last executing test programs: 2m37.821657211s ago: executing program 2 (id=1032): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0500580c"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x24fa, &(0x7f00000007c0)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setresgid(0xee01, 0x0, 0xee01) setresgid(0x0, 0xee00, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0xa08) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a00000200ed002abd700000000000e49758783cf206e9cf5a6023622c160a8327c18bae643000ce23fddc65c26e1df001c7638975545065225af7ee19334f50fa4187dc1171a29e20ee5aa5e122e1c474c91689324a1b9e7a62183db307a797f324134bdb7d032911d556f456e2664e79633ebfcedf982415"], 0x10}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) clock_getres(0x3, &(0x7f0000000640)) 2m36.210224559s ago: executing program 2 (id=1036): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000c00)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [], [], [0x8000000000000000]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000002310000e5ff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x264e33, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYRES32], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x38, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000f7ff0000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='inode_switch_wbs\x00', r10}, 0x18) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r11) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 2m34.286597491s ago: executing program 2 (id=1039): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0xf2e, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002a000107000000000000000006000000ab7d"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000640)={0x40, 0xf, 0x1, 'R'}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000300)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) ptrace$peek(0x3, r2, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 2m31.091233109s ago: executing program 2 (id=1049): syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x29, 0xb5, 0xea, 0x20, 0xd81, 0x1900, 0xb9a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xd7, 0x74}}]}}]}}, 0x0) syz_open_dev$vim2m(&(0x7f00000006c0), 0x0, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x4f5a, &(0x7f00000002c0), &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0xa00, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r5, &(0x7f00000005c0)=""/102384, 0x18ff0) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m26.528181136s ago: executing program 2 (id=1060): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f000022d000/0x3000)=nil, &(0x7f0000508000/0x4000)=nil, 0x3000}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2, 0x3, {0x0, 0x1, 0x1}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}}, 0x18) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_access(r6, &(0x7f0000000300)={'system_u:object_r:newrole_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x4}, 0x50) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) listen(r8, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x2010, r5, 0x4e33b000) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x8a, &(0x7f0000000180), 0x4) open(0x0, 0x141042, 0x0) socket$packet(0x11, 0x3, 0x300) 2m24.599241366s ago: executing program 2 (id=1064): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000780)={0x7}, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x94081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f0000000200007c7d99", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r4}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002240)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x61, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2a, 0x10, &(0x7f00000002c0)={0x6, 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r6, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3100000000080041007278650014003300626f6e64300000000000000000000000cde17033047cdc42fce27d8bfa37d38c93c8f6d44e9303545ea48beb88eb59382a7c028a79d9b298eaf7775de138a80c7cd86a09ae5f60cd5bf21578b2394151b2e09a6f088b980f89ef03f2e7d12d817be9da287ec26c957f56a689947535048dd4a52c8b317e88b38039ddf95c4db03ee21738f7d6ff8e909b2a8065ea0fded7fd73c9faf452b8cae28d416fa52b9bc96e4234054fd38263e60404b528e28cd7d6e1b40c11448d42233c8d"], 0x38}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000003c0)=@x86={0xa, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m52.094949435s ago: executing program 1 (id=1138): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x70, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x2}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r2, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 1m51.051549337s ago: executing program 1 (id=1139): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@updsa={0x1ec, 0x1a, 0x1, 0x70bd2c, 0x25dfdbff, {{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e20, 0x0, 0x4e22, 0x3, 0xa, 0x30, 0x80, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, {0x7, 0xfe43, 0x1, 0x6, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffc, 0x4}, {0x200, 0x8, 0x1, 0x400000000b}, {0x100, 0x6, 0x4}, 0x70ad27, 0x20000, 0xa, 0x2, 0x3, 0x28}, [@algo_auth={0x48, 0x1, {{'cryptd(sha384-arm64)\x00'}}}, @algo_comp={0xa2, 0x3, {{'deflate\x00'}, 0x2d0, "522ded84a06bbb327a84671643e52e92427fe0eb35ddd1a0edf63b9a217cc0c094ef2b035aee2d0824f4c5cda4b8b6bda4dd2b3cd1f911a33be7012d7342780d2d4b6f2246a7da0dd813c1fefe43294df5ccb38c2c0b961d3321"}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd28, 0xfffffff9}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4008010}, 0x4008007) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x15) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT], &(0x7f0000000440)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404818, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, &(0x7f00000004c0)={0x0, 0x2, 0xc, 0x3d}) r8 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230318000aff6000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550d, &(0x7f0000001440)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000380)='./bus\x00') 1m45.243704426s ago: executing program 1 (id=1147): syz_open_dev$vim2m(&(0x7f0000000040), 0x1ff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000480)=0x805, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/142, 0x8e}, {&(0x7f0000000400)=""/110, 0xffffffffffffffec}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f00000005c0)=""/189, 0xbd}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/29, 0x1d}], 0x8}, 0xf1b9}], 0x1, 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000240)='wchan\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r5, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) lchown(&(0x7f0000000100)='./file0\x00', 0x0, r7) r8 = syz_open_dev$audion(&(0x7f0000000080), 0x68da, 0x80100) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x2, @vifc_lcl_ifindex, @loopback}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 1m43.766737735s ago: executing program 1 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000a002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 1m42.122158815s ago: executing program 1 (id=1153): mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x802000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000340)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket(0x40000000015, 0x5, 0x0) unshare(0x20000400) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102383, 0x18fef}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = fsopen(&(0x7f0000000480)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000013000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) 1m40.291056439s ago: executing program 1 (id=1156): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102374, 0x18fe6}], 0x1, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000000000df0000", @ANYRES16=r1, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="5a5314fa85b9b580edf679bb", @ANYRES32=r0, @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, 0x0, 0x0) unshare(0x6a040000) socket$inet6(0xa, 0x80001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x72000c80) mmap(&(0x7f000035b000/0x1000)=nil, 0x1000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r6 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xfffffffc}, &(0x7f0000ff0000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 1m4.398705435s ago: executing program 0 (id=1204): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@delchain={0x4c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x83}]}, 0x4c}, 0x1, 0x0, 0x0, 0x841}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) chdir(&(0x7f0000002340)='./bus\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x141142, 0x0) ftruncate(r5, 0x2007ffb) open(&(0x7f0000000400)='./bus\x00', 0x500, 0x0) socket(0x15, 0x80000, 0x0) 1m3.13204892s ago: executing program 0 (id=1206): r0 = getpid() r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0xd) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000040)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') r4 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0x0, 0x3) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000007000000060000000300000022000000", @ANYRES32=r4, @ANYBLOB="0400000000000000000000000000009e07000000f1d3fda9c96ea9bf7a0cb191b26b42e90fc0278d481d41053297d373c87308ca42e324", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x48) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1, 0xffff0b76, 0x59, 0x800, 0x5, 0x2, 0x8}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) sendfile(r10, r10, 0x0, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000) 56.907747544s ago: executing program 0 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xfea7) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000300)=""/75) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002580)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) 55.475556734s ago: executing program 0 (id=1211): r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$join(0x1, 0xfffffffffffffffd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f0000000180)={0x18, 0xffffffffffffffda, r3, {0x7}}, 0x18) fchdir(r2) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDCTL_SEQ_CTRLRATE(r5, 0xc0045103, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 54.047704838s ago: executing program 0 (id=1214): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x40, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x80) write$binfmt_aout(r2, 0x0, 0xc8) r3 = mq_open(&(0x7f00000001c0)='eth0\xd2', 0x42, 0x80, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect(0x2, 0x3ae, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x89, 0xd4, 0x39, 0x40, 0x19d2, 0x1165, 0x36f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39c, 0x2, 0x72, 0xf9, 0x10, 0x8, [{{0x9, 0x4, 0x18, 0xe, 0x1, 0xff, 0xff, 0xff, 0x81, [], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7}]}}]}}, {{0x9, 0x4, 0x7d, 0x7f, 0xa, 0x89, 0x2b, 0x39, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xd, 0x75}, @as_header={0x7, 0x24, 0x1, 0xe, 0x4, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xde, 0x2, 0xfc, 0x40, "213e6689ddc78a1c"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x59, 0x3, 0x7, 0x6, 'vb', "e67a72"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd7, 0x1, 0x4, 0x1, "ebda17968253d5c5cd"}]}], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0x2, 0x6}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0xf8, 0x3, 0x73}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x6, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x4, 0xf7, 0x6, [@generic={0xf4, 0x23, "3a2013972f0a69a9a6041f3f48818345ccd10ae5cb04fa6b6620b95d9ecfe39447255f03cfb7d3940f04381943220022b87e6bf35ce6238504f0f0a4feb018787f4dead06810def29a5f352fdc16cb8ddecf9c8224b10066f8f16df9d45ab62f500f0d28ff8a0a4c261363b863a0b32b1ab9ddf0a846df5585a678655b9b2e8b36ec279fdd5e0f9663a0fcb6bd41725fa28bfc020b8630010d1883ba266d69bd301bc93f3e2f7e50e60df425b3ddd2194e2bc45cd0e11acd6276f9a9f90891862d28c34b27a79ae228642f606795af47ac6b23f0c5974932ce9dc6940906178df4bf5c8ddcc4f5baa79f4a244356407ddde1"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x2, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xa}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x3}]}}, {{0x9, 0x5, 0x2d8326f688b55f43, 0x1, 0x3ff, 0xa, 0xf7, 0x0, [@generic={0x3e, 0x5, "91f2a5d556927d58f9848b05dff343403814ded48d98233a0fbf3822a1d45033d8bfac015e739eb6177c80a38540e15699b721d25d18fc3dfe78e8b6"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x8, 0xb, 0x1c, [@generic={0x76, 0x23, "7a845891773d5a054cc24405387fd473a0a97e8d77376ef6690d8b551bf203fc03d0d23de2e682c8e1f7b682887db3b24c348daa0630e7b5300bea98857454ded9255116876cb18a6ea14ba136c7d3cc91a7c27de661ab08a80b692110ca292bf1a8f44abeee98af9a5287e85975b9bd16705dc7"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x58, 0x2, 0x3, 0x5, [@generic={0x57, 0x23, "5098f92bc3a5dea7f7ece20f5e99323cb5025de9752f048f0bbbc086feae3c9d7716d46ef467ffb79fdd12a85b2f25107304af09e97978e0f611a6a8c44ad2e722486412dba11912816ce1cb222d2f870c1141d8dc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x40, 0xc, 0x9, [@generic={0xc7, 0x5, "742001be12a31ef9649b6c5d21d33c26d981e04ed3dd1d9e34b3db907cd0737de4ab4cc8db5ae616b60e35904e4ae0539603a8651a75225720b44e01bb91862f40609355b0918761691d3085ef5ee98847027d3d6b568f019e3e834a5ba74c591f316051a07fb9fd38abd40c6effd9bc4b50ebe9f163a031f8e20da43c1dd4a6d2eefa6a7f36b07b223b7510c3d7a22d25e27b0368c2405ba28f20b13c5d8df69f59fc942e8d1b9af84bd3bb4b4f2f84930fba59785d345749d0a911518f2636d843ab558b"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x8, 0x1, 0x2, 0x20, 0xb1}, 0x30, &(0x7f0000000240)={0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x6b, 0x6, 0x8, 0x0, 0x7, [0xf, 0x30, 0xc000, 0x0, 0x1feff00, 0xff003f]}, @ext_cap={0x7, 0x10, 0x2, 0x30, 0x6, 0x5}]}, 0x1, [{0x4c, &(0x7f0000000700)=@string={0x4c, 0x3, "e19ce5139dd40d630468938a3d7aea7241c0a4c9c216b5b6b964949712dd6976dc9ac2c7fb26f82e6284e77db9ce41c33ef00ba6f411b78b199127cf4b8ee576501412b9aa9feae269dd"}}]}) r4 = dup2(r3, r3) mq_notify(r4, 0x0) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 50.269914416s ago: executing program 0 (id=1220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r2, 0x0, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r3}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp, &(0x7f0000000040)=0x80) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002340)={0x10, 0xafca, {r0}, {r4}, 0x6, 0x9}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91724fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 14.535976818s ago: executing program 3 (id=1266): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0xb4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x123, &(0x7f0000000700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x13, 0x115, 0x65, 0x0, 0xc8, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x6, "dcc0d5a9"}, @generic={0x94, 0x3, ']'}]}}, {0x4e21, 0x4e20, 0xf5, 0x0, @gue={{0x2, 0x0, 0x1, 0x4, 0x100}, "eb51a8cbbfe91a82a48473b715157f90a18a1bd6821e91aab8c0f01cf0a6d3759998f017fe723ddaa4326126c760efad07a728f4d0947f2e1327825e919b3539830f6e5cbf3e309dfac8f7856723f7cdd481114786051e7e68e8c1f998d4df91af4587668665a1125dec896316123be2ef5a414f0c3eabada4560d2367c3eb56acd0ec94771cbcb39f062df2150991fce1382ce7f8c59b5a23f62a96a1da87fd4d41951b24ae58365ca09d4e91be3b878b5fa1950a86b7606a2b8028ec12b4db75a3d8b2b0b89620b75290ba29593f4ff6a4ed0614a1cea9802679b0dd16e117da3c508305"}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x88, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x5, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "96"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x40, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x63, 0x18}, [@acm={0x4, 0x24, 0x2, 0xa}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x3e, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x5, 0x9}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0x6, 0x62, 0x10, 0xf5}, 0x3b, &(0x7f00000002c0)={0x5, 0xf, 0x3b, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x13, 0x9, 0x7f, 0xbf, 0xd}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "d2d612c035edbe9d315703093aaf0020"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "81e78737da75459cad3644ddf4b179e2"}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x9e, &(0x7f0000000400)=@string={0x9e, 0x3, "7001e4f7607e00e3de44eda3ad47b6617aba0445472c8c457d91160ac553747286accc2cf51d8abfe0d9cf593963ce40bf90832fe22527f7ed51878be3882cc9b931df427b821347da19ff4d5d83ac71b89d53ed0caeb0c8b1f2a8953265210adc4d08cafcbde6507c176ed4e7a3fcaed3a66cbd064aaed11628b6af291515ae66c796e9ea54335d6a80e4b5f2bc9d5049a8f2b3093e01a72a2628a4"}}, {0x5d, &(0x7f00000004c0)=@string={0x5d, 0x3, "1c87ca0d49bf4601e30b9ec8c66a653e0aea66705c42982d18156093a68f501e7f29d40f2e078cb031aaaae5d6288bdc889b50cf39c58587ca5755a5112eeb805d4889a5a50d48b77df06b1ee2f132c49d19f24f82ed313cca8020"}}]}) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0xfefd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc000000000000007465616f5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000400000000000000ff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f757000000000000000000000000000000800000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"/816]}, 0x3a8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r9, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b28d63bc13445abac137393b0052c52bd12806f9d1b423452648a99b456e37e1b5ed1edabafef4b5ad19179608dc711f4a5bdb452fdc342d051b4fbdaed8239a35ddcb8a18014e2cd41a780a7c", 0x76}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000040)=0x10000) 7.532148306s ago: executing program 4 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000050002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 