last executing test programs: 1m46.323580162s ago: executing program 1 (id=192): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000280)=0x1c, 0x80c00) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x4000}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x0, 0x0, 0x72}}, 0xe8) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e0001020000000000000000000000004ba02e080f36f780baa9494338d16ce4fe929423e367a08e0e625a1cea846f1bd01a94b95b252609d0d60045f1c9ecfbb301bdb27d55be7ad5f3", @ANYRES32=0x0, @ANYBLOB="d5"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000020000030000000900000000000000", @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000010000000000010000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000900"/28], 0x48) bind$inet(r2, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) 1m46.196119849s ago: executing program 3 (id=193): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30004001) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000100), 0x0, 0x20000000, 0x0) socket$inet6(0xa, 0x80803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = open(0x0, 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x2, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) ioctl$SNDCTL_SEQ_CTRLRATE(r6, 0xc0045103, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(r3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m45.156785155s ago: executing program 3 (id=195): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='signal_generate\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_destroy(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc0405668, &(0x7f0000000000)) socket$unix(0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0xa00, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xa}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0x5, 0x100000001}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) 1m43.954702333s ago: executing program 3 (id=199): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x0, 0x7800, 0x3, 0xf}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x5}, {}, {0x16, 0x3f, 0x0, 0x721}]}) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x14, r4, 0xf29}, 0x14}}, 0x20048080) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$loop(0x0, 0x100000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @noop, @lsrr={0x83, 0xb, 0xfd, [@private, @rand_addr]}]}}}}}) 1m43.228646322s ago: executing program 1 (id=201): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r5, 0x0) syz_clone3(&(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000003900)={r2, 0x1, &(0x7f0000003840)=[0xfff], &(0x7f0000003880)=[0x3, 0x2a, 0x280], &(0x7f00000038c0)=[0x99f4, 0x8, 0x3]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet(0x2, 0x6, 0x0) shutdown(r9, 0x0) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto(r10, &(0x7f0000003180)="356a3099feccbd4719a0242ec0e81a087362b96f64da97", 0x17, 0x24000880, &(0x7f0000003740)=@generic={0x2c, "fe394ae8d90af81ae2fcc46255c156eb78688c9631d1c87051a6ba18994b66a6b2d22032dd3ed1c4258182f2c38bc0a4e38ff6789386b3ea1f29116b61ccce426e157a93ba967447e158cf1653205637cf4f4272da9975a4c9b2ab9eaf929dc7c64499ec8cb6b3d09114de46623abc72e2f9871845e6a1f88a053aadde56"}, 0x80) recvmmsg(r7, &(0x7f00000035c0)=[{{&(0x7f00000037c0)=@ax25={{}, [@rose, @null, @netrom, @null, @default, @bcast, @rose, @default]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/87, 0x57}], 0x4, &(0x7f00000001c0)=""/15, 0xf}}, {{&(0x7f0000002340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002680)=[{&(0x7f00000023c0)=""/23, 0x17}, {&(0x7f0000002400)=""/246, 0xf6}, {&(0x7f0000002500)=""/247, 0xf7}, {&(0x7f0000002600)=""/103, 0x67}], 0x4, &(0x7f00000026c0)=""/2, 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002700)=""/52, 0x34}], 0x1, &(0x7f0000002780)=""/228, 0xe4}, 0x1}, {{&(0x7f0000002880)=@tipc=@id, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002900)=""/105, 0x69}, {&(0x7f0000002980)=""/21, 0x15}, {&(0x7f00000029c0)=""/104, 0x68}, {&(0x7f0000002a40)=""/47, 0x2f}, {&(0x7f0000002a80)=""/18, 0x12}, {&(0x7f0000002ac0)=""/184, 0xb8}, {&(0x7f0000002b80)=""/24, 0x18}, {&(0x7f0000002bc0)=""/237, 0xed}], 0x8, &(0x7f0000002d40)=""/120, 0x78}, 0x8}, {{&(0x7f0000002dc0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/233, 0xe9}], 0x1, &(0x7f0000002f80)=""/61, 0x3d}, 0x9}, {{&(0x7f0000002fc0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003040)=""/226, 0xe2}, {&(0x7f0000003140)=""/36, 0x24}, {&(0x7f0000003180)}, {&(0x7f00000031c0)=""/70, 0x46}, {&(0x7f0000003240)=""/179, 0xb3}, {&(0x7f0000003300)=""/236, 0xec}, {&(0x7f0000003400)=""/145, 0x91}, {&(0x7f00000034c0)=""/37, 0x25}], 0x8, &(0x7f0000003580)=""/58, 0x3a}, 0x1}], 0x6, 0x2020, 0x0) 1m42.13169988s ago: executing program 3 (id=203): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000026c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfc01}, 0x3, 0x976, 0xfffffffffffff801, 0x6, 0x0, 0x0, 0x4}) getgroups(0x7, &(0x7f00000002c0)=[0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) fchown(r0, 0x0, r2) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac40"], 0x2c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xfffffffffffffff5, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r5 = syz_io_uring_setup(0x6d17, &(0x7f0000000340)={0x0, 0x9c17, 0x1000, 0xffffffff, 0xcb, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x28401, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[@ANYRES8=r8], 0x118) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0xb8243000) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0xfffffffc, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 18.389740732s ago: executing program 0 (id=232): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 17.182904515s ago: executing program 0 (id=233): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x55, {0x55, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15.931457851s ago: executing program 4 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 14.983602742s ago: executing program 4 (id=236): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001500010002000000000000000aea0000", @ANYRES32=0x0, @ANYBLOB="140001"], 0x40}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0, 0xd000}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x4000000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) r8 = dup(r7) write$uinput_user_dev(r8, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) 14.957705713s ago: executing program 0 (id=237): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x2, "71b9a7ab"}, @main=@item_4={0x3, 0x0, 0xb, "1000090e"}]}}, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x6c6a01, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x5}) r4 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff}) 12.500962622s ago: executing program 1 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$qrtr(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="c0f0057c91", 0x5}], 0x1, 0x0, 0x0, 0x80}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0xa0000001}) epoll_pwait(r5, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x3ffffe, 0x0, 0x15) epoll_pwait2(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000080)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x2, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@multicast2, {@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x10000}, [@tmpl={0x44, 0x8, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x0, @in=@loopback, 0x0, 0x0, 0x1}]}]}, 0x16c}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) 12.174335614s ago: executing program 4 (id=239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000280)=0x1c, 0x80c00) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x4000}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x0, 0x0, 0x72}}, 0xe8) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e0001020000000000000000000000004ba02e080f36f780baa9494338d16ce4fe929423e367a08e0e625a1cea846f1bd01a94b95b252609d0d60045f1c9ecfbb301bdb27d55be7ad5f3", @ANYRES32=0x0, @ANYBLOB="d5"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000010000000000010000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000900"/28], 0x48) bind$inet(r2, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) 11.952552184s ago: executing program 2 (id=240): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 10.604426649s ago: executing program 2 (id=241): socket$alg(0x26, 0x5, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x2c}}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000000000000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="5a8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f23"], 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060101fa00000000000000000000000500014f99f88587fcc17c0073797a05000a000000050004000000000010000300686173683a697000000000000000"], 0x48}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 10.183760063s ago: executing program 1 (id=242): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0xffff, 0x3, 0x20a, 0xffffffffffffffff, 0x800004, '\x00', 0x0, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r4) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x1, 0x5004) ptrace$getregset(0x4204, r4, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r4, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r4) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x95, 0xaf, 0x32, 0x40, 0x644, 0x800f, 0xc577, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xc, 0x48}}]}}]}}, 0x0) 10.013573025s ago: executing program 0 (id=243): socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='pwc_handler_enter\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) connect$netlink(0xffffffffffffffff, &(0x7f00000001c0)=@proc, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001a000100000000000000000081"], 0x30}}, 0x44880) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090200000000000000000100000008000600ac1414aa08000b00", @ANYRES32], 0x24}}, 0x0) 4.64341528s ago: executing program 4 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.381216558s ago: executing program 2 (id=245): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0xefc1}, &(0x7f0000000380), &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4105, 0x137, 0x0) r1 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) 4.227083907s ago: executing program 3 (id=210): syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007c965c40132051026ee8010203010902220001000000000904e6000001"], 0x0) getrandom(&(0x7f0000000140)=""/145, 0x91, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_getscheduler(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r2, 0x7, 0x0, @void}, 0x10) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3}, 0x9, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0xfffffff5, 0x3, {0x0}, {}, 0xffffffffffffff6b, 0x9}) getpgrp(r4) 3.316582294s ago: executing program 4 (id=246): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) creat(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="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"}) mount$bind(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1333404, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket(0xa, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00s\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') pwrite64(r8, &(0x7f0000000200)="8c", 0xfdef, 0xe00001) 3.176998278s ago: executing program 2 (id=247): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0xffff, 0x3, 0x20a, 0xffffffffffffffff, 0x800004, '\x00', 0x0, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r5) ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x1, 0x5004) ptrace$setregset(0x4205, r5, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r5) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x95, 0xaf, 0x32, 0x40, 0x644, 0x800f, 0xc577, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xc, 0x48}}]}}]}}, 0x0) 3.075692827s ago: executing program 1 (id=248): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000480)="3b12feb666ca6ec151de7fbe50b28a17217975227018af772b45155da1570c24d96815c605c84ba4a3f9961b27ca5a02ef78f8fb7795c03ba15a18475fbd760100c3acbd388d2c43f88cbe01da5c03bbe2972679e59f74", 0x57, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0500000000002e8000000800030000000000", @ANYRES32=r10, @ANYBLOB], 0x34}}, 0x0) r11 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r11}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000001a40)={0x0, 0x0, 0x0, r11, 0x5}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfecc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 2.193506851s ago: executing program 2 (id=249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x6c, 0x0, 0x140, 0x0, 0x230, 0x258, 0x258, 0x230, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'geneve0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x360) semget(0x1, 0x1, 0x1d4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r6 = syz_open_dev$mouse(&(0x7f0000000840), 0xfffffffffffffffa, 0x600100) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="01000000000000000200"/27], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x2, 0x6, 0x3, 0x10, 0x1}], &(0x7f0000000340)='GPL\x00', 0xaf1, 0xec, &(0x7f0000000740)=""/236, 0x41100, 0x42, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x9, 0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r0, r7, r0], 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) 2.055438953s ago: executing program 0 (id=250): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 871.854719ms ago: executing program 0 (id=251): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0x4020565b, &(0x7f0000000040)={0x0, 0x0, "fddb92253cac14363ffda92ed09c5efdfbe1162939981b5fba4f3f2cf64f3a99"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x14e24}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0xfffffd6e}], 0x27, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffcc2, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) listen(r0, 0x0) close(r0) 344.9367ms ago: executing program 3 (id=252): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x2, "71b9a7ab"}, @main=@item_4={0x3, 0x0, 0xb, "1000090e"}]}}, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x6c6a01, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x5}) r4 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff}) 235.273081ms ago: executing program 2 (id=253): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000280)=0x1c, 0x80c00) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x4000}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x0, 0x0, 0x72}}, 0xe8) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e0001020000000000000000000000004ba02e080f36f780baa9494338d16ce4fe929423e367a08e0e625a1cea846f1bd01a94b95b252609d0d60045f1c9ecfbb301bdb27d55be7ad5f3", @ANYRES32=0x0, @ANYBLOB="d5"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000010000000000010000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000900"/28], 0x48) bind$inet(r2, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) 216.638932ms ago: executing program 1 (id=254): socket$alg(0x26, 0x5, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x2c}}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000000000000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="5a8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f23"], 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060101fa00000000000000000000000500014f99f88587fcc17c0073797a05000a000000050004000000000010000300686173683a697000000000000000"], 0x48}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setfsgid(0xee00) kernel console output (not intermixed with test programs): or?? [ 165.734787][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.917710][ T8] usb 1-1: device descriptor read/64, error -71 [ 166.073136][ T8] usb usb1-port1: attempt power cycle [ 166.086037][ T5280] kone 0003:1E7D:2CED.