last executing test programs: 1m37.127776078s ago: executing program 0 (id=1839): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1m34.437702058s ago: executing program 0 (id=1842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) removexattr(&(0x7f0000000280)='./bus/file0\x00', 0x0) 1m33.820854252s ago: executing program 0 (id=1845): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 1m33.006849564s ago: executing program 0 (id=1848): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main, @local]}}, 0x0}, 0x0) 1m30.908249326s ago: executing program 0 (id=1850): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x820) 1m30.394190879s ago: executing program 0 (id=1852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18.43360488s ago: executing program 3 (id=1941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) getpid() syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') syz_emit_ethernet(0x4d0, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) 16.849888928s ago: executing program 3 (id=1943): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 14.788678737s ago: executing program 3 (id=1945): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffded, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000060c0)={0x0, 0x0, &(0x7f0000006080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r4, @ANYBLOB="010b800e00000000000016000000300005"], 0x44}, 0x1, 0x0, 0x0, 0x20004006}, 0x0) 14.562094716s ago: executing program 4 (id=1946): mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000580)='system_u:object_r:mqueue_spool_t:s0\x00', 0x24, 0x0) 12.511534159s ago: executing program 4 (id=1948): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030102000000fdffffffffffffff100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40}, 0x20000000) 11.059794513s ago: executing program 4 (id=1949): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) 8.754827794s ago: executing program 1 (id=1818): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x3, &(0x7f00000002c0)=[{0x4, 0x7f, 0x8, 0x10000}, {0x3, 0x1, 0x6, 0x4c}, {0x4, 0x6, 0xe, 0x7f}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x1) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "c41751ca16a23f839af552fb8500010000000000003203a6c188ec22bd7c4549"}}) ioctl$LOOP_GET_STATUS(r5, 0x4c07, 0x0) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib6_table_lookup\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x4, 0x20000000, 0x4) 8.094372728s ago: executing program 3 (id=1951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) ioctl$TIOCEXCL(r4, 0x540c) 7.800856423s ago: executing program 2 (id=1952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x531000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 7.668593378s ago: executing program 1 (id=1953): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r1, &(0x7f000000b700)=[{{&(0x7f0000000c00)=@alg, 0x80, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/16}], 0x2}}, {{0x0, 0x5f, &(0x7f0000000340)=[{0x0}, {0x0, 0xfffffffffffffd54}, {&(0x7f00000001c0)=""/20}, {&(0x7f0000000440)=""/194}], 0x2}}, {{0x0, 0x0, &(0x7f000000b5c0)}}], 0x4, 0x40002042, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x44}}, 0x0) 6.936649952s ago: executing program 1 (id=1954): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 6.436161926s ago: executing program 3 (id=1955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 5.977111981s ago: executing program 2 (id=1956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@private, @in=@loopback}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) 5.007175523s ago: executing program 2 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) getpid() syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') syz_emit_ethernet(0x4d0, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) 4.877226278s ago: executing program 1 (id=1958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000f4ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000004c0)="cf", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.318298101s ago: executing program 4 (id=1959): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8000, 0x343, 0x1, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xf, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ff0000feffffffffffffffefffffffffffffff"], 0x48) 3.396974636s ago: executing program 2 (id=1960): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffded, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000060c0)={0x0, 0x0, &(0x7f0000006080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r4, @ANYBLOB="010b800e00000000000016000000300005"], 0x44}, 0x1, 0x0, 0x0, 0x20004006}, 0x0) 1.859754075s ago: executing program 2 (id=1961): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8000, 0x343, 0x1, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ff0000feffffffffff"], 0x48) 1.665231595s ago: executing program 4 (id=1962): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x3, &(0x7f00000002c0)=[{0x4, 0x7f, 0x8, 0x10000}, {0x3, 0x1, 0x6, 0x4c}, {0x4, 0x6, 0xe, 0x7f}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x1) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "c41751ca16a23f839af552fb8500010000000000003203a6c188ec22bd7c4549"}}) ioctl$LOOP_GET_STATUS(r6, 0x4c07, 0x0) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib6_table_lookup\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x4, 0x20000000, 0x4) 1.460215543s ago: executing program 1 (id=1963): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x7, 0x4, "75429effa66f00"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000580)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) 1.38225737s ago: executing program 2 (id=1964): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x2, 0x8, 0x20}, 0x20) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x7, 0x10, 0x2, 0x8000, {{0xe, 0x4, 0x1, 0x6, 0x38, 0x66, 0x0, 0xf, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@end, @timestamp={0x44, 0xc, 0x8b, 0x0, 0xb, [0x83, 0x4]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x12, "7e2e41feddcaee523224d575258a929a"}]}}}}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x1, 0x7, 0x810, r0, 0xfe, '\x00', r1, r2, 0x5, 0x3, 0x1, 0x1, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x18, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3ee) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) getdents(r4, &(0x7f00000000c0)=""/102, 0x66) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) 198.157515ms ago: executing program 1 (id=1965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r2, 0x0) 76.811446ms ago: executing program 4 (id=1966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@private, @in=@loopback}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) 0s ago: executing program 3 (id=1967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) capget(&(0x7f00000001c0)={0x20071026, r1}, &(0x7f0000000240)={0x5, 0x4, 0x7fff, 0x3ff, 0x7bd, 0x4}) write$selinux_load(r5, &(0x7f00000004c0)={0xf97cff8c, 0x10}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): dge_slave_1: left promiscuous mode [ 1292.766892][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.809530][ T5513] bridge_slave_0: left allmulticast mode [ 1292.828676][ T5513] bridge_slave_0: left promiscuous mode [ 1292.851371][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.982940][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.995607][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.012337][ T5513] bond0 (unregistering): Released all slaves [ 1296.233680][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.248130][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.261866][ T5513] bond0 (unregistering): Released all slaves [ 1296.498377][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.512871][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.525171][ T5513] bond0 (unregistering): Released all slaves [ 1301.049258][ T5513] hsr_slave_0: left promiscuous mode [ 1301.120403][ T5513] hsr_slave_1: left promiscuous mode [ 1301.151806][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.186220][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.240060][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.247578][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.339485][ T5513] hsr_slave_0: left promiscuous mode [ 1301.358574][ T5513] hsr_slave_1: left promiscuous mode [ 1301.390527][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.398676][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.461054][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.468661][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.539982][ T5513] hsr_slave_0: left promiscuous mode [ 1301.561806][ T5513] hsr_slave_1: left promiscuous mode [ 1301.582200][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1301.597009][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1301.608434][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1301.622029][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.633833][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1301.652232][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1301.660116][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1301.662442][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.733039][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.749352][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.948946][ T5513] veth1_macvtap: left promiscuous mode [ 1301.968049][ T5513] veth0_macvtap: left promiscuous mode [ 1301.982031][ T5513] veth1_vlan: left promiscuous mode [ 1301.998548][ T5513] veth1_macvtap: left promiscuous mode [ 1302.010065][ T5513] veth0_macvtap: left promiscuous mode [ 1302.023120][ T5513] veth1_vlan: left promiscuous mode [ 1302.035396][ T5513] veth0_vlan: left promiscuous mode [ 1302.048702][ T5513] veth1_macvtap: left promiscuous mode [ 1302.062292][ T5513] veth0_macvtap: left promiscuous mode [ 1302.076723][ T5513] veth1_vlan: left promiscuous mode [ 1302.091293][ T5513] veth0_vlan: left promiscuous mode [ 1303.779958][ T5230] Bluetooth: hci2: command tx timeout [ 1303.793665][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1303.880443][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1305.504929][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1305.582570][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1305.881392][ T5230] Bluetooth: hci2: command tx timeout [ 1305.957246][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.963963][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.108503][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1307.195500][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1307.940911][ T5230] Bluetooth: hci2: command tx timeout [ 1310.019638][ T5230] Bluetooth: hci2: command tx timeout [ 1312.386169][T13283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1312.561011][T13520] chnl_net:caif_netlink_parms(): no params data found [ 1312.607916][T13283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1312.680451][T13283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1313.045693][T13283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1314.368547][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.376244][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.383820][T13520] bridge_slave_0: entered allmulticast mode [ 1314.392696][T13520] bridge_slave_0: entered promiscuous mode [ 1314.403672][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.411309][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.618762][T13520] bridge_slave_1: entered allmulticast mode [ 1314.787535][T13520] bridge_slave_1: entered promiscuous mode [ 1315.287868][T13586] syz.0.1639: attempt to access beyond end of device [ 1315.287868][T13586] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1315.300973][T13586] FAT-fs (loop1): unable to read boot sector [ 1316.345428][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.451874][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.102134][T13520] team0: Port device team_slave_0 added [ 1317.128849][T13520] team0: Port device team_slave_1 added [ 1317.940296][T13328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1318.022464][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.037742][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.069754][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.086786][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.100558][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.127320][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.235083][T13328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1318.275812][T13328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1318.450417][T13328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1318.982835][T13520] hsr_slave_0: entered promiscuous mode [ 1319.020452][T13520] hsr_slave_1: entered promiscuous mode [ 1319.046486][T13520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1319.067915][T13520] Cannot create hsr debugfs directory [ 1319.290017][T13283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.767701][ T5513] bridge_slave_1: left allmulticast mode [ 1320.794386][ T5513] bridge_slave_1: left promiscuous mode [ 1320.808028][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.838622][ T5513] bridge_slave_0: left allmulticast mode [ 1320.860610][ T5513] bridge_slave_0: left promiscuous mode [ 1320.866583][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.929399][ T5347] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1321.155156][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.199832][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.235048][ T5347] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1321.267110][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.290919][ T5347] usb 4-1: config 0 descriptor?? [ 1321.775344][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1321.796458][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1321.832032][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1321.846388][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1321.859911][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1321.868411][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1322.019254][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.105864][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.129486][ T5513] bond0 (unregistering): Released all slaves [ 1322.464024][ T5347] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 1322.477916][ T5347] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 1322.512940][ T5347] arvo 0003:1E7D:30D4.