6.406949385s ago: executing program 4 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x0, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r0, 0x0, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000023c0)={0x0, 0x0, 0xe, 0x1e, 0x15d, &(0x7f0000000100)="446fc663446b56e2e2d54fdca9bc6c277be78dc858795e7da44afc40ea401dcc226147741ee8fa5867cc2551538b80251003b42f7397fc90dc5ea5500d0b2bfea0d8e9338361b0cbe6bf30903c1fa3fa3c9aadfb0603c707e7868bf9c404e7cc52d5fca2808808c4ced4db4601cbeb74b3e877ef54334142c4005c4513f1dacfc2d1ae0b229cab1e4a026c7a3a9ba51fee4f544508090b54941cb27d0a899c58ccb0586f86a2bcd78dc315ad4b52b60fb5b76a310252711785bc2e00022a853a20932b5c2905380148d700149c3bbfe872a512f445ef80dd8153d4e2d047a089ed1a00acc5dd7aca8bef5ab26286889cab9a695968820ce9358ec304b330e3fd0a6e0da254ae1e04125b1159bb8cbf13865f2c565c01b34d515dd5f744d6cddcee84dc90f29a37c4cd4affe1364b520157fa7123ed2237acea09d02094146e6b3ff2a0910cb403c532a5ecacd3d26f5658884af39b575b4045e15d9e7fc2cba4eb63662ec8303caab487746cd4d8c8f9426bb2a4fc6cd94715192eb4ecfa5561e9f2b19d0aceb4df2613b424e573aea9f6cbd1ace28f27578bad99bb7e2f26e063c48945f9ee4900c61c63de280a72719a2ac4459588a2b467520117eb86b559c756eb12f8dceff3643cc2c804eee8560c041b8c1dcd798b723ac54ce515403b99d13b2eb3534c258e46979dc20a4772997ca8553abcad135e46e0834d317320a158d530a62b87c34d2dfef23d965cc9cce45234c9eaae2ec3a6be787569e9e267df2cb5d5c53a620f12065f9aa8920f71afa121b0164a694542a7ba36fc7a13738065fd4f8dae40e8a920f2dfecb3429b71affa50e1ffd21591c0d06fc36cb4c51eeb8f5ef1393e1694bd065bebe9468c792bbfa826aee0f4b0c75facf1a4ea5a89dfd08cf6c541133b6b81406c1f66649e212535065e913dcc64c12f10714f81dffe550d925b0e17bb3dd5da212a627b11c09049c0f63087511628e210d6c54696cc45ce9d4c7188429802e2d6fa68423e453f46391eb3f3c181d6badfbeab28bb103e28c8ebc38edeb400e88b352f8aee174337bfa8e14240c3a2275f631323f1eb2ef7f7933ad673f32cd6034128d70c8ad78218420c7f7c2e011cc2d07d5cf8407c3a02ecf605c3bb5bb335525c8779d372a555a3bbb5e4f5d6a73b31802a725b66ff2ae0d659a0f50a41be9925adddd9cd7f5b77e4cfabadd422c2e9bdb1a81403a96ee6112d26eb7b5d2fd6f213f2744890123e8b9ceb8c02dd29c7d8cb68091e5adfeb7b2bf492feaafff3fce4ccaccdf2c4a3af4be35bff96afd85f58052f2ed939cc90372a7937949e67c9d7ccd399ac69d3a0ef755abc98a5c515c6e23f88c0856babb8fbbeea00ab091930f93bc9b2a8e4628bb6f784fd3838e35bf4db500efb1945c7a7e567496888b476fa68f2cd501f7771279933300e6c98"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d008b000000"], 0x4c}}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0xa5, 0x3}]}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000500), 0x311001, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x5, 0x7, 0x75, 0x6, 0xd8e1b3a8d0d53565}}) ioctl$KDMKTONE(r4, 0x4b30, 0x1d) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x34, r7, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'dummy0\x00', 0x600}) 6.267204546s ago: executing program 3 (id=1274): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r2, &(0x7f0000000740)=[{&(0x7f0000002300)=""/250, 0xfa}, {&(0x7f0000000500)=""/97, 0x4c}, {&(0x7f0000000780)=""/133, 0x95}, {&(0x7f0000000640)=""/52, 0x33}], 0x4, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) socket$inet_sctp(0x2, 0x400000000001, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x4000000}) 5.223302237s ago: executing program 4 (id=1275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r1, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @dev, @val, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "ec7ab49f42266b558197758939c3a67064eb2413deb6d588b153902f5348321b2aa24fcea6549a091e651e6c1d3053eef4b8f189054244df8c1353433e834d4c"}}}}, 0x0) 4.859448593s ago: executing program 3 (id=1276): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x14}}, 0x1) syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32], 0xd8, 0x20000005}}], 0x2, 0x48000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x0, 0x0, 0x320, 0x1c0, 0x0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00', 0x39, 0x16}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_vhci(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) 4.672750106s ago: executing program 4 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005f8210206faef479998f01e3020109022400010000000009040000025842000009050f000000000000090501"], 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r3}, 0x10) r5 = syz_open_dev$audion(&(0x7f00000003c0), 0x8, 0x20140) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r5, 0x2b, 0x1, 0xf, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r6 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004825) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0xfffffffffffffefb, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0xd706}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="08009e"], 0x24}}, 0x0) 4.347038676s ago: executing program 3 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x90, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x7ff, @loopback}, @in6={0xa, 0x4e20, 0xc64, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffe01}, @in6={0xa, 0x4e24, 0xfffffffc, @private2}, @in6={0xa, 0x4e21, 0x421, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000003c0)=0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000000a84bfc6fc"], 0x58}}, 0x20010810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.933798137s ago: executing program 3 (id=1279): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') read$FUSE(r1, &(0x7f00000025c0)={0x2020}, 0x5a) close(0xffffffffffffffff) socketpair(0x2a, 0x4, 0x4, &(0x7f0000000340)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x800800000000006, 0x0, 0x1, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) open$dir(0x0, 0x40, 0x0) rmdir(&(0x7f0000000040)='./control\x00') socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000044f5bf352865df2a0d7e25d46781000000947f4b879d0b12489502e7aad33e9a128b25b6e47defc6f34970e232", @ANYRES32=0x0, @ANYBLOB="0500000000000000000000000000000007000000f5cf7a7683d323da2bca36c554b1c6d2da360b2f6cda6f00163dd4e7e05402fb6a621a2147c7e9cdd8314b130549db428cdd1977dd4866eb7ac66e77f12b2ecd7fbd58ea100751e12e6f1acb90b2df6e9a3380714c5d66eb07ec0aff92bd57f82ec46c95292a2358438ce1d4dc5e10992d88eb34b8ca50b0703f131e178cf6", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r4], 0x48) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) close_range(0xffffffffffffffff, r6, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.512431121s ago: executing program 4 (id=1280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000060002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 1.434909238s ago: executing program 4 (id=1281): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0xff, 0x0, 0x0, 0x0, 0x800]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0x68c}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x4}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup2(r6, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x9d) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000000000000000001000000040000000c000180cafc00000547000008000200000009004c0007"], 0x78}}, 0x0) shutdown(r3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) ioperm(0xf636, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="9332e0b200000000000000000000000062010300000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "0a74de5ec3"}, @input_terminal={0xc, 0x24, 0x2, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x1, 0x0, "30e9d48c"}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, '?*'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0xfd, 0x40}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 0s ago: executing program 3 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) r2 = socket$isdn(0x22, 0x3, 0x25) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="0800270003080000080026006c0900000800b7"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000c00), 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r11}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x200}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x2, 0x0, 0x0, 0x54}, 0x9c) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000140)) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, 0x0) sendfile(r5, r0, &(0x7f0000000040)=0xe, 0x9) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ng interface: batadv_slave_1 [ 942.393231][T14421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.459494][T14421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.561093][ T1010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.689646][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 943.630978][ T5275] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 943.646715][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.656685][ T5275] usb 3-1: Product: syz [ 943.661229][ T5275] usb 3-1: Manufacturer: syz [ 943.665890][ T5275] usb 3-1: SerialNumber: syz [ 943.677235][ T5275] usb 3-1: config 0 descriptor?? [ 943.744940][ T1010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.779158][T15277] Process accounting resumed [ 943.792632][ T5275] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 943.803109][ T5275] airspy 3-1:0.0: Could not detect board [ 943.808999][ T5275] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 943.839174][ T5275] usb 3-1: USB disconnect, device number 25 [ 943.846697][T14446] team0: Port device team_slave_0 added [ 943.895660][T14446] team0: Port device team_slave_1 added [ 944.012154][T11526] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 944.052430][ T1010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.130245][T14421] hsr_slave_0: entered promiscuous mode [ 944.146673][T14421] hsr_slave_1: entered promiscuous mode [ 944.155603][T14421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.163377][T14421] Cannot create hsr debugfs directory [ 944.233588][T11526] usb 2-1: config 0 interface 0 has no altsetting 0 [ 944.241791][T11526] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 944.271241][T11526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.292545][T11526] usb 2-1: config 0 descriptor?? [ 944.327535][ T5275] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 944.340566][T14446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.358477][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.384405][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.422254][T14446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.450338][T14446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.470007][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.496018][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.510533][T15374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.532831][T15374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.547583][T15374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.556177][ T5275] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 944.558716][ T5275] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.578066][T14446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.598685][T15374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.612171][ T5275] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.632835][ T5275] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.633779][T15374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.685355][ T5275] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.700434][T15374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.712922][ T5275] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.742482][T15374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.756642][ T5275] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.770598][T15374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.780553][ T5275] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.801545][T15374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.827412][T15374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.845014][ T5275] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.890940][T11526] (null): keene_cmd_main failed (-110) [ 944.904112][ T5275] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 944.938236][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.965907][T11526] video4linux radio32: keene_cmd_main failed (-32) [ 944.973294][T11526] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 945.026300][T11526] usb 2-1: USB disconnect, device number 12 [ 945.309736][ T25] usb 3-1: USB disconnect, device number 26 [ 945.493399][T14446] hsr_slave_0: entered promiscuous mode [ 945.528252][T14446] hsr_slave_1: entered promiscuous mode [ 945.556033][T14446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.563646][T14446] Cannot create hsr debugfs directory [ 946.518749][T14205] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 946.567538][T14205] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 946.621196][ T1010] bridge_slave_1: left allmulticast mode [ 946.639979][ T1010] bridge_slave_1: left promiscuous mode [ 946.649888][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.677728][ T1010] bridge_slave_0: left allmulticast mode [ 946.684645][ T1010] bridge_slave_0: left promiscuous mode [ 946.691645][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.743838][ T1010] bridge_slave_1: left allmulticast mode [ 946.756118][ T1010] bridge_slave_1: left promiscuous mode [ 946.772303][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.798011][ T1010] bridge_slave_0: left allmulticast mode [ 946.812876][ T1010] bridge_slave_0: left promiscuous mode [ 946.818924][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.304152][ T30] audit: type=1400 audit(1727071189.471:1093): avc: denied { mount } for pid=15634 comm="syz.2.965" name="/" dev="hugetlbfs" ino=42350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 947.505175][ T30] audit: type=1400 audit(1727071189.681:1094): avc: denied { unmount } for pid=8321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 947.748504][T15649] binder_alloc: 15648: binder_alloc_buf, no vma [ 947.754343][ T30] audit: type=1400 audit(1727071189.943:1095): avc: denied { call } for pid=15648 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 949.987772][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.009580][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.024511][ T1010] bond0 (unregistering): Released all slaves [ 950.236688][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.250285][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.268123][ T1010] bond0 (unregistering): Released all slaves [ 950.331403][T14205] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 950.347167][T14205] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 950.903648][ T1010] hsr_slave_0: left promiscuous mode [ 950.947666][ T1010] hsr_slave_1: left promiscuous mode [ 950.957428][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.971614][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.992648][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.010920][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.065590][ T1010] hsr_slave_0: left promiscuous mode [ 951.088413][ T1010] hsr_slave_1: left promiscuous mode [ 951.100579][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.108050][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.138702][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.139404][ T30] audit: type=1400 audit(1727071193.491:1096): avc: denied { execute_no_trans } for pid=15714 comm="syz.2.973" path="/197/file0" dev="tmpfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 951.146126][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.169573][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.368434][ T1010] veth1_macvtap: left promiscuous mode [ 951.383773][ T1010] veth0_macvtap: left promiscuous mode [ 951.401734][ T1010] veth1_vlan: left promiscuous mode [ 951.411495][ T1010] veth0_vlan: left promiscuous mode [ 951.482268][ T1010] veth1_macvtap: left promiscuous mode [ 951.492582][ T1010] veth0_macvtap: left promiscuous mode [ 951.507295][ T1010] veth1_vlan: left promiscuous mode [ 951.550937][ T1010] veth0_vlan: left promiscuous mode [ 952.206007][ T5276] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 952.432951][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 952.456383][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.468952][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 952.484058][ T5276] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 952.494068][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 952.521368][ T5276] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 952.530731][ T5276] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 952.539983][ T5276] usb 2-1: Manufacturer: syz [ 952.551826][ T5276] usb 2-1: config 0 descriptor?? [ 953.268798][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 953.354665][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 955.046767][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 955.127801][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 956.219868][T15719] netlink: 76 bytes leftover after parsing attributes in process `syz.2.974'. [ 956.329533][ T940] usb 2-1: USB disconnect, device number 13 [ 958.096044][T14205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.288274][T14205] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.400979][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.408282][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.538345][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.545661][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.067853][T14446] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 959.165008][T14446] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 959.266198][T14446] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 