last executing test programs: 2m21.712728133s ago: executing program 4 (id=400): syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0xd01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) r7 = open(0x0, 0x8060, 0x101) close_range(r0, r7, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000080)=""/56) 2m6.456909395s ago: executing program 4 (id=400): syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0xd01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) r7 = open(0x0, 0x8060, 0x101) close_range(r0, r7, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000080)=""/56) 1m49.425383708s ago: executing program 4 (id=400): syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0xd01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) r7 = open(0x0, 0x8060, 0x101) close_range(r0, r7, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000080)=""/56) 1m25.082500214s ago: executing program 4 (id=400): syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0xd01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) r7 = open(0x0, 0x8060, 0x101) close_range(r0, r7, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000080)=""/56) 1m7.728942106s ago: executing program 4 (id=400): syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0xd01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) r7 = open(0x0, 0x8060, 0x101) close_range(r0, r7, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000080)=""/56) 53.834995648s ago: executing program 1 (id=702): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume_offset', 0x149a82, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0xa, 0x6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 53.834279398s ago: executing program 3 (id=703): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x26) clock_gettime(0x0, &(0x7f0000001a00)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0xc880) 53.692746817s ago: executing program 3 (id=704): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000000c0)="a9d40ed9ee39742179a5feb4dad2c3d4bad5e6caaf0744db95ed7de66b548af1efea432f9ddc27546150edf41508dc458dcbe1a4f672b89137693006", 0x3c}, {&(0x7f00000003c0)="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", 0x165}], 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010000000000000000000500000a"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4810) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) kexec_load(0x8000, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0c171fb6d90049447ac585", 0xb, 0xd, 0xf03}], 0x3e0000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) 53.670146639s ago: executing program 2 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa00, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1004020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x37}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x77}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4004010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000200)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 52.616503035s ago: executing program 2 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000d40)={0x234, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x71, @empty, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}}}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x280, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xdc26}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') syz_open_dev$sndctrl(0x0, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) umount2(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x9c}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f00000002c0)}], 0x3}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000880)=""/204, 0xcc}], 0x2, &(0x7f00000009c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xe4}}], 0x3, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x86dd, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 52.508002438s ago: executing program 0 (id=708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x80}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$KDDELIO(r4, 0x4b35, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'macvlan1\x00', @random="0100002010f7"}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') pread64(r7, &(0x7f0000001c40)=""/4075, 0xfeb, 0x19cd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f0000000500)=""/4096}, 0x20) 52.302331919s ago: executing program 0 (id=709): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x71, 0x10000002, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x1) 52.10484069s ago: executing program 0 (id=710): read$FUSE(0xffffffffffffffff, &(0x7f0000001c40)={0x2020}, 0x2020) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@remote, 0x8, 0xffff, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x87}, {@in=@broadcast, 0x0, 0x2b}, @in=@rand_addr=0x64010101, {0x3, 0x0, 0x0, 0x400000000000, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x401}, {}, 0x0, 0x3506, 0x2, 0x1, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0xdddc3000, 0xa9, &(0x7f0000000580)=""/169}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 52.005015794s ago: executing program 2 (id=711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf65180000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008efc77a6ceaafcd3b6ba40e02000300000008000b0004000000060016000b0000000500120001000000060011008000000008b20b0006000000daba2dd9483376961909b10ee8d802ac19b689c26c4b35150600fc93dc6b57efbed756337b1045f941de751277208ad7bbbf02d838b9b66f82115950591080b2cdd05d0ddfc8289d64e7780319c2d91680c58685e0832da5affa02857fed"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200000, 0xa9be, &(0x7f00000003c0)) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000380)='xfs\x00', 0x808c, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='id_legacy\x00', &(0x7f0000000400)='ex\x0f\xac\x00\xeb\xf4\xc8&ww\xfd\xc0\xdc\xf9/\x1f\xc0\xb3>a\xcd') (async) r4 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x20000000) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r8 = syz_open_procfs(r4, &(0x7f0000000040)='status\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r8, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='xfs\x00', r3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./cgroup\x00'}, 0x18) 51.83068455s ago: executing program 2 (id=712): sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@iv={0x18}], 0x18, 0x8000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x6, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008061, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x3, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x5, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0xfffffeff, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x9, 0xea4, 0x4000, 0x4, 0x7, 0x7fff, 0x9, 0xb, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xa, 0x4, 0x9, 0x81, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x6, 0x3, 0x3, 0x1f, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x2000b, 0x9, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e5, 0xb, 0x5, 0x2, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x4, 0x38, 0xc, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xc0, 0x2, 0x6, 0x7ff, 0x12b, 0x3, 0x1, 0x4, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x4, 0xb, 0x5, 0x938, 0x6, 0xd, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x7, 0xe7, 0x8000006, 0x16, 0xfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xffffeffc, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x2, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x9, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x31}) (fail_nth: 12) 51.732353176s ago: executing program 1 (id=713): syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @empty, @private2, {[@hopopts={0x2c, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @generic={0xb, 0x4, "9b0ebc0f"}]}]}}}}}, 0x0) r0 = add_key(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000200)="1f10", 0xfffff, r0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, 0x0, r1}, &(0x7f0000000280)=""/173, 0xad, &(0x7f0000000240)={&(0x7f0000000080)={'sha384-avx\x00'}, &(0x7f0000000340)="db81da89c95a787f498dcf62fdb84375e0bc619ca815c2fa3b5e545f4768c5bc245965e2b21c09a976156c490b4c2eb3407e8de17bbceb54636167c5d4a65263ade04c12bf4be473d7cb4e8f1043d9d0612c2d35afd2cff80aa89f3614db926c8b56fae364feb5", 0x67}) socket$kcm(0x29, 0x0, 0x0) 51.508088303s ago: executing program 3 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x12, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000040)=0x1000, 0x0, 0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) ptrace$peekuser(0x3, r4, 0x1) io_submit(r10, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r9, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 51.448898955s ago: executing program 2 (id=715): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 51.239780967s ago: executing program 1 (id=716): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x0, 0xb92}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x809000}}, 0x50) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r6, 0x401070c9, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x4c, 0x78b1a5) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000200)="5b02894f5b2bb3236b96cdf11f23d93e154e3c341947ff0f0000000000000000d7137d6794b78ee6c6a994c0446c182c456bf3a03ddb2870338507d781922959eeb2bae2dd5bc2249e3a0db528e634c117d1", 0x52}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 50.84100884s ago: executing program 4 (id=400): syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0xd01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) r7 = open(0x0, 0x8060, 0x101) close_range(r0, r7, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000080)=""/56) 49.77773421s ago: executing program 1 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x3f) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002ac0)=[{{&(0x7f00000005c0)=@alg, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)=""/113, 0x71}], 0x1, &(0x7f00000013c0)=""/4084, 0xff4}}, {{&(0x7f00000006c0)=@x25, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/71, 0x47}, {&(0x7f0000000a40)=""/201, 0xc9}, {&(0x7f0000002cc0)=""/172, 0xac}, {&(0x7f0000000b40)=""/146, 0x92}, {0x0}, {&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000440)}], 0x8}, 0x100}, {{&(0x7f0000000dc0)=@isdn, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/249, 0xf9}], 0x1}, 0x4}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000001000)=""/48, 0x30}], 0x1, &(0x7f0000001080)=""/170, 0xaa}, 0x8001}, {{&(0x7f0000001140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)=""/23, 0x17}}, {{&(0x7f0000001200)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001280)=""/116, 0x74}, {&(0x7f00000023c0)=""/228, 0xe4}], 0x2, &(0x7f00000024c0)=""/82, 0x52}, 0x6}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002540)=""/52, 0x34}, {&(0x7f0000002580)=""/208, 0xd0}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)}, {&(0x7f00000027c0)=""/162, 0xa2}], 0x5}, 0x929f}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002900)=""/250, 0xfa}], 0x1, &(0x7f0000002a40)=""/123, 0x7b}, 0x1}], 0x8, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x8800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x8, 0xfffffffffffffcdc, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0xd4, &(0x7f0000000340)="9153cc35fde37113945be7e5226da8a99012741d1b3dba7c09b6434581313767142fe319da977bad4f4162c6bea267b4ec4b7752e1401ccd5f66d7c623f41c4c58f0532517f7563afc1a5f43489aa9436bc900077ba5e37f9e3dd494d10ef9f3c3d6ad7d7f5cfdc490d35ad793f7aff7ab42ded6a2d6e5a38f84a14b288b60c43a58a61ea763641aae4305b527a40487bd322bcbce04f4ecfe31854af790c6a0914599942eae9ac717ca841b0ccfbc017fe9cee6d9e2e80c290cd0234ac2d3e05da189a25fcf1247cbc4d95db3d1da28cf00f15f", 0x4}) openat$fuse(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) lsm_get_self_attr(0x65, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, ""/12}, &(0x7f0000001340)=0xfffffceb, 0x1) 49.776990319s ago: executing program 3 (id=718): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000780)={0x1, r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 49.508808463s ago: executing program 3 (id=719): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 49.15714666s ago: executing program 0 (id=720): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x80}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$KDDELIO(r4, 0x4b35, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'macvlan1\x00', @random="0100002010f7"}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') pread64(r7, &(0x7f0000001c40)=""/4075, 0xfeb, 0x19cd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, &(0x7f0000000240), &(0x7f0000000500)=""/4096}, 0x20) 48.991413621s ago: executing program 3 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000ea07010040"]) r4 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfffffffffffffffc, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000002440)={{0x6, 0x2, 0x4, 0x1bee45a8, 'syz1\x00', 0x46}, 0x1, [0x0, 0x2, 0x4, 0x7fffffffffffffff, 0x7, 0x9, 0x400000f88, 0x80000000007, 0x8, 0x6, 0x5, 0x1, 0x0, 0x1, 0x1, 0x8, 0x1ff, 0x4, 0x7, 0x200000000000006, 0x1000, 0x0, 0x8, 0x8001, 0x3, 0x0, 0x4, 0x10000, 0x400, 0xfffffffffffffff8, 0x5, 0xfffffffffffffffe, 0x2, 0x3, 0x100000001, 0x6, 0x2000000000009282, 0x3, 0xf, 0x0, 0x101, 0x0, 0x0, 0x4, 0x10001, 0xd657, 0x4, 0x400, 0x9, 0x9, 0x80000000, 0x70, 0x2, 0x8001, 0x8, 0x2, 0x1, 0x7f, 0x4, 0x3ff7, 0x18d, 0x0, 0x4, 0x7f, 0x6, 0xf7, 0xd, 0x0, 0x5, 0x7, 0x100000001, 0x45, 0x9, 0x2, 0x7, 0xfff, 0x3, 0x6, 0x1, 0x7fffffffffffffff, 0x3, 0x4, 0x6, 0xff, 0xb8, 0x7fff, 0x3, 0xc5, 0x3, 0x3, 0x1, 0x100000001, 0x0, 0x6, 0x4, 0x6, 0x273d, 0x4, 0x0, 0x1, 0x7, 0x0, 0x101, 0x3, 0x3, 0x7, 0x100, 0x100000001, 0x8001, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2, 0x401, 0x6, 0x7, 0x4, 0x7, 0xb, 0x90, 0x8, 0x2, 0x1, 0x5, 0x1, 0x1]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x154}}) io_uring_enter(r4, 0x1, 0x2, 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_kthread_stop\x00', r8}, 0x18) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000020000000028000000280000000400000002000000a116123600008868eb6c0000000000000200000d000000000900000000000000000000000000000000005f00"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xcc83, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) read$FUSE(r9, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 48.989935302s ago: executing program 0 (id=722): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="00000400000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r2], 0x44}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x3, 0x67) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x628403, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r6}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 48.817208229s ago: executing program 1 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f083f", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 45.813021555s ago: executing program 2 (id=724): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000000c0)="a9d40ed9ee39742179a5feb4dad2c3d4bad5e6caaf0744db95ed7de66b548af1efea432f9ddc27546150edf41508dc458dcbe1a4f672b89137693006", 0x3c}, {&(0x7f00000003c0)="df5a69890a628a1912c427cd8d11184ff3a692157367186e9aa7844a4c5e97f1f5e2bcbdedad6c4170675e5a2b34cd80174fe61884ac733c2eb5a5458198f1e880b41c7399485c919d77fcfb9119ddd8373a808355fc72b81953491a32dc80013ff590f4e6adf81c3971d9a505d6a05b91bd7f3c48911b3abfc98df882c6374b1958c23e43279bac4bc506ff560781dff049199bba92768a6f85cb2f2b065b013c94cb61e7b15422970bbfae5c310aa177b463fd4001c51cad180809037828e67a553bb8416ff65798e744c2a5c816bd40101380c8484c1d9ca02bf20380999f4ea900ce1b94495f843b91de2c4effeaf9a767edc7577d34247f3ec38f995d19889046f16ad96ffe54de54d5078b3f6c46006160fb63d1c31f03441399f0d7b2459a336aa632bd4597c1eaa6b67ec2b9a1a9f971626550cb14d8e3812e41d2f115a218f090e2bc66688bcb5de8f3ca35ec71cd6a1e2154510b2deb7f24e686067b0f98b15f", 