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1322.543411][ T5347] arvo 0003:1E7D:30D4.001D: couldn't init struct arvo_device [ 1322.566981][ T5347] arvo 0003:1E7D:30D4.001D: couldn't install keyboard [ 1322.577642][ T5347] arvo 0003:1E7D:30D4.001D: probe with driver arvo failed with error -71 [ 1322.615497][ T5347] usb 4-1: USB disconnect, device number 6 [ 1322.671008][ T5513] hsr_slave_0: left promiscuous mode [ 1322.678251][ T5513] hsr_slave_1: left promiscuous mode [ 1322.687803][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.696586][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.840740][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1323.076132][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1323.183207][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1323.337416][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1323.366262][ T25] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1323.403408][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.483093][ T25] usb 1-1: Product: syz [ 1323.487561][ T25] usb 1-1: Manufacturer: syz [ 1323.515510][ T25] usb 1-1: SerialNumber: syz [ 1323.656663][ T25] usb 1-1: config 0 descriptor?? [ 1323.844715][ T25] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1323.881619][ T25] usb 1-1: Detected FT232H [ 1323.972405][ T54] Bluetooth: hci5: command tx timeout [ 1324.047875][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1324.379183][ T29] audit: type=1400 audit(1726899923.494:856): avc: denied { transfer } for pid=13626 comm="syz.3.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1324.568325][ T25] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1325.250247][ T5276] usb 1-1: USB disconnect, device number 17 [ 1325.846580][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.927855][ T5276] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1325.956125][ T5276] ftdi_sio 1-1:0.0: device disconnected [ 1326.019665][ T54] Bluetooth: hci5: command tx timeout [ 1326.225177][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.404979][T13520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1327.282055][T13520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1327.346928][T13520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1327.424080][T12570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.431470][T12570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.821205][ T5274] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1328.089445][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 1328.110217][ T54] Bluetooth: hci5: command tx timeout [ 1328.210111][ T5274] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.402334][ T5274] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1328.444852][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.483575][ T5274] usb 1-1: Product: syz [ 1328.487825][ T5274] usb 1-1: Manufacturer: syz [ 1328.546860][ T5274] usb 1-1: SerialNumber: syz [ 1328.568622][ T5274] usb 1-1: config 0 descriptor?? [ 1328.853191][T13520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1329.051424][ T5274] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 1329.058052][ T5274] usb 1-1: No valid video chain found. [ 1329.159722][ T5274] usb 1-1: USB disconnect, device number 18 [ 1329.222261][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.229678][ T5505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.279359][ T54] Bluetooth: hci5: command tx timeout [ 1331.580011][T13617] chnl_net:caif_netlink_parms(): no params data found [ 1333.241301][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1333.261555][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1333.271823][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1333.296791][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1333.309987][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1333.320561][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1333.569560][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.378932][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.663898][T13617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.693965][T13617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.694919][T13709] syz.0.1660[13709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1334.701579][T13709] syz.0.1660[13709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1334.724954][T13617] bridge_slave_0: entered allmulticast mode [ 1334.838039][T13617] bridge_slave_0: entered promiscuous mode [ 1335.170745][T13520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1335.203475][T13520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1335.691068][ T5230] Bluetooth: hci1: command tx timeout [ 1335.956828][T13617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.990144][T13617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.061372][T13617] bridge_slave_1: entered allmulticast mode [ 1336.109390][ T29] audit: type=1400 audit(1726899935.204:857): avc: denied { write } for pid=13708 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1336.134218][T13617] bridge_slave_1: entered promiscuous mode [ 1336.214534][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.221887][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.310563][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.317879][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.474236][ T5513] bridge_slave_1: left allmulticast mode [ 1336.486671][ T5513] bridge_slave_1: left promiscuous mode [ 1336.519385][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.572958][ T5513] bridge_slave_0: left allmulticast mode [ 1336.578684][ T5513] bridge_slave_0: left promiscuous mode [ 1336.631199][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.792744][ T5230] Bluetooth: hci1: command tx timeout [ 1338.213890][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.226580][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.239662][ T5513] bond0 (unregistering): Released all slaves [ 1338.599586][T13617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.632570][T13617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.739355][ T5513] hsr_slave_0: left promiscuous mode [ 1338.796900][ T5513] hsr_slave_1: left promiscuous mode [ 1338.810618][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.850377][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.859501][ T5230] Bluetooth: hci1: command tx timeout [ 1340.502325][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1340.636334][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1340.659274][ T5347] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1340.920366][ T5347] usb 1-1: Using ep0 maxpacket: 16 [ 1341.084943][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.196513][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.249705][ T5347] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1341.316441][ T5347] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1341.357178][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.501024][ T5347] usb 1-1: config 0 descriptor?? [ 1342.009683][ T5230] Bluetooth: hci1: command tx timeout [ 1342.795571][ T5347] microsoft 0003:045E:07DA.001E: global environment stack underflow [ 1342.818773][ T5347] microsoft 0003:045E:07DA.001E: item 0 4 1 11 parsing failed [ 1342.850781][ T5347] microsoft 0003:045E:07DA.001E: parse failed [ 1342.857097][ T5347] microsoft 0003:045E:07DA.001E: probe with driver microsoft failed with error -22 [ 1342.923317][ T5347] usb 1-1: USB disconnect, device number 19 [ 1343.291339][T13617] team0: Port device team_slave_0 added [ 1343.743770][T13617] team0: Port device team_slave_1 added [ 1344.356458][T13617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.379340][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.427192][T13617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.906792][T13800] SELinux: policydb string length 16 does not match expected length 8 [ 1344.915882][T13800] SELinux: failed to load policy [ 1345.735958][T13520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.771526][T13617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.778537][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1345.881289][T13617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.847417][T13694] chnl_net:caif_netlink_parms(): no params data found [ 1348.936921][T13617] hsr_slave_0: entered promiscuous mode [ 1348.989663][T13617] hsr_slave_1: entered promiscuous mode [ 1349.009177][T13617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1349.016828][T13617] Cannot create hsr debugfs directory [ 1351.490218][T13520] veth0_vlan: entered promiscuous mode [ 1351.795221][T13694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.829939][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.855947][T13694] bridge_slave_0: entered allmulticast mode [ 1351.873927][T13694] bridge_slave_0: entered promiscuous mode [ 1351.885449][T13694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.892969][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.901591][T13694] bridge_slave_1: entered allmulticast mode [ 1351.945589][T13694] bridge_slave_1: entered promiscuous mode [ 1352.657447][T13520] veth1_vlan: entered promiscuous mode [ 1354.342602][T13694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.393630][T13694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1354.491953][ T5513] bridge_slave_1: left allmulticast mode [ 1354.497701][ T5513] bridge_slave_1: left promiscuous mode [ 1354.507120][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.534963][ T5513] bridge_slave_0: left allmulticast mode [ 1354.548446][ T5513] bridge_slave_0: left promiscuous mode [ 1354.557200][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.068042][T13671] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1355.292483][T13671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.315783][T13671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.339234][T13671] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1355.363032][T13671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.394546][T13671] usb 1-1: config 0 descriptor?? [ 1355.603859][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.627285][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.655726][ T5513] bond0 (unregistering): Released all slaves [ 1355.844474][T13671] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 1355.859421][T13671] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 1355.895315][T13694] team0: Port device team_slave_0 added [ 1355.936058][T13671] arvo 0003:1E7D:30D4.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1355.959034][T13694] team0: Port device team_slave_1 added [ 1356.045429][ T5513] hsr_slave_0: left promiscuous mode [ 1356.046588][T13671] arvo 0003:1E7D:30D4.001F: couldn't init struct arvo_device [ 1356.073185][T13671] arvo 0003:1E7D:30D4.001F: couldn't install keyboard [ 1356.084578][ T5513] hsr_slave_1: left promiscuous mode [ 1356.109322][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.111675][T13671] arvo 0003:1E7D:30D4.001F: probe with driver arvo failed with error -71 [ 1356.137181][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.145681][T13671] usb 1-1: USB disconnect, device number 20 [ 1356.588044][ T29] audit: type=1326 audit(1726899955.694:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.3.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1356.668503][ T29] audit: type=1326 audit(1726899955.714:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.3.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1356.736142][ T29] audit: type=1326 audit(1726899955.714:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.3.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1356.786734][ T29] audit: type=1326 audit(1726899955.714:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.3.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1356.813059][ T29] audit: type=1326 audit(1726899955.714:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.3.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1356.869887][ T29] audit: type=1326 audit(1726899955.714:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.3.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1356.964834][ T29] audit: type=1400 audit(1726899955.714:864): avc: denied { setattr } for pid=13896 comm="syz.3.1684" name="" dev="pipefs" ino=50590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1357.059608][ T29] audit: type=1326 audit(1726899955.714:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.3.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1357.117367][ T29] audit: type=1326 audit(1726899955.714:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.3.