959.291082][T14446] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 959.344387][ T1010] bridge_slave_1: left allmulticast mode [ 959.363079][ T1010] bridge_slave_1: left promiscuous mode [ 959.375128][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.411033][ T1010] bridge_slave_0: left allmulticast mode [ 959.427560][ T1010] bridge_slave_0: left promiscuous mode [ 959.445094][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.843742][ T5275] psmouse serio4: Failed to reset mouse on : -5 [ 963.337223][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.362690][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.417422][ T1010] bond0 (unregistering): Released all slaves [ 963.846151][ T5228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 963.871151][ T5228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 963.885336][ T5228] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 963.904717][ T5228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 963.916217][ T5228] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 963.940637][ T5228] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 964.398345][T14421] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 964.447506][T14421] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 964.492601][ T5275] misc userio: Buffer overflowed, userio client isn't keeping up [ 964.589498][ T1010] hsr_slave_0: left promiscuous mode [ 964.627910][ T1010] hsr_slave_1: left promiscuous mode [ 964.650320][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.673542][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.681916][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.703552][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.771797][ T1010] veth1_macvtap: left promiscuous mode [ 964.777481][ T1010] veth0_macvtap: left promiscuous mode [ 964.788899][ T1010] veth1_vlan: left promiscuous mode [ 964.794481][ T1010] veth0_vlan: left promiscuous mode [ 965.686492][T15882] netlink: 'syz.1.987': attribute type 4 has an invalid length. [ 965.694454][T15882] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.987'. [ 965.752003][ T5275] input: PS/2 Generic Mouse as /devices/serio4/input/input15 [ 965.915256][ T5224] Bluetooth: hci7: command tx timeout [ 966.044025][ T5275] psmouse serio4: Failed to enable mouse on [ 966.167210][T15880] Falling back ldisc for pts0. [ 966.749418][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 967.686089][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 967.728658][ T30] audit: type=1400 audit(1727071210.908:1097): avc: denied { getopt } for pid=15900 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 967.748877][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.895868][ T5224] Bluetooth: hci7: command tx timeout [ 968.550454][ T5274] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 968.790382][ T5274] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 968.807015][ T5274] usb 2-1: config 0 has no interface number 0 [ 968.814516][ T5274] usb 2-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=3a.7f [ 968.851498][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.966175][ T5274] usb 2-1: config 0 descriptor?? [ 969.038339][ T5274] cypress_m8 2-1:0.255: HID->COM RS232 Adapter converter detected [ 969.066696][ T5274] cyphidcom ttyUSB0: required endpoint is missing [ 969.574584][T14421] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 969.875688][ T5224] Bluetooth: hci7: command tx timeout [ 969.918067][T14421] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 969.963777][ T8] usb 2-1: USB disconnect, device number 14 [ 969.991536][ T8] cypress_m8 2-1:0.255: device disconnected [ 971.276340][ T30] audit: type=1326 audit(1727071214.645:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16030 comm="syz.2.994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6282b7def9 code=0x0 [ 971.305268][T14446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.690496][T16038] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.995'. [ 971.931926][ T5224] Bluetooth: hci7: command tx timeout [ 972.295808][T14446] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.321515][T15851] chnl_net:caif_netlink_parms(): no params data found [ 972.425878][ T2571] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.433223][ T2571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.522182][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.529474][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.273583][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 974.325672][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 974.338907][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 974.349610][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 974.357631][ T5228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 974.365575][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 974.733562][T15851] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.771163][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.778528][T15851] bridge_slave_0: entered allmulticast mode [ 974.815336][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 974.822878][T15851] bridge_slave_0: entered promiscuous mode [ 974.835490][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 974.844223][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 974.858530][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 974.867154][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 974.877651][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 974.942821][T15851] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.950159][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.969363][T15851] bridge_slave_1: entered allmulticast mode [ 974.981850][T15851] bridge_slave_1: entered promiscuous mode [ 975.291956][T15851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.330042][T15851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.512911][ T1010] bridge_slave_1: left allmulticast mode [ 975.524187][ T1010] bridge_slave_1: left promiscuous mode [ 975.530154][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.546453][ T1010] bridge_slave_0: left allmulticast mode [ 975.553643][ T1010] bridge_slave_0: left promiscuous mode [ 975.559539][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.202878][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.217161][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.230567][ T1010] bond0 (unregistering): Released all slaves [ 976.361187][ T5228] Bluetooth: hci0: command tx timeout [ 976.400117][T15851] team0: Port device team_slave_0 added [ 976.444774][T15851] team0: Port device team_slave_1 added [ 976.473262][ T1010] hsr_slave_0: left promiscuous mode [ 976.479851][ T1010] hsr_slave_1: left promiscuous mode [ 976.487167][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.496956][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.891499][ T5228] Bluetooth: hci2: command tx timeout [ 977.010481][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 977.079277][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 977.936823][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.944024][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.977988][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.074473][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.091776][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.117898][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.126759][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.336334][ T5228] Bluetooth: hci0: command tx timeout [ 978.573744][T15851] hsr_slave_0: entered promiscuous mode [ 978.582021][T15851] hsr_slave_1: entered promiscuous mode [ 978.598957][T16082] chnl_net:caif_netlink_parms(): no params data found [ 978.868771][ T5228] Bluetooth: hci2: command tx timeout [ 979.387009][T16119] chnl_net:caif_netlink_parms(): no params data found [ 979.424190][T16082] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.444484][T16082] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.462029][T16082] bridge_slave_0: entered allmulticast mode [ 979.471158][T16082] bridge_slave_0: entered promiscuous mode [ 979.568181][T16082] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.588950][T16082] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.597385][T16082] bridge_slave_1: entered allmulticast mode [ 979.619319][T16082] bridge_slave_1: entered promiscuous mode [ 979.938516][T16082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.958923][T16082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.184418][T16119] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.194115][T16119] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.203703][T16119] bridge_slave_0: entered allmulticast mode [ 980.216113][T16119] bridge_slave_0: entered promiscuous mode [ 980.274374][T16082] team0: Port device team_slave_0 added [ 980.292349][T16119] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.309228][T16119] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.316888][ T5224] Bluetooth: hci0: command tx timeout [ 980.322599][T16119] bridge_slave_1: entered allmulticast mode [ 980.332026][T16119] bridge_slave_1: entered promiscuous mode [ 980.377551][T16082] team0: Port device team_slave_1 added [ 980.508884][T16119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.626865][T16119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.719354][T16082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.728248][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.754508][T16082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.770780][T16082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.788482][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.814975][T16082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.849286][ T5224] Bluetooth: hci2: command tx timeout [ 980.879477][T16119] team0: Port device team_slave_0 added [ 981.002003][T16119] team0: Port device team_slave_1 added [ 981.100976][T16082] hsr_slave_0: entered promiscuous mode [ 981.121357][T16082] hsr_slave_1: entered promiscuous mode [ 981.142526][T16082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.162867][T16082] Cannot create hsr debugfs directory [ 981.319264][ T5224] Bluetooth: hci6: command 0x0406 tx timeout [ 981.628223][T16119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.635461][T16119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.680655][T16119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.708447][T16119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.727345][T16119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.763040][T16119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.296423][ T5228] Bluetooth: hci0: command tx timeout [ 982.308532][T16119] hsr_slave_0: entered promiscuous mode [ 982.318228][T16119] hsr_slave_1: entered promiscuous mode [ 982.331041][T16119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.339073][T16119] Cannot create hsr debugfs directory [ 982.833172][ T5228] Bluetooth: hci2: command tx timeout [ 983.064459][T15851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 983.146958][T15851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 983.186638][T15851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 983.212575][T15851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 983.587596][ T1010] bridge_slave_1: left allmulticast mode [ 983.594987][ T1010] bridge_slave_1: left promiscuous mode [ 983.601069][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.618937][ T1010] bridge_slave_0: left allmulticast mode [ 983.624846][ T1010] bridge_slave_0: left promiscuous mode [ 983.631347][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.647250][ T1010] bridge_slave_1: left allmulticast mode [ 983.653248][ T1010] bridge_slave_1: left promiscuous mode [ 983.661144][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.675954][ T1010] bridge_slave_0: left allmulticast mode [ 983.681942][ T1010] bridge_slave_0: left promiscuous mode [ 983.689739][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.630327][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.645728][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.657649][ T1010] bond0 (unregistering): Released all slaves [ 984.683026][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.702836][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.721227][ T1010] bond0 (unregistering): Released all slaves [ 985.094965][ T1010] hsr_slave_0: left promiscuous mode [ 985.111117][ T1010] hsr_slave_1: left promiscuous mode [ 985.128068][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.139018][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.161832][ T1010] hsr_slave_0: left promiscuous mode [ 985.170374][ T1010] hsr_slave_1: left promiscuous mode [ 985.188895][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.206353][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.832124][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 985.907659][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 987.035397][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 987.085178][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 987.858339][T15851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.984280][T15851] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.066686][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.073958][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.155658][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.163020][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.198876][T16082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 988.237160][T16082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 988.496270][T16082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 988.533668][T16082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 989.085587][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.096953][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.448945][T16082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.682721][T16082] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.692637][T16119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 989.727661][T16119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 989.753826][ T5518] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.761172][ T5518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.813925][T16119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 989.846304][ T5518] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.853637][ T5518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.887107][T16119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 990.161947][T15851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.477745][T15851] veth0_vlan: entered promiscuous mode [ 990.568685][T15851] veth1_vlan: entered promiscuous mode [ 990.685916][T16119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.790662][T15851] veth0_macvtap: entered promiscuous mode [ 990.826904][T15851] veth1_macvtap: entered promiscuous mode [ 990.849621][T16119] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.896645][ T2526] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.903933][ T2526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.978930][T16082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.014745][ T5518] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.022088][ T5518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.074269][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.088712][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.109628][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.135756][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.154639][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.183361][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.202524][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.237895][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.257078][T15851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.294015][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.323039][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.346894][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.385431][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.403152][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.431106][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.449967][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.469784][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.482956][T15851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.580678][T15851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.602540][T15851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.621485][T15851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.630353][T15851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.117880][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.125767][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.141591][T16082] veth0_vlan: entered promiscuous mode [ 992.230833][T16082] veth1_vlan: entered promiscuous mode [ 992.340026][ T6013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.364472][ T6013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.500156][T16082] veth0_macvtap: entered promiscuous mode [ 992.578263][T16119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.639815][T16082] veth1_macvtap: entered promiscuous mode [ 992.930928][T16119] veth0_vlan: entered promiscuous mode [ 992.992987][ T5276] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 