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 166.423685][ T5525] hsr_slave_0: entered promiscuous mode [ 166.445200][ T5280] kone 0003:1E7D:2CED.0003: couldn't init struct kone_device [ 166.462990][ T5280] kone 0003:1E7D:2CED.0003: couldn't install mouse [ 166.483544][ T5280] kone 0003:1E7D:2CED.0003: probe with driver kone failed with error -5 [ 166.499372][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.539707][ T5525] hsr_slave_1: entered promiscuous mode [ 166.555522][ T5280] usb 2-1: USB disconnect, device number 3 [ 166.595296][ T8] usb 1-1: device descriptor read/8, error -71 [ 166.607520][ T5525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.622292][ T5525] Cannot create hsr debugfs directory [ 166.875122][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.928510][ T8] usb 1-1: device descriptor read/8, error -71 [ 167.065137][ T8] usb usb1-port1: unable to enumerate USB device [ 167.385799][ T5281] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.915254][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 171.291479][ T5281] usb 4-1: unable to read config index 0 descriptor/all [ 171.306427][ T5281] usb 4-1: can't read configurations, error -71 [ 171.515919][ T52] hsr_slave_0: left promiscuous mode [ 171.522357][ T52] hsr_slave_1: left promiscuous mode [ 171.575391][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.582927][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.664288][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.672082][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.718605][ T52] veth1_macvtap: left promiscuous mode [ 171.730548][ T52] veth0_macvtap: left promiscuous mode [ 171.737445][ T52] veth1_vlan: left promiscuous mode [ 171.742871][ T52] veth0_vlan: left promiscuous mode [ 171.860295][ T5281] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.076105][ T5281] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 172.095270][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.116203][ T5281] usb 4-1: config 0 descriptor?? [ 173.555137][ T52] team0 (unregistering): Port device team_slave_1 removed [ 173.670809][ T52] team0 (unregistering): Port device team_slave_0 removed [ 173.758397][ T5281] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.801114][ T5281] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 173.841227][ T5281] asix 4-1:0.0: probe with driver asix failed with error -71 [ 173.898946][ T5281] usb 4-1: USB disconnect, device number 4 [ 174.592734][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 174.592754][ T29] audit: type=1400 audit(1727089094.714:270): avc: denied { read } for pid=5839 comm="syz.3.96" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.684519][ T29] audit: type=1400 audit(1727089094.764:271): avc: denied { open } for pid=5839 comm="syz.3.96" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 175.146845][ T5823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.94'. [ 175.513197][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.533670][ T5840] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.597743][ T5840] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.657425][ T5840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.664200][ T5840] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 175.719779][ T5840] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 175.797745][ T5840] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 175.875135][ T5840] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 175.923912][ T5840] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 176.032817][ T5840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.047490][ T5840] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.083172][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.090826][ T5840] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.220022][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.235609][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.250111][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.264109][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.274043][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.297224][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.364699][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.374572][ T5281] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.644839][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 177.685841][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.696827][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.706165][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.734286][ T5281] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 177.756061][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.779219][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.788277][ T5281] usb 2-1: config 0 descriptor?? [ 177.789947][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.802601][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.812848][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.822034][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 177.839503][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.053852][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.092011][ T5245] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.574962][ T5245] Bluetooth: hci1: command tx timeout [ 179.624930][ T5281] kone 0003:1E7D:2CED.0004: unknown main item tag 0x4 [ 179.760604][ T5281] kone 0003:1E7D:2CED.0004: item fetching failed at offset 3/5 [ 180.071542][ T5281] kone 0003:1E7D:2CED.0004: parse failed [ 180.298447][ T5281] kone 0003:1E7D:2CED.0004: probe with driver kone failed with error -22 [ 181.240993][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.255131][ T5281] usb 2-1: USB disconnect, device number 4 [ 181.268029][ T5245] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.268052][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.274164][ T5245] Bluetooth: hci3: command tx timeout [ 181.280409][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.280499][ T5238] Bluetooth: hci1: command tx timeout [ 181.604185][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.729752][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.183719][ T5525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.240482][ T5525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.295293][ T5525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.667616][ T29] audit: type=1400 audit(1727089102.794:272): avc: denied { read write } for pid=5883 comm="syz.3.103" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 182.713018][ T5891] Zero length message leads to an empty skb [ 182.777388][ T29] audit: type=1400 audit(1727089102.794:273): avc: denied { open } for pid=5883 comm="syz.3.103" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 182.795764][ T5525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.014629][ T5360] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 183.204816][ T5360] usb 4-1: Using ep0 maxpacket: 16 [ 183.220857][ T5360] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.231041][ T52] bridge_slave_1: left allmulticast mode [ 183.231123][ T52] bridge_slave_1: left promiscuous mode [ 183.231543][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.254066][ T5360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.276867][ T5360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.292642][ T5360] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 183.305047][ T5360] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.319901][ T52] bridge_slave_0: left allmulticast mode [ 183.328372][ T52] bridge_slave_0: left promiscuous mode [ 183.328733][ T5360] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.350815][ T5360] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.355000][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.368485][ T5240] Bluetooth: hci1: command tx timeout [ 183.371369][ T5245] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.373920][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.386850][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.389735][ T5240] Bluetooth: hci3: command tx timeout [ 183.393986][ T5360] usb 4-1: Manufacturer: syz [ 183.445676][ T5360] usb 4-1: config 0 descriptor?? [ 183.824557][ T5360] rc_core: IR keymap rc-hauppauge not found [ 183.843409][ T5360] Registered IR keymap rc-empty [ 183.868263][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 183.921671][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 183.995665][ T5360] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 184.073414][ T5360] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 184.127760][ T29] audit: type=1400 audit(1727089104.254:274): avc: denied { read } for pid=4661 comm="acpid" name="event4" dev="devtmpfs" ino=2340 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.191138][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.211338][ T29] audit: type=1400 audit(1727089104.254:275): avc: denied { open } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2340 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.245047][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.254753][ T29] audit: type=1400 audit(1727089104.254:276): avc: denied { ioctl } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2340 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.284842][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.315151][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.354891][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.444649][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.494644][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.544718][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.596873][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.649702][ T5360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.693934][ T5360] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 184.742916][ T5360] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 184.775334][ T5360] usb 4-1: USB disconnect, device number 5 [ 184.869246][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.915203][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.016815][ T52] bond0 (unregistering): Released all slaves [ 185.415792][ T5911] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.515040][ T5238] Bluetooth: hci1: command tx timeout [ 185.520679][ T5240] Bluetooth: hci3: command tx timeout [ 186.124675][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 186.760945][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 186.801359][ T5918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.106'. [ 187.164678][ T52] hsr_slave_0: left promiscuous mode [ 187.191028][ T52] hsr_slave_1: left promiscuous mode [ 187.227905][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.255824][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.285585][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.293037][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.408646][ T52] veth1_macvtap: left promiscuous mode [ 187.414243][ T52] veth0_macvtap: left promiscuous mode [ 187.454914][ T52] veth1_vlan: left promiscuous mode [ 187.460333][ T52] veth0_vlan: left promiscuous mode [ 187.602325][ T5240] Bluetooth: hci3: command tx timeout [ 188.866470][ T5925] could not allocate digest TFM handle md4 [ 190.694303][ T52] team0 (unregistering): Port device team_slave_1 removed [ 190.829693][ T52] team0 (unregistering): Port device team_slave_0 removed [ 191.827948][ T5937] could not allocate digest TFM handle md4 [ 193.832144][ T5944] sched: RT throttling activated [ 194.539198][ T5949] FAULT_INJECTION: forcing a failure. [ 194.539198][ T5949] name failslab, interval 1, probability 0, space 0, times 0 [ 194.560201][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz.1.111 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 194.570512][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 194.580587][ T5949] Call Trace: [ 194.583876][ T5949] [ 194.586816][ T5949] dump_stack_lvl+0x16c/0x1f0 [ 194.591539][ T5949] should_fail_ex+0x497/0x5b0 [ 194.596267][ T5949] ? fs_reclaim_acquire+0xae/0x160 [ 194.601419][ T5949] should_failslab+0xc2/0x120 [ 194.606125][ T5949] __kmalloc_noprof+0xcb/0x400 [ 194.610928][ T5949] tomoyo_encode2+0x100/0x3e0 [ 194.615638][ T5949] tomoyo_encode+0x29/0x50 [ 194.620084][ T5949] tomoyo_realpath_from_path+0x19d/0x720 [ 194.625748][ T5949] ? tomoyo_profile+0x47/0x60 [ 194.630439][ T5949] tomoyo_path_perm+0x273/0x450 [ 194.635310][ T5949] ? tomoyo_path_perm+0x25f/0x450 [ 194.640354][ T5949] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 194.645741][ T5949] ? find_held_lock+0x2d/0x110 [ 194.650533][ T5949] ? user_path_at+0x44/0x60 [ 194.655050][ T5949] ? __x64_sys_umount+0x10b/0x1a0 [ 194.660086][ T5949] ? do_syscall_64+0xcd/0x250 [ 194.664777][ T5949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.670883][ T5949] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 194.677165][ T5949] tomoyo_sb_umount+0x8d/0xd0 [ 194.681858][ T5949] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 194.687247][ T5949] ? get_current_fs_domain+0x188/0x1f0 [ 194.692726][ T5949] security_sb_umount+0x8e/0x210 [ 194.697686][ T5949] path_umount+0x2c5/0x10d0 [ 194.702219][ T5949] ? putname+0x12e/0x170 [ 194.706490][ T5949] ? __pfx_path_umount+0x10/0x10 [ 194.711451][ T5949] ? putname+0x12e/0x170 [ 194.715720][ T5949] __x64_sys_umount+0x16c/0x1a0 [ 194.720586][ T5949] ? __pfx___x64_sys_umount+0x10/0x10 [ 194.725982][ T5949] do_syscall_64+0xcd/0x250 [ 194.730507][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.736426][ T5949] RIP: 0033:0x7ff771b7def9 [ 194.740854][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.760476][ T5949] RSP: 002b:00007ff772967038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 194.768944][ T5949] RAX: ffffffffffffffda RBX: 00007ff771d35f80 RCX: 00007ff771b7def9 [ 194.776934][ T5949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 194.784933][ T5949] RBP: 00007ff772967090 R08: 0000000000000000 R09: 0000000000000000 [ 194.792917][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.800903][ T5949] R13: 0000000000000000 R14: 00007ff771d35f80 R15: 00007ffd6164d208 [ 194.808914][ T5949] [ 194.852549][ T5949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.867203][ T29] audit: type=1400 audit(1727089114.994:277): avc: denied { unmount } for pid=5948 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 196.510055][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.584618][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.591920][ T5842] bridge_slave_0: entered allmulticast mode [ 196.702768][ T5842] bridge_slave_0: entered promiscuous mode [ 196.768545][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.833699][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.862961][ T5842] bridge_slave_1: entered allmulticast mode [ 196.936838][ T5842] bridge_slave_1: entered promiscuous mode [ 197.766880][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.783317][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.799556][ T5870] bridge_slave_0: entered allmulticast mode [ 197.811002][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.833500][ T5870] bridge_slave_0: entered promiscuous mode [ 197.851666][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.860124][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.008792][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.013647][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.023498][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.034751][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 198.043356][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.071302][ T5870] bridge_slave_1: entered allmulticast mode [ 198.096631][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.099648][ T5870] bridge_slave_1: entered promiscuous mode [ 198.106224][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.119201][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.127992][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.136336][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.145111][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.226452][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.246505][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.634106][ T5842] team0: Port device team_slave_0 added [ 198.701888][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.752192][ T5842] team0: Port device team_slave_1 added [ 198.829973][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.954833][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.974895][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.007871][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.110326][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.120317][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.151957][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.333542][ T5842] hsr_slave_0: entered promiscuous mode [ 199.343303][ T5842] hsr_slave_1: entered promiscuous mode [ 199.385871][ T5870] team0: Port device team_slave_0 added [ 199.398922][ T5870] team0: Port device team_slave_1 added [ 199.601556][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.608115][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.785998][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.792987][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.820041][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.897362][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.922008][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.929146][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.955733][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.969404][ T5280] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 200.032387][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.169217][ T5238] Bluetooth: hci2: command tx timeout [ 200.175802][ T5280] usb 2-1: Using ep0 maxpacket: 32 [ 200.180734][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.184312][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.207533][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.217585][ T5280] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 200.227817][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.238220][ T5238] Bluetooth: hci4: command tx timeout [ 200.247751][ T5280] usb 2-1: config 0 descriptor?? [ 200.300523][ T5870] hsr_slave_0: entered promiscuous mode [ 200.322059][ T5870] hsr_slave_1: entered promiscuous mode [ 200.336587][ T5870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.344183][ T5870] Cannot create hsr debugfs directory [ 200.419874][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.882408][ T5280] kone 0003:1E7D:2CED.0005: item fetching failed at offset 2/5 [ 200.916539][ T5280] kone 0003:1E7D:2CED.0005: parse failed [ 200.945789][ T5280] kone 0003:1E7D:2CED.0005: probe with driver kone failed with error -22 [ 201.021616][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 201.126283][ T5280] usb 2-1: USB disconnect, device number 5 [ 201.223220][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 201.970002][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.978758][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.991655][ T5975] bridge_slave_0: entered allmulticast mode [ 202.000454][ T5975] bridge_slave_0: entered promiscuous mode [ 202.206625][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.214750][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.222003][ T5975] bridge_slave_1: entered allmulticast mode [ 202.235045][ T5238] Bluetooth: hci2: command tx timeout [ 202.235835][ T5975] bridge_slave_1: entered promiscuous mode [ 202.258035][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.266315][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.273556][ T5978] bridge_slave_0: entered allmulticast mode [ 202.297735][ T5978] bridge_slave_0: entered promiscuous mode [ 202.315591][ T5238] Bluetooth: hci4: command tx timeout [ 202.319057][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.522687][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.552927][ T5978] bridge_slave_1: entered allmulticast mode [ 203.015593][ T5978] bridge_slave_1: entered promiscuous mode [ 203.864362][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.914275][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.973736][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.993288][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.025074][ T5279] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.072782][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.119588][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.143672][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.224689][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 204.240143][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 204.259006][ T5279] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 204.279033][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.304330][ T5279] usb 2-1: config 0 descriptor?? [ 204.314937][ T5238] Bluetooth: hci2: command tx timeout [ 204.347119][ T5279] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 204.405001][ T5238] Bluetooth: hci4: command tx timeout [ 204.414817][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.491394][ T5975] team0: Port device team_slave_0 added [ 204.530429][ T5975] team0: Port device team_slave_1 added [ 204.612186][ T4661] bcm5974 2-1:0.0: could not read from device [ 204.639940][ T6026] bcm5974 2-1:0.0: could not read from device [ 204.640067][ T5978] team0: Port device team_slave_0 added [ 204.693986][ T4661] bcm5974 2-1:0.0: could not read from device [ 204.714053][ T4661] bcm5974 2-1:0.0: could not read from device [ 204.714346][ T5279] usb 2-1: USB disconnect, device number 6 [ 204.748014][ T4661] bcm5974 2-1:0.0: could not read from device [ 204.861182][ T5978] team0: Port device team_slave_1 added [ 204.932057][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.940414][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.968391][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.986859][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.993820][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.030542][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.111040][ T52] bridge_slave_1: left allmulticast mode [ 205.124918][ T52] bridge_slave_1: left promiscuous mode [ 205.131322][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.143524][ T52] bridge_slave_0: left allmulticast mode [ 205.149532][ T52] bridge_slave_0: left promiscuous mode [ 205.156777][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.168667][ T52] gretap1: left allmulticast mode [ 205.173701][ T52] gretap1: left promiscuous mode [ 205.180217][ T52] bridge1: port 1(gretap1) entered disabled state [ 205.192672][ T52] bridge_slave_1: left allmulticast mode [ 205.199481][ T52] bridge_slave_1: left promiscuous mode [ 205.209285][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.219943][ T52] bridge_slave_0: left allmulticast mode [ 205.228372][ T52] bridge_slave_0: left promiscuous mode [ 205.234128][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.249893][ T52] bridge_slave_1: left allmulticast mode [ 205.256997][ T52] bridge_slave_1: left promiscuous mode [ 205.262791][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.274130][ T52] bridge_slave_0: left allmulticast mode [ 205.296543][ T52] bridge_slave_0: left promiscuous mode [ 205.302356][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.924662][ T29] audit: type=1400 audit(1727089125.924:278): avc: denied { mount } for pid=6042 comm="syz.1.120" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 206.407113][ T5238] Bluetooth: hci2: command tx timeout [ 206.474719][ T5238] Bluetooth: hci4: command tx timeout [ 206.481598][ T29] audit: type=1400 audit(1727089126.604:279): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 206.504688][ T29] audit: type=1400 audit(1727089126.624:280): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 206.589418][ T29] audit: type=1400 audit(1727089126.704:281): avc: denied { ioctl } for pid=6046 comm="syz.1.121" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10404 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 206.721853][ T29] audit: type=1400 audit(1727089126.844:282): avc: denied { bind } for pid=6046 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.772543][ T29] audit: type=1400 audit(1727089126.884:283): avc: denied { write } for pid=6046 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 206.774131][ T6048] kAFS: No cell specified [ 207.827891][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.867587][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.893692][ T52] bond0 (unregistering): Released all slaves [ 208.075136][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.148878][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.208030][ T52] bond0 (unregistering): Released all slaves [ 208.460063][ T6054] FAULT_INJECTION: forcing a failure. [ 208.460063][ T6054] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.473575][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.123 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 208.483843][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 208.493995][ T6054] Call Trace: [ 208.497273][ T6054] [ 208.500206][ T6054] dump_stack_lvl+0x16c/0x1f0 [ 208.504898][ T6054] should_fail_ex+0x497/0x5b0 [ 208.509587][ T6054] _copy_to_user+0x30/0xc0 [ 208.514016][ T6054] simple_read_from_buffer+0xd0/0x160 [ 208.519409][ T6054] proc_fail_nth_read+0x198/0x270 [ 208.524459][ T6054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.530059][ T6054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.535676][ T6054] vfs_read+0x1ce/0xbd0 [ 208.540464][ T6054] ? __fdget_pos+0xe8/0x170 [ 208.544975][ T6054] ? __pfx_vfs_read+0x10/0x10 [ 208.549697][ T6054] ? __pfx___mutex_lock+0x10/0x10 [ 208.554736][ T6054] ? __fget_files+0x244/0x3f0 [ 208.559429][ T6054] ksys_read+0x12f/0x260 [ 208.563675][ T6054] ? __pfx_ksys_read+0x10/0x10 [ 208.568455][ T6054] do_syscall_64+0xcd/0x250 [ 208.572963][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.578874][ T6054] RIP: 0033:0x7ff771b7c93c [ 208.583295][ T6054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 208.602911][ T6054] RSP: 002b:00007ff772967030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.611344][ T6054] RAX: ffffffffffffffda RBX: 00007ff771d35f80 RCX: 00007ff771b7c93c [ 208.619321][ T6054] RDX: 000000000000000f RSI: 00007ff7729670a0 RDI: 0000000000000006 [ 208.627303][ T6054] RBP: 00007ff772967090 R08: 0000000000000000 R09: 0000000000000000 [ 208.635286][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.643262][ T6054] R13: 0000000000000000 R14: 00007ff771d35f80 R15: 00007ffd6164d208 [ 208.651254][ T6054] [ 208.680774][ T29] audit: type=1400 audit(1727089128.794:284): avc: denied { rename } for pid=4658 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.712240][ T29] audit: type=1400 audit(1727089128.794:285): avc: denied { unlink } for pid=4658 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.736310][ T29] audit: type=1400 audit(1727089128.794:286): avc: denied { create } for pid=4658 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.835286][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.849504][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.870343][ T52] bond0 (unregistering): Released all slaves [ 208.935871][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.942856][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.980533][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.027269][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.054688][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.130126][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.496902][ T5975] hsr_slave_0: entered promiscuous mode [ 209.508475][ T5975] hsr_slave_1: entered promiscuous mode [ 209.521390][ T5975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.533281][ T5975] Cannot create hsr debugfs directory [ 209.776970][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.800166][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.834341][ T5978] hsr_slave_0: entered promiscuous mode [ 209.868441][ T5978] hsr_slave_1: entered promiscuous mode [ 209.886956][ T5978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.914915][ T5978] Cannot create hsr debugfs directory [ 214.213376][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.487046][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.569353][ T52] hsr_slave_0: left promiscuous mode [ 214.603597][ T52] hsr_slave_1: left promiscuous mode [ 214.641454][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.650934][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.681606][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.701584][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.773783][ T52] hsr_slave_0: left promiscuous mode [ 214.805349][ T52] hsr_slave_1: left promiscuous mode [ 214.811718][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.833356][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.865598][ T52] hsr_slave_0: left promiscuous mode [ 214.882053][ T52] hsr_slave_1: left promiscuous mode [ 214.903395][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.913212][ T29] audit: type=1400 audit(1727089135.034:287): avc: denied { watch watch_reads } for pid=6079 comm="syz.1.126" path="/49/file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.915430][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.991857][ T52] veth1_macvtap: left promiscuous mode [ 214.997871][ T52] veth0_macvtap: left promiscuous mode [ 215.005472][ T52] veth1_vlan: left promiscuous mode [ 215.012335][ T52] veth0_vlan: left promiscuous mode [ 216.039616][ T52] team0 (unregistering): Port device team_slave_1 removed [ 216.140259][ T52] team0 (unregistering): Port device team_slave_0 removed [ 217.072306][ T52] team0 (unregistering): Port device team_slave_1 removed [ 217.110975][ T52] team0 (unregistering): Port device team_slave_0 removed [ 217.562555][ T52] team0 (unregistering): Port device team_slave_1 removed [ 217.595790][ T52] team0 (unregistering): Port device team_slave_0 removed [ 218.221221][ T6093] xt_ecn: cannot match TCP bits for non-tcp packets [ 218.381168][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.717684][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.832729][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.840408][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.969201][ T2471] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.976557][ T2471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.314341][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.480202][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.572294][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.579595][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.601244][ T5975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.636192][ T5975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.667941][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.675272][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.739852][ T5975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.937994][ T5975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.649030][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.755651][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.354253][ T5842] veth0_vlan: entered promiscuous mode [ 221.381967][ T5978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.416821][ T5978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.482502][ T5978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.530679][ T5978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.598325][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.618730][ T5842] veth1_vlan: entered promiscuous mode [ 221.765716][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.830537][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.373054][ T5842] veth0_macvtap: entered promiscuous mode [ 222.428500][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.435895][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.558930][ T5842] veth1_macvtap: entered promiscuous mode [ 222.599802][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.607055][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.937413][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.959658][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.002202][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.126375][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.141317][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.176693][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.267348][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.279404][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.289411][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.314494][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.444561][ T5870] veth0_vlan: entered promiscuous mode [ 223.594929][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.653290][ T5870] veth1_vlan: entered promiscuous mode [ 223.773980][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.887956][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.895253][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.959111][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.966392][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.049583][ T5870] veth0_macvtap: entered promiscuous mode [ 224.112767][ T5870] veth1_macvtap: entered promiscuous mode [ 224.346732][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.374308][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.402159][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.426258][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.443213][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.470685][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.514271][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.656703][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.671834][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.692746][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.730234][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.753047][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.775402][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.783262][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.803409][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.855028][ T29] audit: type=1400 audit(1727089144.974:288): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 224.893899][ T5870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.932366][ T5870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.943396][ T5870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.954464][ T5870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.328743][ T5975] veth0_vlan: entered promiscuous mode [ 225.409677][ T5975] veth1_vlan: entered promiscuous mode [ 225.521411][ T29] audit: type=1400 audit(1727089145.644:289): avc: denied { read write } for pid=6192 comm="syz.0.95" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.615512][ T29] audit: type=1400 audit(1727089145.644:290): avc: denied { open } for pid=6192 comm="syz.0.95" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.661278][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.689398][ T6197] input: syz0 as /devices/virtual/input/input7 [ 225.695227][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.744559][ T5279] kernel read not supported for file /uinput (pid: 5279 comm: kworker/0:3) [ 225.762557][ T29] audit: type=1400 audit(1727089145.794:291): avc: denied { ioctl } for pid=6192 comm="syz.0.95" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.981005][ T5975] veth0_macvtap: entered promiscuous mode [ 226.039743][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.061605][ T5975] veth1_macvtap: entered promiscuous mode [ 226.078361][ T29] audit: type=1400 audit(1727089146.204:292): avc: denied { mount } for pid=6202 comm="syz.1.136" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 226.106586][ T5280] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.114784][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.151554][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.220724][ T29] audit: type=1400 audit(1727089146.344:293): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 226.318478][ T5280] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.356476][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.369339][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 226.420723][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 226.437355][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.456148][ T5280] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 226.472880][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.503595][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.511122][ T5280] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 226.523133][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.523160][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.528247][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.561638][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.609662][ T5280] usb 1-1: config 0 descriptor?? [ 226.615590][ T5280] gspca_main: spca561-2.14.0 probing abcd:cdee [ 226.720708][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.720736][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.720752][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.720772][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.720786][ T5975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.720805][ T5975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.722952][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.772567][ T5978] veth0_vlan: entered promiscuous mode [ 226.803878][ T6221] tty tty29: ldisc open failed (-12), clearing slot 28 [ 226.890434][ T5975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.909527][ T5975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.924619][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 226.941750][ T5975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.973087][ T5975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.198610][ T5978] veth1_vlan: entered promiscuous mode [ 227.379452][ T5280] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 227.394569][ T5280] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.402964][ T5280] usb 1-1: MIDIStreaming interface descriptor not found [ 227.714555][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.751641][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.857616][ T5978] veth0_macvtap: entered promiscuous mode [ 227.987642][ T5978] veth1_macvtap: entered promiscuous mode [ 228.063634][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.094870][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.108546][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.139421][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.159846][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.204560][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.238520][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.269477][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.309706][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.348558][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.406103][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.488116][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.545984][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.577191][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.609312][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.651363][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.691855][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.745467][ T5308] usb 1-1: USB disconnect, device number 10 [ 228.752323][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.808994][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.862298][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.917462][ T5978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.947180][ T5978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.014769][ T5978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.060582][ T5978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.301004][ T29] audit: type=1400 audit(1727089149.424:294): avc: denied { getopt } for pid=6241 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.957180][ T29] audit: type=1400 audit(1727089150.084:295): avc: denied { execute } for pid=6250 comm="syz.2.40" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.994567][ T6256] process 'syz.2.40' launched './file0' with NULL argv: empty string added [ 230.016275][ T29] audit: type=1400 audit(1727089150.134:296): avc: denied { execute_no_trans } for pid=6250 comm="syz.2.40" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 233.891222][ T2471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.933785][ T2471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.113101][ T29] audit: type=1400 audit(1727089154.234:297): avc: denied { write } for pid=6268 comm="syz.0.144" name="ip_vs_stats" dev="proc" ino=4026533081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 234.153886][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.206515][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.144'. [ 234.248178][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.418835][ T29] audit: type=1400 audit(1727089154.544:298): avc: denied { create } for pid=6271 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.502684][ T29] audit: type=1400 audit(1727089154.554:299): avc: denied { getopt } for pid=6271 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.540771][ T6274] ======================================================= [ 234.540771][ T6274] WARNING: The mand mount option has been deprecated and [ 234.540771][ T6274] and is ignored by this kernel. Remove the mand [ 234.540771][ T6274] option from the mount to silence this warning. [ 234.540771][ T6274] ======================================================= [ 234.626996][ T29] audit: type=1400 audit(1727089154.664:300): avc: denied { remount } for pid=6271 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 234.899877][ T29] audit: type=1400 audit(1727089155.024:301): avc: denied { accept } for pid=6275 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 234.900194][ T29] audit: type=1400 audit(1727089155.024:302): avc: denied { listen } for pid=6275 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 234.900795][ T6281] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 234.900850][ T6281] PKCS7: Only support pkcs7_signedData type [ 234.900997][ T29] audit: type=1400 audit(1727089155.024:303): avc: denied { write } for pid=6275 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 234.902675][ T29] audit: type=1400 audit(1727089155.024:304): avc: denied { read } for pid=6275 comm="syz.0.147" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.166342][ T6301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.150'. [ 237.175621][ T6301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.150'. [ 237.474656][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 237.481533][ T29] audit: type=1400 audit(1727089157.354:306): avc: denied { bind } for pid=6291 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.865569][ T6297] netlink: 104 bytes leftover after parsing attributes in process `syz.0.151'. [ 238.060360][ T29] audit: type=1400 audit(1727089157.354:307): avc: denied { node_bind } for pid=6291 comm="syz.1.150" saddr=fe88::2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 238.100232][ T6297] netlink: 180 bytes leftover after parsing attributes in process `syz.0.151'. [ 238.153446][ T29] audit: type=1400 audit(1727089157.364:308): avc: denied { name_bind } for pid=6291 comm="syz.1.150" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 238.275003][ T29] audit: type=1400 audit(1727089157.994:309): avc: denied { nlmsg_read } for pid=6292 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.380231][ T29] audit: type=1400 audit(1727089158.144:310): avc: denied { create } for pid=6298 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 238.429613][ T29] audit: type=1400 audit(1727089158.144:311): avc: denied { getopt } for pid=6298 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 238.498716][ T29] audit: type=1400 audit(1727089158.144:312): avc: denied { ioctl } for pid=6298 comm="syz.3.152" path="socket:[13743]" dev="sockfs" ino=13743 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 238.624799][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 238.921266][ T46] usb 2-1: device descriptor read/64, error -71 [ 239.060876][ T29] audit: type=1400 audit(1727089159.184:313): avc: denied { search } for pid=4658 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.364848][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 239.534686][ T46] usb 2-1: device descriptor read/64, error -71 [ 239.659328][ T46] usb usb2-port1: attempt power cycle [ 240.175557][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 240.221696][ T6320] 9pnet_fd: Insufficient options for proto=fd [ 240.245229][ T46] usb 2-1: device descriptor read/8, error -71 [ 240.417120][ T6324] FAULT_INJECTION: forcing a failure. [ 240.417120][ T6324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.430371][ T6324] CPU: 0 UID: 0 PID: 6324 Comm: syz.2.157 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 240.440629][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.450684][ T6324] Call Trace: [ 240.453962][ T6324] [ 240.456912][ T6324] dump_stack_lvl+0x16c/0x1f0 [ 240.461623][ T6324] should_fail_ex+0x497/0x5b0 [ 240.466322][ T6324] _copy_from_user+0x30/0xf0 [ 240.470977][ T6324] copy_msghdr_from_user+0x99/0x160 [ 240.476240][ T6324] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 240.482066][ T6324] ? __schedule+0x3a31/0x5490 [ 240.486754][ T6324] ? __pfx___lock_acquire+0x10/0x10 [ 240.491977][ T6324] ___sys_sendmsg+0xff/0x1e0 [ 240.496578][ T6324] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.501803][ T6324] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.507067][ T6324] __sys_sendmsg+0x117/0x1f0 [ 240.511670][ T6324] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.516832][ T6324] do_syscall_64+0xcd/0x250 [ 240.521367][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.527299][ T6324] RIP: 0033:0x7fe670b7def9 [ 240.531740][ T6324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.551349][ T6324] RSP: 002b:00007fe671943038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.559807][ T6324] RAX: ffffffffffffffda RBX: 00007fe670d36058 RCX: 00007fe670b7def9 [ 240.567824][ T6324] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 240.575802][ T6324] RBP: 00007fe671943090 R08: 0000000000000000 R09: 0000000000000000 [ 240.583770][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.591754][ T6324] R13: 0000000000000000 R14: 00007fe670d36058 R15: 00007ffde7e4fda8 [ 240.599739][ T6324] [ 240.893347][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 241.039908][ T46] usb 2-1: device descriptor read/8, error -71 [ 241.175594][ T46] usb usb2-port1: unable to enumerate USB device [ 242.172592][ T6328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.178925][ T6328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.184996][ T6328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 242.193635][ T6328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 242.201222][ T6328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.207654][ T6328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 242.795313][ T29] audit: type=1326 audit(1727089162.684:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6338 comm="syz.2.161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe670b7def9 code=0x0 [ 243.045582][ T6328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 243.113731][ T6328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.120127][ T6328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.160975][ T6328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.171585][ T6328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.178230][ T6328] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 243.187738][ T6328] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 244.097416][ T5241] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.148980][ T5241] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.155239][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.195169][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.201284][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.799067][ T5308] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 245.808280][ T29] audit: type=1400 audit(1727089165.934:315): avc: denied { connect } for pid=6363 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.871797][ T6365] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 245.878811][ T6365] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 245.931983][ T29] audit: type=1400 audit(1727089165.994:316): avc: denied { ioctl } for pid=6363 comm="syz.1.167" path="socket:[12630]" dev="sockfs" ino=12630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.965396][ T6365] vhci_hcd vhci_hcd.0: Device attached [ 246.001265][ T5308] usb 3-1: device descriptor read/64, error -71 [ 246.040051][ T29] audit: type=1400 audit(1727089166.164:317): avc: denied { connect } for pid=6363 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.290309][ T5308] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 246.300007][ T46] usb 12-1: SetAddress Request (2) to port 0 [ 246.350411][ T46] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 246.494539][ T5308] usb 3-1: device descriptor read/64, error -71 [ 246.592871][ T6371] vhci_hcd: connection reset by peer [ 246.650460][ T3018] vhci_hcd: stop threads [ 246.651807][ T5308] usb usb3-port1: attempt power cycle [ 246.670692][ T3018] vhci_hcd: release socket [ 246.703086][ T3018] vhci_hcd: disconnect device [ 247.195767][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.204353][ T6385] FAULT_INJECTION: forcing a failure. [ 247.204353][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 247.218519][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 247.275178][ T5240] Bluetooth: hci4: command 0x0c1a tx timeout [ 247.279615][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.2.171 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 247.291730][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 247.301781][ T6385] Call Trace: [ 247.305057][ T6385] [ 247.307988][ T6385] dump_stack_lvl+0x16c/0x1f0 [ 247.312677][ T6385] should_fail_ex+0x497/0x5b0 [ 247.317363][ T6385] ? fs_reclaim_acquire+0xae/0x160 [ 247.322489][ T6385] should_failslab+0xc2/0x120 [ 247.327171][ T6385] kmem_cache_alloc_node_noprof+0x71/0x310 [ 247.333039][ T6385] ? __alloc_skb+0x2b1/0x380 [ 247.337670][ T6385] __alloc_skb+0x2b1/0x380 [ 247.342099][ T6385] ? __pfx___alloc_skb+0x10/0x10 [ 247.347069][ T6385] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 247.353075][ T6385] netlink_alloc_large_skb+0x69/0x130 [ 247.358490][ T6385] netlink_sendmsg+0x689/0xd70 [ 247.363267][ T6385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.368576][ T6385] ? __import_iovec+0x1fd/0x6e0 [ 247.373460][ T6385] ____sys_sendmsg+0xaaf/0xc90 [ 247.378252][ T6385] ? copy_msghdr_from_user+0x10b/0x160 [ 247.383726][ T6385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.389051][ T6385] ? __pfx___lock_acquire+0x10/0x10 [ 247.394269][ T6385] ___sys_sendmsg+0x135/0x1e0 [ 247.398963][ T6385] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.404171][ T6385] ? find_held_lock+0x2d/0x110 [ 247.408969][ T6385] ? ksys_write+0x21c/0x260 [ 247.413511][ T6385] ? __fget_light+0x173/0x210 [ 247.418298][ T6385] __sys_sendmsg+0x117/0x1f0 [ 247.422899][ T6385] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.428044][ T6385] do_syscall_64+0xcd/0x250 [ 247.432569][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.438499][ T6385] RIP: 0033:0x7fe670b7def9 [ 247.442914][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.462520][ T6385] RSP: 002b:00007fe671922038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.470930][ T6385] RAX: ffffffffffffffda RBX: 00007fe670d36130 RCX: 00007fe670b7def9 [ 247.478920][ T6385] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 247.486889][ T6385] RBP: 00007fe671922090 R08: 0000000000000000 R09: 0000000000000000 [ 247.494855][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.502822][ T6385] R13: 0000000000000000 R14: 00007fe670d36130 R15: 00007ffde7e4fda8 [ 247.510805][ T6385] [ 247.527979][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.860794][ T29] audit: type=1400 audit(1727089167.984:318): avc: denied { map } for pid=6378 comm="syz.3.172" path="/dev/v4l-subdev6" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.225876][ T6380] sp0: Synchronizing with TNC [ 249.492591][ T5241] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.595056][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.597933][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.601172][ T5241] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.562127][ T29] audit: type=1400 audit(1727089170.684:319): avc: denied { create } for pid=6402 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.565058][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.867476][ T29] audit: type=1400 audit(1727089170.974:320): avc: denied { connect } for pid=6402 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.894770][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 250.923076][ T8] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 250.955317][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.031841][ T29] audit: type=1400 audit(1727089171.054:321): avc: denied { write } for pid=6402 comm="syz.0.178" path="socket:[12687]" dev="sockfs" ino=12687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.058495][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.067197][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.075659][ T8] usb 2-1: Product: syz [ 251.084616][ T8] usb 2-1: Manufacturer: syz [ 251.093517][ T8] usb 2-1: SerialNumber: syz [ 251.109404][ T8] usb 2-1: config 0 descriptor?? [ 251.130986][ T6410] bridge0: entered allmulticast mode [ 251.535912][ T46] usb 12-1: device descriptor read/8, error -110 [ 251.568278][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.575834][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.584269][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.591498][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.775996][ T6411] bridge0: entered promiscuous mode [ 252.060828][ T46] usb usb12-port1: attempt power cycle [ 252.937960][ T46] usb usb12-port1: unable to enumerate USB device [ 253.233794][ T29] audit: type=1400 audit(1727089173.344:322): avc: denied { bind } for pid=6420 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.664595][ T5233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 253.699144][ T8] option 2-1:0.0: GSM modem (1-port) converter detected [ 253.780335][ T8] usb 2-1: USB disconnect, device number 11 [ 253.791173][ T8] option 2-1:0.0: device disconnected [ 253.942593][ T5233] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 253.972015][ T5233] usb 4-1: config 0 has no interfaces? [ 254.030365][ T5233] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 254.048971][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.094659][ T5233] usb 4-1: config 0 descriptor?? [ 254.371579][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.451401][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.953840][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.955284][ T46] usb 4-1: USB disconnect, device number 6 [ 255.260008][ T29] audit: type=1400 audit(1727089175.374:323): avc: denied { mount } for pid=6438 comm="syz.2.186" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 257.705728][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.190'. [ 260.978419][ T29] audit: type=1326 audit(1727089181.094:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.3.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f0757def9 code=0x0 [ 261.685802][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.692252][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.079416][ T29] audit: type=1326 audit(1727089182.144:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.2.202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe670b7def9 code=0x0 [ 262.619485][ T6506] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 262.639494][ T6506] netlink: 'syz.3.203': attribute type 3 has an invalid length. [ 262.699618][ T29] audit: type=1400 audit(1727089182.824:326): avc: denied { map } for pid=6505 comm="syz.3.203" path="socket:[12846]" dev="sockfs" ino=12846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.814530][ T6506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.203'. [ 262.864569][ T29] audit: type=1400 audit(1727089182.874:327): avc: denied { read accept } for pid=6505 comm="syz.3.203" path="socket:[12846]" dev="sockfs" ino=12846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.085674][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 263.576964][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 263.691996][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 263.728940][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.750549][ T9] usb 4-1: Product: syz [ 263.773525][ T9] usb 4-1: Manufacturer: syz [ 263.807441][ T9] usb 4-1: SerialNumber: syz [ 263.882345][ T9] usb 4-1: config 0 descriptor?? [ 263.904145][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 263.934123][ T9] usb 4-1: Detected FT-X [ 264.142103][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.169150][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.248975][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 264.273644][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 264.297659][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 264.349429][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 264.425104][ T9] usb 4-1: USB disconnect, device number 7 [ 264.523667][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 264.562601][ T9] ftdi_sio 4-1:0.0: device disconnected [ 264.621627][ T29] audit: type=1400 audit(1727089184.744:328): avc: denied { append } for pid=6531 comm="syz.0.207" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 264.709685][ T6534] input: syz1 as /devices/virtual/input/input8 [ 274.035371][ T6557] netlink: 24062 bytes leftover after parsing attributes in process `syz.2.213'. [ 274.080601][ T6557] netlink: 188348 bytes leftover after parsing attributes in process `syz.2.213'. [ 274.110999][ T6558] netlink: 24062 bytes leftover after parsing attributes in process `syz.0.214'. [ 274.206186][ T6558] netlink: 188348 bytes leftover after parsing attributes in process `syz.0.214'. [ 280.974441][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.001556][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.028391][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.062401][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.062902][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.078751][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.086386][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.088292][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.102668][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.127970][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.137266][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.145777][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.195552][ T5241] Bluetooth: hci4: command tx timeout [ 283.202312][ T5241] Bluetooth: hci5: command tx timeout [ 289.547775][ T5241] Bluetooth: hci4: command tx timeout [ 294.085543][ T5238] Bluetooth: hci5: command tx timeout [ 294.284987][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.296388][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.305467][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.346745][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.355528][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.362920][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.654995][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.665155][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.673534][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.682940][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.702281][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.716147][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.263427][ T5241] Bluetooth: hci4: command tx timeout [ 296.269082][ T5241] Bluetooth: hci5: command tx timeout [ 297.172479][ T5245] Bluetooth: hci0: command tx timeout [ 297.179158][ T5245] Bluetooth: hci6: command tx timeout [ 297.222975][ T6585] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 297.230433][ T6585] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 298.316288][ T5241] Bluetooth: hci5: command tx timeout [ 298.316308][ T5245] Bluetooth: hci4: command tx timeout [ 298.835433][ T2471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.999059][ T6591] vlan0: entered promiscuous mode [ 299.204916][ T5245] Bluetooth: hci6: command tx timeout [ 299.210381][ T5245] Bluetooth: hci0: command tx timeout [ 299.520149][ T2471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.927292][ T2471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.313799][ T2471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.284641][ T2471] bridge_slave_1: left allmulticast mode [ 301.290342][ T2471] bridge_slave_1: left promiscuous mode [ 301.314700][ T5241] Bluetooth: hci0: command tx timeout [ 301.320156][ T5241] Bluetooth: hci6: command tx timeout [ 301.394753][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.525646][ T2471] bridge_slave_0: left allmulticast mode [ 301.531346][ T2471] bridge_slave_0: left promiscuous mode [ 301.644738][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.374570][ T5245] Bluetooth: hci6: command tx timeout [ 303.380030][ T5245] Bluetooth: hci0: command tx timeout [ 306.585970][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.713295][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.811931][ T2471] bond0 (unregistering): Released all slaves [ 309.027709][ T2471] hsr_slave_0: left promiscuous mode [ 309.104503][ T2471] hsr_slave_1: left promiscuous mode [ 309.167092][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.244483][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.325546][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.333018][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.795932][ T2471] veth1_macvtap: left promiscuous mode [ 309.801552][ T2471] veth0_macvtap: left promiscuous mode [ 309.890428][ T2471] veth1_vlan: left promiscuous mode [ 309.954607][ T2471] veth0_vlan: left promiscuous mode [ 316.524082][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.540889][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.550372][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.609631][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.622508][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.623930][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 316.639401][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.705964][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 317.739907][ T6576] chnl_net:caif_netlink_parms(): no params data found [ 317.963854][ T6562] chnl_net:caif_netlink_parms(): no params data found [ 318.054712][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 318.183714][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 318.269775][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.277206][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.284486][ T6576] bridge_slave_0: entered allmulticast mode [ 318.292019][ T6576] bridge_slave_0: entered promiscuous mode [ 318.309898][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.320286][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.330670][ T6576] bridge_slave_1: entered allmulticast mode [ 318.341242][ T6576] bridge_slave_1: entered promiscuous mode [ 318.372403][ T2471] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.542641][ T2471] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.641057][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.648887][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.656127][ T6562] bridge_slave_0: entered allmulticast mode [ 318.663631][ T6562] bridge_slave_0: entered promiscuous mode [ 318.673668][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.680960][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.689847][ T6562] bridge_slave_1: entered allmulticast mode [ 318.697372][ T6562] bridge_slave_1: entered promiscuous mode [ 318.712616][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.720079][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.727153][ T5245] Bluetooth: hci1: command tx timeout [ 318.732723][ T6560] bridge_slave_0: entered allmulticast mode [ 318.740836][ T6560] bridge_slave_0: entered promiscuous mode [ 318.769866][ T2471] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.794140][ T6576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.863809][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.871410][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.879485][ T6560] bridge_slave_1: entered allmulticast mode [ 318.888422][ T6560] bridge_slave_1: entered promiscuous mode [ 318.947741][ T6576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.977348][ T2471] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.019130][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.040510][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.178772][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.202647][ T6576] team0: Port device team_slave_0 added [ 319.213941][ T6576] team0: Port device team_slave_1 added [ 319.257858][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.265456][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.273087][ T6574] bridge_slave_0: entered allmulticast mode [ 319.283618][ T6574] bridge_slave_0: entered promiscuous mode [ 319.322508][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.380881][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.405275][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.412565][ T6574] bridge_slave_1: entered allmulticast mode [ 319.431148][ T6574] bridge_slave_1: entered promiscuous mode [ 319.445602][ T6562] team0: Port device team_slave_0 added [ 319.473008][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.483240][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.517323][ T6576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.533372][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.541545][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.568073][ T6576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.624011][ T6562] team0: Port device team_slave_1 added [ 319.671584][ T6606] chnl_net:caif_netlink_parms(): no params data found [ 319.711805][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.758994][ T6560] team0: Port device team_slave_0 added [ 319.771745][ T6560] team0: Port device team_slave_1 added [ 319.821711][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.909835][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.920076][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.948978][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.012864][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.020068][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.053973][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.068167][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.075983][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.102369][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.172325][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.180310][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.209767][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.281681][ T6576] hsr_slave_0: entered promiscuous mode [ 320.293892][ T6576] hsr_slave_1: entered promiscuous mode [ 320.301415][ T6576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.309303][ T6576] Cannot create hsr debugfs directory [ 320.376395][ T2471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.407811][ T6574] team0: Port device team_slave_0 added [ 320.418390][ T6574] team0: Port device team_slave_1 added [ 320.566335][ T2471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.687948][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.695419][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.702565][ T6606] bridge_slave_0: entered allmulticast mode [ 320.711745][ T6606] bridge_slave_0: entered promiscuous mode [ 320.741352][ T2471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.765117][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.772067][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.798900][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.804780][ T5245] Bluetooth: hci1: command tx timeout [ 320.812663][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.822146][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.848519][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.884311][ T6562] hsr_slave_0: entered promiscuous mode [ 320.891525][ T6562] hsr_slave_1: entered promiscuous mode [ 320.898541][ T6562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.906391][ T6562] Cannot create hsr debugfs directory [ 320.952844][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.961955][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.970206][ T6606] bridge_slave_1: entered allmulticast mode [ 320.978663][ T6606] bridge_slave_1: entered promiscuous mode [ 321.011889][ T2471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.074122][ T6560] hsr_slave_0: entered promiscuous mode [ 321.088708][ T6560] hsr_slave_1: entered promiscuous mode [ 321.097703][ T6560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.105688][ T6560] Cannot create hsr debugfs directory [ 321.247360][ T6574] hsr_slave_0: entered promiscuous mode [ 321.255605][ T6574] hsr_slave_1: entered promiscuous mode [ 321.262097][ T6574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.271770][ T6574] Cannot create hsr debugfs directory [ 321.308419][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.397812][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.660307][ T6606] team0: Port device team_slave_0 added [ 321.680328][ T6606] team0: Port device team_slave_1 added [ 321.803319][ T6576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.951704][ T6576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.978669][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.987942][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.016391][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.094315][ T6576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.111610][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.119023][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.146403][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.250093][ T6576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.424102][ T6606] hsr_slave_0: entered promiscuous mode [ 322.434747][ T6606] hsr_slave_1: entered promiscuous mode [ 322.441993][ T6606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.458039][ T6606] Cannot create hsr debugfs directory [ 322.481912][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.488306][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.511440][ T2471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.602352][ T2471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.682877][ T2471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.783665][ T2471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.811716][ T6576] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.832487][ T6576] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.849178][ T6576] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.866889][ T6576] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.878059][ T5245] Bluetooth: hci1: command tx timeout [ 323.032219][ T2471] bridge_slave_1: left allmulticast mode [ 323.039330][ T2471] bridge_slave_1: left promiscuous mode [ 323.052106][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.065604][ T2471] bridge_slave_0: left allmulticast mode [ 323.071298][ T2471] bridge_slave_0: left promiscuous mode [ 323.077367][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.092509][ T2471] bridge_slave_1: left allmulticast mode [ 323.099123][ T2471] bridge_slave_1: left promiscuous mode [ 323.108943][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.122268][ T2471] bridge_slave_0: left allmulticast mode [ 323.128416][ T2471] bridge_slave_0: left promiscuous mode [ 323.134156][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.146503][ T2471] bridge_slave_1: left allmulticast mode [ 323.152171][ T2471] bridge_slave_1: left promiscuous mode [ 323.159343][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.169505][ T2471] bridge_slave_0: left allmulticast mode [ 323.175928][ T2471] bridge_slave_0: left promiscuous mode [ 323.181743][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.197088][ T2471] bridge_slave_1: left allmulticast mode [ 323.202767][ T2471] bridge_slave_1: left promiscuous mode [ 323.210374][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.220106][ T2471] bridge_slave_0: left allmulticast mode [ 323.227759][ T2471] bridge_slave_0: left promiscuous mode [ 323.233548][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.655058][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.668842][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.680300][ T2471] bond0 (unregistering): Released all slaves [ 324.812962][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.830732][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.842292][ T2471] bond0 (unregistering): Released all slaves [ 324.956915][ T5245] Bluetooth: hci1: command tx timeout [ 324.982898][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.001154][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.012457][ T2471] bond0 (unregistering): Released all slaves [ 325.142858][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.168297][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.180069][ T2471] bond0 (unregistering): Released all slaves [ 325.483509][ T6576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.620144][ T6576] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.698340][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.705628][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.717728][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.725019][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.383938][ T6574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.401751][ T6574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.444238][ T6574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.466670][ T6574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.582398][ T6576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.611985][ T2471] hsr_slave_0: left promiscuous mode [ 326.628792][ T2471] hsr_slave_1: left promiscuous mode [ 326.639933][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.648580][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.661559][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.668984][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.682927][ T2471] hsr_slave_0: left promiscuous mode [ 326.689207][ T2471] hsr_slave_1: left promiscuous mode [ 326.695929][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.703336][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.711622][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.719269][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.733326][ T2471] hsr_slave_0: left promiscuous mode [ 326.740380][ T2471] hsr_slave_1: left promiscuous mode [ 326.749043][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.757868][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.768024][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.775590][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.789104][ T2471] hsr_slave_0: left promiscuous mode [ 326.795816][ T2471] hsr_slave_1: left promiscuous mode [ 326.802154][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.810412][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.818970][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.828045][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.905908][ T2471] veth1_macvtap: left promiscuous mode [ 326.911490][ T2471] veth0_macvtap: left promiscuous mode [ 326.917286][ T2471] veth1_vlan: left promiscuous mode [ 326.922612][ T2471] veth0_vlan: left promiscuous mode [ 326.930042][ T2471] veth1_macvtap: left promiscuous mode [ 326.935718][ T2471] veth0_macvtap: left promiscuous mode [ 326.941488][ T2471] veth1_vlan: left promiscuous mode [ 326.946955][ T2471] veth0_vlan: left promiscuous mode [ 326.955295][ T2471] veth1_macvtap: left promiscuous mode [ 326.960848][ T2471] veth0_macvtap: left promiscuous mode [ 326.966917][ T2471] veth1_vlan: left promiscuous mode [ 326.972343][ T2471] veth0_vlan: left promiscuous mode [ 326.979479][ T2471] veth1_macvtap: left promiscuous mode [ 326.996350][ T2471] veth0_macvtap: left promiscuous mode [ 327.002025][ T2471] veth1_vlan: left promiscuous mode [ 327.007622][ T2471] veth0_vlan: left promiscuous mode [ 328.071360][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 328.120925][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 329.073238][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 329.145984][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 330.123480][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 330.180635][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 331.146271][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 331.203632][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 332.077169][ T6576] veth0_vlan: entered promiscuous mode [ 332.115234][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.180874][ T6576] veth1_vlan: entered promiscuous mode [ 332.322146][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.342782][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.350036][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.366376][ T6560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.379591][ T6560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.409167][ T6560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.430175][ T6560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.504387][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.511609][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.591061][ T6576] veth0_macvtap: entered promiscuous mode [ 332.680697][ T6576] veth1_macvtap: entered promiscuous mode [ 332.982493][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.079073][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.209567][ T6576] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.246121][ T6576] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.283162][ T6576] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.304987][ T6576] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.614647][ T6606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.694270][ T6606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.874492][ T6606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.934092][ T6606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.062854][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.073153][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.083713][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.109445][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.118979][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.128544][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.135420][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.137125][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.143400][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.152145][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.165347][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.172987][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.473637][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.488315][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.501971][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.771966][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.794578][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.528108][ T6574] veth0_vlan: entered promiscuous mode [ 336.089661][ T6574] veth1_vlan: entered promiscuous mode [ 336.235429][ T5240] Bluetooth: hci3: command tx timeout [ 336.241398][ T5240] Bluetooth: hci2: command tx timeout [ 336.334753][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 336.398036][ T6646] chnl_net:caif_netlink_parms(): no params data found [ 336.503462][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.576805][ T6574] veth0_macvtap: entered promiscuous mode [ 336.694558][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 336.718279][ T6574] veth1_macvtap: entered promiscuous mode [ 336.813012][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.834966][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.842185][ T6646] bridge_slave_0: entered allmulticast mode [ 336.866835][ T6646] bridge_slave_0: entered promiscuous mode [ 336.875376][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 336.882946][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.895122][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.902312][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.904922][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.914584][ T6644] bridge_slave_0: entered allmulticast mode [ 336.924465][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 336.935065][ T6644] bridge_slave_0: entered promiscuous mode [ 336.943411][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.948068][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.958390][ T9] usb 3-1: config 0 descriptor?? [ 336.962207][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.971898][ T6644] bridge_slave_1: entered allmulticast mode [ 336.981012][ T6644] bridge_slave_1: entered promiscuous mode [ 336.999808][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.010973][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.018476][ T6646] bridge_slave_1: entered allmulticast mode [ 337.034171][ T6646] bridge_slave_1: entered promiscuous mode [ 337.102300][ T6606] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.141745][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.159338][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.187347][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.207044][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.266570][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.280906][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.325103][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.335664][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.352922][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.372731][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.379965][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.453730][ T9] kone 0003:1E7D:2CED.