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1357.459127][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1357.824619][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1361.695265][T13520] veth0_macvtap: entered promiscuous mode [ 1361.773045][T13694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.827905][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.874203][T13694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.924541][T13694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.959123][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.068374][T13694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.162234][T13617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1364.038548][T13694] hsr_slave_0: entered promiscuous mode [ 1364.078719][T13694] hsr_slave_1: entered promiscuous mode [ 1364.375059][T13694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1364.419663][T13694] Cannot create hsr debugfs directory [ 1364.425511][T13617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1364.471732][T13617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1364.615008][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1364.635558][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1364.645491][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1364.667096][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1364.681294][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1364.689035][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1364.789570][ T5347] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1364.832468][T13617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1365.003702][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.025078][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.059652][ T5347] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1365.098388][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.123720][ T5347] usb 4-1: config 0 descriptor?? [ 1365.770339][ T5347] usbhid 4-1:0.0: can't add hid device: -71 [ 1365.779548][ T5347] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1365.839877][ T5347] usb 4-1: USB disconnect, device number 7 [ 1366.223280][ T29] audit: type=1326 audit(1726899965.344:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1366.248819][ T29] audit: type=1326 audit(1726899965.344:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1366.273278][ T29] audit: type=1326 audit(1726899965.354:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1366.297540][ T29] audit: type=1326 audit(1726899965.354:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1366.376953][ T29] audit: type=1326 audit(1726899965.354:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1366.471077][ T29] audit: type=1326 audit(1726899965.354:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1366.527075][ T29] audit: type=1326 audit(1726899965.354:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1366.795530][ T5230] Bluetooth: hci4: command tx timeout [ 1367.423458][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.439384][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.511889][T13617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.639333][ T5513] bridge_slave_1: left allmulticast mode [ 1367.671119][ T5513] bridge_slave_1: left promiscuous mode [ 1367.677262][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.992233][ T5513] bridge_slave_0: left allmulticast mode [ 1368.014653][ T5513] bridge_slave_0: left promiscuous mode [ 1368.050336][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.751112][ T29] audit: type=1400 audit(1726899967.814:874): avc: denied { setcheckreqprot } for pid=13968 comm="syz.3.1698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1369.040846][ T5230] Bluetooth: hci4: command tx timeout [ 1369.703377][T13989] Bluetooth: MGMT ver 1.23 [ 1370.364501][T13992] process 'syz.3.1700' launched './file0' with NULL argv: empty string added [ 1370.371807][ T29] audit: type=1400 audit(1726899969.484:875): avc: denied { execute } for pid=13990 comm="syz.3.1700" name="file0" dev="ramfs" ino=50850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1370.400307][ T29] audit: type=1400 audit(1726899969.494:876): avc: denied { execute_no_trans } for pid=13990 comm="syz.3.1700" path="/136/file0/file0" dev="ramfs" ino=50850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1370.418509][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.447144][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.464785][ T5513] bond0 (unregistering): Released all slaves [ 1370.492032][T13617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.514230][T13939] chnl_net:caif_netlink_parms(): no params data found [ 1370.760889][ T5513] hsr_slave_0: left promiscuous mode [ 1370.780753][ T5513] hsr_slave_1: left promiscuous mode [ 1370.932783][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.954064][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.047049][ T5513] veth0_macvtap: left promiscuous mode [ 1371.060191][ T5230] Bluetooth: hci4: command tx timeout [ 1371.073800][ T5513] veth1_vlan: left promiscuous mode [ 1371.096893][ T5513] veth0_vlan: left promiscuous mode [ 1372.157405][ T29] audit: type=1400 audit(1726899971.264:877): avc: denied { nlmsg_write } for pid=13995 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1373.150772][ T5230] Bluetooth: hci4: command tx timeout [ 1374.107845][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1374.247871][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1375.351395][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.358699][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.411862][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.419231][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.716778][T13694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1375.744320][T13694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1375.764602][T13939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.772123][T13939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.780371][T13939] bridge_slave_0: entered allmulticast mode [ 1375.788660][T13939] bridge_slave_0: entered promiscuous mode [ 1375.841274][T13694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1375.875549][T13694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1375.929199][T13939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.936609][T13939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.945260][T13939] bridge_slave_1: entered allmulticast mode [ 1375.955039][T13939] bridge_slave_1: entered promiscuous mode [ 1376.098118][T13939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.331337][T13939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.528300][T13939] team0: Port device team_slave_0 added [ 1376.785023][T13939] team0: Port device team_slave_1 added [ 1377.299522][T13939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.331258][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.478967][T13939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.568377][T13939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.879947][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1378.101345][T13939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.624811][T13939] hsr_slave_0: entered promiscuous mode [ 1378.696542][T13939] hsr_slave_1: entered promiscuous mode [ 1378.721663][T13939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1378.741297][T13939] Cannot create hsr debugfs directory [ 1379.655290][T13617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.823481][T13694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.039042][T13694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.434464][ T5518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.441854][ T5518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.643576][ T5518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.651034][ T5518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.058839][T14127] syz.3.1718[14127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1383.060289][T14127] syz.3.1718[14127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1383.720974][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1383.765226][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1383.777793][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1383.792377][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1383.801067][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1383.810036][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1384.554020][T13694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.811218][T13694] veth0_vlan: entered promiscuous mode [ 1385.860553][ T5230] Bluetooth: hci2: command tx timeout [ 1385.895559][T13939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1385.984610][T13939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1386.050285][T13939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1386.137373][T13694] veth1_vlan: entered promiscuous mode [ 1386.157929][T13939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1386.569252][ T5496] bridge_slave_1: left allmulticast mode [ 1386.588628][ T5496] bridge_slave_1: left promiscuous mode [ 1386.599469][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.618323][ T5496] bridge_slave_0: left allmulticast mode [ 1386.625427][ T5496] bridge_slave_0: left promiscuous mode [ 1386.880669][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.942144][ T5230] Bluetooth: hci2: command tx timeout [ 1389.738065][T10049] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1389.939745][T10049] usb 1-1: Using ep0 maxpacket: 32 [ 1389.982915][T10049] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1389.993774][T10049] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1390.039255][T10049] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1390.058018][ T5230] Bluetooth: hci2: command tx timeout [ 1390.109175][T10049] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1390.138061][T10049] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1390.161564][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.181761][T10049] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1390.233047][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.250761][T10049] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1390.260934][T10049] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.296751][ T5496] bond0 (unregistering): Released all slaves [ 1391.201189][T10049] usb 1-1: config 0 descriptor?? [ 1391.374859][ T5496] hsr_slave_0: left promiscuous mode [ 1391.577832][ T5496] hsr_slave_1: left promiscuous mode [ 1391.642902][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.684272][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.802560][T10049] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1392.144259][ T5230] Bluetooth: hci2: command tx timeout [ 1392.650498][T10049] usb 1-1: USB disconnect, device number 21 [ 1392.686246][T10049] usblp0: removed [ 1392.790994][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1392.803483][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1392.813251][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1392.823923][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1392.836212][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1392.844544][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1394.303586][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 1394.432349][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 1394.609576][T12117] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1394.919218][ T5230] Bluetooth: hci5: command tx timeout [ 1394.969643][T12117] usb 1-1: Using ep0 maxpacket: 16 [ 1395.031057][T12117] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1395.109472][T12117] usb 1-1: config 0 has no interface number 0 [ 1395.140709][T12117] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1395.163204][T12117] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1395.196524][T12117] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1395.211860][T12117] usb 1-1: Product: syz [ 1395.239227][T12117] usb 1-1: SerialNumber: syz [ 1395.255400][T12117] usb 1-1: config 0 descriptor?? [ 1395.275753][T14203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1395.844471][T12117] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1395.854221][T12117] usb 1-1: invalid MIDI in EP 0 [ 1396.413272][T12117] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1396.481460][T12117] usb 1-1: USB disconnect, device number 22 [ 1396.675700][T14213] udevd[14213]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1396.989254][ T5230] Bluetooth: hci5: command tx timeout [ 1399.494808][ T5230] Bluetooth: hci5: command tx timeout [ 1400.396792][T14128] chnl_net:caif_netlink_parms(): no params data found [ 1400.680335][T12117] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1400.884808][T12117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.898562][T12117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.904762][T14128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.926670][T12117] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1400.935635][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.942683][T12117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.944246][T14128] bridge_slave_0: entered allmulticast mode [ 1400.960306][T14128] bridge_slave_0: entered promiscuous mode [ 1400.972627][T14128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.980082][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.982122][T12117] usb 4-1: config 0 descriptor?? [ 1400.987768][T14128] bridge_slave_1: entered allmulticast mode [ 1401.012293][T14128] bridge_slave_1: entered promiscuous mode [ 1401.103178][T13939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.253807][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.326329][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.460145][T12117] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 1401.478196][T12117] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 1401.507425][T14128] team0: Port device team_slave_0 added [ 1401.514758][T12117] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1401.540282][T14128] team0: Port device team_slave_1 added [ 1401.652308][T12117] arvo 0003:1E7D:30D4.0020: couldn't init struct arvo_device [ 1401.667062][T12117] arvo 0003:1E7D:30D4.0020: couldn't install keyboard [ 1401.685199][T12117] arvo 0003:1E7D:30D4.0020: probe with driver arvo failed with error -71 [ 1401.737639][T12117] usb 4-1: USB disconnect, device number 8 [ 1401.766575][T13939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.854915][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.862600][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.870096][ T54] Bluetooth: hci5: command tx timeout [ 1401.889170][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.892900][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.914686][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.943329][ T5230] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1401.965355][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.020448][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.027763][ T1061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.090789][T14195] chnl_net:caif_netlink_parms(): no params data found [ 