993.138903][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.349052][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.478602][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.532022][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.555330][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.603637][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 993.633722][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.683730][ T5276] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.717600][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.749803][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.780163][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.836240][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.880522][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.890519][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.892767][ T5276] usb 2-1: config 0 descriptor?? [ 993.901160][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.939351][T16082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.024504][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.046800][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.069989][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.097733][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.118318][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.143634][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.164802][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.203219][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.221949][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.241183][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.281474][T16082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.349617][T16119] veth1_vlan: entered promiscuous mode [ 994.376605][T16082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.403201][T16082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.420681][T16082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.443567][T16082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.614878][ T5275] rtc_cmos 00:00: Alarms can be up to one day in the future [ 994.638502][ T5275] rtc_cmos 00:00: Alarms can be up to one day in the future [ 994.697221][ T5275] rtc_cmos 00:00: Alarms can be up to one day in the future [ 994.728939][ T5275] rtc_cmos 00:00: Alarms can be up to one day in the future [ 994.751558][ T5275] rtc rtc0: __rtc_set_alarm: err=-22 [ 995.041704][T16119] veth0_macvtap: entered promiscuous mode [ 995.164557][T16119] veth1_macvtap: entered promiscuous mode [ 995.217536][ T5276] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 995.262125][ T5276] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 995.281125][ T5276] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 995.325778][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.344510][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.445909][ T5276] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 995.487722][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.557282][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.648631][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.669774][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.689025][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.703033][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.722556][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.737800][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.765161][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.824310][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.121905][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.491468][ T30] audit: type=1400 audit(1727071240.764:1099): avc: denied { write } for pid=17259 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 996.500979][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.824938][T16119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.062983][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.132823][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.180359][ T5274] usb 2-1: USB disconnect, device number 15 [ 997.194175][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.228934][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.269922][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.304942][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.318193][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.330877][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.340875][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.359326][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.382883][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 997.403953][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.428743][T16119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.510438][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.540316][T17270] mkiss: ax0: crc mode is auto. [ 997.549240][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.572546][T16119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.595830][T16119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.626898][T16119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.656051][T16119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.838513][T17297] VFS: could not find a valid V7 on nullb0. [ 997.980294][ T30] audit: type=1800 audit(1727071242.549:1100): pid=17298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.998" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 998.739118][T17270] netlink: 'syz.0.997': attribute type 4 has an invalid length. [ 998.800877][T17270] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.997'. [ 1000.349753][ T5518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.493747][ T5518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.425614][T17337] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1003'. [ 1002.688714][ T2526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.708816][ T2526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.422673][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1003.633316][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 1003.676340][ T46] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 1003.687490][ T46] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1003.704703][ T46] usb 5-1: config 0 has no interface number 1 [ 1003.721101][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1003.734236][ T46] usb 5-1: too many endpoints for config 0 interface 129 altsetting 107: 79, using maximum allowed: 30 [ 1003.745612][ T46] usb 5-1: config 0 interface 129 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 1003.896770][ T46] usb 5-1: config 0 interface 129 has no altsetting 0 [ 1003.950373][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1004.025520][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.098888][ T46] usb 5-1: config 0 descriptor?? [ 1004.131992][ T46] hub 5-1:0.0: bad descriptor, ignoring hub [ 1004.169553][ T46] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1004.211589][ T46] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1004.270168][ T46] hub 5-1:0.129: bad descriptor, ignoring hub [ 1004.304090][ T46] hub 5-1:0.129: probe with driver hub failed with error -5 [ 1004.350792][T17349] evm: overlay not supported [ 1004.375008][ T30] audit: type=1400 audit(1727071249.383:1101): avc: denied { create } for pid=17347 comm="syz.4.1008" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1004.512720][ T30] audit: type=1400 audit(1727071249.383:1102): avc: denied { link } for pid=17347 comm="syz.4.1008" name="#b" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1004.599183][ T5275] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1004.694977][ T30] audit: type=1400 audit(1727071249.383:1103): avc: denied { rename } for pid=17347 comm="syz.4.1008" name="#c" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1004.847383][ T5275] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.941288][ T5275] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1004.987037][ T5275] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1005.086454][ T5275] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.157470][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.197040][ T5275] usb 3-1: Product: syz [ 1005.202001][ T5275] usb 3-1: Manufacturer: syz [ 1005.245052][ T5275] usb 3-1: SerialNumber: syz [ 1005.313566][ T5275] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1005.362224][ T5275] cdc_ncm 3-1:1.0: bind() failure [ 1005.958127][ T25] usb 5-1: USB disconnect, device number 14 [ 1005.983002][ T5274] usb 3-1: USB disconnect, device number 27 [ 1009.729666][T17463] xt_hashlimit: max too large, truncated to 1048576 [ 1010.091341][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1010.265687][ T30] audit: type=1400 audit(1727071255.535:1104): avc: denied { mount } for pid=17483 comm="syz.0.1023" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1010.438180][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1010.587564][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.665491][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.691143][ T30] audit: type=1400 audit(1727071255.692:1105): avc: denied { bind } for pid=17483 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1010.757643][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1010.825007][ T30] audit: type=1400 audit(1727071255.776:1106): avc: denied { name_bind } for pid=17483 comm="syz.0.1023" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1010.852143][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1010.901578][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.953568][ T30] audit: type=1400 audit(1727071255.776:1107): avc: denied { node_bind } for pid=17483 comm="syz.0.1023" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1010.976405][ T30] audit: type=1400 audit(1727071256.123:1108): avc: denied { unmount } for pid=15851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1011.029615][ T25] usb 3-1: config 0 descriptor?? [ 1011.256256][ T30] audit: type=1400 audit(1727071256.605:1109): avc: denied { write } for pid=17497 comm="syz.0.1025" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1011.361299][T14304] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1012.482536][ T30] audit: type=1400 audit(1727071257.382:1110): avc: denied { setopt } for pid=17497 comm="syz.0.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1012.596550][T14304] usb 5-1: Using ep0 maxpacket: 8 [ 1014.833964][ T25] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 1014.875517][T11526] IPVS: starting estimator thread 0... [ 1014.892259][ T25] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1014.912450][ T25] microsoft 0003:045E:07DA.0008: no inputs found [ 1014.918866][ T25] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 1015.140302][T17508] IPVS: using max 21 ests per chain, 50400 per kthread [ 1015.197394][T14304] usb 5-1: device descriptor read/all, error -71 [ 1015.222789][ T25] usb 3-1: USB disconnect, device number 28 [ 1017.253499][ T5228] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 1019.992630][ T5275] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1020.047551][T17600] ubi0: attaching mtd0 [ 1020.058153][T17600] ubi0: scanning is finished [ 1020.062812][T17600] ubi0: empty MTD device detected [ 1020.145270][T17600] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1020.152860][T17600] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1020.160171][T17600] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1020.167133][T17600] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1020.177003][T17600] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1020.183860][T17600] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1020.193850][T17600] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4232680418 [ 1020.203908][T17600] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1020.246416][T17604] ubi0: background thread "ubi_bgt0d" started, PID 17604 [ 1020.257629][ T5275] usb 3-1: Using ep0 maxpacket: 16 [ 1020.350627][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1020.409540][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1020.441102][ T5275] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1020.456988][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.232343][ T5228] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1021.863625][ T5228] Bluetooth: hci1: Injecting HCI hardware error event [ 1021.874054][ T5224] Bluetooth: hci1: hardware error 0x00 [ 1021.885929][ T5275] usb 3-1: Product: syz [ 1021.898716][ T5275] usb 3-1: Manufacturer: syz [ 1021.934236][ T5275] usb 3-1: SerialNumber: syz [ 1021.942981][ T5275] usb 3-1: config 0 descriptor?? [ 1021.958648][ T5275] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1021.973071][ T5275] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1022.065862][ T5320] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1022.188028][T17636] Process accounting resumed [ 1022.278025][ T5320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1022.304811][ T5320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.320446][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.332940][ T5320] usb 2-1: Product: syz [ 1022.340841][ T5320] usb 2-1: Manufacturer: syz [ 1022.346232][ T5320] usb 2-1: SerialNumber: syz [ 1022.427050][ T5275] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1022.459131][ T5275] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1022.612110][ T5275] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1022.626545][ T5275] em28xx 3-1:0.0: No AC97 audio processor [ 1022.674269][ T5275] usb 3-1: USB disconnect, device number 29 [ 1022.687855][ T5275] em28xx 3-1:0.0: Disconnecting em28xx [ 1022.730311][ T5275] em28xx 3-1:0.0: Freeing device [ 1023.123939][ T5320] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1023.137715][ T5320] cdc_ncm 2-1:1.0: bind() failure [ 1023.176684][ T5320] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1023.199622][ T5320] cdc_ncm 2-1:1.1: bind() failure [ 1023.275021][ T5274] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1024.010510][ T5224] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1024.103579][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 1024.110971][T14304] IPVS: starting estimator thread 0... [ 1024.183395][ T5274] usb 3-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=b9.a0 [ 1024.195259][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.205083][ T5274] usb 3-1: Product: syz [ 1024.209653][ T5274] usb 3-1: Manufacturer: syz [ 1024.214727][ T5274] usb 3-1: SerialNumber: syz [ 1024.227281][ T5274] usb 3-1: config 0 descriptor?? [ 1024.237064][T17678] IPVS: using max 17 ests per chain, 40800 per kthread [ 1024.260838][ T5274] pwc: Visionite VCS-UC300 USB webcam detected. [ 1024.267405][ T8] usb 2-1: USB disconnect, device number 16 [ 1025.133334][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1025.423211][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1025.516006][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1025.568384][ T5274] pwc: Failed to set LED on/off time (-71) [ 1025.606387][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1025.622885][ T5274] pwc: send_video_command error -71 [ 1025.654190][ T5274] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1025.666835][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.711627][ T5274] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1025.738223][T17697] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1025.770995][ T5274] usb 3-1: USB disconnect, device number 30 [ 1025.781237][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1025.893779][ T5224] Bluetooth: Unexpected continuation frame (len 18) [ 1026.152433][ T8] usb 2-1: USB disconnect, device number 17 [ 1026.258432][T16891] udevd[16891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.504682][ T30] audit: type=1400 audit(1727071274.714:1111): avc: denied { ioctl } for pid=17767 comm="syz.2.1060" path="socket:[46846]" dev="sockfs" ino=46846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1028.648188][ T30] audit: type=1400 audit(1727071274.809:1112): avc: denied { bind } for pid=17767 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1028.750645][ T30] audit: type=1400 audit(1727071274.819:1113): avc: denied { connect } for pid=17767 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1029.209090][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1029.272433][T17790] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 1029.280975][T17790] batman_adv: batadv0: Removing interface: team0 [ 1029.303697][T17790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.338623][T17790] bond0: (slave team0): Enslaving as an active interface with an up link [ 1029.399882][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1029.410587][ T8] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 1029.423994][ T8] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1029.434478][ T8] usb 1-1: can't read configurations, error -61 [ 1029.452463][ T30] audit: type=1400 audit(1727071275.712:1114): avc: denied { write } for pid=17789 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1029.611526][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1029.707612][ T30] audit: type=1400 audit(1727071275.953:1115): avc: denied { write } for pid=17796 comm="syz.4.1067" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1029.838628][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1029.855764][ T8] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 1029.888525][ T8] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1029.902156][ T8] usb 1-1: can't read configurations, error -61 [ 1029.929714][ T8] usb usb1-port1: attempt power cycle [ 1030.000478][ T940] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1030.162387][ T940] usb 5-1: device descriptor read/64, error -71 [ 1030.344533][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1030.400725][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1030.414671][ T30] audit: type=1326 audit(1727071276.720:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.1.1069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea6ef7def9 code=0x0 [ 1030.440229][ T8] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 1030.471667][T17790] infiniband syz1: set active [ 1030.480925][ T8] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1030.488744][T17790] infiniband syz1: added bond0 [ 1030.492367][ T8] usb 1-1: can't read configurations, error -61 [ 1030.514782][ T940] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 1030.516303][T17790] syz1: rxe_create_cq: returned err = -12 [ 1030.544605][T17790] infiniband syz1: Couldn't create ib_mad CQ [ 1030.551122][T17790] infiniband syz1: Couldn't open port 1 [ 1030.638195][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1030.670329][ T940] usb 5-1: device descriptor read/64, error -71 [ 1030.700124][T17790] RDS/IB: syz1: added [ 1030.706426][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1030.723906][T17790] smc: adding ib device syz1 with port count 1 [ 1030.732196][ T8] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 1030.743798][ T8] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1030.751453][ T8] usb 1-1: can't read configurations, error -61 [ 1030.756352][T17790] smc: ib device syz1 port 1 has pnetid [ 1030.775849][ T8] usb usb1-port1: unable to enumerate USB device [ 1030.800843][ T940] usb usb5-port1: attempt power cycle [ 1032.329729][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 1032.429472][ T940] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 1033.471329][ T940] usb 5-1: device descriptor read/8, error -71 [ 1033.705857][T17855] VFS: could not find a valid V7 on nullb0. [ 1033.744760][ T30] audit: type=1400 audit(1727071280.215:1117): avc: denied { getopt } for pid=17853 comm="syz.4.