0x165}], 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010000000000000000000500000a"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4810) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) kexec_load(0x8000, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0c171fb6d90049447ac585", 0xb, 0xd, 0xf03}], 0x3e0000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) 38.438297508s ago: executing program 0 (id=725): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x41) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x10002, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) 38.428940904s ago: executing program 1 (id=726): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, r6, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x8510d52ab1c2c02d, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14.51004359s ago: executing program 32 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000ea07010040"]) r4 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfffffffffffffffc, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000002440)={{0x6, 0x2, 0x4, 0x1bee45a8, 'syz1\x00', 0x46}, 0x1, [0x0, 0x2, 0x4, 0x7fffffffffffffff, 0x7, 0x9, 0x400000f88, 0x80000000007, 0x8, 0x6, 0x5, 0x1, 0x0, 0x1, 0x1, 0x8, 0x1ff, 0x4, 0x7, 0x200000000000006, 0x1000, 0x0, 0x8, 0x8001, 0x3, 0x0, 0x4, 0x10000, 0x400, 0xfffffffffffffff8, 0x5, 0xfffffffffffffffe, 0x2, 0x3, 0x100000001, 0x6, 0x2000000000009282, 0x3, 0xf, 0x0, 0x101, 0x0, 0x0, 0x4, 0x10001, 0xd657, 0x4, 0x400, 0x9, 0x9, 0x80000000, 0x70, 0x2, 0x8001, 0x8, 0x2, 0x1, 0x7f, 0x4, 0x3ff7, 0x18d, 0x0, 0x4, 0x7f, 0x6, 0xf7, 0xd, 0x0, 0x5, 0x7, 0x100000001, 0x45, 0x9, 0x2, 0x7, 0xfff, 0x3, 0x6, 0x1, 0x7fffffffffffffff, 0x3, 0x4, 0x6, 0xff, 0xb8, 0x7fff, 0x3, 0xc5, 0x3, 0x3, 0x1, 0x100000001, 0x0, 0x6, 0x4, 0x6, 0x273d, 0x4, 0x0, 0x1, 0x7, 0x0, 0x101, 0x3, 0x3, 0x7, 0x100, 0x100000001, 0x8001, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2, 0x401, 0x6, 0x7, 0x4, 0x7, 0xb, 0x90, 0x8, 0x2, 0x1, 0x5, 0x1, 0x1]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x154}}) io_uring_enter(r4, 0x1, 0x2, 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_kthread_stop\x00', r8}, 0x18) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000020000000028000000280000000400000002000000a116123600008868eb6c0000000000000200000d000000000900000000000000000000000000000000005f00"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xcc83, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) read$FUSE(r9, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 13.62131236s ago: executing program 33 (id=725): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x41) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x10002, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) 1.008161977s ago: executing program 34 (id=726): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, r6, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x8510d52ab1c2c02d, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 35 (id=724): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000000c0)="a9d40ed9ee39742179a5feb4dad2c3d4bad5e6caaf0744db95ed7de66b548af1efea432f9ddc27546150edf41508dc458dcbe1a4f672b89137693006", 0x3c}, {&(0x7f00000003c0)="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", 0x165}], 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010000000000000000000500000a"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4810) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) kexec_load(0x8000, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0c171fb6d90049447ac585", 0xb, 0xd, 0xf03}], 0x3e0000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) kernel console output (not intermixed with test programs): media graph [ 189.493166][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.993603][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.995424][ T5898] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 190.002683][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.018030][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.025867][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.027155][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 190.088065][ T5898] em28xx 2-1:0.132: Remote control support is not available for this card. [ 190.230856][ T3541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.250565][ T5861] em28xx 2-1:0.132: Closing input extension [ 190.272666][ T5861] em28xx 2-1:0.132: Freeing device [ 190.372720][ T7769] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.831893][ T7761] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 191.376711][ T7786] FAULT_INJECTION: forcing a failure. [ 191.376711][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.399229][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.3.465 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 191.399252][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 191.399263][ T7786] Call Trace: [ 191.399268][ T7786] [ 191.399275][ T7786] dump_stack_lvl+0x16c/0x1f0 [ 191.399302][ T7786] should_fail_ex+0x512/0x640 [ 191.399328][ T7786] _copy_from_iter+0x2a4/0x15b0 [ 191.399357][ T7786] ? __pfx__copy_from_iter+0x10/0x10 [ 191.399381][ T7786] ? find_held_lock+0x2b/0x80 [ 191.399403][ T7786] ? raw_sendmsg+0x14c/0x810 [ 191.399423][ T7786] ? rcu_is_watching+0x12/0xc0 [ 191.399442][ T7786] ? __local_bh_enable_ip+0xa4/0x120 [ 191.399468][ T7786] raw_sendmsg+0x506/0x810 [ 191.399487][ T7786] ? __pfx_raw_sendmsg+0x10/0x10 [ 191.399505][ T7786] ? __might_fault+0x13b/0x190 [ 191.399530][ T7786] ____sys_sendmsg+0xa95/0xc70 [ 191.399559][ T7786] ? copy_msghdr_from_user+0x10a/0x160 [ 191.399576][ T7786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.399600][ T7786] ? __pfx__kstrtoull+0x10/0x10 [ 191.399622][ T7786] ___sys_sendmsg+0x134/0x1d0 [ 191.399639][ T7786] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.399667][ T7786] ? find_held_lock+0x2b/0x80 [ 191.399701][ T7786] __sys_sendmmsg+0x200/0x420 [ 191.399720][ T7786] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.399745][ T7786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.399777][ T7786] ? fput+0x70/0xf0 [ 191.399795][ T7786] ? ksys_write+0x1b9/0x240 [ 191.399819][ T7786] ? __pfx_ksys_write+0x10/0x10 [ 191.399840][ T7786] ? rcu_is_watching+0x12/0xc0 [ 191.399863][ T7786] __x64_sys_sendmmsg+0x9c/0x100 [ 191.399879][ T7786] ? lockdep_hardirqs_on+0x7c/0x110 [ 191.399899][ T7786] do_syscall_64+0xcd/0x260 [ 191.399923][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.399940][ T7786] RIP: 0033:0x7ff1d938e969 [ 191.399955][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.399971][ T7786] RSP: 002b:00007ff1da16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.399987][ T7786] RAX: ffffffffffffffda RBX: 00007ff1d95b6160 RCX: 00007ff1d938e969 [ 191.399998][ T7786] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000006 [ 191.400008][ T7786] RBP: 00007ff1da16f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.400018][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.400028][ T7786] R13: 0000000000000000 R14: 00007ff1d95b6160 R15: 00007ffe75f65868 [ 191.400050][ T7786] [ 192.099529][ T5826] Bluetooth: hci0: command tx timeout [ 192.108766][ T3541] bridge_slave_1: left allmulticast mode [ 192.114428][ T3541] bridge_slave_1: left promiscuous mode [ 192.223739][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.289859][ T3541] bridge_slave_0: left allmulticast mode [ 192.296621][ T3541] bridge_slave_0: left promiscuous mode [ 192.354455][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.844039][ T7806] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.471'. [ 192.867936][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 192.940856][ T7809] PM: Enabling pm_trace changes system date and time during resume. [ 192.940856][ T7809] PM: Correct system time has to be restored manually after resume. [ 193.049218][ T7813] ======================================================= [ 193.049218][ T7813] WARNING: The mand mount option has been deprecated and [ 193.049218][ T7813] and is ignored by this kernel. Remove the mand [ 193.049218][ T7813] option from the mount to silence this warning. [ 193.049218][ T7813] ======================================================= [ 193.138289][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 193.182479][ T30] audit: type=1400 audit(1746257519.349:401): avc: denied { bind } for pid=7799 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.243367][ T30] audit: type=1400 audit(1746257519.349:402): avc: denied { setopt } for pid=7799 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.274489][ T30] audit: type=1400 audit(1746257519.519:403): avc: denied { mounton } for pid=7807 comm="syz.1.472" path="/90/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 193.318673][ T30] audit: type=1400 audit(1746257519.529:404): avc: denied { append } for pid=7807 comm="syz.1.472" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 193.427643][ T3541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.460196][ T3541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.503674][ T3541] bond0 (unregistering): Released all slaves [ 193.564780][ T7812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.579323][ T7814] vlan3: entered promiscuous mode [ 193.584514][ T7814] bond2: entered promiscuous mode [ 193.596817][ T7816] bond1: (slave dummy0): Releasing backup interface [ 193.610724][ T7816] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 193.977009][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.983389][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.001764][ T7836] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.092860][ T7833] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 194.116549][ T5126] Bluetooth: hci0: command tx timeout [ 194.146402][ T7833] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 194.163155][ T7756] chnl_net:caif_netlink_parms(): no params data found [ 194.349966][ T3541] hsr_slave_0: left promiscuous mode [ 194.380787][ T3541] hsr_slave_1: left promiscuous mode [ 194.400778][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.416011][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.445161][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.459376][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.612006][ T3541] veth1_macvtap: left promiscuous mode [ 194.638153][ T3541] veth0_macvtap: left promiscuous mode [ 194.669489][ T3541] veth1_vlan: left promiscuous mode [ 194.674942][ T3541] veth0_vlan: left promiscuous mode [ 194.965803][ T5862] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 195.156133][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 195.177491][ T5862] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 195.211289][ T5862] usb 1-1: config 0 has no interface number 0 [ 195.225470][ T5862] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=d8.06 [ 195.254199][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.263973][ T5862] usb 1-1: Product: syz [ 195.269516][ T5862] usb 1-1: Manufacturer: syz [ 195.274334][ T5862] usb 1-1: SerialNumber: syz [ 195.291336][ T5862] usb 1-1: config 0 descriptor?? [ 195.664269][ T3541] team0 (unregistering): Port device team_slave_1 removed [ 195.714686][ T3541] team0 (unregistering): Port device team_slave_0 removed [ 196.134583][ T5862] usb 1-1: USB disconnect, device number 24 [ 196.200782][ T5126] Bluetooth: hci0: command tx timeout [ 196.330977][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.340311][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.356247][ T7756] bridge_slave_0: entered allmulticast mode [ 196.372679][ T7756] bridge_slave_0: entered promiscuous mode [ 196.436467][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.482757][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.516983][ T7756] bridge_slave_1: entered allmulticast mode [ 196.524283][ T7756] bridge_slave_1: entered promiscuous mode [ 196.662462][ T7756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.699337][ T7756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.778438][ T7756] team0: Port device team_slave_0 added [ 196.819858][ T7756] team0: Port device team_slave_1 added [ 196.827216][ T5862] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 196.965461][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.033391][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.055221][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 197.078437][ T5862] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 197.106769][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.119933][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.136936][ T5862] usb 3-1: config 0 descriptor?? [ 197.168537][ T7900] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.487'. [ 197.173299][ T7756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.190264][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 197.197081][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.268721][ T7905] FAULT_INJECTION: forcing a failure. [ 197.268721][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.281930][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.1.486 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 197.281955][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 197.281965][ T7905] Call Trace: [ 197.281972][ T7905] [ 197.281979][ T7905] dump_stack_lvl+0x16c/0x1f0 [ 197.282006][ T7905] should_fail_ex+0x512/0x640 [ 197.282032][ T7905] _copy_from_iter+0x2a4/0x15b0 [ 197.282059][ T7905] ? _copy_from_iter+0x161/0x15b0 [ 197.282085][ T7905] ? __pfx__copy_from_iter+0x10/0x10 [ 197.282110][ T7905] ? __pfx__copy_from_iter+0x10/0x10 [ 197.282138][ T7905] copy_page_from_iter+0xa5/0x120 [ 197.282162][ T7905] skb_copy_datagram_from_iter+0x2a0/0x740 [ 197.282197][ T7905] unix_stream_sendmsg+0x4ae/0x1160 [ 197.282227][ T7905] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 197.282260][ T7905] ____sys_sendmsg+0xa95/0xc70 [ 197.282282][ T7905] ? copy_msghdr_from_user+0x10a/0x160 [ 197.282297][ T7905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.282328][ T7905] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 197.282354][ T7905] ___sys_sendmsg+0x134/0x1d0 [ 197.282372][ T7905] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.282417][ T7905] __sys_sendmsg+0x16d/0x220 [ 197.282433][ T7905] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.282465][ T7905] do_syscall_64+0xcd/0x260 [ 197.282488][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.282504][ T7905] RIP: 0033:0x7f57d478e969 [ 197.282518][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.282534][ T7905] RSP: 002b:00007f57d25d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.282556][ T7905] RAX: ffffffffffffffda RBX: 00007f57d49b6160 RCX: 00007f57d478e969 [ 197.282567][ T7905] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 197.282579][ T7905] RBP: 00007f57d25d5090 R08: 0000000000000000 R09: 0000000000000000 [ 197.282589][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.282598][ T7905] R13: 0000000000000000 R14: 00007f57d49b6160 R15: 00007ffdf72951f8 [ 197.282620][ T7905] [ 197.433070][ T5862] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 197.442866][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.456172][ T5862] dvb-usb: bulk message failed: -22 (3/0) [ 197.463137][ T7756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.474597][ T5862] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 197.582836][ T30] audit: type=1400 audit(1746257523.869:405): avc: denied { append } for pid=7877 comm="syz.2.484" name="i2c-1" dev="devtmpfs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.634372][ T5862] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 197.641411][ T30] audit: type=1400 audit(1746257524.029:406): avc: denied { write } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.643348][ T5862] usb 3-1: media controller created [ 197.672448][ T30] audit: type=1400 audit(1746257524.029:407): avc: denied { remove_name } for pid=5167 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.683355][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.702994][ T30] audit: type=1400 audit(1746257524.029:408): avc: denied { add_name } for pid=5167 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.801509][ T5862] dvb-usb: bulk message failed: -22 (6/0) [ 197.809399][ T5862] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 197.811023][ T7756] hsr_slave_0: entered promiscuous mode [ 197.827193][ T5862] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 197.840922][ T5862] dvb-usb: schedule remote query interval to 150 msecs. [ 197.888794][ T5862] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 197.908178][ T7756] hsr_slave_1: entered promiscuous mode [ 197.914425][ T7756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.923664][ T7756] Cannot create hsr debugfs directory [ 197.995787][ T24] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 198.008919][ T5862] usb 3-1: USB disconnect, device number 12 [ 198.074722][ T5862] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 198.235804][ T5859] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 198.249696][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.272021][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 198.284025][ T5126] Bluetooth: hci0: command tx timeout [ 198.299623][ T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 198.314629][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.339522][ T24] usb 1-1: config 0 descriptor?? [ 198.390514][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 198.400999][ T5859] usb 2-1: config 2 has an invalid interface number: 177 but max is 1 [ 198.417226][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 198.461721][ T5859] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 198.475898][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 198.513694][ T5859] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 198.525019][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 198.557509][ T5859] usb 2-1: config 2 has no interface number 0 [ 198.563371][ T24] usb 1-1: media controller created [ 198.581032][ T5859] usb 2-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 198.614274][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.625994][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.661209][ T5859] usb 2-1: Product: syz [ 198.682659][ T5859] usb 2-1: Manufacturer: syz [ 198.704234][ T5859] usb 2-1: SerialNumber: syz [ 198.712817][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 198.809167][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 198.859341][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 198.977056][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 199.095015][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 199.159322][ T5859] sierra 2-1:2.177: Sierra USB modem converter detected [ 199.268343][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 199.282723][ T5859] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 199.299191][ T5891] dvb-usb: error while querying for an remote control event. [ 199.352562][ T30] audit: type=1400 audit(1746257525.739:409): avc: denied { module_request } for pid=7927 comm="syz.2.493" kmod="net-pf-19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.444298][ T5859] usb 2-1: USB disconnect, device number 18 [ 199.570179][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 199.589640][ T5859] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 199.591886][ T5891] dvb-usb: error while querying for an remote control event. [ 199.655811][ T5859] sierra 2-1:2.177: device disconnected [ 199.745798][ T5862] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 199.868138][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 200.036480][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 200.050979][ T24] dvb-usb: error while querying for an remote control event. [ 200.072853][ T5862] usb 3-1: config 9 has an invalid interface number: 141 but max is 3 [ 200.125290][ T5862] usb 3-1: config 9 has an invalid interface number: 211 but max is 3 [ 200.125469][ T5862] usb 3-1: config 9 has an invalid interface number: 136 but max is 3 [ 200.127515][ T5862] usb 3-1: config 9 has an invalid interface number: 127 but max is 3 [ 200.127533][ T5862] usb 3-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 200.127544][ T5862] usb 3-1: config 9 has no interface number 0 [ 200.127553][ T5862] usb 3-1: config 9 has no interface number 1 [ 200.127563][ T5862] usb 3-1: config 9 has no interface number 2 [ 200.127572][ T5862] usb 3-1: config 9 has no interface number 3 [ 200.127607][ T5862] usb 3-1: config 9 interface 141 altsetting 11 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 200.127623][ T5862] usb 3-1: config 9 interface 141 altsetting 11 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 200.127641][ T5862] usb 3-1: config 9 interface 141 altsetting 11 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 200.127657][ T5862] usb 3-1: config 9 interface 141 altsetting 11 endpoint 0xD has invalid maxpacket 1007, setting to 64 [ 200.127672][ T5862] usb 3-1: config 9 interface 141 altsetting 11 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 200.127688][ T5862] usb 3-1: config 9 interface 141 altsetting 11 bulk endpoint 0xE has invalid maxpacket 1023 [ 200.127701][ T5862] usb 3-1: config 9 interface 141 altsetting 11 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 200.127722][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 200.127734][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 200.127746][ T5862] usb 3-1: config 9 interface 211 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 200.127761][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 200.127773][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 200.127787][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has a duplicate endpoint with address 0x8A, skipping [ 200.127800][ T5862] usb 3-1: config 9 interface 211 altsetting 7 endpoint 0xC has an invalid bInterval 114, changing to 10 [ 200.127814][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 200.127825][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 200.127837][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 200.127848][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 200.127859][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 200.127869][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 200.127881][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 200.127892][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 200.127902][ T5862] usb 3-1: config 9 interface 211 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 200.127920][ T5862] usb 3-1: config 9 interface 127 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 200.127931][ T5862] usb 3-1: config 9 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 200.127941][ T5862] usb 3-1: config 9 interface 127 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 200.127953][ T5862] usb 3-1: config 9 interface 127 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0 [ 200.127964][ T5862] usb 3-1: config 9 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 200.127975][ T5862] usb 3-1: config 9 interface 127 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 200.127987][ T5862] usb 3-1: config 9 interface 127 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 200.127997][ T5862] usb 3-1: config 9 interface 141 has no altsetting 0 [ 200.128006][ T5862] usb 3-1: config 9 interface 211 has no altsetting 0 [ 200.128015][ T5862] usb 3-1: config 9 interface 136 has no altsetting 0 [ 200.128025][ T5862] usb 3-1: config 9 interface 127 has no altsetting 0 [ 200.132257][ T5862] usb 3-1: New USB device found, idVendor=1f4d, idProduct=0237, bcdDevice=9c.33 [ 200.132288][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.132306][ T5862] usb 3-1: Product: syz [ 200.132321][ T5862] usb 3-1: Manufacturer: syz [ 200.132335][ T5862] usb 3-1: SerialNumber: syz [ 200.137977][ T7930] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 200.284481][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 200.602250][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.602620][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.782852][ T5918] usb 1-1: USB disconnect, device number 25 [ 200.790232][ T7756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.874925][ T24] dvb-usb: error while querying for an remote control event. [ 200.877166][ T7756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.977127][ T7756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.980237][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 201.018382][ T7756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.494530][ T30] audit: type=1400 audit(1746257527.879:410): avc: denied { mount } for pid=7969 comm="syz.0.500" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 201.564522][ T7756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.631244][ T30] audit: type=1400 audit(1746257527.879:411): avc: denied { mounton } for pid=7969 comm="syz.0.500" path="/100/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 201.686019][ T7756] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.736751][ T5918] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 201.746241][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.753314][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.870531][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.877765][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.925793][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 201.942682][ T5918] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 201.951920][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 202.014593][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.059458][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.096954][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.140095][ T5918] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 202.153501][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 202.167332][ T7978] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 202.366343][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.378317][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.389513][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.829973][ T7756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.862810][ T5918] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 202.871133][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 202.935045][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.023382][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.046057][ T5862] usb 3-1: USB disconnect, device number 13 [ 203.076709][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.136358][ T5918] usb 1-1: string descriptor 0 read error: -22 [ 203.161166][ T5918] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.187930][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.234029][ T5918] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 203.311141][ T8008] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.502'. [ 203.331512][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.502'. [ 203.395868][ T47] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 203.422999][ T7756] veth0_vlan: entered promiscuous mode [ 203.439029][ T7756] veth1_vlan: entered promiscuous mode [ 203.493553][ T7756] veth0_macvtap: entered promiscuous mode [ 203.520891][ T7756] veth1_macvtap: entered promiscuous mode [ 203.541157][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.555256][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.560837][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 203.569609][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.596419][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.613673][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 203.619231][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.636671][ T47] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.648332][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.657056][ T47] usb 2-1: Product: syz [ 203.662501][ T47] usb 2-1: Manufacturer: syz [ 203.668325][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.670241][ T47] usb 2-1: SerialNumber: syz [ 203.698159][ T47] usb 2-1: config 0 descriptor?? [ 203.704140][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.762386][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.763175][ T47] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 03 [ 203.774269][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.811898][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.841165][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.867778][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.908352][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.915672][ T30] audit: type=1400 audit(1746257530.299:412): avc: denied { map } for pid=7969 comm="syz.0.500" path="/dev/adutux0" dev="devtmpfs" ino=2951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.922036][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.974422][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.999520][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.017449][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.053783][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.080709][ T47] usb 2-1: USB disconnect, device number 19 [ 204.191867][ T5859] usb 1-1: USB disconnect, device number 26 [ 204.208258][ T7756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.247660][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.267132][ T7756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.303459][ T7756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.326729][ T7756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.458502][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.480838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.632492][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.653580][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.774052][ T8037] netlink: 108 bytes leftover after parsing attributes in process `syz.2.505'. [ 204.783228][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 205.264779][ T30] audit: type=1400 audit(1746257531.649:413): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 205.446772][ T8048] FAULT_INJECTION: forcing a failure. [ 205.446772][ T8048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.461539][ T8048] CPU: 1 UID: 0 PID: 8048 Comm: syz.2.509 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 205.461565][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.461575][ T8048] Call Trace: [ 205.461580][ T8048] [ 205.461586][ T8048] dump_stack_lvl+0x16c/0x1f0 [ 205.461613][ T8048] should_fail_ex+0x512/0x640 [ 205.461637][ T8048] _copy_from_user+0x2e/0xd0 [ 205.461659][ T8048] copy_msghdr_from_user+0x98/0x160 [ 205.461675][ T8048] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 205.461701][ T8048] ___sys_sendmsg+0xfe/0x1d0 [ 205.461716][ T8048] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.461759][ T8048] __sys_sendmsg+0x16d/0x220 [ 205.461774][ T8048] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.461795][ T8048] ? rcu_is_watching+0x12/0xc0 [ 205.461822][ T8048] do_syscall_64+0xcd/0x260 [ 205.461844][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.461859][ T8048] RIP: 0033:0x7fc42b58e969 [ 205.461872][ T8048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.461887][ T8048] RSP: 002b:00007fc42c385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.461902][ T8048] RAX: ffffffffffffffda RBX: 00007fc42b7b5fa0 RCX: 00007fc42b58e969 [ 205.461912][ T8048] RDX: 0000000020040800 RSI: 0000200000000740 RDI: 0000000000000003 [ 205.461921][ T8048] RBP: 00007fc42c385090 R08: 0000000000000000 R09: 0000000000000000 [ 205.461930][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.461939][ T8048] R13: 0000000000000000 R14: 00007fc42b7b5fa0 R15: 00007ffc93aacd78 [ 205.461960][ T8048] [ 205.806867][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.815276][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.281371][ T8065] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 206.558528][ T30] audit: type=1400 audit(1746257532.559:414): avc: denied { create } for pid=8055 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 206.590156][ T1032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.606996][ T30] audit: type=1400 audit(1746257532.569:415): avc: denied { read } for pid=8055 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 206.659291][ T30] audit: type=1400 audit(1746257532.639:416): avc: denied { write } for pid=8055 comm="syz.2.512" path="socket:[15785]" dev="sockfs" ino=15785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 206.921147][ T1032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.274494][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 207.287876][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 207.577643][ T8076] netlink: 156 bytes leftover after parsing attributes in process `syz.0.517'. [ 208.099289][ T1032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.384646][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.466691][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.508896][ T8098] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.520836][ T8098] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 208.741852][ T8099] evm: overlay not supported [ 208.836902][ T30] audit: type=1400 audit(1746257535.169:417): avc: denied { listen } for pid=8087 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 208.891574][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.914551][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 208.966103][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.520'. [ 209.022731][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.033409][ T30] audit: type=1400 audit(1746257535.319:418): avc: denied { map } for pid=8091 comm="syz.3.522" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.161541][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.212789][ T1032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.453643][ T8091] ALSA: mixer_oss: invalid OSS volume '' [ 209.496050][ T30] audit: type=1400 audit(1746257535.319:419): avc: denied { execute } for pid=8091 comm="syz.3.522" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.617565][ T30] audit: type=1400 audit(1746257535.989:420): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 210.475752][ T30] audit: type=1400 audit(1746257536.849:421): avc: denied { ioctl } for pid=8106 comm="syz.3.525" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.601913][ T30] audit: type=1400 audit(1746257536.849:422): avc: denied { set_context_mgr } for pid=8106 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 211.301684][ T1032] bridge_slave_1: left allmulticast mode [ 211.415647][ T1032] bridge_slave_1: left promiscuous mode [ 211.424948][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.555764][ T5826] Bluetooth: hci0: command tx timeout [ 211.669987][ T1032] bridge_slave_0: left allmulticast mode [ 211.679368][ T1032] bridge_slave_0: left promiscuous mode [ 211.691578][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.964003][ T8132] trusted_key: encrypted_key: master key parameter 'V/áNŒÂ=­µSá¼}Ûöá«”§=¸UQú' is invalid [ 212.663429][ T24] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 212.785385][ T30] audit: type=1400 audit(1746257539.139:423): avc: denied { remount } for pid=8145 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.965775][ T24] usb 1-1: device descriptor read/64, error -71 [ 213.087538][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.113435][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.130995][ T1032] bond0 (unregistering): Released all slaves [ 213.215603][ T24] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 213.345736][ T24] usb 1-1: device descriptor read/64, error -71 [ 213.460933][ T24] usb usb1-port1: attempt power cycle [ 213.493527][ T8095] chnl_net:caif_netlink_parms(): no params data found [ 213.635697][ T5826] Bluetooth: hci0: command tx timeout [ 213.778033][ T1032] hsr_slave_0: left promiscuous mode [ 213.815584][ T1032] hsr_slave_1: left promiscuous mode [ 213.816538][ T24] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 213.824925][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.856326][ T24] usb 1-1: device descriptor read/8, error -71 [ 213.859690][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.893047][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.908496][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.940888][ T8142] syz.3.530 (8142): drop_caches: 3 [ 213.941831][ T1032] veth1_macvtap: left promiscuous mode [ 213.970919][ T1032] veth0_macvtap: left promiscuous mode [ 213.977751][ T1032] veth1_vlan: left promiscuous mode [ 213.983073][ T1032] veth0_vlan: left promiscuous mode [ 214.190731][ T24] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 214.217135][ T24] usb 1-1: device descriptor read/8, error -71 [ 214.386119][ T24] usb usb1-port1: unable to enumerate USB device [ 214.889797][ T30] audit: type=1400 audit(1746257541.279:424): avc: denied { read write } for pid=8174 comm="syz.1.534" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 214.943228][ T30] audit: type=1400 audit(1746257541.299:425): avc: denied { open } for pid=8174 comm="syz.1.534" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 215.715920][ T5826] Bluetooth: hci0: command tx timeout [ 216.039708][ T8183] Bluetooth: MGMT ver 1.23 [ 217.397681][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 217.414547][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'. [ 217.517879][ T8194] __vm_enough_memory: pid: 8194, comm: syz.1.539, bytes: 21199879352320 not enough memory for the allocation [ 217.534776][ T30] audit: type=1400 audit(1746257543.909:426): avc: denied { watch watch_reads } for pid=8193 comm="syz.1.539" path="/106" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 217.587922][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 217.608934][ T30] audit: type=1400 audit(1746257543.909:427): avc: denied { watch_mount } for pid=8193 comm="syz.1.539" path="/106" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 217.701622][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 217.799684][ T5126] Bluetooth: hci0: command tx timeout [ 217.987824][ T8205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.542'. [ 218.355737][ T5826] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 218.442449][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.489895][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.600339][ T8095] bridge_slave_0: entered allmulticast mode [ 218.610846][ T8095] bridge_slave_0: entered promiscuous mode [ 218.665476][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.681589][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.751053][ T8095] bridge_slave_1: entered allmulticast mode [ 218.783355][ T8095] bridge_slave_1: entered promiscuous mode [ 218.885060][ T8095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.919317][ T8095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.035726][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 219.079222][ T8095] team0: Port device team_slave_0 added [ 219.119428][ T8095] team0: Port device team_slave_1 added [ 219.182083][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.201163][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.207272][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.237885][ T30] audit: type=1400 audit(1746257545.629:428): avc: denied { accept } for pid=8222 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.263396][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.282961][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.298338][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 219.314434][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.335616][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 219.345727][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.371457][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 219.404948][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 219.461094][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 219.482856][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 219.508580][ T24] usb 3-1: Product: syz [ 219.513412][ T24] usb 3-1: Manufacturer: syz [ 219.523519][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 219.551166][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 219.567691][ T8095] hsr_slave_0: entered promiscuous mode [ 219.577818][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 219.585356][ T8095] hsr_slave_1: entered promiscuous mode [ 219.593726][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 219.601528][ T8095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.616844][ T8095] Cannot create hsr debugfs directory [ 219.622857][ T8234] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 219.676111][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 219.857461][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 219.877667][ T5826] Bluetooth: hci0: command 0x1407 tx timeout [ 219.895129][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 219.931106][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.143740][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.380514][ T10] usb 1-1: Product: syz [ 220.387851][ T30] audit: type=1400 audit(1746257546.779:429): avc: denied { append } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.426243][ T8246] netlink: 'syz.2.546': attribute type 4 has an invalid length. [ 220.427715][ T30] audit: type=1400 audit(1746257546.799:430): avc: denied { search } for pid=8241 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.455152][ T10] usb 1-1: Manufacturer: syz [ 220.455174][ T10] usb 1-1: SerialNumber: syz [ 220.474603][ T8246] netlink: 152 bytes leftover after parsing attributes in process `syz.2.546'. [ 220.475363][ T10] usb 1-1: config 0 descriptor?? [ 220.501318][ T30] audit: type=1400 audit(1746257546.889:431): avc: denied { module_request } for pid=8213 comm="syz.2.546" kmod="net-pf-10-proto-58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 220.550142][ T10] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 220.598233][ T8246] : renamed from bond0 (while UP) [ 220.607527][ T30] audit: type=1400 audit(1746257546.929:432): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 220.654355][ T30] audit: type=1400 audit(1746257546.939:433): avc: denied { ioctl } for pid=8231 comm="syz.0.549" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.748867][ T30] audit: type=1400 audit(1746257546.949:434): avc: denied { read write } for pid=8213 comm="syz.2.546" name="vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 220.817284][ T10] usb 1-1: USB disconnect, device number 31 [ 220.825009][ T30] audit: type=1400 audit(1746257546.949:435): avc: denied { open } for pid=8213 comm="syz.2.546" path="/dev/vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 220.999542][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.410539][ T8274] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 222.444247][ T5861] usb 3-1: USB disconnect, device number 14 [ 222.811970][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 222.811986][ T30] audit: type=1400 audit(1746257549.199:482): avc: denied { write } for pid=8256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.064597][ T30] audit: type=1400 audit(1746257549.199:483): avc: denied { add_name } for pid=8256 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.131354][ T30] audit: type=1400 audit(1746257549.199:484): avc: denied { create } for pid=8256 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.160428][ T30] audit: type=1400 audit(1746257549.199:485): avc: denied { write } for pid=8256 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=3714 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.273703][ T30] audit: type=1400 audit(1746257549.199:486): avc: denied { append } for pid=8256 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" dev="tmpfs" ino=3714 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.303763][ T30] audit: type=1400 audit(1746257549.259:487): avc: denied { remove_name } for pid=8276 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=3714 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.329567][ T30] audit: type=1400 audit(1746257549.259:488): avc: denied { unlink } for pid=8276 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=3714 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.403586][ T30] audit: type=1400 audit(1746257549.359:489): avc: denied { ioctl } for pid=8277 comm="syz.3.558" path="socket:[17614]" dev="sockfs" ino=17614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.431145][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 223.440625][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.556'. [ 223.440731][ T30] audit: type=1400 audit(1746257549.359:490): avc: denied { create } for pid=8277 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.475943][ T30] audit: type=1400 audit(1746257549.359:491): avc: denied { bind } for pid=8277 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.867287][ T8095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.949345][ T8095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.987137][ T8095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.308754][ T8095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.353803][ T8321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.562'. [ 224.971305][ T8095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.979822][ T8333] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 225.135964][ T8095] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.212205][ T8342] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 225.284929][ T8333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.341200][ T8338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.425891][ T5861] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.486127][ T8338] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 225.507172][ T8338] bond1: (slave vti0): Error -95 calling set_mac_address [ 225.654981][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.662208][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.726345][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 225.734781][ T5861] usb 4-1: config 5 has an invalid interface number: 77 but max is 0 [ 225.744686][ T5861] usb 4-1: config 5 has no interface number 0 [ 225.753619][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.760823][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.773438][ T5861] usb 4-1: config 5 interface 77 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 225.805602][ T5861] usb 4-1: config 5 interface 77 has no altsetting 0 [ 225.847127][ T5861] usb 4-1: New USB device found, idVendor=041e, idProduct=403d, bcdDevice=9d.c7 [ 225.885052][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.932580][ T5861] gspca_main: sq930x-2.14.0 probing 041e:403d [ 226.149342][ T5861] gspca_sq930x: reg_r 001f failed -71 [ 226.154861][ T5861] sq930x 4-1:5.77: probe with driver sq930x failed with error -71 [ 226.197193][ T5861] usb 4-1: USB disconnect, device number 11 [ 226.430677][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.765890][ T5918] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 226.925575][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 226.968590][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.982453][ T5918] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.020209][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.044502][ T5918] usb 1-1: Product: syz [ 227.055445][ T5918] usb 1-1: Manufacturer: syz [ 227.067047][ T5918] usb 1-1: SerialNumber: syz [ 227.084027][ T5918] usb 1-1: config 0 descriptor?? [ 227.107737][ T5918] hub 1-1:0.0: bad descriptor, ignoring hub [ 227.120755][ T5918] hub 1-1:0.0: probe with driver hub failed with error -5 [ 227.322373][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.361119][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.453265][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 227.533517][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 227.656487][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 227.675078][ T8095] veth0_vlan: entered promiscuous mode [ 227.727114][ T24] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 227.738912][ T8095] veth1_vlan: entered promiscuous mode [ 227.770397][ T8095] veth0_macvtap: entered promiscuous mode [ 227.778528][ T8095] veth1_macvtap: entered promiscuous mode [ 227.826430][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.854964][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.871161][ T24] usb 1-1: USB disconnect, device number 32 [ 227.877476][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.905629][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.935764][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.965573][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.978619][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 227.978635][ T30] audit: type=1400 audit(1746257554.369:541): avc: denied { read write } for pid=8392 comm="syz.1.576" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.014209][ T8393] loop6: detected capacity change from 0 to 524287999 [ 228.020233][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.042384][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.055084][ T30] audit: type=1400 audit(1746257554.369:542): avc: denied { open } for pid=8392 comm="syz.1.576" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.087057][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.108586][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.135841][ T30] audit: type=1400 audit(1746257554.399:543): avc: denied { append } for pid=8392 comm="syz.1.576" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.164166][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.184312][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.203319][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.238958][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.253560][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.294082][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.306616][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.321022][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.358433][ T8095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.385745][ T8095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.446817][ T8095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.469367][ T8095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.525136][ T8415] FAULT_INJECTION: forcing a failure. [ 228.525136][ T8415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.553720][ T8415] CPU: 0 UID: 0 PID: 8415 Comm: syz.2.580 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 228.553749][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 228.553759][ T8415] Call Trace: [ 228.553765][ T8415] [ 228.553771][ T8415] dump_stack_lvl+0x16c/0x1f0 [ 228.553798][ T8415] should_fail_ex+0x512/0x640 [ 228.553823][ T8415] _copy_from_user+0x2e/0xd0 [ 228.553846][ T8415] copy_msghdr_from_user+0x98/0x160 [ 228.553864][ T8415] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 228.553892][ T8415] ___sys_sendmsg+0xfe/0x1d0 [ 228.553909][ T8415] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.553953][ T8415] __sys_sendmsg+0x16d/0x220 [ 228.553970][ T8415] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.553993][ T8415] ? rcu_is_watching+0x12/0xc0 [ 228.554020][ T8415] do_syscall_64+0xcd/0x260 [ 228.554052][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.554069][ T8415] RIP: 0033:0x7fc42b58e969 [ 228.554084][ T8415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.554100][ T8415] RSP: 002b:00007fc42c385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.554116][ T8415] RAX: ffffffffffffffda RBX: 00007fc42b7b5fa0 RCX: 00007fc42b58e969 [ 228.554127][ T8415] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 228.554136][ T8415] RBP: 00007fc42c385090 R08: 0000000000000000 R09: 0000000000000000 [ 228.554145][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.554155][ T8415] R13: 0000000000000000 R14: 00007fc42b7b5fa0 R15: 00007ffc93aacd78 [ 228.554177][ T8415] [ 228.774986][ T30] audit: type=1400 audit(1746257555.149:544): avc: denied { execute } for pid=8411 comm="syz.1.579" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 228.887430][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.895291][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.205926][ T30] audit: type=1400 audit(1746257555.519:545): avc: denied { create } for pid=8424 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 229.532226][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.551074][ T30] audit: type=1400 audit(1746257555.529:546): avc: denied { write } for pid=8424 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 229.571514][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.719850][ T30] audit: type=1326 audit(1746257555.549:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.2.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc42b58e969 code=0x0 [ 229.743950][ T30] audit: type=1400 audit(1746257556.009:548): avc: denied { mounton } for pid=8095 comm="syz-executor" path="/root/syzkaller.tpJgfe/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 229.771734][ T30] audit: type=1400 audit(1746257556.009:549): avc: denied { mount } for pid=8095 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.794679][ T30] audit: type=1400 audit(1746257556.019:550): avc: denied { mount } for pid=8095 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 229.941223][ T8445] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 229.953902][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 229.988420][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 230.247477][ T1128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.300115][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'. [ 230.492020][ T1128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.609537][ T1128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.687060][ T1128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.841802][ T1128] bridge_slave_1: left allmulticast mode [ 230.850984][ T1128] bridge_slave_1: left promiscuous mode [ 230.858755][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.868955][ T1128] bridge_slave_0: left allmulticast mode [ 230.874613][ T1128] bridge_slave_0: left promiscuous mode [ 230.880593][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.453589][ T8485] sctp: failed to load transform for md5: -2 [ 232.816121][ T8503] overlayfs: missing 'lowerdir' [ 232.975222][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 233.027748][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 233.027764][ T30] audit: type=1400 audit(1746257559.419:572): avc: denied { read write } for pid=8511 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 233.077879][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.079822][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 233.100578][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.117647][ T30] audit: type=1400 audit(1746257559.419:573): avc: denied { open } for pid=8511 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 233.141971][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.149215][ T30] audit: type=1400 audit(1746257559.419:574): avc: denied { ioctl } for pid=8511 comm="syz-executor" path="socket:[19584]" dev="sockfs" ino=19584 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.181848][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.200780][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.234599][ T30] audit: type=1400 audit(1746257559.629:575): avc: denied { mounton } for pid=8511 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 233.361833][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.389280][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.400810][ T1128] bond0 (unregistering): Released all slaves [ 233.426503][ T8516] bond2: (slave dummy0): Releasing backup interface [ 233.549622][ T30] audit: type=1400 audit(1746257559.939:576): avc: denied { setopt } for pid=8523 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.621053][ T5898] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 233.899475][ T5898] usb 4-1: config 2 has an invalid interface number: 177 but max is 1 [ 233.930436][ T5898] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 233.973823][ T30] audit: type=1400 audit(1746257560.339:577): avc: denied { read write } for pid=8532 comm="syz.2.603" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 234.058851][ T5898] usb 4-1: config 2 has no interface number 0 [ 234.135205][ T5898] usb 4-1: config 2 interface 177 has no altsetting 0 [ 234.135475][ T30] audit: type=1400 audit(1746257560.339:578): avc: denied { open } for pid=8532 comm="syz.2.603" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 234.159964][ T5898] usb 4-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 234.180720][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.192317][ T5898] usb 4-1: Product: syz [ 234.197769][ T5898] usb 4-1: Manufacturer: syz [ 234.202524][ T5898] usb 4-1: SerialNumber: syz [ 234.262205][ T30] audit: type=1400 audit(1746257560.649:579): avc: denied { ioctl } for pid=8542 comm="syz.1.605" path="socket:[19687]" dev="sockfs" ino=19687 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.306103][ T30] audit: type=1400 audit(1746257560.689:580): avc: denied { read } for pid=8542 comm="syz.1.605" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 234.332612][ T30] audit: type=1400 audit(1746257560.699:581): avc: denied { open } for pid=8542 comm="syz.1.605" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 234.359087][ T5859] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 234.571752][ T1128] hsr_slave_0: left promiscuous mode [ 234.581974][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 234.593547][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.610091][ T5859] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 234.629859][ T1128] hsr_slave_1: left promiscuous mode [ 234.636847][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.644344][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.651798][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.662727][ T5859] usb 3-1: config 0 descriptor?? [ 234.673737][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.692244][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.727844][ T1128] veth1_macvtap: left promiscuous mode [ 234.743673][ T1128] veth0_macvtap: left promiscuous mode [ 234.767593][ T1128] veth1_vlan: left promiscuous mode [ 234.780158][ T1128] veth0_vlan: left promiscuous mode [ 235.012458][ T8568] netlink: 'syz.0.610': attribute type 1 has an invalid length. [ 235.021151][ T8568] netlink: 'syz.0.610': attribute type 1 has an invalid length. [ 235.050878][ T8568] netlink: 'syz.0.610': attribute type 2 has an invalid length. [ 235.326181][ T5126] Bluetooth: hci0: command tx timeout [ 235.396266][ T5859] ryos 0003:1E7D:3138.0003: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 235.411557][ T8536] random: crng reseeded on system resumption [ 235.463783][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 235.757319][ T8578] serio: Serial port ptm0 [ 235.867694][ T8584] fuse: Bad value for 'fd' [ 235.887864][ T8584] fuse: Unknown parameter '0x0000000000000007' [ 235.972541][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 236.013481][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 236.137091][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 236.297640][ T24] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 236.306751][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.336796][ T24] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 236.352408][ T24] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 236.368255][ T24] usb 2-1: Manufacturer: syz [ 236.382493][ T24] usb 2-1: config 0 descriptor?? [ 236.393970][ T24] igorplugusb 2-1:0.0: incorrect number of endpoints [ 236.466699][ T8565] netlink: 'syz.0.610': attribute type 5 has an invalid length. [ 236.489744][ T5898] sierra 4-1:2.177: Sierra USB modem converter detected [ 236.508810][ T5898] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 236.520945][ T5898] usb 4-1: USB disconnect, device number 12 [ 236.544930][ T8511] chnl_net:caif_netlink_parms(): no params data found [ 236.561357][ T5898] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 236.599505][ T5898] sierra 4-1:2.177: device disconnected [ 236.607910][ T47] usb 2-1: USB disconnect, device number 20 [ 236.856735][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.864098][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.874524][ T8511] bridge_slave_0: entered allmulticast mode [ 236.892855][ T8511] bridge_slave_0: entered promiscuous mode [ 236.928022][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.967607][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.997100][ T8511] bridge_slave_1: entered allmulticast mode [ 237.013702][ T8511] bridge_slave_1: entered promiscuous mode [ 237.069601][ T24] usb 3-1: USB disconnect, device number 15 [ 237.206124][ T8511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.221526][ T8511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.325582][ T5898] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 237.397857][ T5126] Bluetooth: hci0: command tx timeout [ 237.495594][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 237.502909][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.514751][ T5898] usb 1-1: config 1 interface 0 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.533073][ T8511] team0: Port device team_slave_0 added [ 237.551438][ T8616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.618'. [ 237.580777][ T5898] usb 1-1: config 1 interface 0 has no altsetting 0 [ 237.598510][ T8511] team0: Port device team_slave_1 added [ 237.609555][ T5898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.644325][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 237.681224][ T5898] usb 1-1: SerialNumber: syz [ 237.818521][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.855586][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.943331][ T5898] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 237.947246][ T8511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.113694][ T5898] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 238.141351][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.153266][ T5898] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 238.168939][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.195931][ T5898] usb 1-1: USB disconnect, device number 33 [ 238.238209][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 238.238231][ T30] audit: type=1400 audit(1746257564.629:601): avc: denied { create } for pid=8625 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.258169][ T8511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.296876][ T30] audit: type=1400 audit(1746257564.659:602): avc: denied { write } for pid=8625 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.356811][ T30] audit: type=1400 audit(1746257564.659:603): avc: denied { nlmsg_write } for pid=8625 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.472004][ T8511] hsr_slave_0: entered promiscuous mode [ 238.487420][ T8511] hsr_slave_1: entered promiscuous mode [ 238.494642][ T8511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.507433][ T8630] option changes via remount are deprecated (pid=8627 comm=syz.3.623) [ 238.507454][ T30] audit: type=1400 audit(1746257564.899:604): avc: denied { remount } for pid=8627 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 238.538317][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.623'. [ 238.553098][ T8511] Cannot create hsr debugfs directory [ 238.600701][ T8635] libceph: resolve '0' (ret=-3): failed [ 238.617274][ T30] audit: type=1400 audit(1746257565.009:605): avc: denied { bind } for pid=8634 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.690350][ T30] audit: type=1400 audit(1746257565.039:606): avc: denied { create } for pid=8634 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 238.690395][ T30] audit: type=1400 audit(1746257565.039:607): avc: denied { write } for pid=8634 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 238.690428][ T30] audit: type=1400 audit(1746257565.039:608): avc: denied { nlmsg_read } for pid=8634 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 238.971429][ T8646] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 239.080281][ T30] audit: type=1400 audit(1746257565.459:609): avc: denied { append } for pid=8648 comm="syz.0.629" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 239.082466][ T30] audit: type=1400 audit(1746257565.469:610): avc: denied { open } for pid=8648 comm="syz.0.629" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 239.477430][ T5126] Bluetooth: hci0: command tx timeout [ 240.588956][ T8683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.634'. [ 240.596707][ T5861] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 241.152772][ T5861] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.174187][ T5861] usb 1-1: config 1 has an invalid descriptor of length 225, skipping remainder of the config [ 241.195574][ T5861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.228462][ T5861] usb 1-1: string descriptor 0 read error: -22 [ 241.250397][ T5861] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.277794][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.345208][ T5861] usb 1-1: 0:2 : does not exist [ 241.372946][ T8511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.410262][ T8511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.451610][ T8511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.491385][ T8511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.555979][ T5126] Bluetooth: hci0: command tx timeout [ 241.875229][ T8698] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.636'. [ 241.984475][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.008045][ T8697] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.636'. [ 242.049338][ T5898] usb 1-1: USB disconnect, device number 34 [ 242.068565][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.102896][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.110122][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.169688][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.176822][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.199649][ T5861] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 242.267352][ T8511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.346569][ T5861] usb 2-1: device descriptor read/64, error -71 [ 242.599285][ T8722] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 242.607337][ T5861] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 242.809834][ T5861] usb 2-1: device descriptor read/64, error -71 [ 242.956806][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.984311][ T5861] usb usb2-port1: attempt power cycle [ 243.140110][ T8733] block nbd0: NBD_DISCONNECT [ 243.385744][ T5861] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 243.425686][ T5898] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 243.451237][ T5861] usb 2-1: device descriptor read/8, error -71 [ 243.990282][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 244.007426][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.039317][ T5898] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 244.058780][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.076759][ T5898] usb 1-1: config 0 descriptor?? [ 244.166524][ T5861] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 244.215323][ T5861] usb 2-1: device descriptor read/8, error -71 [ 244.239584][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 244.239601][ T30] audit: type=1400 audit(1746257570.629:613): avc: denied { append } for pid=8754 comm="syz.3.646" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 244.253635][ T8511] veth0_vlan: entered promiscuous mode [ 244.289753][ T8511] veth1_vlan: entered promiscuous mode [ 244.331762][ T30] audit: type=1400 audit(1746257570.669:614): avc: denied { map } for pid=8754 comm="syz.3.646" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 244.356860][ T5861] usb usb2-port1: unable to enumerate USB device [ 244.409447][ T30] audit: type=1400 audit(1746257570.669:615): avc: denied { execute } for pid=8754 comm="syz.3.646" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 244.413558][ T8511] veth0_macvtap: entered promiscuous mode [ 244.804969][ T8773] netlink: 156 bytes leftover after parsing attributes in process `syz.3.648'. [ 245.390957][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.403846][ T5898] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 245.409053][ T30] audit: type=1400 audit(1746257570.679:616): avc: denied { create } for pid=8754 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.417996][ T8511] veth1_macvtap: entered promiscuous mode [ 245.446258][ T30] audit: type=1400 audit(1746257570.689:617): avc: denied { ioctl } for pid=8754 comm="syz.3.646" path="socket:[20110]" dev="sockfs" ino=20110 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.478436][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.543863][ T30] audit: type=1400 audit(1746257571.019:618): avc: denied { connect } for pid=8760 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.647806][ T30] audit: type=1400 audit(1746257571.079:619): avc: denied { shutdown } for pid=8760 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.807437][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.830447][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.845942][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.858464][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.649'. [ 245.865941][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.889544][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.904071][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.945600][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.991630][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.024112][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.089294][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.104830][ T5862] usb 1-1: USB disconnect, device number 35 [ 246.132123][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.183924][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.434232][ T8794] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 246.456850][ T8797] random: crng reseeded on system resumption [ 246.474460][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.505132][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.538113][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.555239][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.567098][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.660252][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.672098][ T8511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.688342][ T8511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.698024][ T8511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.706996][ T8511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.719274][ T30] audit: type=1400 audit(1746257573.109:620): avc: denied { create } for pid=8796 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 246.757583][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 246.819475][ T30] audit: type=1400 audit(1746257573.109:621): avc: denied { bind } for pid=8796 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 246.842077][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.858059][ T30] audit: type=1400 audit(1746257573.109:622): avc: denied { setopt } for pid=8796 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 246.879617][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.949109][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.978315][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.188919][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 247.198164][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.658'. [ 247.625709][ T5918] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 247.633542][ T5862] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 248.008440][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.135669][ T5862] usb 1-1: device descriptor read/64, error -71 [ 248.138436][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.147064][ T5918] usb 4-1: config 0 has no interfaces? [ 248.174517][ T5918] usb 4-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 248.193850][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.214085][ T5918] usb 4-1: Product: syz [ 248.225729][ T5918] usb 4-1: Manufacturer: syz [ 248.237687][ T5918] usb 4-1: SerialNumber: syz [ 248.297581][ T5918] usb 4-1: config 0 descriptor?? [ 248.347715][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.415655][ T5862] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 248.537082][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.552636][ T5898] usb 4-1: USB disconnect, device number 13 [ 248.567161][ T5862] usb 1-1: device descriptor read/64, error -71 [ 248.676622][ T5862] usb usb1-port1: attempt power cycle [ 248.685259][ T12] bridge_slave_1: left allmulticast mode [ 248.694259][ T12] bridge_slave_1: left promiscuous mode [ 248.700613][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.711483][ T12] bridge_slave_0: left allmulticast mode [ 248.718869][ T12] bridge_slave_0: left promiscuous mode [ 248.724788][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.036658][ T5862] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 249.576267][ T5862] usb 1-1: device descriptor read/8, error -71 [ 249.649889][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.671202][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.707859][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.717513][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.725195][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.848247][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'. [ 250.004367][ T5862] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 250.244598][ T8851] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 250.266152][ T5862] usb 1-1: device descriptor read/8, error -71 [ 250.267210][ T8852] FAULT_INJECTION: forcing a failure. [ 250.267210][ T8852] name failslab, interval 1, probability 0, space 0, times 0 [ 250.285171][ T8852] CPU: 0 UID: 0 PID: 8852 Comm: syz.2.663 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 250.285195][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 250.285204][ T8852] Call Trace: [ 250.285209][ T8852] [ 250.285215][ T8852] dump_stack_lvl+0x16c/0x1f0 [ 250.285242][ T8852] should_fail_ex+0x512/0x640 [ 250.285262][ T8852] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 250.285287][ T8852] should_failslab+0xc2/0x120 [ 250.285304][ T8852] __kmalloc_cache_noprof+0x6a/0x3e0 [ 250.285327][ T8852] ? ovl_init_fs_context+0x96/0x5d0 [ 250.285351][ T8852] ? kasan_save_track+0x14/0x30 [ 250.285375][ T8852] ovl_init_fs_context+0x96/0x5d0 [ 250.285398][ T8852] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 250.285422][ T8852] alloc_fs_context+0x54a/0x9c0 [ 250.285440][ T8852] path_mount+0xb06/0x1f20 [ 250.285457][ T8852] ? kmem_cache_free+0x2d4/0x4d0 [ 250.285483][ T8852] ? __pfx_path_mount+0x10/0x10 [ 250.285501][ T8852] ? putname+0x154/0x1a0 [ 250.285521][ T8852] __x64_sys_mount+0x28d/0x310 [ 250.285538][ T8852] ? __pfx___x64_sys_mount+0x10/0x10 [ 250.285552][ T8852] ? rcu_is_watching+0x12/0xc0 [ 250.285576][ T8852] do_syscall_64+0xcd/0x260 [ 250.285599][ T8852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.285615][ T8852] RIP: 0033:0x7fc42b58e969 [ 250.285629][ T8852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.285646][ T8852] RSP: 002b:00007fc42c343038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.285662][ T8852] RAX: ffffffffffffffda RBX: 00007fc42b7b6160 RCX: 00007fc42b58e969 [ 250.285673][ T8852] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 250.285683][ T8852] RBP: 00007fc42c343090 R08: 00002000000001c0 R09: 0000000000000000 [ 250.285692][ T8852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.285701][ T8852] R13: 0000000000000000 R14: 00007fc42b7b6160 R15: 00007ffc93aacd78 [ 250.285721][ T8852] [ 250.377751][ T5862] usb usb1-port1: unable to enumerate USB device [ 250.378115][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.494999][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.500997][ C0] hrtimer: interrupt took 215264347 ns [ 250.665552][ T8859] FAULT_INJECTION: forcing a failure. [ 250.665552][ T8859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.695804][ T8859] CPU: 0 UID: 0 PID: 8859 Comm: syz.3.668 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 250.695833][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 250.695843][ T8859] Call Trace: [ 250.695848][ T8859] [ 250.695855][ T8859] dump_stack_lvl+0x16c/0x1f0 [ 250.695881][ T8859] should_fail_ex+0x512/0x640 [ 250.695905][ T8859] _copy_from_user+0x2e/0xd0 [ 250.695929][ T8859] copy_msghdr_from_user+0x98/0x160 [ 250.695947][ T8859] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 250.695981][ T8859] ___sys_sendmsg+0xfe/0x1d0 [ 250.695998][ T8859] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.696043][ T8859] __sys_sendmsg+0x16d/0x220 [ 250.696060][ T8859] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.696083][ T8859] ? rcu_is_watching+0x12/0xc0 [ 250.696109][ T8859] do_syscall_64+0xcd/0x260 [ 250.696133][ T8859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.696150][ T8859] RIP: 0033:0x7ff1d938e969 [ 250.696164][ T8859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.696179][ T8859] RSP: 002b:00007ff1da1b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.696196][ T8859] RAX: ffffffffffffffda RBX: 00007ff1d95b5fa0 RCX: 00007ff1d938e969 [ 250.696206][ T8859] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 250.696216][ T8859] RBP: 00007ff1da1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 250.696225][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.696234][ T8859] R13: 0000000000000000 R14: 00007ff1d95b5fa0 R15: 00007ffe75f65868 [ 250.696257][ T8859] [ 250.699054][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.895266][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.910670][ T12] bond0 (unregistering): Released all slaves [ 250.994935][ T8867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.669'. [ 251.843562][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 251.947334][ T5918] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 252.075028][ T5898] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 252.389679][ T5918] usb 4-1: config 0 has no interfaces? [ 252.437226][ T5918] usb 4-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 252.525883][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.621733][ T5918] usb 4-1: Product: syz [ 252.663649][ T5918] usb 4-1: Manufacturer: syz [ 252.723886][ T5918] usb 4-1: SerialNumber: syz [ 252.825994][ T5918] usb 4-1: config 0 descriptor?? [ 252.917512][ T5898] usb 3-1: device descriptor read/64, error -71 [ 253.571919][ T12] hsr_slave_0: left promiscuous mode [ 253.581793][ T12] hsr_slave_1: left promiscuous mode [ 253.588888][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.603647][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.610978][ T5898] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 253.622857][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.631478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.656138][ T12] veth1_macvtap: left promiscuous mode [ 253.661851][ T12] veth0_macvtap: left promiscuous mode [ 253.668582][ T12] veth1_vlan: left promiscuous mode [ 253.674059][ T12] veth0_vlan: left promiscuous mode [ 253.765821][ T5898] usb 3-1: device descriptor read/64, error -71 [ 253.925960][ T5898] usb usb3-port1: attempt power cycle [ 254.175812][ T5918] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 254.265090][ T12] team0 (unregistering): Port device team_slave_1 removed [ 254.295937][ T5898] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 254.324263][ T12] team0 (unregistering): Port device team_slave_0 removed [ 254.333445][ T5918] usb 2-1: config 0 has no interfaces? [ 254.336044][ T5898] usb 3-1: device descriptor read/8, error -71 [ 254.352341][ T5918] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 254.361950][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.384942][ T5918] usb 2-1: Product: syz [ 254.401637][ T5918] usb 2-1: Manufacturer: syz [ 254.432727][ T5918] usb 2-1: SerialNumber: syz [ 254.459318][ T5918] usb 2-1: config 0 descriptor?? [ 254.605734][ T5898] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 254.643160][ T5898] usb 3-1: device descriptor read/8, error -71 [ 254.769989][ T5898] usb usb3-port1: unable to enumerate USB device [ 254.859438][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 254.859451][ T30] audit: type=1400 audit(1746257581.239:629): avc: denied { create } for pid=8915 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 255.010118][ T30] audit: type=1400 audit(1746257581.399:630): avc: denied { mount } for pid=8918 comm="syz.0.682" name="/" dev="ramfs" ino=20472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 255.036027][ T5918] usb 4-1: USB disconnect, device number 14 [ 255.272470][ T30] audit: type=1400 audit(1746257581.659:631): avc: denied { create } for pid=8918 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 255.296039][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'. [ 255.323676][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.392619][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.403538][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.410762][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.426564][ T8842] bridge_slave_0: entered allmulticast mode [ 255.448484][ T8842] bridge_slave_0: entered promiscuous mode [ 255.491565][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.500644][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.509648][ T8842] bridge_slave_1: entered allmulticast mode [ 255.569204][ T8842] bridge_slave_1: entered promiscuous mode [ 255.663918][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.693619][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.767697][ T8842] team0: Port device team_slave_0 added [ 255.783572][ T8842] team0: Port device team_slave_1 added [ 256.560203][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.588477][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.665659][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.716122][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.741279][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.885838][ T5867] usb 2-1: USB disconnect, device number 25 [ 256.938567][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.187625][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.687'. [ 257.260220][ T8842] hsr_slave_0: entered promiscuous mode [ 257.280165][ T8842] hsr_slave_1: entered promiscuous mode [ 257.300081][ T8842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.333670][ T8842] Cannot create hsr debugfs directory [ 257.443034][ T30] audit: type=1400 audit(1746257583.819:632): avc: denied { read } for pid=8939 comm="syz.1.690" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 257.489206][ T30] audit: type=1400 audit(1746257583.829:633): avc: denied { open } for pid=8939 comm="syz.1.690" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 257.639408][ T8943] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 257.651059][ T8943] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 258.081376][ T30] audit: type=1400 audit(1746257583.989:634): avc: denied { mounton } for pid=8937 comm="syz.2.689" path="/157/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 258.346700][ T30] audit: type=1400 audit(1746257583.999:635): avc: denied { mount } for pid=8937 comm="syz.2.689" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 258.371164][ T30] audit: type=1400 audit(1746257584.029:636): avc: denied { unlink } for pid=8937 comm="syz.2.689" name="#11" dev="tmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 258.393802][ T30] audit: type=1400 audit(1746257584.129:637): avc: denied { listen } for pid=8937 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 258.786594][ T5918] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 258.805716][ T5867] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 258.915692][ T5918] usb 3-1: device descriptor read/64, error -71 [ 258.960875][ T5867] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.975168][ T30] audit: type=1400 audit(1746257585.369:638): avc: denied { mounton } for pid=8953 comm="syz.0.694" path="/151/file0" dev="tmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 258.998812][ T5867] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.018973][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.030918][ T8842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.038928][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.050354][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.054717][ T8842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.063423][ T5867] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.077953][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.086444][ T5867] usb 2-1: Product: syz [ 259.090708][ T5867] usb 2-1: Manufacturer: syz [ 259.095787][ T8842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.107602][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 259.109025][ T8842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.119787][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 259.131225][ T5867] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 259.137308][ T5867] cdc_wdm 2-1:1.0: Unknown control protocol [ 259.166412][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 259.201744][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.218749][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.232382][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.239544][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.254322][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.261475][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.305665][ T5918] usb 3-1: device descriptor read/64, error -71 [ 259.413196][ T24] usb 2-1: USB disconnect, device number 26 [ 259.419822][ T5918] usb usb3-port1: attempt power cycle [ 259.501052][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.638846][ T8965] xt_CT: No such helper "netbios-ns" [ 259.806324][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 260.505841][ T5918] usb 3-1: device descriptor read/8, error -71 [ 260.627259][ T8972] FAULT_INJECTION: forcing a failure. [ 260.627259][ T8972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.665674][ T8972] CPU: 1 UID: 0 PID: 8972 Comm: syz.3.696 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 260.665704][ T8972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 260.665713][ T8972] Call Trace: [ 260.665719][ T8972] [ 260.665726][ T8972] dump_stack_lvl+0x16c/0x1f0 [ 260.665754][ T8972] should_fail_ex+0x512/0x640 [ 260.665779][ T8972] _copy_from_user+0x2e/0xd0 [ 260.665803][ T8972] copy_msghdr_from_user+0x98/0x160 [ 260.665820][ T8972] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 260.665847][ T8972] ___sys_sendmsg+0xfe/0x1d0 [ 260.665864][ T8972] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.665909][ T8972] __sys_sendmsg+0x16d/0x220 [ 260.665926][ T8972] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.665949][ T8972] ? rcu_is_watching+0x12/0xc0 [ 260.665976][ T8972] do_syscall_64+0xcd/0x260 [ 260.666000][ T8972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.666017][ T8972] RIP: 0033:0x7ff1d938e969 [ 260.666030][ T8972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.666046][ T8972] RSP: 002b:00007ff1da1b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.666062][ T8972] RAX: ffffffffffffffda RBX: 00007ff1d95b5fa0 RCX: 00007ff1d938e969 [ 260.666072][ T8972] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.666082][ T8972] RBP: 00007ff1da1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 260.666091][ T8972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.666105][ T8972] R13: 0000000000000000 R14: 00007ff1d95b5fa0 R15: 00007ffe75f65868 [ 260.666130][ T8972] [ 260.750159][ T8842] veth0_vlan: entered promiscuous mode [ 260.899222][ T8842] veth1_vlan: entered promiscuous mode [ 260.925576][ T5918] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 260.929601][ T8842] veth0_macvtap: entered promiscuous mode [ 260.945335][ T8842] veth1_macvtap: entered promiscuous mode [ 260.956239][ T5918] usb 3-1: device descriptor read/8, error -71 [ 260.956462][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 260.956474][ T30] audit: type=1400 audit(1746257587.349:640): avc: denied { read write } for pid=8976 comm="syz.3.697" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 260.999885][ T30] audit: type=1400 audit(1746257587.349:641): avc: denied { open } for pid=8976 comm="syz.3.697" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 261.016043][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.034173][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.045613][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.056208][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.066591][ T5918] usb usb3-port1: unable to enumerate USB device [ 261.074903][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.085638][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.095454][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.106511][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.117752][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.130090][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.140969][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.150968][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.162315][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.172187][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.182706][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.192522][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.203644][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.222992][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.242985][ T8842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.252416][ T8842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.263680][ T8842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.281090][ T8842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.316813][ T8983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.699'. [ 261.347500][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 261.378363][ T6608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.407876][ T6608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.416121][ T30] audit: type=1400 audit(1746257587.799:642): avc: denied { setopt } for pid=8986 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.460026][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.493456][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.562077][ T30] audit: type=1400 audit(1746257587.899:643): avc: denied { write } for pid=8989 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 261.953349][ T9001] tipc: Started in network mode [ 261.958578][ T9001] tipc: Node identity ac14140f, cluster identity 4711 [ 261.965982][ T9001] tipc: New replicast peer: 255.255.255.255 [ 261.973627][ T9001] tipc: Enabled bearer , priority 10 [ 262.283256][ T9000] netlink: 40 bytes leftover after parsing attributes in process `syz.3.704'. [ 262.321706][ T30] audit: type=1326 audit(1746257588.699:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.1.702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57d478e969 code=0x0 [ 262.592424][ T30] audit: type=1400 audit(1746257588.899:645): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 263.129072][ T9007] netlink: 'syz.2.707': attribute type 11 has an invalid length. [ 263.136916][ T9007] netlink: 224 bytes leftover after parsing attributes in process `syz.2.707'. [ 263.258750][ T5918] tipc: Node number set to 2886997007 [ 263.324739][ T9019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.711'. [ 263.514054][ T9025] FAULT_INJECTION: forcing a failure. [ 263.514054][ T9025] name failslab, interval 1, probability 0, space 0, times 0 [ 263.538256][ T9025] CPU: 1 UID: 0 PID: 9025 Comm: syz.2.712 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 263.538285][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 263.538296][ T9025] Call Trace: [ 263.538302][ T9025] [ 263.538309][ T9025] dump_stack_lvl+0x16c/0x1f0 [ 263.538338][ T9025] should_fail_ex+0x512/0x640 [ 263.538365][ T9025] should_failslab+0xc2/0x120 [ 263.538382][ T9025] __kmalloc_cache_noprof+0x6a/0x3e0 [ 263.538406][ T9025] ? vhost_iotlb_itree_augment_rotate+0x130/0x180 [ 263.538429][ T9025] ? vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 263.538454][ T9025] vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 263.538474][ T9025] ? __kasan_kmalloc+0xaa/0xb0 [ 263.538501][ T9025] vhost_dev_ioctl+0x370/0xdc0 [ 263.538524][ T9025] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 263.538544][ T9025] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 263.538576][ T9025] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 263.538593][ T9025] ? hook_file_ioctl_common+0x145/0x410 [ 263.538619][ T9025] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 263.538642][ T9025] ? selinux_file_ioctl+0xb4/0x270 [ 263.538667][ T9025] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 263.538685][ T9025] __x64_sys_ioctl+0x190/0x200 [ 263.538708][ T9025] do_syscall_64+0xcd/0x260 [ 263.538731][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.538748][ T9025] RIP: 0033:0x7fc42b58e969 [ 263.538762][ T9025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.538778][ T9025] RSP: 002b:00007fc42c385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.538795][ T9025] RAX: ffffffffffffffda RBX: 00007fc42b7b5fa0 RCX: 00007fc42b58e969 [ 263.538805][ T9025] RDX: 0000200000000680 RSI: 000000004008af03 RDI: 0000000000000003 [ 263.538815][ T9025] RBP: 00007fc42c385090 R08: 0000000000000000 R09: 0000000000000000 [ 263.538824][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.538839][ T9025] R13: 0000000000000000 R14: 00007fc42b7b5fa0 R15: 00007ffc93aacd78 [ 263.538862][ T9025] [ 264.011053][ T30] audit: type=1400 audit(1746257590.379:646): avc: denied { create } for pid=9028 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 264.533449][ T30] audit: type=1400 audit(1746257590.919:647): avc: denied { write } for pid=9037 comm="syz.1.716" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 264.565778][ T5898] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 264.651394][ T6608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.706846][ T5898] usb 3-1: device descriptor read/64, error -71 [ 264.945964][ T5898] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 265.028594][ T6608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.079105][ T5898] usb 3-1: device descriptor read/64, error -71 [ 265.117360][ T6608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.203942][ T6608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.214725][ T5898] usb usb3-port1: attempt power cycle [ 265.361690][ T6608] bridge_slave_1: left allmulticast mode [ 265.371445][ T6608] bridge_slave_1: left promiscuous mode [ 265.381751][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.391145][ T6608] bridge_slave_0: left allmulticast mode [ 265.399598][ T6608] bridge_slave_0: left promiscuous mode [ 265.405564][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.682739][ T5898] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 265.717614][ T5898] usb 3-1: device descriptor read/8, error -71 [ 265.881098][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.900736][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.915362][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.925714][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.935637][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.965649][ T5898] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 265.986738][ T5898] usb 3-1: device descriptor read/8, error -71 [ 266.096921][ T5898] usb usb3-port1: unable to enumerate USB device [ 266.185654][ T6608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.197636][ T6608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.208901][ T6608] bond0 (unregistering): Released all slaves [ 266.342938][ T30] audit: type=1400 audit(1746257592.729:648): avc: denied { bind } for pid=9057 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 266.356789][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 266.373623][ T30] audit: type=1400 audit(1746257592.729:649): avc: denied { name_bind } for pid=9057 comm="syz.0.722" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 266.456425][ T30] audit: type=1400 audit(1746257592.729:650): avc: denied { node_bind } for pid=9057 comm="syz.0.722" saddr=224.0.0.2 src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 267.462879][ T5826] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 267.462941][ T5826] Bluetooth: hci4: Malformed LE Event: 0x0d [ 269.415664][ T5826] Bluetooth: hci0: command tx timeout [ 271.476564][ T5826] Bluetooth: hci0: command tx timeout [ 273.555663][ T5826] Bluetooth: hci0: command tx timeout [ 275.635704][ T5826] Bluetooth: hci0: command tx timeout [ 313.240536][ T30] audit: type=1400 audit(1746257638.659:651): avc: denied { setopt } for pid=9067 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.247286][ T30] audit: type=1400 audit(1746257638.669:652): avc: denied { write } for pid=9067 comm="syz.0.725" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 316.270263][ T30] audit: type=1400 audit(1746257638.669:653): avc: denied { read } for pid=9067 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 317.246067][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.252427][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.306160][ T5126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.328343][ T5126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.294340][ T5126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.302412][ T5126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.310166][ T5126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.327126][ T5126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.316626][ T5126] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.328114][ T5817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.339422][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 328.341658][ T5126] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.307288][ T5817] Bluetooth: hci5: command tx timeout [ 329.317948][ T5820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 329.327300][ T5126] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.347641][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 330.325929][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 330.335338][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 330.335558][ T6608] hsr_slave_0: left promiscuous mode [ 340.275860][ T5813] Bluetooth: hci5: command tx timeout [ 340.327920][ T5813] Bluetooth: hci6: command tx timeout [ 343.425533][ T5813] Bluetooth: hci5: command tx timeout [ 346.945566][ T5826] Bluetooth: hci6: command tx timeout [ 354.195776][ T5126] Bluetooth: hci5: command tx timeout [ 354.315632][ T5826] Bluetooth: hci6: command tx timeout [ 360.035574][ T5826] Bluetooth: hci6: command tx timeout [ 375.295912][ T6608] hsr_slave_1: left promiscuous mode [ 375.304871][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.312475][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.320239][ T5826] Bluetooth: hci7: command tx timeout [ 378.281245][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.287662][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.345569][ T5826] Bluetooth: hci7: command tx timeout [ 378.366760][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.374270][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.285612][ T5826] Bluetooth: hci7: command tx timeout [ 381.305640][ T6608] veth1_macvtap: left promiscuous mode [ 381.311245][ T6608] veth0_macvtap: left promiscuous mode [ 382.283537][ T6608] veth1_vlan: left promiscuous mode [ 382.289060][ T6608] veth0_vlan: left promiscuous mode [ 383.326224][ T5813] Bluetooth: hci7: command tx timeout [ 391.405566][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 395.187518][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.198839][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.213105][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.227588][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.196302][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.275801][ T5126] Bluetooth: hci1: command tx timeout [ 398.276162][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.294153][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.270723][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.278763][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.286547][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.283744][ T5813] Bluetooth: hci1: command tx timeout [ 401.319357][ T5826] Bluetooth: hci2: command tx timeout [ 401.324563][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.288142][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.300143][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.323354][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.485768][ T5820] Bluetooth: hci1: command tx timeout [ 403.491278][ T5820] Bluetooth: hci2: command tx timeout [ 403.498622][ T5820] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 403.509651][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.509895][ T5820] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 403.526550][ T5820] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 404.459085][ T5820] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 404.475353][ T5820] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 405.675661][ T5813] Bluetooth: hci2: command tx timeout [ 405.675661][ T5820] Bluetooth: hci3: command tx timeout [ 405.681117][ T5813] Bluetooth: hci1: command tx timeout [ 406.187453][ T5813] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 406.201931][ T5813] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 406.214720][ T5813] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 406.277321][ T5813] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 407.155792][ T5126] Bluetooth: hci8: command tx timeout [ 407.209846][ T5813] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 408.375630][ T5813] Bluetooth: hci3: command tx timeout [ 408.379709][ T5126] Bluetooth: hci2: command tx timeout [ 409.235671][ T5126] Bluetooth: hci8: command tx timeout [ 410.445587][ T5826] Bluetooth: hci3: command tx timeout [ 410.918270][ T5826] Bluetooth: hci9: command tx timeout [ 411.475561][ T5826] Bluetooth: hci8: command tx timeout [ 412.515601][ T5826] Bluetooth: hci3: command tx timeout [ 412.995966][ T5826] Bluetooth: hci9: command tx timeout [ 413.555610][ T5826] Bluetooth: hci8: command tx timeout [ 415.075770][ T5826] Bluetooth: hci9: command tx timeout [ 417.155718][ T5826] Bluetooth: hci9: command tx timeout [ 439.719328][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.726007][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.098235][ T6608] team0 (unregistering): Port device team_slave_1 removed [ 450.877917][ T6608] team0 (unregistering): Port device team_slave_0 removed [ 453.864032][ T5813] Bluetooth: hci6: command 0x0406 tx timeout [ 453.864044][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 462.698560][ T5126] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 463.705879][ T5126] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 463.741197][ T5820] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 463.748822][ T5813] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 464.669238][ T5813] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 464.686249][ T5820] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 464.694317][ T5820] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 464.702928][ T5813] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 465.674878][ T5820] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 465.683792][ T5820] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 467.656617][ T31] INFO: task kworker/u8:2:36 blocked for more than 144 seconds. [ 467.664390][ T31] Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 [ 467.691834][ T5820] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 467.703294][ T5820] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 468.670765][ T30] audit: type=1400 audit(1746257795.059:654): avc: denied { write } for pid=5797 comm="syz-executor" path="pipe:[3987]" dev="pipefs" ino=3987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 468.693942][ T5126] Bluetooth: hci10: command tx timeout [ 468.705518][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.714285][ T31] task:kworker/u8:2 state:D stack:23848 pid:36 tgid:36 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 469.685595][ T31] Workqueue: events_unbound linkwatch_event [ 469.688884][ T5813] Bluetooth: hci11: command tx timeout [ 469.706368][ T5817] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 469.709639][ T5820] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 470.688625][ T5817] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 470.689166][ T5820] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 470.705589][ T31] Call Trace: [ 470.706178][ T5820] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 470.708881][ T31] [ 470.717634][ T5820] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 471.665600][ T5813] Bluetooth: hci10: command tx timeout [ 471.666128][ T5817] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 471.679274][ T5817] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 472.665457][ T31] __schedule+0x116f/0x5de0 [ 472.671440][ T31] ? find_held_lock+0x2b/0x80 [ 472.675492][ T5126] Bluetooth: hci11: command tx timeout [ 472.678819][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 472.695511][ T31] ? __pfx___schedule+0x10/0x10 [ 472.700460][ T31] ? find_held_lock+0x2b/0x80 [ 472.712559][ T31] ? schedule+0x2d7/0x3a0 [ 473.675492][ T31] schedule+0xe7/0x3a0 [ 473.679659][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.685159][ T31] __mutex_lock+0x6c7/0xb90 [ 473.694984][ T31] ? linkwatch_event+0x51/0xc0 [ 473.699964][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.705013][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 473.712601][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 473.718975][ T5817] Bluetooth: hci10: command tx timeout [ 474.758395][ T5126] Bluetooth: hci13: command tx timeout [ 474.764988][ T5126] Bluetooth: hci12: command tx timeout [ 474.771685][ T5126] Bluetooth: hci11: command tx timeout [ 474.921640][ T31] ? linkwatch_event+0x51/0xc0 [ 474.926541][ T31] ? rtnl_lock+0x9/0x20 [ 474.935530][ T31] linkwatch_event+0x51/0xc0 [ 474.945502][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 474.955492][ T31] ? rcu_is_watching+0x12/0xc0 [ 474.965592][ T31] process_one_work+0x9cc/0x1b70 [ 474.975652][ T31] ? __pfx_process_one_work+0x10/0x10 [ 474.985641][ T31] ? assign_work+0x1a0/0x250 [ 474.995715][ T31] worker_thread+0x6c8/0xf10 [ 475.005752][ T31] ? __pfx_worker_thread+0x10/0x10 [ 475.015540][ T31] kthread+0x3c2/0x780 [ 475.027583][ T31] ? __pfx_kthread+0x10/0x10 [ 475.035546][ T31] ? __pfx_kthread+0x10/0x10 [ 475.045494][ T31] ? __pfx_kthread+0x10/0x10 [ 475.055505][ T31] ? __pfx_kthread+0x10/0x10 [ 475.065495][ T31] ? rcu_is_watching+0x12/0xc0 [ 475.075605][ T31] ? __pfx_kthread+0x10/0x10 [ 475.085517][ T31] ret_from_fork+0x45/0x80 [ 475.095507][ T31] ? __pfx_kthread+0x10/0x10 [ 475.105562][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.115531][ T31] [ 476.205843][ T31] INFO: task syz-executor:9052 blocked for more than 152 seconds. [ 476.213719][ T31] Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 [ 476.835791][ T5817] Bluetooth: hci10: command tx timeout [ 476.835831][ T5126] Bluetooth: hci11: command tx timeout [ 476.841357][ T5817] Bluetooth: hci12: command tx timeout [ 476.846867][ T5826] Bluetooth: hci13: command tx timeout