1402.198307][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.205666][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.627276][T14128] hsr_slave_0: entered promiscuous mode [ 1402.751484][T14128] hsr_slave_1: entered promiscuous mode [ 1402.827646][T14128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1402.956902][T14128] Cannot create hsr debugfs directory [ 1403.367939][T14195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.397196][T14195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.425054][T14195] bridge_slave_0: entered allmulticast mode [ 1403.458669][T14195] bridge_slave_0: entered promiscuous mode [ 1403.639381][T10049] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1403.742128][T14195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.766393][T14195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.779639][T14195] bridge_slave_1: entered allmulticast mode [ 1403.818928][T14195] bridge_slave_1: entered promiscuous mode [ 1403.863929][T10049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.904015][T10049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.934691][T10049] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1404.835100][T10049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.855099][T10049] usb 4-1: config 0 descriptor?? [ 1405.067223][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.186342][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.247346][ T5496] bridge_slave_1: left allmulticast mode [ 1405.259184][ T5496] bridge_slave_1: left promiscuous mode [ 1405.267959][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.285507][ T5496] bridge_slave_0: left allmulticast mode [ 1405.292456][ T5496] bridge_slave_0: left promiscuous mode [ 1405.298545][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.317228][T10049] betop 0003:20BC:5500.0021: unknown main item tag 0x0 [ 1405.336928][T10049] betop 0003:20BC:5500.0021: unexpected long global item [ 1405.347094][T10049] betop 0003:20BC:5500.0021: parse failed [ 1405.359447][T10049] betop 0003:20BC:5500.0021: probe with driver betop failed with error -22 [ 1405.528833][T12117] usb 4-1: USB disconnect, device number 9 [ 1406.123328][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.148422][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.203616][ T5496] bond0 (unregistering): Released all slaves [ 1408.362830][ T5496] hsr_slave_0: left promiscuous mode [ 1408.409218][ T5496] hsr_slave_1: left promiscuous mode [ 1408.471858][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.533216][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.627657][ T5496] veth1_vlan: left promiscuous mode [ 1408.637397][ T5496] veth0_vlan: left promiscuous mode [ 1409.140949][T12570] Bluetooth: hci1: Frame reassembly failed (-84) [ 1409.227771][T12570] Bluetooth: hci1: Frame reassembly failed (-84) [ 1410.557600][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 1410.649489][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 1411.115621][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1412.810211][T14195] team0: Port device team_slave_0 added [ 1412.913799][T14195] team0: Port device team_slave_1 added [ 1413.178904][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.203176][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.301882][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.437618][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.464948][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.519815][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.094879][T14195] hsr_slave_0: entered promiscuous mode [ 1414.103707][T14195] hsr_slave_1: entered promiscuous mode [ 1414.320670][T14195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1414.354701][T14195] Cannot create hsr debugfs directory [ 1415.154931][T13939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.458577][T14128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1415.513220][T14128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1415.578904][T14128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1415.849359][ T1061] Bluetooth: hci1: Frame reassembly failed (-84) [ 1415.990193][ T1061] Bluetooth: hci1: Frame reassembly failed (-84) [ 1416.233286][T14128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1416.649927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1417.417338][T14128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.465719][T13939] veth0_vlan: entered promiscuous mode [ 1417.544410][T14195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1417.595954][T14195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1417.622673][T13939] veth1_vlan: entered promiscuous mode [ 1417.654334][T14195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1417.688303][T14195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1417.791119][T14128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.859924][ T5230] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1418.023528][ T5520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.030958][ T5520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.136767][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.144131][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.380333][T13939] veth0_macvtap: entered promiscuous mode [ 1418.538144][T13939] veth1_macvtap: entered promiscuous mode [ 1418.692548][T14128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1418.745383][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.757861][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.768148][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.779490][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.793949][T13939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.859952][ T1172] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1418.886986][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.905147][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.915337][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.932721][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.980950][T13939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.008486][T14195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.059756][ T1172] usb 4-1: Using ep0 maxpacket: 32 [ 1419.151039][ T1172] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1419.169366][ T1172] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1419.194320][T13939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.217633][ T1172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1419.239739][T13939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.265359][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1419.284749][T13939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.313214][ T1172] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1419.328606][T13939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.352083][ T1172] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1419.420773][ T1172] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1419.456659][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.998215][T14195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.290674][ T1172] usb 4-1: config 0 descriptor?? [ 1420.365475][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.372869][ T5496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.471680][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.479228][ T5505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.634617][ T1172] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1420.774029][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.815010][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.864341][T14128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.932776][ T29] audit: type=1400 audit(1726900020.054:878): avc: denied { read write } for pid=14364 comm="syz.3.1759" name="lp0" dev="devtmpfs" ino=2618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1420.973979][ T29] audit: type=1400 audit(1726900020.054:879): avc: denied { open } for pid=14364 comm="syz.3.1759" path="/dev/usb/lp0" dev="devtmpfs" ino=2618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1421.000484][ T5518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.008498][ T5518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.035755][ C1] usblp0: nonzero read bulk status received: -71 [ 1421.037316][T14389] usb 4-1: USB disconnect, device number 10 [ 1421.384422][T14128] veth0_vlan: entered promiscuous mode [ 1421.586305][T14128] veth1_vlan: entered promiscuous mode [ 1422.370914][T14364] usblp0: removed [ 1422.396261][T14128] veth0_macvtap: entered promiscuous mode [ 1422.600363][T14128] veth1_macvtap: entered promiscuous mode [ 1422.908862][T14195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.005172][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.063158][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.073404][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.084989][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.094917][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.105548][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.118650][T14128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.554327][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.601464][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.643698][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.689087][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.738879][T14128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.960340][T14128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.008744][T14128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.075284][T14128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.118351][T14128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.796597][T14417] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1765'. [ 1424.814080][T14128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.882386][T14128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.436573][T14195] veth0_vlan: entered promiscuous mode [ 1425.587681][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.592418][T14195] veth1_vlan: entered promiscuous mode [ 1425.604077][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.773452][T14195] veth0_macvtap: entered promiscuous mode [ 1425.803932][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.815050][T14195] veth1_macvtap: entered promiscuous mode [ 1425.824928][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.893794][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.919317][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.940561][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.959338][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.985283][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.996073][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.012810][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.024266][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.047642][T14195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.412995][T14424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1774'. [ 1426.673532][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.685293][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.700748][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.173600][ T5230] Bluetooth: hci1: command 0x1003 tx timeout [ 1427.184437][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1427.210757][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.222457][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.233131][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.246548][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.257206][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.360405][T14195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1427.392016][T14195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.437089][T14195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.478326][T14195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.488210][T14195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.913379][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.921509][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.672311][ T5496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.723710][ T5496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.123546][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.153875][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.070022][T14462] block device autoloading is deprecated and will be removed. [ 1433.080155][T14462] syz.0.1773: attempt to access beyond end of device [ 1433.080155][T14462] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1433.093165][T14462] FAT-fs (loop1): unable to read boot sector [ 1433.451286][T14466] syz.3.1776[14466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1433.451565][T14466] syz.3.1776[14466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1433.498071][ T29] audit: type=1326 audit(1726900032.614:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14464 comm="syz.3.1776" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f519497def9 code=0x0 [ 1436.502274][ T5230] Bluetooth: hci1: command 0x1003 tx timeout [ 1436.511604][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1437.007500][ T29] audit: type=1326 audit(1726900036.124:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1437.069563][ T29] audit: type=1326 audit(1726900036.124:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1437.126821][ T29] audit: type=1326 audit(1726900036.124:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1437.240513][ T29] audit: type=1326 audit(1726900036.124:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1437.385024][ T29] audit: type=1326 audit(1726900036.124:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1437.443294][ T29] audit: type=1326 audit(1726900036.124:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1437.468830][ T29] audit: type=1326 audit(1726900036.124:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1437.495464][ T29] audit: type=1326 audit(1726900036.124:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1437.525534][ T29] audit: type=1326 