bridge_slave_1: left promiscuous mode [ 711.459967][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.489675][ T3638] bridge_slave_0: left allmulticast mode [ 711.501095][ T3638] bridge_slave_0: left promiscuous mode [ 711.532889][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.656034][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 712.868729][ T25] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 712.893327][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.924624][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.994416][ T25] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 713.012446][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.063833][ T25] usb 2-1: config 0 descriptor?? [ 713.346084][ T5099] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 713.921174][ T25] corsair 0003:1B1C:1B3E.0029: unknown main item tag 0x0 [ 713.955944][ T25] corsair 0003:1B1C:1B3E.0029: unknown main item tag 0x0 [ 713.999773][ T25] corsair 0003:1B1C:1B3E.0029: item fetching failed at offset 2/5 [ 714.029096][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.039488][ T25] corsair 0003:1B1C:1B3E.0029: parse failed [ 714.045590][ T25] corsair 0003:1B1C:1B3E.0029: probe with driver corsair failed with error -22 [ 714.082544][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.109200][ T3638] bond0 (unregistering): Released all slaves [ 714.659325][T10879] afs: Unknown parameter 'dy' [ 714.747268][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 715.216226][ T3638] hsr_slave_0: left promiscuous mode [ 715.232486][ T3638] hsr_slave_1: left promiscuous mode [ 715.240926][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.248958][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.258884][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 715.333474][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.376030][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.407860][ T5137] usb 2-1: USB disconnect, device number 28 [ 715.634164][ T3638] veth1_macvtap: left promiscuous mode [ 715.655985][ T3638] veth0_macvtap: left promiscuous mode [ 715.673234][ T3638] veth1_vlan: left promiscuous mode [ 715.791205][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 715.803924][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 715.853022][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 715.874127][ T3638] veth0_vlan: left promiscuous mode [ 716.103533][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.169320][ T9] usb 5-1: Product: syz [ 716.214917][ T9] usb 5-1: Manufacturer: syz [ 716.269812][ T9] usb 5-1: SerialNumber: syz [ 716.567992][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 717.842298][ T9] usb 5-1: USB disconnect, device number 35 [ 717.872686][ T9] usblp0: removed [ 718.562586][ T29] audit: type=1400 audit(1720874800.422:705): avc: denied { create } for pid=10915 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 718.611389][ T29] audit: type=1400 audit(1720874800.422:706): avc: denied { setopt } for pid=10915 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 718.717909][ T3638] team0 (unregistering): Port device team_slave_1 removed [ 718.794248][ T3638] team0 (unregistering): Port device team_slave_0 removed [ 720.536123][ T29] audit: type=1400 audit(1720874802.382:707): avc: denied { ioctl } for pid=10928 comm="syz.0.998" path="socket:[54065]" dev="sockfs" ino=54065 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 720.560942][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.585610][T10944] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.616075][T10944] vhci_hcd: invalid port number 10 [ 721.621274][T10944] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 723.149126][T10668] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 723.230311][T10668] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 723.283174][T10668] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 723.429350][T10668] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 723.443325][ T5136] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 725.065947][ T29] audit: type=1400 audit(1720874806.252:708): avc: denied { connect } for pid=10973 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 830.055672][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 830.062710][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10980/1:b..l P35/1:b..l [ 830.072450][ C1] rcu: (detected by 1, t=10502 jiffies, g=100689, q=401 ncpus=2) [ 830.080301][ C1] task:kworker/u8:2 state:R running task stack:23616 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 830.093741][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 830.100155][ C1] Call Trace: [ 830.103472][ C1] [ 830.106447][ C1] __schedule+0xf15/0x5d00 [ 830.110928][ C1] ? __pfx_mark_lock+0x10/0x10 [ 830.115762][ C1] ? __lock_acquire+0xc5d/0x3b30 [ 830.120764][ C1] ? __pfx___schedule+0x10/0x10 [ 830.125671][ C1] ? mark_held_locks+0x9f/0xe0 [ 830.130507][ C1] preempt_schedule_irq+0x51/0x90 [ 830.135592][ C1] irqentry_exit+0x36/0x90 [ 830.140068][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 830.146108][ C1] RIP: 0010:write_comp_data+0x34/0x90 [ 830.151642][ C1] Code: 48 8b 15 8f fa 75 7e 65 8b 05 90 fa 75 7e a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 82 1c 16 00 00 85 c0 74 4f 8b 82 f8 15 00 00 <83> f8 03 75 44 48 8b 82 00 16 00 00 8b 92 fc 15 00 00 48 8b 38 48 [ 830.171329][ C1] RSP: 0018:ffffc90000ab7988 EFLAGS: 00000246 [ 830.177458][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8a3269fe [ 830.185475][ C1] RDX: ffff88801868bc00 RSI: 000000000000000c RDI: 0000000000000004 [ 830.193492][ C1] RBP: 000000000000000c R08: 0000000000000004 R09: 000000000000000c [ 830.201507][ C1] R10: 0000000000000002 R11: 0000000000000004 R12: ffff8880644530a8 [ 830.209524][ C1] R13: 0000000000000004 R14: 0000000000000004 R15: dffffc0000000000 [ 830.217547][ C1] ? ieee80211_mandatory_rates+0x19e/0x220 [ 830.223434][ C1] ieee80211_mandatory_rates+0x19e/0x220 [ 830.229138][ C1] ieee80211_ibss_rx_queued_mgmt+0x10aa/0x2f40 [ 830.235368][ C1] ? hlock_class+0x4e/0x130 [ 830.239943][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 830.246629][ C1] ? lock_acquire+0x1b1/0x560 [ 830.251379][ C1] ? find_held_lock+0x2d/0x110 [ 830.256291][ C1] ? find_held_lock+0x2d/0x110 [ 830.261114][ C1] ? kcov_remote_start+0x372/0x6e0 [ 830.266279][ C1] ? mark_held_locks+0x9f/0xe0 [ 830.271108][ C1] ? kcov_remote_start+0x3d1/0x6e0 [ 830.276281][ C1] ieee80211_iface_work+0xc07/0xf00 [ 830.281554][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.286806][ C1] cfg80211_wiphy_work+0x255/0x330 [ 830.291975][ C1] process_one_work+0x9c5/0x1b40 [ 830.296967][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 830.302094][ C1] ? __pfx_process_one_work+0x10/0x10 [ 830.307699][ C1] ? assign_work+0x1a0/0x250 [ 830.312445][ C1] worker_thread+0x6c8/0xf30 [ 830.317180][ C1] ? __kthread_parkme+0x148/0x220 [ 830.322266][ C1] ? __pfx_worker_thread+0x10/0x10 [ 830.327439][ C1] kthread+0x2c1/0x3a0 [ 830.331594][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.336938][ C1] ? __pfx_kthread+0x10/0x10 [ 830.341585][ C1] ret_from_fork+0x45/0x80 [ 830.346064][ C1] ? __pfx_kthread+0x10/0x10 [ 830.350709][ C1] ret_from_fork_asm+0x1a/0x30 [ 830.355633][ C1] [ 830.358720][ C1] task:syz.1.1008 state:R running task stack:26992 pid:10980 tgid:10979 ppid:10400 flags:0x00004002 [ 830.370526][ C1] Call Trace: [ 830.373857][ C1] [ 830.376830][ C1] __schedule+0xf15/0x5d00 [ 830.381313][ C1] ? __pfx___schedule+0x10/0x10 [ 830.386227][ C1] ? mark_held_locks+0x9f/0xe0 [ 830.391061][ C1] preempt_schedule_irq+0x51/0x90 [ 830.396250][ C1] irqentry_exit+0x36/0x90 [ 830.400749][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 830.406794][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 830.412150][ C1] Code: c1 05 da ac 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 830.431825][ C1] RSP: 0018:ffffc9000342f448 EFLAGS: 00000206 [ 830.437951][ C1] RAX: dffffc0000000000 RBX: 1ffff92000685e8b RCX: 00000000c62827c2 [ 830.445978][ C1] RDX: 0000000000000001 RSI: ffffffff8b2cb200 RDI: ffffffff8b9039c0 [ 830.454005][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284d858 [ 830.462052][ C1] R10: ffffffff9426c2c7 R11: 0000000000000001 R12: 0000000000000000 [ 830.470088][ C1] R13: 0000000000000000 R14: ffffffff8dbb1620 R15: 0000000000000000 [ 830.478165][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 830.483266][ C1] ? hlock_class+0x4e/0x130 [ 830.487846][ C1] ? __lock_acquire+0xc5d/0x3b30 [ 830.492875][ C1] __pte_offset_map+0x48/0x540 [ 830.497704][ C1] ? __pte_offset_map+0x42/0x540 [ 830.502787][ C1] ? hlock_class+0x4e/0x130 [ 830.507350][ C1] __pte_offset_map_lock+0x8e/0x300 [ 830.512845][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 830.518720][ C1] follow_page_pte+0xde/0x1ce0 [ 830.523553][ C1] ? __pfx_lock_release+0x10/0x10 [ 830.528649][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 830.534018][ C1] follow_page_mask+0x3a1/0x21c0 [ 830.539120][ C1] __get_user_pages+0x32d/0x15c0 [ 830.544145][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 830.549660][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 830.554785][ C1] __gup_longterm_locked+0x243/0x2790 [ 830.560256][ C1] ? __pfx___gup_longterm_locked+0x10/0x10 [ 830.566138][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 830.571356][ C1] ? rwsem_read_trylock+0x12d/0x250 [ 830.576650][ C1] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 830.582276][ C1] pin_user_pages_remote+0xee/0x150 [ 830.587570][ C1] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 830.593498][ C1] ? down_read+0xc9/0x330 [ 830.597914][ C1] process_vm_rw_core.constprop.0+0x439/0xa10 [ 830.604092][ C1] ? irqentry_exit+0x3b/0x90 [ 830.608766][ C1] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 830.615538][ C1] process_vm_rw+0x301/0x360 [ 830.620227][ C1] ? __pfx_process_vm_rw+0x10/0x10 [ 830.625422][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 830.630876][ C1] ? xfd_validate_state+0x5d/0x180 [ 830.636067][ C1] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 830.641779][ C1] ? do_syscall_64+0x91/0x250 [ 830.646527][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.651874][ C1] do_syscall_64+0xcd/0x250 [ 830.656443][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.662411][ C1] RIP: 0033:0x7f22b5f75bd9 [ 830.666869][ C1] RSP: 002b:00007f22b6c8e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 830.675364][ C1] RAX: ffffffffffffffda RBX: 00007f22b6103f60 RCX: 00007f22b5f75bd9 [ 830.683526][ C1] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 000000000000003b [ 830.691555][ C1] RBP: 00007f22b5fe4e60 R08: 0000000000000286 R09: 0000000000000000 [ 830.699582][ C1] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 830.707605][ C1] R13: 000000000000000b R14: 00007f22b6103f60 R15: 00007ffef57b9128 [ 830.715642][ C1] [ 830.718702][ C1] rcu: rcu_preempt kthread starved for 10566 jiffies! g100689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 830.730065][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 830.740077][ C1] rcu: RCU grace-period kthread stack dump: [ 830.745995][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 830.757795][ C1] Call Trace: [ 830.761109][ C1] [ 830.764077][ C1] __schedule+0xf15/0x5d00 [ 830.768557][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 830.773841][ C1] ? __pfx___schedule+0x10/0x10 [ 830.778758][ C1] ? schedule+0x298/0x350 [ 830.783141][ C1] ? __pfx_lock_release+0x10/0x10 [ 830.788232][ C1] ? __pfx___mod_timer+0x10/0x10 [ 830.793237][ C1] ? lock_acquire+0x1b1/0x560 [ 830.798151][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 830.803678][ C1] schedule+0xe7/0x350 [ 830.807805][ C1] schedule_timeout+0x136/0x2a0 [ 830.812699][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 830.818120][ C1] ? __pfx_process_timeout+0x10/0x10 [ 830.823470][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 830.829329][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 830.834858][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 830.839684][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 