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1034.832245][ T30] audit: type=1400 audit(1727071281.360:1118): avc: denied { connect } for pid=17854 comm="syz.3.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1034.856293][ T30] audit: type=1400 audit(1727071281.381:1119): avc: denied { name_connect } for pid=17854 comm="syz.3.1074" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1035.449045][ T30] audit: type=1400 audit(1727071282.011:1120): avc: denied { read } for pid=17870 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1035.804942][ T940] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1036.001462][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 1036.026428][ T940] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 1036.073882][ T940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1036.175241][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.495422][ T940] usb 5-1: Product: syz [ 1036.570800][ T940] usb 5-1: Manufacturer: syz [ 1036.680354][ T940] usb 5-1: SerialNumber: syz [ 1036.718703][T17874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1037.058598][ T940] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1038.363933][ T1010] Bluetooth: hci3: Frame reassembly failed (-90) [ 1038.554535][ T30] audit: type=1326 audit(1727071285.254:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17918 comm="syz.3.1086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2e237def9 code=0x0 [ 1039.096997][ T30] audit: type=1400 audit(1727071285.821:1122): avc: denied { ioctl } for pid=17928 comm="syz.0.1088" path="socket:[45938]" dev="sockfs" ino=45938 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1040.297333][ T5228] Bluetooth: hci3: command 0xfc11 tx timeout [ 1040.316497][ T5224] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1040.432229][ T5228] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1040.449879][ T5275] usb 5-1: USB disconnect, device number 21 [ 1040.510265][ T5228] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1040.521012][ T5228] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1040.533093][ T5228] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1040.541264][ T5275] usblp0: removed [ 1040.541636][ T5228] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1040.552917][ T5228] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1042.974088][ T5228] Bluetooth: hci8: command tx timeout [ 1043.031870][ T5275] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1044.941798][ T5228] Bluetooth: hci8: command tx timeout [ 1045.959015][ T30] audit: type=1326 audit(1727071293.044:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18031 comm="syz.3.1104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2e237def9 code=0x0 [ 1046.583948][ T30] audit: type=1400 audit(1727071293.695:1124): avc: denied { getopt } for pid=18039 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1047.552824][ T5228] Bluetooth: hci8: command tx timeout [ 1047.653099][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.659497][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.183773][T18140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1108'. [ 1049.418548][T17944] chnl_net:caif_netlink_parms(): no params data found [ 1049.588263][ T5228] Bluetooth: hci8: command tx timeout [ 1049.803547][T18189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=18189 comm=syz.4.1113 [ 1050.320214][ T30] audit: type=1400 audit(1727071297.621:1125): avc: denied { remount } for pid=18165 comm="syz.1.1110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1050.690715][ T5308] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1050.927606][ T5308] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1050.932525][T17944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.963172][ T5308] usb 1-1: config 0 has no interface number 0 [ 1050.980671][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.992216][ T5308] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1051.028352][T17944] bridge_slave_0: entered allmulticast mode [ 1051.046441][ T5308] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1051.082938][T17944] bridge_slave_0: entered promiscuous mode [ 1051.104421][ T5308] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1051.139748][T17944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.154466][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1051.165144][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.204799][ T5308] usb 1-1: Product: syz [ 1051.211714][ T5308] usb 1-1: SerialNumber: syz [ 1051.217271][T17944] bridge_slave_1: entered allmulticast mode [ 1051.249972][ T5308] usb 1-1: config 0 descriptor?? [ 1051.270737][T17944] bridge_slave_1: entered promiscuous mode [ 1051.301949][ T5308] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1051.397998][ T5308] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input17 [ 1053.605719][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.613965][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.623050][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.630364][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.637598][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.644919][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.652102][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.659272][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.666436][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.675340][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1053.726792][T17944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.816405][ T5275] usb 1-1: USB disconnect, device number 24 [ 1053.816616][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1054.070938][T18293] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 1054.080691][T18293] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1119'. [ 1054.122780][ T5275] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1054.295381][T17944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.038468][T11526] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1055.262925][T11526] usb 4-1: Using ep0 maxpacket: 8 [ 1055.301380][T11526] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.335668][ T5275] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1055.391811][T11526] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1055.540429][T11526] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1055.597115][T11526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.626413][T17944] team0: Port device team_slave_0 added [ 1056.364358][ T5275] usb 1-1: device descriptor read/64, error -71 [ 1056.420185][T11526] usbtmc 4-1:16.0: bulk endpoints not found [ 1056.625437][ T5308] usb 4-1: USB disconnect, device number 22 [ 1056.648535][ T30] audit: type=1326 audit(1727071304.245:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18359 comm="syz.4.1124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8027d7def9 code=0x0 [ 1056.695148][ T5275] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 1056.854662][T17944] team0: Port device team_slave_1 added [ 1056.900298][ T5275] usb 1-1: device descriptor read/64, error -71 [ 1057.025676][ T5275] usb usb1-port1: attempt power cycle [ 1057.142740][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.300636][ T30] audit: type=1400 audit(1727071304.938:1127): avc: denied { create } for pid=18360 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1057.365679][T17944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.385156][T17944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.439347][ T30] audit: type=1400 audit(1727071304.991:1128): avc: denied { write } for pid=18360 comm="syz.1.1125" path="socket:[48305]" dev="sockfs" ino=48305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1057.447684][T17944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.505285][T18374] bridge0: port 3(team0) entered blocking state [ 1057.518622][T18374] bridge0: port 3(team0) entered disabled state [ 1057.528326][T18374] team0: entered allmulticast mode [ 1057.534019][T18374] team_slave_0: entered allmulticast mode [ 1057.542640][T18374] team_slave_1: entered allmulticast mode [ 1057.557660][T18374] team0: entered promiscuous mode [ 1057.563021][T18374] team_slave_0: entered promiscuous mode [ 1057.570185][T18374] team_slave_1: entered promiscuous mode [ 1057.581390][T18374] bridge0: port 3(team0) entered blocking state [ 1057.588550][T18374] bridge0: port 3(team0) entered forwarding state [ 1057.650718][T18389] team_slave_0: left promiscuous mode [ 1057.662798][T18389] team_slave_0: left allmulticast mode [ 1057.806402][T18389] team0: Port device team_slave_0 removed [ 1057.931158][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.008761][T17944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.033847][T17944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.127830][T17944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.367893][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.358320][ T30] audit: type=1400 audit(1727071307.111:1129): avc: denied { bind } for pid=18417 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1059.388612][T18432] Process accounting resumed [ 1059.395572][ T30] audit: type=1400 audit(1727071307.132:1130): avc: denied { name_bind } for pid=18417 comm="syz.0.1128" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1059.473345][ T30] audit: type=1400 audit(1727071307.132:1131): avc: denied { node_bind } for pid=18417 comm="syz.0.1128" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1059.845043][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.146124][T17944] hsr_slave_0: entered promiscuous mode [ 1060.223183][T17944] hsr_slave_1: entered promiscuous mode [ 1060.257213][T17944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.272476][T17944] Cannot create hsr debugfs directory [ 1062.094099][T11526] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1062.143231][ T30] audit: type=1400 audit(1727071310.019:1132): avc: denied { bind } for pid=18528 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1062.345552][T11526] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1062.374731][T11526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.402412][T11526] usb 5-1: Product: syz [ 1062.416584][T11526] usb 5-1: Manufacturer: syz [ 1062.431992][T11526] usb 5-1: SerialNumber: syz [ 1062.468252][T11526] usb 5-1: config 0 descriptor?? [ 1062.529334][T11526] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 022 [ 1062.568948][ T12] bridge_slave_1: left allmulticast mode [ 1062.587001][ T12] bridge_slave_1: left promiscuous mode [ 1062.592893][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.753306][ T12] bridge_slave_0: left allmulticast mode [ 1062.779590][ T12] bridge_slave_0: left promiscuous mode [ 1062.785491][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.887330][T11526] i2c i2c-1: connected i2c-tiny-usb device [ 1064.059266][ T12] infiniband syz1: set down [ 1064.111955][ T5308] usb 5-1: USB disconnect, device number 22 [ 1064.140157][ T5320] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1064.386422][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.460964][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.530690][ T5320] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1064.539812][ T5320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.636955][ T5320] usb 2-1: config 0 descriptor?? [ 1065.127793][ T5320] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 1065.200137][ T5320] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 1065.245003][ T5320] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 1065.264823][ T5320] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 1065.289728][T18581] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1065.297251][T18581] vhci_hcd: invalid port number 10 [ 1065.302993][T18581] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1065.321152][ T5320] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 1065.326144][T18581] overlayfs: failed to resolve './file0/file0': -2 [ 1065.338662][ T5320] cm6533_jd 0003:0D8C:0022.0009: No inputs registered, leaving [ 1065.396460][ T5320] cm6533_jd 0003:0D8C:0022.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1067.730461][ T30] audit: type=1326 audit(1727071315.888:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.3.1145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2e237def9 code=0x0 [ 1067.804222][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.810005][ T1004] smc: removing ib device syz1 [ 1067.830852][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 1067.876513][ T12] bond0 (unregistering): Released all slaves [ 1068.288355][ T5275] usb 2-1: USB disconnect, device number 18 [ 1071.551011][ T5274] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1071.814189][ T5274] usb 5-1: config 0 has an invalid interface number: 141 but max is 0 [ 1071.890565][ T5274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.191043][ T5274] usb 5-1: config 0 has no interface number 0 [ 1072.198012][ T5274] usb 5-1: config 0 interface 141 altsetting 0 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 1072.230030][ T5274] usb 5-1: config 0 interface 141 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1072.889161][ T5274] usb 5-1: New USB device found, idVendor=1209, idProduct=b1e2, bcdDevice=9c.82 [ 1073.173697][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.192223][ T30] audit: type=1400 audit(1727071321.620:1134): avc: denied { mount } for pid=18715 comm="syz.1.1153" name="/" dev="rpc_pipefs" ino=47548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1073.269418][ T5274] usb 5-1: Product: syz [ 1073.273660][ T5274] usb 5-1: Manufacturer: syz [ 1073.315155][ T5274] usb 5-1: SerialNumber: syz [ 1073.426895][ T5274] usb 5-1: config 0 descriptor?? [ 1073.515483][ T5274] usb 5-1: can't set config #0, error -71 [ 1073.579074][ T5274] usb 5-1: USB disconnect, device number 23 [ 1074.535235][T18760] tmpfs: Unknown parameter 'nr_inodl[o75YQKw>u] 0oNy [ 1074.535235][T18760] NcZԶ' [ 1074.591328][T18758] xt_nat: multiple ranges no longer supported [ 1077.404348][ T30] audit: type=1400 audit(1727071326.050:1135): avc: denied { mount } for pid=18757 comm="syz.4.1157" name="/" dev="pstore" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1078.019526][ T30] audit: type=1400 audit(1727071326.690:1136): avc: denied { unmount } for pid=16082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1080.043102][ T5274] IPVS: starting estimator thread 0... [ 1080.153002][T18827] IPVS: using max 14 ests per chain, 33600 per kthread [ 1080.196007][T17944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1080.305917][T17944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1080.840215][T17944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1085.796181][T17944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1086.344604][ T5237] Bluetooth: hci7: command 0x0406 tx timeout [ 1086.606920][T18875] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1168'. [ 1087.818259][ T30] audit: type=1400 audit(1727071336.978:1137): avc: denied { wake_alarm } for pid=18889 comm="syz.4.1171" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1088.346004][T17944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.473944][T17944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.586408][ T5518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.593709][ T5518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.691057][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.698375][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.798221][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1089.810617][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1089.819767][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1089.828564][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1089.839144][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1089.849321][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1091.811253][ T5224] Bluetooth: hci1: command tx timeout [ 1092.040602][ T5224] Bluetooth: hci2: command tx timeout [ 1092.121167][ T12] hsr_slave_0: left promiscuous mode [ 1092.179829][ T12] hsr_slave_1: left promiscuous mode [ 1092.277385][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.336313][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.368686][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.398633][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.840816][T18976] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1178'. [ 1093.096217][ T12] veth1_macvtap: left promiscuous mode [ 1093.203047][ T12] veth0_macvtap: left promiscuous mode [ 1093.208894][ T12] veth1_vlan: left promiscuous mode [ 1093.260088][ T12] veth0_vlan: left promiscuous mode [ 1093.479500][ T5224] Bluetooth: hci0: command 0x0406 tx timeout [ 1093.630242][ T5228] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1093.783935][ T5228] Bluetooth: hci1: command tx timeout [ 1093.956806][ T12] pimreg (unregistering): left allmulticast mode [ 1094.012413][ T5228] Bluetooth: hci2: command 0x0406 tx timeout [ 1095.428012][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1095.551852][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1095.765419][ T5228] Bluetooth: hci1: command tx timeout [ 1096.997265][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1097.011814][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1097.025735][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1097.057397][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1097.067458][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1097.077019][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1097.784854][ T5237] Bluetooth: hci1: command tx timeout [ 1099.043459][ T5237] Bluetooth: hci3: command tx timeout [ 1099.754615][ T30] audit: type=1326 audit(1727071349.513:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19145 comm="syz.3.1185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2e237def9 code=0x0 [ 1099.946854][ T30] audit: type=1326 audit(1727071349.702:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19145 comm="syz.3.1185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2e237def9 code=0x0 [ 1101.023502][ T5237] Bluetooth: hci3: command tx timeout [ 1101.256877][T19032] chnl_net:caif_netlink_parms(): no params data found [ 1101.417921][T19303] fuse: Unknown parameter '[Iƈ)l|0x0000000000000005' [ 1101.528699][T18921] chnl_net:caif_netlink_parms(): no params data found [ 1102.225545][T19032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.284157][T19032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.396102][T19032] bridge_slave_0: entered allmulticast mode [ 1102.422238][T19032] bridge_slave_0: entered promiscuous mode [ 1102.451567][T19032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.466808][T19032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.521974][T19032] bridge_slave_1: entered allmulticast mode [ 1102.569213][T19032] bridge_slave_1: entered promiscuous mode [ 1103.008393][ T5237] Bluetooth: hci3: command tx timeout [ 1103.230451][T19032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.271674][T18921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.318850][T18921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.335324][T18921] bridge_slave_0: entered allmulticast mode [ 1103.368663][T18921] bridge_slave_0: entered promiscuous mode [ 1103.599632][T19445] ipt_ECN: cannot use operation on non-tcp rule [ 1103.611694][ T30] audit: type=1400 audit(1727071353.554:1140): avc: denied { ioctl } for pid=19444 comm="syz.0.1193" path="socket:[49229]" dev="sockfs" ino=49229 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1103.703766][T19032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.739770][T18921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.782392][T18921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.831397][T18921] bridge_slave_1: entered allmulticast mode [ 1103.908446][T18921] bridge_slave_1: entered promiscuous mode [ 1104.491549][ T5308] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1104.709663][ T5308] usb 5-1: Using ep0 maxpacket: 8 [ 1104.791116][T19032] team0: Port device team_slave_0 added [ 1104.797667][ T5308] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.875696][ T5308] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1104.880397][T18921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.890399][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1104.903367][ T5308] usb 5-1: SerialNumber: syz [ 1104.931216][ T5308] usb 5-1: config 0 descriptor?? [ 1104.972953][ T5308] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 1104.986209][ T5237] Bluetooth: hci3: command tx timeout [ 1105.082040][T18921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.100824][ T5308] usb 5-1: Failed to create links for entity 255 [ 1105.145360][T19032] team0: Port device team_slave_1 added [ 1105.166394][ T5308] usb 5-1: Failed to register entities (-22). [ 1105.527860][T18921] team0: Port device team_slave_0 added [ 1105.703884][T19449] openvswitch: netlink: Missing key (keys=20040, expected=10000000) [ 1105.717536][ T5288] usb 5-1: USB disconnect, device number 24 [ 1105.785304][T18921] team0: Port device team_slave_1 added [ 1105.963392][T19032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.978977][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.015245][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1106.042055][T19032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.148127][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1106.225378][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1106.237238][ T8] usb 4-1: config 0 has an invalid interface number: 190 but max is 0 [ 1106.245969][T18921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.253936][ T8] usb 4-1: config 0 has no interface number 0 [ 1106.260113][T18921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.286024][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.303744][T18921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.303978][ T8] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 1106.327340][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.339921][T18921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.347110][ T8] usb 4-1: Product: syz [ 1106.366989][T18921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.393038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.405222][ T8] usb 4-1: Manufacturer: syz [ 1106.409899][ T8] usb 4-1: SerialNumber: syz [ 1106.447544][ T8] usb 4-1: config 0 descriptor?? [ 1106.482190][ T8] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 1106.492336][T18921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.510123][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 1106.523800][ T8] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1106.526513][T19032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.537453][ T8] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 1106.550564][ T8] usb 4-1: media controller created [ 1106.560063][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1106.569308][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.595289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.604863][T19032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.629980][ T8] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1106.652212][ T8] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1106.884847][T19632] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1199'. [ 1106.910933][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.012940][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.092565][ T8] rc_core: IR keymap rc-dtt200u not found [ 1107.098366][ T8] Registered IR keymap rc-empty [ 1107.139038][ T8] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1107.157332][ T8] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input18 [ 1107.182380][ T8] dvb-usb: schedule remote query interval to 300 msecs. [ 1107.191028][ T8] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 1107.466402][T18921] hsr_slave_0: entered promiscuous mode [ 1107.482521][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 1107.488959][ T8] dvb-usb: error -22 while querying for an remote control event. [ 1107.539884][T18921] hsr_slave_1: entered promiscuous mode [ 1107.577908][T18921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.585585][T18921] Cannot create hsr debugfs directory [ 1107.607593][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.649854][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.722027][T19032] hsr_slave_0: entered promiscuous mode [ 1107.747115][T19032] hsr_slave_1: entered promiscuous mode [ 1107.779861][T19032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.806276][T19032] Cannot create hsr debugfs directory [ 1107.844180][ T5308] dvb-usb: bulk message failed: -22 (1/0) [ 1107.871473][ T5308] dvb-usb: error -22 while querying for an remote control event. [ 1107.893365][ T30] audit: type=1400 audit(1727071358.048:1141): avc: denied { map } for pid=19564 comm="syz.3.1198" path="socket:[48967]" dev="sockfs" ino=48967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1107.918119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1107.938195][ T943] usb 4-1: USB disconnect, device number 23 [ 1108.053156][ T30] audit: type=1400 audit(1727071358.048:1142): avc: denied { accept } for pid=19564 comm="syz.3.1198" path="socket:[48967]" dev="sockfs" ino=48967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1108.066823][ T6016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.227799][ T943] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 1108.537885][ T6016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.143285][ T6016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.392287][ T6016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.853607][ T30] audit: type=1804 audit(1727071360.095:1143): pid=19798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1204" name="/newroot/53/bus/bus" dev="overlay" ino=308 res=1 errno=0 [ 1110.855310][ T5228] Bluetooth: hci3: command 0x0405 tx timeout [ 1111.924393][ T30] audit: type=1400 audit(1727071362.268:1144): avc: denied { connect } for pid=19833 comm="syz.0.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1111.944663][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.463757][ T5308] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1114.418639][ T5308] usb 5-1: Using ep0 maxpacket: 8 [ 1114.440479][ T5308] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1114.588757][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.652750][ T5308] usb 5-1: Product: syz [ 1114.735660][ T5308] usb 5-1: Manufacturer: syz [ 1114.781608][ T5308] usb 5-1: SerialNumber: syz [ 1114.839926][ T5308] usb 5-1: config 0 descriptor?? [ 1114.899862][ T5308] usb 5-1: can't set config #0, error -71 [ 1115.030637][ T5308] usb 5-1: USB disconnect, device number 25 [ 1115.389791][ T6016] bridge_slave_1: left allmulticast mode [ 1115.412591][ T6016] bridge_slave_1: left promiscuous mode [ 1115.435686][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.665274][T19930] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1209'. [ 1115.694197][ T6016] bridge_slave_0: left allmulticast mode [ 1115.700153][ T6016] bridge_slave_0: left promiscuous mode [ 1115.708187][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.735376][ T6016] bridge_slave_1: left allmulticast mode [ 1115.742990][ T6016] bridge_slave_1: left promiscuous mode [ 1115.750974][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.771430][ T6016] bridge_slave_0: left allmulticast mode [ 1115.777154][ T6016] bridge_slave_0: left promiscuous mode [ 1115.793859][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.119142][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.140611][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.155405][ T6016] bond0 (unregistering): Released all slaves [ 1119.282273][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.313837][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.329714][ T6016] bond0 (unregistering): Released all slaves [ 1120.021425][T19977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1214'. [ 1120.255271][T19989] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1215'. [ 1120.412527][ T8] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1120.611719][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 1120.651927][ T8] usb 1-1: config 114 has an invalid interface number: 24 but max is 1 [ 1120.702815][ T8] usb 1-1: config 114 has an invalid interface number: 125 but max is 1 [ 1120.711247][ T8] usb 1-1: config 114 has no interface number 0 [ 1120.780086][ T8] usb 1-1: config 114 has no interface number 1 [ 1120.786500][ T8] usb 1-1: config 114 interface 24 altsetting 14 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1120.893769][ T8] usb 1-1: config 114 interface 125 altsetting 127 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1120.923704][ T8] usb 1-1: config 114 interface 125 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 1120.941625][ T6016] hsr_slave_0: left promiscuous mode [ 1120.970641][ T6016] hsr_slave_1: left promiscuous mode [ 1120.979548][ T8] usb 1-1: config 114 interface 125 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 1121.012957][ T8] usb 1-1: config 114 interface 125 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 1121.042052][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.052347][ T8] usb 1-1: config 114 interface 125 altsetting 127 has an endpoint descriptor with address 0x43, changing to 0x3 [ 1121.334414][ T8] usb 1-1: config 114 interface 125 altsetting 127 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1121.361648][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.381083][ T8] usb 1-1: config 114 interface 125 altsetting 127 endpoint 0x81 has invalid maxpacket 54693, setting to 64 [ 1123.032595][ T30] audit: type=1326 audit(1727071372.986:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.094579][ T30] audit: type=1326 audit(1727071373.007:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.192866][ T30] audit: type=1326 audit(1727071373.039:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.284315][ T30] audit: type=1326 audit(1727071373.049:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.340381][ T30] audit: type=1326 audit(1727071373.060:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.429345][ T30] audit: type=1326 audit(1727071373.081:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.435151][ T8] usb 1-1: config 114 interface 125 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 1123.505282][ T8] usb 1-1: config 114 interface 125 altsetting 127 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1123.522644][ T30] audit: type=1326 audit(1727071373.102:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.570360][ T8] usb 1-1: config 114 interface 125 altsetting 127 has an endpoint descriptor with address 0x74, changing to 0x4 [ 1123.582913][ T5308] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1123.617959][ T8] usb 1-1: config 114 interface 125 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 1123.630966][ T30] audit: type=1326 audit(1727071373.123:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.666440][ T6016] hsr_slave_0: left promiscuous mode [ 1123.673302][ T8] usb 1-1: config 114 interface 125 altsetting 127 has 12 endpoint descriptors, different from the interface descriptor's value: 10 [ 1123.691770][ T6016] hsr_slave_1: left promiscuous mode [ 1123.709098][ T30] audit: type=1326 audit(1727071373.154:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.741764][ T8] usb 1-1: config 114 interface 24 has no altsetting 0 [ 1123.748708][ T8] usb 1-1: config 114 interface 125 has no altsetting 0 [ 1123.771195][ T8] usb 1-1: string descriptor 0 read error: -71 [ 1123.777736][ T8] usb 1-1: New USB device found, idVendor=19d2, idProduct=1165, bcdDevice=36.f9 [ 1123.911863][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.918908][ T5308] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1123.921972][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.928319][ T5308] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.945303][ T30] audit: type=1326 audit(1727071373.186:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20012 comm="syz.4.