audit(1726900036.124:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14480 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0d17def9 code=0x7ffc0000 [ 1440.208570][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1440.208598][ T29] audit: type=1400 audit(1726900039.314:926): avc: denied { execute_no_trans } for pid=14499 comm="syz.3.1787" path="/176/file0" dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1441.141746][T13671] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1442.016012][T13671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.069158][T13671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.098385][T13671] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1442.108096][T13671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.109254][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1442.122359][T13671] usb 2-1: config 0 descriptor?? [ 1442.352519][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.376008][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.401632][ T8] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1442.422283][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.450748][ T8] usb 1-1: config 0 descriptor?? [ 1442.584430][T13671] lg-g15 0003:046D:C222.0022: item fetching failed at offset 10/11 [ 1442.610525][T13671] lg-g15 0003:046D:C222.0022: probe with driver lg-g15 failed with error -22 [ 1442.815323][T14393] usb 2-1: USB disconnect, device number 17 [ 1443.334927][ T8] hid-multitouch 0003:0EEF:72D0.0023: unknown main item tag 0x0 [ 1443.349474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1443.369810][ T8] hid-multitouch 0003:0EEF:72D0.0023: unknown main item tag 0x0 [ 1443.378270][ T8] hid-multitouch 0003:0EEF:72D0.0023: unknown main item tag 0x0 [ 1443.388712][ T8] hid-multitouch 0003:0EEF:72D0.0023: unknown main item tag 0x0 [ 1443.512458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 1443.529153][ T8] hid-multitouch 0003:0EEF:72D0.0023: unknown main item tag 0x0 [ 1443.546324][ T8] hid-multitouch 0003:0EEF:72D0.0023: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.0-1/input0 [ 1443.567156][ T8] usb 1-1: USB disconnect, device number 23 [ 1443.782001][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1443.783790][ T5230] Bluetooth: hci1: command 0x1003 tx timeout [ 1445.625255][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 1445.663136][T14560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1805'. [ 1446.617067][T14553] syz.4.1803: attempt to access beyond end of device [ 1446.617067][T14553] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1446.758511][ T9633] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1446.838324][T14553] FAT-fs (loop9): unable to read boot sector [ 1447.019414][ T9633] usb 1-1: Using ep0 maxpacket: 32 [ 1447.027657][ T9633] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1447.075571][ T9633] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1447.129506][ T9633] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1447.192991][ T9633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1447.239100][ T9633] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1447.279394][ T9633] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1447.323362][ T9633] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1447.349085][ T9633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.388015][ T9633] usb 1-1: config 0 descriptor?? [ 1447.668876][ T9633] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1449.359007][T14393] usb 1-1: USB disconnect, device number 24 [ 1449.434474][T14393] usblp0: removed [ 1451.762022][T14589] syz.2.1809 uses obsolete (PF_INET,SOCK_PACKET) [ 1451.949700][T14542] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1454.849618][ T1172] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1455.871892][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.885540][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.904684][ T1172] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1455.929115][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.965100][ T1172] usb 4-1: config 0 descriptor?? [ 1456.645428][ T1172] hid-steam 0003:28DE:1142.0024: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1456.819463][ T1172] hid-steam 0003:28DE:1142.0024: Steam wireless receiver connected [ 1456.836029][T14389] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1457.430656][T14621] syz.4.1817: attempt to access beyond end of device [ 1457.430656][T14621] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1457.447638][T14621] FAT-fs (loop9): unable to read boot sector [ 1457.557503][ T1172] hid-steam 0003:28DE:1142.0025: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1457.842506][T14389] usb 3-1: Using ep0 maxpacket: 32 [ 1457.881186][T14389] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1457.890299][ T1172] usb 4-1: USB disconnect, device number 11 [ 1457.901741][T14389] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1457.915538][T14389] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1457.941586][T14389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1457.954110][ T1172] hid-steam 0003:28DE:1142.0024: Steam wireless receiver disconnected [ 1457.995176][T14389] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1458.041766][T14389] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1458.090584][T14389] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1458.135127][T14389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.203009][T14389] usb 3-1: config 0 descriptor?? [ 1458.291161][T11627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1458.353872][T11627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1458.363967][T11627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1458.383191][T11627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1458.392281][T11627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1458.401793][T11627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1458.501075][T14389] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1458.578524][T14630] xt_limit: Overflow, try lower: 687865856/40 [ 1460.053625][ T29] audit: type=1326 audit(1726900059.164:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1460.229236][ T29] audit: type=1326 audit(1726900059.174:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1460.316883][ T29] audit: type=1326 audit(1726900059.334:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1460.388899][ T29] audit: type=1326 audit(1726900059.344:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1460.478899][ T29] audit: type=1326 audit(1726900059.354:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1460.510254][T14542] Bluetooth: hci1: command tx timeout [ 1460.579890][T14389] usb 3-1: USB disconnect, device number 20 [ 1460.607745][ T29] audit: type=1326 audit(1726900059.354:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1460.646014][T14389] usblp0: removed [ 1460.775526][ T29] audit: type=1326 audit(1726900059.414:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08d7def9 code=0x7ffc0000 [ 1461.340684][ T5496] Bluetooth: hci5: Frame reassembly failed (-84) [ 1461.896762][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.004310][T14627] chnl_net:caif_netlink_parms(): no params data found [ 1462.121932][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.190840][ T9633] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1462.339967][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.629205][T11627] Bluetooth: hci1: command tx timeout [ 1462.684851][ T9633] usb 3-1: Using ep0 maxpacket: 32 [ 1462.700169][ T9633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1462.711601][ T9633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1462.729195][ T9633] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1462.747235][ T9633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.921408][ T9633] usb 3-1: config 0 descriptor?? [ 1463.071251][T14645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1463.275786][ T9633] hub 3-1:0.0: USB hub found [ 1463.307179][T14542] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1463.534766][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.620206][ T9633] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1463.742841][T14627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.759103][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.780304][T14627] bridge_slave_0: entered allmulticast mode [ 1463.817596][T14627] bridge_slave_0: entered promiscuous mode [ 1464.882476][T14542] Bluetooth: hci1: command tx timeout [ 1465.017352][ T9633] usbhid 3-1:0.0: can't add hid device: -71 [ 1465.193302][ T9633] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1465.277581][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.344661][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.370082][ T9633] usb 3-1: USB disconnect, device number 21 [ 1465.408362][T14627] bridge_slave_1: entered allmulticast mode [ 1465.467910][T14627] bridge_slave_1: entered promiscuous mode [ 1465.682516][ T36] bridge_slave_1: left allmulticast mode [ 1465.698441][ T36] bridge_slave_1: left promiscuous mode [ 1465.717842][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.829496][ T36] bridge_slave_0: left allmulticast mode [ 1465.868515][ T36] bridge_slave_0: left promiscuous mode [ 1465.912009][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.959775][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1466.989322][T14542] Bluetooth: hci1: command tx timeout [ 1467.094768][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.117896][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1467.135844][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1467.180915][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1467.202001][ T8] usb 1-1: SerialNumber: syz [ 1467.625078][ T8] usb 1-1: 0:2 : does not exist [ 1469.206560][ T8] usb 1-1: USB disconnect, device number 25 [ 1469.856740][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.876575][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.894955][ T36] bond0 (unregistering): Released all slaves [ 1470.002171][T14627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.098682][T14627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.099200][T14389] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1470.315260][T14694] tipc: Started in network mode [ 1470.320396][T14694] tipc: Node identity ac1414aa, cluster identity 4711 [ 1470.327671][T14694] tipc: New replicast peer: 100.1.1.1 [ 1470.333907][T14694] tipc: Enabled bearer , priority 10 [ 1471.359586][T14389] usb 5-1: Using ep0 maxpacket: 32 [ 1471.379916][T14389] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1471.388369][T14389] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1471.457053][ T8] tipc: Node number set to 2886997162 [ 1471.468105][T14389] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1471.521357][T14389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1471.561838][T14389] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1471.852940][T12570] Bluetooth: hci5: Frame reassembly failed (-84) [ 1472.377628][T14389] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1472.407825][T14389] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1472.438783][T14389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.463340][T14389] usb 5-1: config 0 descriptor?? [ 1472.466752][T14627] team0: Port device team_slave_0 added [ 1472.575012][T14627] team0: Port device team_slave_1 added [ 1472.724926][T14389] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1472.947332][T14627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.979341][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.080404][T14627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.130829][T14627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.154011][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.252820][T14627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.350895][ T36] hsr_slave_0: left promiscuous mode [ 1473.364310][ T36] hsr_slave_1: left promiscuous mode [ 1473.383672][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.422046][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.471645][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.491149][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.586265][ T36] veth1_macvtap: left promiscuous mode [ 1473.597135][ T36] veth0_macvtap: left promiscuous mode [ 1473.605717][ T36] veth1_vlan: left promiscuous mode [ 1473.619094][ T36] veth0_vlan: left promiscuous mode [ 1473.859794][T11627] Bluetooth: hci5: command 0x1003 tx timeout [ 1473.869515][T14542] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1474.104162][T14389] usb 5-1: USB disconnect, device number 14 [ 1474.140914][T14389] usblp0: removed [ 1474.322596][ T29] audit: type=1326 audit(1726900073.444:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1474.400773][ T29] audit: type=1326 audit(1726900073.444:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1474.498930][ T29] audit: type=1326 audit(1726900073.504:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1474.685354][ T29] audit: type=1326 audit(1726900073.514:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1474.710199][ T29] audit: type=1326 audit(1726900073.514:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1474.951244][ T29] audit: type=1326 audit(1726900073.514:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1475.306763][ T29] audit: type=1326 audit(1726900073.514:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1475.499378][ T29] audit: type=1326 audit(1726900073.514:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1475.659248][ T29] audit: type=1326 audit(1726900073.514:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1475.705002][ T29] audit: type=1326 audit(1726900073.514:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14736 comm="syz.4.