830.845034][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 830.850290][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 830.856155][ C1] rcu_gp_kthread+0x271/0x380 [ 830.860899][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 830.866157][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.871503][ C1] ? __kthread_parkme+0x148/0x220 [ 830.876598][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 830.881867][ C1] kthread+0x2c1/0x3a0 [ 830.885996][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.891258][ C1] ? __pfx_kthread+0x10/0x10 [ 830.895905][ C1] ret_from_fork+0x45/0x80 [ 830.900395][ C1] ? __pfx_kthread+0x10/0x10 [ 830.905048][ C1] ret_from_fork_asm+0x1a/0x30 [ 830.909880][ C1] [ 830.912938][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 830.919381][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 830.929155][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 830.939250][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 830.944603][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 c8 d4 1b 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 78 72 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 830.964703][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 830.970828][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae7e759 [ 830.978854][ C1] RDX: 0000000000000001 RSI: ffff888019afd000 RDI: ffff888019afd064 [ 830.986873][ C1] RBP: ffff888019afd064 R08: 0000000000000001 R09: ffffed1017266fdd [ 830.994893][ C1] R10: ffff8880b9337eeb R11: 0000000000000000 R12: ffff88801a35b000 [ 831.002916][ C1] R13: ffffffff8e745940 R14: 0000000000000001 R15: 0000000000000000 [ 831.010940][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 831.020015][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.026658][ C1] CR2: 00007f162e492a90 CR3: 000000002eb22000 CR4: 00000000003506f0 [ 831.034676][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 831.042691][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.050709][ C1] Call Trace: [ 831.054028][ C1] [ 831.056911][ C1] ? show_regs+0x8c/0xa0 [ 831.061319][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 831.067721][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 831.072988][ C1] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 831.078532][ C1] ? __pfx_lock_release+0x10/0x10 [ 831.083717][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 831.089453][ C1] ? __asan_memcpy+0x3c/0x60 [ 831.094119][ C1] ? update_process_times+0x175/0x220 [ 831.099548][ C1] ? __pfx_update_process_times+0x10/0x10 [ 831.105326][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 831.110843][ C1] ? update_wall_time+0x1c/0x40 [ 831.115760][ C1] ? tick_nohz_handler+0x376/0x530 [ 831.120929][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 831.126449][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 831.131883][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 831.137663][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 831.143801][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 831.148976][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 831.155203][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 831.161069][ C1] [ 831.164037][ C1] [ 831.167045][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 831.173259][ C1] ? ct_kernel_exit+0x139/0x190 [ 831.178173][ C1] ? acpi_safe_halt+0x1a/0x20 [ 831.182896][ C1] acpi_idle_enter+0xc5/0x160 [ 831.187628][ C1] cpuidle_enter_state+0x85/0x500 [ 831.192721][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 831.198599][ C1] cpuidle_enter+0x4e/0xa0 [ 831.203070][ C1] do_idle+0x313/0x3f0 [ 831.207190][ C1] ? __pfx_do_idle+0x10/0x10 [ 831.211922][ C1] cpu_startup_entry+0x4f/0x60 [ 831.216743][ C1] start_secondary+0x220/0x2b0 [ 831.221649][ C1] ? __pfx_start_secondary+0x10/0x10 [ 831.227081][ C1] common_startup_64+0x13e/0x148 [ 831.232077][ C1] [ 832.476635][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 832.483047][ T1249] ieee802154 phy1 wpan1: encryption failed: -22