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8027d7def9 code=0x7ffc0000 [ 1123.967051][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.980768][T20029] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1220'. [ 1123.983151][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.006984][ T5308] usb 4-1: config 0 has no interface number 0 [ 1124.020446][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.029064][ T5308] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1124.047232][ T8] usb 1-1: can't set config #114, error -71 [ 1124.063870][ T5308] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1124.094575][ T8] usb 1-1: USB disconnect, device number 28 [ 1124.120145][ T5308] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1124.176229][ T5308] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1124.202069][ T5308] usb 4-1: string descriptor 0 read error: -71 [ 1124.227634][ T5308] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1124.263586][ T6016] veth1_macvtap: left promiscuous mode [ 1124.277535][ T5308] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1124.290615][ T6016] veth0_macvtap: left promiscuous mode [ 1124.305044][ T6016] veth1_vlan: left promiscuous mode [ 1124.316822][ T5308] usb 4-1: config 0 descriptor?? [ 1124.329620][ T6016] veth0_vlan: left promiscuous mode [ 1124.340543][ T5308] usb 4-1: can't set config #0, error -71 [ 1124.389169][ T5308] usb 4-1: USB disconnect, device number 24 [ 1126.028830][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 1126.191117][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 1126.226886][T20058] delete_channel: no stack [ 1128.917438][T20075] Device name cannot be null; rc = [-22] [ 1132.237516][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 1132.338799][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 1134.223835][T20102] x_tables: duplicate underflow at hook 2 [ 1134.836939][T18921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1135.197700][T18921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1135.220290][ T5228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1135.233452][ T5228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1135.260548][ T5228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1135.285566][ T5228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1135.316918][ T5228] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1135.334873][ T5228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1135.573525][T18921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1135.664460][T20123] sp0: Synchronizing with TNC [ 1135.674064][T18921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1136.582975][ T5275] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1136.782538][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 1136.818029][ T5275] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1136.830884][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.873731][ T5275] usb 4-1: config 0 descriptor?? [ 1136.893738][ T5275] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1136.993288][ T5228] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 1137.118584][T20177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.151815][T20192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1235'. [ 1137.450628][ T5228] Bluetooth: hci6: command tx timeout [ 1137.669206][T20149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.752073][T20149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.772847][ T5275] gspca_nw80x: reg_r err -71 [ 1137.777662][ T5275] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1137.865185][ T5275] usb 4-1: USB disconnect, device number 25 [ 1138.090950][T19032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1138.326814][T18921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.355071][T19032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1139.430889][ T5228] Bluetooth: hci6: command tx timeout [ 1139.640174][ T6016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.714418][T19032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1139.764041][T19032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1139.858390][T18921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.939478][ T6016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.009851][T20118] chnl_net:caif_netlink_parms(): no params data found [ 1140.169548][ T6016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.263192][ T2526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.270496][ T2526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.310406][ T2526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.317840][ T2526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.493640][ T6016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.803888][ T5228] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1140.812918][ T5228] Bluetooth: hci0: Injecting HCI hardware error event [ 1140.823223][ T5228] Bluetooth: hci0: hardware error 0x00 [ 1140.962448][T20118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.971710][T20118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.980649][T20118] bridge_slave_0: entered allmulticast mode [ 1140.991552][T20118] bridge_slave_0: entered promiscuous mode [ 1141.032429][T20118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.039650][T20118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.068784][T20118] bridge_slave_1: entered allmulticast mode [ 1141.077446][T20118] bridge_slave_1: entered promiscuous mode [ 1141.369409][T20118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.412083][ T5237] Bluetooth: hci6: command tx timeout [ 1141.451268][T20118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.985858][T20118] team0: Port device team_slave_0 added [ 1142.130157][T20118] team0: Port device team_slave_1 added [ 1142.252001][ T943] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1142.339748][ T6016] bridge_slave_1: left allmulticast mode [ 1142.351473][ T6016] bridge_slave_1: left promiscuous mode [ 1142.774694][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.795291][ T943] usb 5-1: Using ep0 maxpacket: 16 [ 1142.815599][ T943] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 204, changing to 7 [ 1142.827234][ T5228] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1142.840699][ T943] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 1142.869461][ T943] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1142.879540][ T943] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1142.897458][ T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.917079][ T943] usb 5-1: Product: syz [ 1142.921285][ T943] usb 5-1: Manufacturer: syz [ 1142.925880][ T943] usb 5-1: SerialNumber: syz [ 1143.032539][ T6016] bridge_slave_0: left allmulticast mode [ 1143.038263][ T6016] bridge_slave_0: left promiscuous mode [ 1143.074910][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.185303][ T943] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1143.287633][ T943] usb 5-1: USB disconnect, device number 26 [ 1143.382707][T19681] udevd[19681]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1143.401964][ T5228] Bluetooth: hci6: command tx timeout [ 1143.872363][ T46] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1144.964410][ C1] hrtimer: interrupt took 103262 ns [ 1145.133986][ T5237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1145.172892][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1145.196928][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1145.242311][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1145.287973][ T5237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1145.304552][ T5237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1146.024875][ T943] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1146.155295][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1146.177818][ T46] usb 4-1: no configurations [ 1146.182503][ T46] usb 4-1: can't read configurations, error -22 [ 1146.332351][ T943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 116, changing to 10 [ 1146.349221][ T943] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1146.381879][ T943] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1146.404505][ T943] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1146.420362][ T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.438960][ T943] usb 5-1: Product: о [ 1146.448894][ T943] usb 5-1: Manufacturer: Ѓ [ 1146.453957][ T943] usb 5-1: SerialNumber: ࠁ [ 1146.603859][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.638863][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.667651][ T6016] bond0 (unregistering): Released all slaves [ 1146.689113][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1146.689133][ T30] audit: type=1400 audit(1727071398.780:1178): avc: denied { listen } for pid=20526 comm="syz.4.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1146.711560][ T943] cdc_ncm 5-1:1.0: bind() failure [ 1146.808394][ T943] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1146.835404][ T943] cdc_ncm 5-1:1.1: bind() failure [ 1146.873764][ T943] usb 5-1: USB disconnect, device number 27 [ 1147.244495][T20118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.252565][T20118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.278488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.310986][T20118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.452381][ T5237] Bluetooth: hci7: command tx timeout [ 1147.489419][T20118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.523548][T20118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.551844][T20118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.987723][ T30] audit: type=1400 audit(1727071400.134:1179): avc: denied { setopt } for pid=20585 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1148.007298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.057846][ T30] audit: type=1400 audit(1727071400.166:1180): avc: denied { write } for pid=20585 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1148.085538][ T6016] hsr_slave_0: left promiscuous mode [ 1148.111399][ T6016] hsr_slave_1: left promiscuous mode [ 1148.137371][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.875864][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.896143][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 1148.940036][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.962022][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.088610][ T6016] veth1_macvtap: left promiscuous mode [ 1149.113181][ T6016] veth0_macvtap: left promiscuous mode [ 1149.127002][ T6016] veth1_vlan: left promiscuous mode [ 1149.146013][ T6016] veth0_vlan: left promiscuous mode [ 1149.415172][ T5237] Bluetooth: hci7: command tx timeout [ 1151.020125][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 1151.409368][ T5237] Bluetooth: hci7: command tx timeout [ 1151.459389][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 1151.933180][ T943] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1152.091713][ T943] usb 5-1: device descriptor read/64, error -71 [ 1152.382432][ T943] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1152.556562][ T943] usb 5-1: device descriptor read/64, error -71 [ 1152.710724][ T943] usb usb5-port1: attempt power cycle [ 1152.867928][T20118] hsr_slave_0: entered promiscuous mode [ 1152.877417][T20118] hsr_slave_1: entered promiscuous mode [ 1152.892622][T19032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.138626][ T943] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1153.183315][T19032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.241004][ T943] usb 5-1: device descriptor read/8, error -71 [ 1153.376172][ T5237] Bluetooth: hci7: command tx timeout [ 1153.547802][ T943] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1153.608640][ T943] usb 5-1: device descriptor read/8, error -71 [ 1153.625833][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.633140][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.661542][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.668905][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.729199][ T943] usb usb5-port1: unable to enumerate USB device [ 1153.780066][ T6016] IPVS: stop unused estimator thread 0... [ 1153.903981][T20513] chnl_net:caif_netlink_parms(): no params data found [ 1154.834741][T20513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.847864][T20513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.856660][T20513] bridge_slave_0: entered allmulticast mode [ 1154.879645][T20513] bridge_slave_0: entered promiscuous mode [ 1154.897838][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1154.914127][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1154.940414][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1154.962719][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1154.975581][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1154.992058][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1155.048417][T20513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.056600][T20513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.064781][T20513] bridge_slave_1: entered allmulticast mode [ 1155.084579][T20513] bridge_slave_1: entered promiscuous mode [ 1155.457015][T20513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.622765][T20513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.079712][T20513] team0: Port device team_slave_0 added [ 1156.176596][ T943] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1156.208487][T20513] team0: Port device team_slave_1 added [ 1156.418422][ T943] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1156.433002][ T943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.444507][ T943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1156.467420][ T943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.514194][ T943] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1156.536744][ T943] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1156.565591][ T943] usb 5-1: Product: syz [ 1156.570597][ T943] usb 5-1: Manufacturer: syz [ 1156.616655][ T943] cdc_wdm 5-1:1.0: skipping garbage [ 1156.639525][ T943] cdc_wdm 5-1:1.0: skipping garbage [ 1156.667298][ T943] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1156.682784][T20513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.689921][ T943] cdc_wdm 5-1:1.0: Unknown control protocol [ 1156.694025][T20513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.773337][T20513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.800601][T20513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.845208][T20513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.859730][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1156.878296][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1156.884577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.890722][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1156.897365][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1156.903857][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1156.910516][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1156.916971][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1156.923710][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1156.930248][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1156.936901][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1156.943372][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1156.950013][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1156.956606][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1156.958037][ T5237] Bluetooth: hci1: command tx timeout [ 1156.963219][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1156.963498][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1156.971462][T20513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.975101][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1156.998453][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.004575][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1157.011214][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1157.017622][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1157.024270][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1157.073819][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1157.088168][ T943] usb 5-1: USB disconnect, device number 32 [ 1157.296308][T20118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1157.324979][ T6016] bridge_slave_1: left allmulticast mode [ 1157.330917][ T6016] bridge_slave_1: left promiscuous mode [ 1157.340211][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.353487][ T6016] bridge_slave_0: left allmulticast mode [ 1157.366336][ T6016] bridge_slave_0: left promiscuous mode [ 1157.379137][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.965917][ T5237] Bluetooth: hci1: command tx timeout [ 1159.530519][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.549153][ T5308] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1159.569295][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.588510][ T6016] bond0 (unregistering): Released all slaves [ 1159.739032][ T5308] usb 4-1: Using ep0 maxpacket: 16 [ 1159.757132][ T5308] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1159.760846][T20118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1159.769953][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1159.839654][ T5308] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1159.849728][T20118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1159.859659][ T5308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.868033][ T5308] usb 4-1: Product: syz [ 1159.873957][ T5308] usb 4-1: Manufacturer: syz [ 1159.878629][ T5308] usb 4-1: SerialNumber: syz [ 1159.888748][ T5308] usb 4-1: config 0 descriptor?? [ 1159.980230][ T5308] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1160.007528][ T5308] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1160.219769][T20118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1160.265380][T21213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.288754][T20513] hsr_slave_0: entered promiscuous mode [ 1160.296575][T21213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.324707][T20513] hsr_slave_1: entered promiscuous mode [ 1160.340012][T20513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.347811][T20513] Cannot create hsr debugfs directory [ 1160.381959][ T6016] hsr_slave_0: left promiscuous mode [ 1160.399050][ T6016] hsr_slave_1: left promiscuous mode [ 1160.445546][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.478828][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.920623][ T5237] Bluetooth: hci1: command tx timeout [ 1161.514599][ T5308] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1161.664181][ T5308] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1161.802789][ T5308] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1161.823458][ T5308] em28xx 4-1:0.0: No AC97 audio processor [ 1162.089916][ T30] audit: type=1400 audit(1727071414.947:1181): avc: denied { append } for pid=21242 comm="syz.4.1269" name="event1" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1162.936714][ T5237] Bluetooth: hci1: command tx timeout [ 1163.534665][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 1163.888494][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 1164.658736][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1164.822253][T21264] delete_channel: no stack [ 1166.002599][T21268] netlink: 'syz.4.1271': attribute type 9 has an invalid length. [ 1166.274951][ T940] usb 4-1: USB disconnect, device number 28 [ 1166.282563][ T940] em28xx 4-1:0.0: Disconnecting em28xx [ 1166.326806][ T940] em28xx 4-1:0.0: Freeing device [ 1166.390115][T20900] chnl_net:caif_netlink_parms(): no params data found [ 1168.596670][T20900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.626411][T20900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.633774][T20900] bridge_slave_0: entered allmulticast mode [ 1168.681131][T20900] bridge_slave_0: entered promiscuous mode [ 1168.737876][T20900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.745408][T20900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.756410][T20900] bridge_slave_1: entered allmulticast mode [ 1168.782424][T20900] bridge_slave_1: entered promiscuous mode [ 1168.985779][T20900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.094506][T20900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.323209][T20900] team0: Port device team_slave_0 added [ 1169.356337][T20900] team0: Port device team_slave_1 added [ 1169.521709][T20900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.532789][ T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1169.534079][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.566337][ C0] vkms_vblank_simulate: vblank timer overrun [ 1169.586936][T20900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.678760][T20900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.693225][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.723198][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1169.743679][T20900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.760009][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1169.779427][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1169.810578][ T25] usb 5-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 1169.844084][ T25] usb 5-1: New USB device strings: Mfr=1, Product=227, SerialNumber=2 [ 1169.864064][ T25] usb 5-1: Product: syz [ 1169.881329][ T25] usb 5-1: Manufacturer: syz [ 1169.901490][ T25] usb 5-1: SerialNumber: syz [ 1169.923887][ T25] usb 5-1: config 0 descriptor?? [ 1170.766630][ T25] usb 5-1: USB disconnect, device number 33 [ 1171.016518][T21586] binder: 21560:21586 ioctl c0306201 0 returned -14 [ 1171.193398][T20900] hsr_slave_0: entered promiscuous mode [ 1171.204926][T20900] hsr_slave_1: entered promiscuous mode [ 1171.220160][T20900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1171.235414][T20900] Cannot create hsr debugfs directory [ 1172.493070][T21632] trusted_key: encrypted_key: insufficient parameters specified [ 1172.512909][T21632] netlink: 'syz.4.1281': attribute type 7 has an invalid length. [ 1172.619767][T20513] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1172.733573][ T30] audit: type=1400 audit(1727071425.907:1182): avc: denied { shutdown } for pid=21617 comm="syz.4.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1172.898248][ T5308] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1173.391850][T20118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.449257][T20513] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1173.487547][T20513] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1173.511501][T20513] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1173.570533][ T5308] usb 5-1: Using ep0 maxpacket: 32 [ 1173.603070][ T5308] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1173.643620][ T5308] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1173.663559][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.673109][ T5308] usb 5-1: Product: syz [ 1173.678188][ T5308] usb 5-1: Manufacturer: syz [ 1173.683273][ T5308] usb 5-1: SerialNumber: syz [ 1173.861817][T20118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.075070][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1274.082104][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2571/1:b..l P21678/1:b..l P4674/1:b..l [ 1274.093491][ C0] rcu: (detected by 0, t=10502 jiffies, g=111393, q=231 ncpus=2) [ 1274.101378][ C0] task:udevd state:R running task stack:24176 pid:4674 tgid:4674 ppid:1 flags:0x00000002 [ 1274.115464][ C0] Call Trace: [ 1274.118832][ C0] [ 1274.121815][ C0] __schedule+0xe37/0x5490 [ 1274.126489][ C0] ? find_held_lock+0x2d/0x110 [ 1274.131411][ C0] ? __pfx_lock_release+0x10/0x10 [ 1274.136527][ C0] ? __pfx___schedule+0x10/0x10 [ 1274.141473][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1274.146912][ C0] preempt_schedule_common+0x44/0xc0 [ 1274.152274][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1274.157534][ C0] _raw_spin_unlock+0x3e/0x50 [ 1274.162275][ C0] do_wp_page+0x15fd/0x3430 [ 1274.166843][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1274.171937][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1274.176850][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1274.182468][ C0] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 1274.187737][ C0] __handle_mm_fault+0x2474/0x5650 [ 1274.192925][ C0] ? __pfx_lock_release+0x10/0x10 [ 1274.198024][ C0] ? down_read_trylock+0x1ed/0x3f0 [ 1274.203273][ C0] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 1274.208581][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1274.214118][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1274.219898][ C0] handle_mm_fault+0x498/0xa60 [ 1274.224726][ C0] ? __pkru_allows_pkey+0x21/0xb0 [ 1274.229862][ C0] do_user_addr_fault+0x60d/0x13f0 [ 1274.235147][ C0] exc_page_fault+0x5c/0xc0 [ 1274.239727][ C0] asm_exc_page_fault+0x26/0x30 [ 1274.244746][ C0] RIP: 0033:0x562d15d50e9c [ 1274.249492][ C0] RSP: 002b:00007ffcdd4b55f8 EFLAGS: 00010246 [ 1274.255713][ C0] RAX: 0000562d299f6138 RBX: 0000562d299f6130 RCX: 000000000000001f [ 1274.263735][ C0] RDX: 0000562d299d0e00 RSI: 0000562d299c2010 RDI: 0000562d299f6240 [ 1274.271773][ C0] RBP: 0000562d299f6240 R08: 0000000000000000 R09: ae95a2961732cd02 [ 1274.279805][ C0] R10: d00103b0a134fd1f R11: 0000000000000007 R12: 0000000000000000 [ 1274.287826][ C0] R13: 0000000200000001 R14: 0000000000000000 R15: 0000000000000000 [ 1274.295871][ C0] [ 1274.298929][ C0] task:udevd state:R running task stack:28464 pid:21678 tgid:21678 ppid:4674 flags:0x00000002 [ 1274.310730][ C0] Call Trace: [ 1274.314045][ C0] [ 1274.317020][ C0] __schedule+0xe37/0x5490 [ 1274.321535][ C0] ? find_held_lock+0x2d/0x110 [ 1274.326376][ C0] ? __pfx_lock_release+0x10/0x10 [ 1274.331486][ C0] ? __pfx___schedule+0x10/0x10 [ 1274.336517][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1274.341946][ C0] preempt_schedule_common+0x44/0xc0 [ 1274.347309][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1274.352574][ C0] _raw_spin_unlock+0x3e/0x50 [ 1274.357323][ C0] do_wp_page+0x15fd/0x3430 [ 1274.361904][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1274.366999][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1274.371908][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1274.377336][ C0] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 1274.382595][ C0] __handle_mm_fault+0x2474/0x5650 [ 1274.387793][ C0] ? __pfx_lock_release+0x10/0x10 [ 1274.392976][ C0] ? down_read_trylock+0x1ed/0x3f0 [ 1274.398140][ C0] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 1274.403569][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1274.409113][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1274.414710][ C0] ? do_user_addr_fault+0xe50/0x13f0 [ 1274.420079][ C0] handle_mm_fault+0x498/0xa60 [ 1274.424975][ C0] ? __pkru_allows_pkey+0x21/0xb0 [ 1274.430094][ C0] do_user_addr_fault+0x60d/0x13f0 [ 1274.435293][ C0] exc_page_fault+0x5c/0xc0 [ 1274.439873][ C0] asm_exc_page_fault+0x26/0x30 [ 1274.444795][ C0] RIP: 0033:0x7f9779cc72a4 [ 1274.449345][ C0] RSP: 002b:00007ffcdd4b5380 EFLAGS: 00010206 [ 1274.455465][ C0] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000562d299eb0e0 [ 1274.463568][ C0] RDX: 000056284b4c293c RSI: 0000000000000000 RDI: 0000562d299dccf0 [ 1274.471583][ C0] RBP: 0000562d299dcce0 R08: 0000000000000007 R09: ae95a2961732cd02 [ 1274.479618][ C0] R10: de738169618cfccf R11: 0000000000000007 R12: 0000000000000000 [ 1274.487722][ C0] R13: 0000562d299dcd10 R14: 00007f9779df1aa0 R15: 0000562d299c22c0 [ 1274.495765][ C0] [ 1274.498826][ C0] task:kworker/u8:11 state:R running task stack:22256 pid:2571 tgid:2571 ppid:2 flags:0x00004000 [ 1274.510632][ C0] Workqueue: bat_events batadv_nc_worker [ 1274.516346][ C0] Call Trace: [ 1274.519834][ C0] [ 1274.522896][ C0] __schedule+0xe37/0x5490 [ 1274.527398][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1274.532329][ C0] ? mark_lock+0xb5/0xc60 [ 1274.536824][ C0] ? __pfx___schedule+0x10/0x10 [ 1274.541823][ C0] ? hlock_class+0x4e/0x130 [ 1274.546401][ C0] ? mark_held_locks+0x9f/0xe0 [ 1274.551241][ C0] preempt_schedule_irq+0x51/0x90 [ 1274.556337][ C0] irqentry_exit+0x36/0x90 [ 1274.560806][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1274.566854][ C0] RIP: 0010:lock_release+0xee/0x6f0 [ 1274.572124][ C0] Code: 00 fc ff df 48 89 ea 48 c1 ea 03 0f b6 14 02 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 03 05 00 00 8b 3d 5a 02 b4 0e <85> ff 0f 84 e5 02 00 00 65 8b 05 3b c1 98 7e 85 c0 0f 85 d6 02 00 [ 1274.591877][ C0] RSP: 0018:ffffc90008f17ac8 EFLAGS: 00000246 [ 1274.598086][ C0] RAX: 0000000000000003 RBX: 1ffff920011e2f5b RCX: ffffffff8169c9f9 [ 1274.606284][ C0] RDX: 0000000000000000 RSI: ffffffff8bb11820 RDI: 0000000000000001 [ 1274.614304][ C0] RBP: ffffffff901dcc98 R08: 0000000000000000 R09: fffffbfff203b333 [ 1274.622321][ C0] R10: ffffffff901d999f R11: 0000000000000000 R12: ffffffff8ddba6a0 [ 1274.630340][ C0] R13: 000000000003d8cc R14: 000000000003d8cc R15: dffffc0000000000 [ 1274.638515][ C0] ? lock_release+0xa9/0x6f0 [ 1274.643293][ C0] ? lock_release+0x4f6/0x6f0 [ 1274.648037][ C0] ? batadv_nc_worker+0x887/0x1060 [ 1274.653304][ C0] ? __pfx_lock_release+0x10/0x10 [ 1274.658482][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1274.663798][ C0] batadv_nc_worker+0x88c/0x1060 [ 1274.668848][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1274.674290][ C0] ? __pfx_lock_release+0x10/0x10 [ 1274.679413][ C0] process_one_work+0x9c5/0x1b40 [ 1274.684428][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1274.689876][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1274.695334][ C0] ? assign_work+0x1a0/0x250 [ 1274.699994][ C0] worker_thread+0x6c8/0xf00 [ 1274.704655][ C0] ? __kthread_parkme+0x148/0x220 [ 1274.709744][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1274.714920][ C0] kthread+0x2c1/0x3a0 [ 1274.719058][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1274.724324][ C0] ? __pfx_kthread+0x10/0x10 [ 1274.728974][ C0] ret_from_fork+0x45/0x80 [ 1274.733632][ C0] ? __pfx_kthread+0x10/0x10 [ 1274.738296][ C0] ret_from_fork_asm+0x1a/0x30 [ 1274.743250][ C0] [ 1274.746365][ C0] rcu: rcu_preempt kthread starved for 10568 jiffies! g111393 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1274.757707][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1274.767726][ C0] rcu: RCU grace-period kthread stack dump: [ 1274.773691][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1274.785513][ C0] Call Trace: [ 1274.788833][ C0] [ 1274.791812][ C0] __schedule+0xe37/0x5490 [ 1274.796302][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1274.801642][ C0] ? __pfx___schedule+0x10/0x10 [ 1274.806590][ C0] ? schedule+0x298/0x350 [ 1274.811020][ C0] ? __pfx_lock_release+0x10/0x10 [ 1274.816130][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1274.821461][ C0] ? lock_acquire+0x1b1/0x560 [ 1274.826213][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 1274.831760][ C0] schedule+0xe7/0x350 [ 1274.835908][ C0] schedule_timeout+0x136/0x2a0 [ 1274.840832][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1274.846275][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1274.851809][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1274.857698][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 1274.863330][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1274.868260][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1274.873645][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1274.878448][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1274.883752][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1274.889665][ C0] rcu_gp_kthread+0x271/0x380 [ 1274.894518][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1274.899806][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1274.905105][ C0] ? __kthread_parkme+0x148/0x220 [ 1274.910208][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1274.915481][ C0] kthread+0x2c1/0x3a0 [ 1274.919624][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1274.924926][ C0] ? __pfx_kthread+0x10/0x10 [ 1274.929614][ C0] ret_from_fork+0x45/0x80 [ 1274.934139][ C0] ? __pfx_kthread+0x10/0x10 [ 1274.938957][ C0] ret_from_fork_asm+0x1a/0x30 [ 1274.943829][ C0] [ 1274.946894][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1274.953267][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1274.958518][ C1] NMI backtrace for cpu 1 [ 1274.958547][ C1] CPU: 1 UID: 0 PID: 21618 Comm: syz.4.1281 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1274.958580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1274.958595][ C1] RIP: 0010:hlock_class+0x56/0x130 [ 1274.958634][ C1] Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 d7 9c 96 e8 12 ba 81 00 48 0f a3 1d 7a f4 33 15 <73> 13 48 69 c3 c8 00 00 00 5b 48 05 20 db 9c 96 c3 cc cc cc cc 48 [ 1274.958660][ C1] RSP: 0018:ffffc9000471fa80 EFLAGS: 00000047 [ 1274.958682][ C1] RAX: 0000000000000001 RBX: 00000000000000b5 RCX: ffffffff8168e27e [ 1274.958700][ C1] RDX: fffffbfff2d39ae3 RSI: 0000000000000008 RDI: ffffffff969cd710 [ 1274.958718][ C1] RBP: ffffffff969cf4e8 R08: 0000000000000000 R09: fffffbfff2d39ae2 [ 1274.958737][ C1] R10: ffffffff969cd717 R11: 0000000000000000 R12: dffffc0000000000 [ 1274.958755][ C1] R13: ffff88803443a930 R14: 0000000000000002 R15: ffff888034439e00 [ 1274.958773][ C1] FS: 00007f8028b156c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1274.958799][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1274.958818][ C1] CR2: 0000562d299dccf0 CR3: 00000000591b4000 CR4: 00000000003526f0 [ 1274.958836][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1274.958853][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1274.958870][ C1] Call Trace: [ 1274.958879][ C1] [ 1274.958889][ C1] ? show_regs+0x8c/0xa0 [ 1274.958930][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1274.958972][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1274.959010][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1274.959036][ C1] ? hlock_class+0x56/0x130 [ 1274.959067][ C1] ? default_do_nmi+0x6a/0x160 [ 1274.959102][ C1] ? exc_nmi+0x170/0x1e0 [ 1274.959135][ C1] ? end_repeat_nmi+0xf/0x53 [ 1274.959164][ C1] ? hlock_class+0x4e/0x130 [ 1274.959196][ C1] ? hlock_class+0x56/0x130 [ 1274.959227][ C1] ? hlock_class+0x56/0x130 [ 1274.959259][ C1] ? hlock_class+0x56/0x130 [ 1274.959290][ C1] [ 1274.959298][ C1] [ 1274.959308][ C1] __lock_acquire+0x1620/0x3cb0 [ 1274.959357][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1274.959397][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1274.959446][ C1] lock_acquire+0x1b1/0x560 [ 1274.959486][ C1] ? __lock_task_sighand+0xc2/0x340 [ 1274.959530][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1274.959570][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1274.959608][ C1] ? find_held_lock+0x2d/0x110 [ 1274.959642][ C1] ? group_send_sig_info+0xf2/0x300 [ 1274.959679][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 1274.959720][ C1] ? __lock_task_sighand+0xc2/0x340 [ 1274.959761][ C1] __lock_task_sighand+0xc2/0x340 [ 1274.959806][ C1] group_send_sig_info+0x290/0x300 [ 1274.959840][ C1] ? __pfx_group_send_sig_info+0x10/0x10 [ 1274.959873][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1274.959917][ C1] bpf_send_signal_common+0x2e8/0x3a0 [ 1274.959955][ C1] bpf_send_signal+0x19/0x30 [ 1274.959988][ C1] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 1274.960012][ C1] bpf_trace_run2+0x231/0x590 [ 1274.960048][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1274.960089][ C1] ? syscall_trace_enter+0x169/0x240 [ 1274.960120][ C1] syscall_trace_enter+0x1b2/0x240 [ 1274.960151][ C1] do_syscall_64+0x1ee/0x250 [ 1274.960179][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.960221][ C1] RIP: 0033:0x7f8027d19879 [ 1274.960241][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1274.960266][ C1] RSP: 002b:00007f8028b14b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 1274.960291][ C1] RAX: ffffffffffffffda RBX: 00007f8027f35f88 RCX: 00007f8027d19879 [ 1274.960309][ C1] RDX: 00007f8028b14b40 RSI: 00007f8028b14c70 RDI: 0000000000000011 [ 1274.960326][ C1] RBP: 00007f8027f35f80 R08: 0000000000000000 R09: 0000000000000000 [ 1274.960343][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8027f35f8c [ 1274.960360][ C1] R13: 0000000000000000 R14: 00007ffe11fd1730 R15: 00007ffe11fd1818 [ 1274.960388][ C1]