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1476.069342][T14389] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1476.299658][T14389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.320768][T14389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.338880][T14389] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1476.360751][T14389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.382360][T14389] usb 1-1: config 0 descriptor?? [ 1476.678070][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1476.772357][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1476.833202][T14389] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 1476.843571][T14389] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 1476.872364][T14389] arvo 0003:1E7D:30D4.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1477.036076][T14389] arvo 0003:1E7D:30D4.0026: couldn't init struct arvo_device [ 1477.044049][T14389] arvo 0003:1E7D:30D4.0026: couldn't install keyboard [ 1477.065430][T14389] arvo 0003:1E7D:30D4.0026: probe with driver arvo failed with error -71 [ 1477.082826][T14389] usb 1-1: USB disconnect, device number 26 [ 1477.864260][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1847'. [ 1479.237796][T14627] hsr_slave_0: entered promiscuous mode [ 1479.274604][T14627] hsr_slave_1: entered promiscuous mode [ 1479.298272][T14627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.327598][T14627] Cannot create hsr debugfs directory [ 1479.700161][ T1061] Bluetooth: hci5: Frame reassembly failed (-84) [ 1479.950551][ T9633] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1480.362663][ T9633] usb 3-1: Using ep0 maxpacket: 32 [ 1480.388672][ T9633] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1480.438117][ T9633] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1480.471845][ T9633] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1480.500645][ T9633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1480.522744][ T9633] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1480.568523][ T9633] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1480.600251][ T9633] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1480.627126][ T9633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.672361][ T9633] usb 3-1: config 0 descriptor?? [ 1480.938960][ T9633] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1481.659316][T14542] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1482.438927][T14393] usb 3-1: USB disconnect, device number 22 [ 1482.451140][T14393] usblp0: removed [ 1485.678048][T14627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1485.696087][T14627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1485.736543][T14627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1485.784889][T14627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1485.879198][ T1172] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1486.102336][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.157889][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.986685][T14627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.020195][ T1172] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1487.040321][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.052310][ T1172] usb 4-1: config 0 descriptor?? [ 1487.283473][T14627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.364206][T11627] Bluetooth: hci4: command 0x0406 tx timeout [ 1487.412267][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.419840][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.234631][ T1172] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 1489.267024][ T1172] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 1489.323835][ T1172] arvo 0003:1E7D:30D4.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1489.329831][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.342350][ T5496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.407553][ T1172] arvo 0003:1E7D:30D4.0027: couldn't init struct arvo_device [ 1489.432212][ T1172] arvo 0003:1E7D:30D4.0027: couldn't install keyboard [ 1489.478484][ T1172] arvo 0003:1E7D:30D4.0027: probe with driver arvo failed with error -71 [ 1489.542805][ T1172] usb 4-1: USB disconnect, device number 12 [ 1490.291461][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.357618][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.509766][T11627] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1491.319237][ T1172] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1491.552810][ T1172] usb 4-1: Using ep0 maxpacket: 32 [ 1491.578750][ T1172] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1491.650012][ T1172] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1491.699908][ T1172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1491.775725][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1491.796580][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1492.269302][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1492.283410][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1492.293387][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1492.302359][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1492.602520][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1492.629478][ T1172] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1492.645626][ T1172] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1492.658942][ T1172] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1492.671420][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.685140][ T1172] usb 4-1: config 0 descriptor?? [ 1492.950460][ T1172] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1494.286710][ T5276] usb 4-1: USB disconnect, device number 13 [ 1494.336983][ T5276] usblp0: removed [ 1494.349170][ T54] Bluetooth: hci3: command tx timeout [ 1496.471383][ T54] Bluetooth: hci3: command tx timeout [ 1497.866497][ T1061] Bluetooth: hci5: Frame reassembly failed (-84) [ 1498.502097][T11627] Bluetooth: hci3: command tx timeout [ 1499.863979][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1499.871431][T11627] Bluetooth: hci5: command 0x1003 tx timeout [ 1500.147751][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1500.147772][ T29] audit: type=1326 audit(1726900099.264:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.178960][ T29] audit: type=1326 audit(1726900099.284:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.209288][ T29] audit: type=1326 audit(1726900099.284:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.238486][ T29] audit: type=1326 audit(1726900099.284:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.270212][ T29] audit: type=1326 audit(1726900099.284:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.296904][ T29] audit: type=1326 audit(1726900099.284:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.336160][ T29] audit: type=1326 audit(1726900099.284:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.367102][ T29] audit: type=1326 audit(1726900099.284:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.395710][ T29] audit: type=1326 audit(1726900099.284:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.419603][ T29] audit: type=1326 audit(1726900099.284:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c5f7def9 code=0x7ffc0000 [ 1500.590191][ T54] Bluetooth: hci3: command tx timeout [ 1501.403243][T14910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.411508][T14910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.771773][ T5513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.898676][T14627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.921669][ T5276] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1502.040720][ T5513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.133956][ T5276] usb 4-1: Using ep0 maxpacket: 32 [ 1502.187495][ T5276] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1502.219069][ T5276] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1502.227768][ T5276] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1502.252620][ T5513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.275635][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1502.309893][ T5276] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1502.336674][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1502.352270][ T5276] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1502.414391][T11627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1502.427421][T11627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1502.436801][T11627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1502.451157][T11627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1502.463714][T11627] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1502.471643][T11627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1502.636621][ T5513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.730785][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.755466][ T5276] usb 4-1: config 0 descriptor?? [ 1503.361695][ T5276] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1503.907439][T14627] veth0_vlan: entered promiscuous mode [ 1504.558808][T11627] Bluetooth: hci2: command tx timeout [ 1504.749675][ T1172] usb 4-1: USB disconnect, device number 14 [ 1504.809624][ T1172] usblp0: removed [ 1505.609576][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1505.609636][ T29] audit: type=1400 audit(1726900104.624:964): avc: denied { getopt } for pid=14979 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1505.967816][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.007721][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.048030][ T5513] bond0 (unregistering): Released all slaves [ 1506.145781][T14627] veth1_vlan: entered promiscuous mode [ 1506.654126][T11627] Bluetooth: hci2: command tx timeout [ 1508.519473][T14871] chnl_net:caif_netlink_parms(): no params data found [ 1508.747758][ T54] Bluetooth: hci2: command tx timeout [ 1508.922716][T14627] veth0_macvtap: entered promiscuous mode [ 1508.993265][T11627] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1509.599617][T14627] veth1_macvtap: entered promiscuous mode [ 1510.467349][T14965] chnl_net:caif_netlink_parms(): no params data found [ 1510.559519][T14871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.566856][T14871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.609248][T14871] bridge_slave_0: entered allmulticast mode [ 1510.622328][T14871] bridge_slave_0: entered promiscuous mode [ 1510.868134][T11627] Bluetooth: hci2: command tx timeout [ 1510.940074][T14871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.781731][T14871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.855530][T14871] bridge_slave_1: entered allmulticast mode [ 1511.889529][T14871] bridge_slave_1: entered promiscuous mode [ 1512.278921][T14871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.658947][ T5513] hsr_slave_0: left promiscuous mode [ 1512.665988][ T5513] hsr_slave_1: left promiscuous mode [ 1512.690186][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.716658][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.749579][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.775383][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.886245][ T5513] veth1_macvtap: left promiscuous mode [ 1512.906104][ T5513] veth0_macvtap: left promiscuous mode [ 1512.919886][ T5513] veth1_vlan: left promiscuous mode [ 1514.639978][ T29] audit: type=1326 audit(1726900113.764:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1514.669165][ T29] audit: type=1326 audit(1726900113.764:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1514.704364][ T29] audit: type=1326 audit(1726900113.764:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1514.779686][ T29] audit: type=1326 audit(1726900113.884:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz.3.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1514.813993][ T29] audit: type=1326 audit(1726900113.894:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15039 comm="syz.3.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51949affe5 code=0x7ffc0000 [ 1514.936434][ T29] audit: type=1326 audit(1726900114.054:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15039 comm="syz.3.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f519497def9 code=0x7ffc0000 [ 1515.176270][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1515.325850][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1515.766357][ T5276] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1515.959246][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 1515.971824][ T5276] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1516.008334][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.017910][ T5276] usb 5-1: Product: syz [ 1516.023036][ T5276] usb 5-1: Manufacturer: syz [ 1516.027841][ T5276] usb 5-1: SerialNumber: syz [ 1516.063307][ T5276] usb 5-1: config 0 descriptor?? [ 1516.075287][ T5276] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1516.107663][ T5276] usb 5-1: Detected FT232H [ 1516.285379][ T5276] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1516.402894][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1516.414749][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1516.459817][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1516.484785][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1516.499785][ T5276] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1516.524863][ T5276] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1516.524934][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1516.550223][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1516.606963][ T5276] usb 5-1: USB disconnect, device number 15 [ 1516.646885][ T5276] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1516.666708][ T5276] ftdi_sio 5-1:0.0: device disconnected [ 1516.791979][T14871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.712801][T14871] team0: Port device team_slave_0 added [ 1518.323072][T14871] team0: Port device team_slave_1 added [ 1518.709486][ T54] Bluetooth: hci5: command tx timeout [ 1518.748679][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.772890][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.813246][T14965] bridge_slave_0: entered allmulticast mode [ 1518.919474][T14965] bridge_slave_0: entered promiscuous mode [ 1519.328375][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.359412][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.366864][T14965] bridge_slave_1: entered allmulticast mode [ 1519.436390][T14965] bridge_slave_1: entered promiscuous mode [ 1519.596632][T15082] syz.4.1902: attempt to access beyond end of device [ 1519.596632][T15082] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1519.610475][T15082] FAT-fs (loop9): unable to read boot sector [ 1520.120331][T14871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1520.168254][T14871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.289147][T14871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1520.463136][T14965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.481236][T14871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.510384][T14871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.574199][T14871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.645663][T14965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1520.739191][ T54] Bluetooth: hci5: command tx timeout [ 1520.993801][T14965] team0: Port device team_slave_0 added [ 1521.038819][T14965] team0: Port device team_slave_1 added [ 1521.170502][T14871] hsr_slave_0: entered promiscuous mode [ 1521.181559][T14871] hsr_slave_1: entered promiscuous mode [ 1521.198766][T14871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1521.206712][T14871] Cannot create hsr debugfs directory [ 1521.420666][T14965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.434121][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.477572][T14965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.493930][T14965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.501744][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.541139][T14965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.825666][ T54] Bluetooth: hci5: command tx timeout [ 1523.461448][T14965] hsr_slave_0: entered promiscuous mode [ 1523.530402][T14965] hsr_slave_1: entered promiscuous mode [ 1523.537919][T14965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1523.569918][T14965] Cannot create hsr debugfs directory [ 1523.850422][ T29] audit: type=1400 audit(1726900122.974:971): avc: denied { create } for pid=15109 comm="syz.4.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1524.045739][T15053] chnl_net:caif_netlink_parms(): no params data found [ 1524.770709][T15119] sch_tbf: peakrate 9 is lower than or equals to rate 9 ! [ 1524.911378][ T54] Bluetooth: hci5: command tx timeout [ 1525.635163][T15053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.679674][T15053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.687065][T15053] bridge_slave_0: entered allmulticast mode [ 1525.711952][T15053] bridge_slave_0: entered promiscuous mode [ 1526.061683][T15053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.163466][T15053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.185861][T15053] bridge_slave_1: entered allmulticast mode [ 1526.212441][T15053] bridge_slave_1: entered promiscuous mode [ 1526.409972][ T5513] bridge_slave_1: left allmulticast mode [ 1526.415713][ T5513] bridge_slave_1: left promiscuous mode [ 1526.432588][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.577823][ T5513] bridge_slave_0: left allmulticast mode [ 1526.600996][ T5513] bridge_slave_0: left promiscuous mode [ 1526.759666][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.781922][T15147] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1528.935732][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.951994][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.965259][ T5513] bond0 (unregistering): Released all slaves [ 1529.378764][ T5513] hsr_slave_0: left promiscuous mode [ 1529.402025][ T5513] hsr_slave_1: left promiscuous mode [ 1529.433281][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.460584][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.531211][ T5513] veth1_macvtap: left promiscuous mode [ 1529.538002][ T5513] veth0_macvtap: left promiscuous mode [ 1529.559400][ T5513] veth1_vlan: left promiscuous mode [ 1529.569772][ T5513] veth0_vlan: left promiscuous mode [ 1531.728637][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1532.459536][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1534.334784][T15053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.547243][T15180] tipc: Started in network mode [ 1534.555982][T15180] tipc: Node identity 00000000000000000000000000002d01, cluster identity 4711 [ 1534.587417][T15180] tipc: Enabling of bearer rejected, failed to enable media [ 1534.633957][T15053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.926045][T15053] team0: Port device team_slave_0 added [ 1535.036185][T15053] team0: Port device team_slave_1 added [ 1535.278794][T14965] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.364489][T15053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.384665][T15053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.463797][T15053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.525616][T15053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.547954][T15053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.628288][T15053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.756621][T14965] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.103472][T14965] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.146205][T15053] hsr_slave_0: entered promiscuous mode [ 1536.164503][T15053] hsr_slave_1: entered promiscuous mode [ 1536.183742][T15053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1536.215239][T15053] Cannot create hsr debugfs directory [ 1536.358747][T14965] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.795452][T15211] syz.3.1924: attempt to access beyond end of device [ 1536.795452][T15211] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1536.809253][T15211] FAT-fs (loop7): unable to read boot sector [ 1537.857138][T14965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1537.920418][T14965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1537.969608][T14965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1538.043121][T14965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1538.402233][T14871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1538.469819][T14871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1538.504046][T14871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1538.798960][T14871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1539.437369][T14965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.589748][T14965] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.786375][ T5513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.793672][ T5513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.942857][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.950220][ T5496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.984419][T15053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1540.000283][T15053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1540.027831][T15053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1540.104465][T15053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1540.174520][T14871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.258967][T14871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.381676][T14965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1540.438831][T14965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1540.885949][ T5521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.893408][ T5521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.196757][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.204120][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.930140][ T1172] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1542.104052][T15053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.143471][ T1172] usb 4-1: Using ep0 maxpacket: 32 [ 1542.159252][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.194113][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.241041][ T1172] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1542.274289][T14965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.279186][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.340346][ T1172] usb 4-1: config 0 descriptor?? [ 1542.397230][T15053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.461712][ T5513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.469852][ T5513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.592237][ T5513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.599673][ T5513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.808921][ T1172] hkems 0003:2006:0118.0028: unbalanced delimiter at end of report description [ 1542.834277][ T1172] hkems 0003:2006:0118.0028: parse failed [ 1542.865916][T14965] veth0_vlan: entered promiscuous mode [ 1542.873297][ T1172] hkems 0003:2006:0118.0028: probe with driver hkems failed with error -22 [ 1542.908495][T14965] veth1_vlan: entered promiscuous mode [ 1543.026599][T14871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.055321][T13671] usb 4-1: USB disconnect, device number 15 [ 1543.208769][T14965] veth0_macvtap: entered promiscuous mode [ 1543.253702][T14965] veth1_macvtap: entered promiscuous mode [ 1543.416885][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.436897][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.450293][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.466561][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.479426][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1543.490637][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.503812][T14965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1543.545999][T14871] veth0_vlan: entered promiscuous mode [ 1543.574870][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1543.594231][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.605001][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1543.616917][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.628180][T14965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1543.653168][T14965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1543.676185][T14965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1543.739335][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1543.755380][T14965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.768803][T14965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.781724][T14965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.794979][T14965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.814754][T14871] veth1_vlan: entered promiscuous mode [ 1543.976113][T14871] veth0_macvtap: entered promiscuous mode [ 1544.008549][T14871] veth1_macvtap: entered promiscuous mode [ 1544.146821][T15053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.263752][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1544.283366][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1544.294218][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1544.405700][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1544.433329][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.551607][ T8] usb 5-1: Product: syz [ 1544.671260][ T8] usb 5-1: Manufacturer: syz [ 1544.765711][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.797989][ T8] usb 5-1: SerialNumber: syz [ 1544.859151][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.909955][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.949609][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.994616][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.035022][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.085836][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.145438][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.158675][T14871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.172854][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.183720][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.193896][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.205764][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.215810][ T8] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1545.215952][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.254398][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.273055][T14871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.287339][T14871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.327249][T14871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.429357][T14871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.448820][T14871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.458606][T14871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.499096][T14871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.545924][ T8] usb 5-1: USB disconnect, device number 16 [ 1545.584088][ T8] usblp0: removed [ 1545.691802][ T5513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.757849][ T5513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.578339][ T5505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.661880][ T5505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.948127][T15053] veth0_vlan: entered promiscuous mode [ 1548.349249][ T5521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.357145][ T5521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.492700][T15053] veth1_vlan: entered promiscuous mode [ 1548.653109][ T5513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.679580][ T5513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.555402][T15053] veth0_macvtap: entered promiscuous mode [ 1549.664421][T15053] veth1_macvtap: entered promiscuous mode [ 1549.993477][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.065613][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.100380][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.139048][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.169547][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.210338][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.229198][ T1172] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1550.241473][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.269106][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.303238][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.334748][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.368235][T15053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1550.455930][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1550.472105][ T1172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.519269][ T1172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.545865][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.596876][ T1172] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1550.614789][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1550.659382][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.698515][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.754132][ T1172] usb 5-1: config 0 descriptor?? [ 1550.769044][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.000266][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.257548][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.321140][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.399148][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.479261][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.729430][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.735875][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.770749][T15053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.917067][T15053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.065404][T15053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.391904][T15053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.439255][T15053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.891973][ T1172] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 1553.021935][T15351] syz.3.1943: attempt to access beyond end of device [ 1553.021935][T15351] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1553.034960][T15351] FAT-fs (loop7): unable to read boot sector [ 1553.481260][T15352] netlink: 'syz.2.1944': attribute type 4 has an invalid length. [ 1553.756142][ T1172] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 1553.829973][ T1172] arvo 0003:1E7D:30D4.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 1553.960334][ T1172] arvo 0003:1E7D:30D4.0029: couldn't init struct arvo_device [ 1554.050815][ T1172] arvo 0003:1E7D:30D4.0029: couldn't install keyboard [ 1554.065310][T11627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1554.078419][T11627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1554.088660][T11627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1554.130005][ T1172] arvo 0003:1E7D:30D4.0029: probe with driver arvo failed with error -71 [ 1554.341151][T11627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1554.350324][T11627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1554.360608][T11627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1554.569667][ T1172] usb 5-1: USB disconnect, device number 17 [ 1555.428052][T15372] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 1555.997431][ T29] audit: type=1400 audit(1726900154.544:972): avc: denied { relabelfrom } for pid=15363 comm="syz.4.1946" name="NETLINK" dev="sockfs" ino=59229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1556.137026][ T29] audit: type=1400 audit(1726900154.564:973): avc: denied { relabelto } for pid=15363 comm="syz.4.1946" name="NETLINK" dev="sockfs" ino=59229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:mqueue_spool_t:s0" [ 1556.148182][ T5505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.260432][ T5505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.110623][T11627] Bluetooth: hci1: command tx timeout [ 1557.554826][T12570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.281618][T12570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.451073][ T5513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.519390][ T5513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.588600][T12570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.679152][T11627] Bluetooth: hci1: command tx timeout [ 1559.827645][T12570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.346820][T12570] bridge_slave_1: left allmulticast mode [ 1561.395681][T12570] bridge_slave_1: left promiscuous mode [ 1561.433798][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.502634][T12570] bridge_slave_0: left allmulticast mode [ 1561.541522][T12570] bridge_slave_0: left promiscuous mode [ 1561.580058][T12570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.090685][T11627] Bluetooth: hci1: command tx timeout [ 1562.958189][T15431] syz.1.1954: attempt to access beyond end of device [ 1562.958189][T15431] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1562.971424][T15431] FAT-fs (loop3): unable to read boot sector [ 1564.192825][T11627] Bluetooth: hci1: command tx timeout [ 1567.508334][T12570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.976762][T12570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.031857][T12570] bond0 (unregistering): Released all slaves [ 1568.408548][T15355] chnl_net:caif_netlink_parms(): no params data found [ 1568.601067][T15467] syz.1.1965[15467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1568.601332][T15467] syz.1.1965[15467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1568.778653][T15460] ------------[ cut here ]------------ [ 1568.797667][T15460] WARNING: CPU: 1 PID: 15460 at include/linux/rwsem.h:195 follow_pte+0x414/0x4c0 [ 1568.807320][T15460] Modules linked in: [ 1568.812095][T15460] CPU: 1 UID: 0 PID: 15460 Comm: syz.2.1964 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1568.822872][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1568.833650][T15460] RIP: 0010:follow_pte+0x414/0x4c0 [ 1568.839417][T15460] Code: bf 98 01 00 00 be ff ff ff ff e8 37 02 46 09 31 ff 41 89 c4 89 c6 e8 9b d2 b9 ff 45 85 e4 0f 85 80 fc ff ff e8 4d d0 b9 ff 90 <0f> 0b 90 e9 72 fc ff ff e8 3f d0 b9 ff 90 0f 0b 48 c7 c7 98 cc 1d [ 1568.860525][T15460] RSP: 0018:ffffc9000397f4d8 EFLAGS: 00010287 [ 1568.866667][T15460] RAX: 0000000000016ae1 RBX: 00007f7901c67000 RCX: ffffc90011e53000 [ 1568.875911][T15460] RDX: 0000000000040000 RSI: ffffffff81d20893 RDI: 0000000000000005 [ 1568.884002][T15460] RBP: ffff888033d9e9b0 R08: 0000000000000005 R09: 0000000000000000 [ 1568.892106][T15460] R10: 0000000000000000 R11: 00000000000001bd R12: 0000000000000000 [ 1568.900226][T15460] R13: ffffc9000397f538 R14: ffffc9000397f558 R15: ffff88807acf7200 [ 1568.908262][T15460] FS: 00007f92c58a96c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1568.917330][T15460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1568.924100][T15460] CR2: 0000000000000000 CR3: 00000000428f0000 CR4: 00000000003506f0 [ 1568.932209][T15460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1568.940372][T15460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1568.948499][T15460] Call Trace: [ 1568.951912][T15460] [ 1568.954889][T15460] ? show_regs+0x8c/0xa0 [ 1568.960545][T15460] ? __warn+0xe5/0x3c0 [ 1568.964696][T15460] ? follow_pte+0x414/0x4c0 [ 1568.970230][T15460] ? report_bug+0x3c0/0x580 [ 1568.974808][T15460] ? handle_bug+0x3d/0x70 [ 1568.980453][T15460] ? exc_invalid_op+0x17/0x50 [ 1568.985225][T15460] ? asm_exc_invalid_op+0x1a/0x20 [ 1568.990694][T15460] ? follow_pte+0x413/0x4c0 [ 1568.995287][T15460] ? follow_pte+0x414/0x4c0 [ 1568.999926][T15460] ? follow_pte+0x413/0x4c0 [ 1569.004564][T15460] get_pat_info+0xf2/0x510 [ 1569.009072][T15460] ? __pfx_get_pat_info+0x10/0x10 [ 1569.014198][T15460] untrack_pfn+0xf7/0x4d0 [ 1569.018598][T15460] ? __pfx_untrack_pfn+0x10/0x10 [ 1569.023720][T15460] ? zap_page_range_single+0x307/0x560 [ 1569.029382][T15460] ? __pfx_lock_release+0x10/0x10 [ 1569.034487][T15460] ? uprobe_munmap+0x20/0x5c0 [ 1569.039276][T15460] unmap_single_vma+0x1bd/0x2b0 [ 1569.044218][T15460] zap_page_range_single+0x326/0x560 [ 1569.049649][T15460] ? __pfx_zap_page_range_single+0x10/0x10 [ 1569.055541][T15460] ? __pfx___might_resched+0x10/0x10 [ 1569.063449][T15460] ? vma_interval_tree_subtree_search+0x14d/0x1b0 [ 1569.070968][T15460] unmap_mapping_range+0x1ee/0x280 [ 1569.076191][T15460] ? selinux_inode_setattr+0x246/0x400 [ 1569.081778][T15460] ? __pfx_unmap_mapping_range+0x10/0x10 [ 1569.087484][T15460] ? __pfx_selinux_inode_setattr+0x10/0x10 [ 1569.093452][T15460] ? inode_newsize_ok+0x13b/0x200 [ 1569.098557][T15460] truncate_pagecache+0x53/0x90 [ 1569.103539][T15460] simple_setattr+0xf2/0x120 [ 1569.108210][T15460] notify_change+0xf41/0x1230 [ 1569.113017][T15460] do_truncate+0x15c/0x220 [ 1569.117583][T15460] ? __pfx_do_truncate+0x10/0x10 [ 1569.122702][T15460] path_openat+0x2745/0x2d60 [ 1569.127428][T15460] ? __pfx_path_openat+0x10/0x10 [ 1569.132492][T15460] ? __pfx___lock_acquire+0x10/0x10 [ 1569.137877][T15460] do_filp_open+0x1dc/0x430 [ 1569.142814][T15460] ? __pfx_do_filp_open+0x10/0x10 [ 1569.148030][T15460] ? _raw_spin_unlock+0x3e/0x50 [ 1569.153041][T15460] ? alloc_fd+0x2d7/0x6c0 [ 1569.157461][T15460] do_sys_openat2+0x17a/0x1e0 [ 1569.163461][T15460] ? __pfx_do_sys_openat2+0x10/0x10 [ 1569.169834][T15460] ? __pfx___schedule+0x10/0x10 [ 1569.174998][T15460] __x64_sys_openat+0x175/0x210 [ 1569.180826][T15460] ? __pfx___x64_sys_openat+0x10/0x10 [ 1569.186425][T15460] do_syscall_64+0xcd/0x250 [ 1569.191062][T15460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.197163][T15460] RIP: 0033:0x7f92c4b7def9 [ 1569.201717][T15460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1569.221642][T15460] RSP: 002b:00007f92c58a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1569.230208][T15460] RAX: ffffffffffffffda RBX: 00007f92c4d36058 RCX: 00007f92c4b7def9 [ 1569.238246][T15460] RDX: 0000000000003f00 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 1569.246347][T15460] RBP: 00007f92c4bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1569.254577][T15460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.262679][T15460] R13: 0000000000000000 R14: 00007f92c4d36058 R15: 00007ffe7046c7c8 [ 1569.272149][T15460] [ 1569.275238][T15460] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1569.282566][T15460] CPU: 1 UID: 0 PID: 15460 Comm: syz.2.1964 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1569.293130][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1569.303220][T15460] Call Trace: [ 1569.306519][T15460] [ 1569.309470][T15460] dump_stack_lvl+0x3d/0x1f0 [ 1569.314099][T15460] panic+0x6dc/0x7c0 [ 1569.318044][T15460] ? __pfx_panic+0x10/0x10 [ 1569.322510][T15460] ? show_trace_log_lvl+0x363/0x500 [ 1569.327805][T15460] ? follow_pte+0x414/0x4c0 [ 1569.332368][T15460] check_panic_on_warn+0xab/0xb0 [ 1569.337349][T15460] __warn+0xf1/0x3c0 [ 1569.341290][T15460] ? follow_pte+0x414/0x4c0 [ 1569.345836][T15460] report_bug+0x3c0/0x580 [ 1569.350224][T15460] handle_bug+0x3d/0x70 [ 1569.354421][T15460] exc_invalid_op+0x17/0x50 [ 1569.358985][T15460] asm_exc_invalid_op+0x1a/0x20 [ 1569.364065][T15460] RIP: 0010:follow_pte+0x414/0x4c0 [ 1569.369229][T15460] Code: bf 98 01 00 00 be ff ff ff ff e8 37 02 46 09 31 ff 41 89 c4 89 c6 e8 9b d2 b9 ff 45 85 e4 0f 85 80 fc ff ff e8 4d d0 b9 ff 90 <0f> 0b 90 e9 72 fc ff ff e8 3f d0 b9 ff 90 0f 0b 48 c7 c7 98 cc 1d [ 1569.388984][T15460] RSP: 0018:ffffc9000397f4d8 EFLAGS: 00010287 [ 1569.395109][T15460] RAX: 0000000000016ae1 RBX: 00007f7901c67000 RCX: ffffc90011e53000 [ 1569.403210][T15460] RDX: 0000000000040000 RSI: ffffffff81d20893 RDI: 0000000000000005 [ 1569.411214][T15460] RBP: ffff888033d9e9b0 R08: 0000000000000005 R09: 0000000000000000 [ 1569.419229][T15460] R10: 0000000000000000 R11: 00000000000001bd R12: 0000000000000000 [ 1569.427312][T15460] R13: ffffc9000397f538 R14: ffffc9000397f558 R15: ffff88807acf7200 [ 1569.435431][T15460] ? follow_pte+0x413/0x4c0 [ 1569.440632][T15460] ? follow_pte+0x413/0x4c0 [ 1569.445182][T15460] get_pat_info+0xf2/0x510 [ 1569.449637][T15460] ? __pfx_get_pat_info+0x10/0x10 [ 1569.454795][T15460] untrack_pfn+0xf7/0x4d0 [ 1569.459164][T15460] ? __pfx_untrack_pfn+0x10/0x10 [ 1569.464143][T15460] ? zap_page_range_single+0x307/0x560 [ 1569.469660][T15460] ? __pfx_lock_release+0x10/0x10 [ 1569.474750][T15460] ? uprobe_munmap+0x20/0x5c0 [ 1569.479481][T15460] unmap_single_vma+0x1bd/0x2b0 [ 1569.484405][T15460] zap_page_range_single+0x326/0x560 [ 1569.489763][T15460] ? __pfx_zap_page_range_single+0x10/0x10 [ 1569.495655][T15460] ? __pfx___might_resched+0x10/0x10 [ 1569.500999][T15460] ? vma_interval_tree_subtree_search+0x14d/0x1b0 [ 1569.507477][T15460] unmap_mapping_range+0x1ee/0x280 [ 1569.512632][T15460] ? selinux_inode_setattr+0x246/0x400 [ 1569.518122][T15460] ? __pfx_unmap_mapping_range+0x10/0x10 [ 1569.523799][T15460] ? __pfx_selinux_inode_setattr+0x10/0x10 [ 1569.529636][T15460] ? inode_newsize_ok+0x13b/0x200 [ 1569.534758][T15460] truncate_pagecache+0x53/0x90 [ 1569.539659][T15460] simple_setattr+0xf2/0x120 [ 1569.544297][T15460] notify_change+0xf41/0x1230 [ 1569.549039][T15460] do_truncate+0x15c/0x220 [ 1569.553493][T15460] ? __pfx_do_truncate+0x10/0x10 [ 1569.558489][T15460] path_openat+0x2745/0x2d60 [ 1569.563135][T15460] ? __pfx_path_openat+0x10/0x10 [ 1569.568118][T15460] ? __pfx___lock_acquire+0x10/0x10 [ 1569.573386][T15460] do_filp_open+0x1dc/0x430 [ 1569.577944][T15460] ? __pfx_do_filp_open+0x10/0x10 [ 1569.583147][T15460] ? _raw_spin_unlock+0x3e/0x50 [ 1569.588067][T15460] ? alloc_fd+0x2d7/0x6c0 [ 1569.592442][T15460] do_sys_openat2+0x17a/0x1e0 [ 1569.597179][T15460] ? __pfx_do_sys_openat2+0x10/0x10 [ 1569.602439][T15460] ? __pfx___schedule+0x10/0x10 [ 1569.607345][T15460] __x64_sys_openat+0x175/0x210 [ 1569.612244][T15460] ? __pfx___x64_sys_openat+0x10/0x10 [ 1569.617689][T15460] do_syscall_64+0xcd/0x250 [ 1569.622236][T15460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.628182][T15460] RIP: 0033:0x7f92c4b7def9 [ 1569.632628][T15460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1569.652291][T15460] RSP: 002b:00007f92c58a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1569.660739][T15460] RAX: ffffffffffffffda RBX: 00007f92c4d36058 RCX: 00007f92c4b7def9 [ 1569.668754][T15460] RDX: 0000000000003f00 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 1569.676756][T15460] RBP: 00007f92c4bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1569.684764][T15460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.692853][T15460] R13: 0000000000000000 R14: 00007f92c4d36058 R15: 00007ffe7046c7c8 [ 1569.701066][T15460] [ 1569.704358][T15460] Kernel Offset: disabled [ 1569.709323][T15460] Rebooting in 86400 seconds..