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 337.508106][ T6644] team0: Port device team_slave_0 added [ 337.520796][ T6644] team0: Port device team_slave_1 added [ 337.529954][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.541200][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.554236][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.570521][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.577796][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.630740][ T9] kone 0003:1E7D:2CED.0006: couldn't init struct kone_device [ 337.654821][ T9] kone 0003:1E7D:2CED.0006: couldn't install mouse [ 337.675904][ T9] kone 0003:1E7D:2CED.0006: probe with driver kone failed with error -5 [ 337.691605][ T9] usb 3-1: USB disconnect, device number 5 [ 337.779650][ T6646] team0: Port device team_slave_0 added [ 337.792609][ T6646] team0: Port device team_slave_1 added [ 337.885097][ T6574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.893873][ T6574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.904612][ T6574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.913335][ T6574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.937443][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.945511][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.972958][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.986819][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.994016][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.020735][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.104629][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.111621][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.137799][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.151403][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.174399][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.202845][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.316447][ T5238] Bluetooth: hci3: command tx timeout [ 338.322749][ T5240] Bluetooth: hci2: command tx timeout [ 338.340878][ T6644] hsr_slave_0: entered promiscuous mode [ 338.351991][ T6644] hsr_slave_1: entered promiscuous mode [ 339.441692][ T6646] hsr_slave_0: entered promiscuous mode [ 339.451846][ T6646] hsr_slave_1: entered promiscuous mode [ 339.468582][ T6646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.482653][ T6646] Cannot create hsr debugfs directory [ 339.933861][ T2471] bridge_slave_1: left allmulticast mode [ 339.942758][ T3041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.944977][ T2471] bridge_slave_1: left promiscuous mode [ 339.962723][ T3041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.974982][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.998578][ T2471] bridge_slave_0: left allmulticast mode [ 340.014447][ T2471] bridge_slave_0: left promiscuous mode [ 340.020225][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.032364][ T2471] bridge_slave_1: left allmulticast mode [ 340.038051][ T2471] bridge_slave_1: left promiscuous mode [ 340.043776][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.055615][ T2471] bridge_slave_0: left allmulticast mode [ 340.061293][ T2471] bridge_slave_0: left promiscuous mode [ 340.067185][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.115044][ T5280] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 340.334061][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.359368][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.374594][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.388863][ T5280] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.398677][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.407104][ T5240] Bluetooth: hci2: command tx timeout [ 340.407114][ T5238] Bluetooth: hci3: command tx timeout [ 340.421863][ T5280] usb 3-1: config 0 descriptor?? [ 340.521271][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.535998][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.547650][ T2471] bond0 (unregistering): Released all slaves [ 340.571936][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.584679][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.605759][ T2471] bond0 (unregistering): Released all slaves [ 340.860106][ T2471] hsr_slave_0: left promiscuous mode [ 340.878121][ T2471] hsr_slave_1: left promiscuous mode [ 340.891520][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.899728][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.918792][ T2471] hsr_slave_0: left promiscuous mode [ 340.931853][ T2471] hsr_slave_1: left promiscuous mode [ 340.938935][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.952571][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.401103][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 341.438444][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 342.222967][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 342.282836][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 342.351944][ T5280] usbhid 3-1:0.0: can't add hid device: -71 [ 342.377725][ T5280] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 342.389758][ T5280] usb 3-1: USB disconnect, device number 6 [ 342.474638][ T5238] Bluetooth: hci2: command tx timeout [ 342.485179][ T5238] Bluetooth: hci3: command tx timeout [ 342.707163][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.716673][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.724291][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.733319][ T6644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.752864][ T6644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.785733][ T6644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.854048][ T6644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.052240][ T6694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'. [ 344.146154][ T6606] veth0_vlan: entered promiscuous mode [ 344.279923][ T6606] veth1_vlan: entered promiscuous mode [ 344.519622][ T6606] veth0_macvtap: entered promiscuous mode [ 344.579126][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.660973][ T6606] veth1_macvtap: entered promiscuous mode [ 344.831467][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.889322][ T6646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.911536][ T6698] trusted_key: encrypted_key: insufficient parameters specified [ 344.953481][ T6646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.988406][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.009845][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.044570][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.059479][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.089371][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.124564][ T6646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.150055][ T6646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.218758][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.226026][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.266725][ T6700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.231'. [ 345.308796][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.316098][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.432804][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.470082][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.480552][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.497674][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.522063][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.632615][ T6606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.645896][ T6606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.877615][ T6606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.895894][ T6606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.055178][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 347.075569][ T3041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.083431][ T3041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.235140][ T2471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.235171][ T2471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.275528][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 347.279314][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.279362][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.279420][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 347.279462][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.291265][ T9] usb 1-1: config 0 descriptor?? [ 347.331550][ T6646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.447516][ T6646] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.649805][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.657113][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.668855][ T29] audit: type=1400 audit(1727089267.794:329): avc: denied { write } for pid=6708 comm="syz.2.234" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.763643][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.770905][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.979276][ T9] kone 0003:1E7D:2CED.0007: item fetching failed at offset 2/5 [ 347.998581][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.040420][ T9] kone 0003:1E7D:2CED.0007: parse failed [ 348.051734][ T9] kone 0003:1E7D:2CED.0007: probe with driver kone failed with error -22 [ 348.102709][ T6646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.198163][ T5360] usb 1-1: USB disconnect, device number 11 [ 348.461627][ T6644] veth0_vlan: entered promiscuous mode [ 348.545136][ T6644] veth1_vlan: entered promiscuous mode [ 348.708096][ T6644] veth0_macvtap: entered promiscuous mode [ 348.800816][ T6644] veth1_macvtap: entered promiscuous mode [ 348.987405][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.031495][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.051579][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.063420][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.074122][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.086376][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.149063][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.186456][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.244510][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.258928][ T29] audit: type=1400 audit(1727089269.384:330): avc: denied { create } for pid=6729 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 349.292945][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.322480][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.344447][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.355738][ T5794] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 349.358613][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.381062][ T29] audit: type=1400 audit(1727089269.504:331): avc: denied { ioctl } for pid=6729 comm="syz.4.236" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 349.437308][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.458635][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.542770][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.236'. [ 349.567909][ T6735] input: syz0 as /devices/virtual/input/input9 [ 349.581198][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 349.590196][ T6644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.628964][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.640190][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 349.650499][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.670176][ T6644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.679440][ T5794] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.679515][ T5794] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.679552][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.686288][ T5794] usb 1-1: config 0 descriptor?? [ 349.699122][ T6644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.736053][ T6644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.143795][ T6646] veth0_vlan: entered promiscuous mode [ 350.285116][ T6646] veth1_vlan: entered promiscuous mode [ 350.540048][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.565399][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.891640][ T2471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.926855][ T6646] veth0_macvtap: entered promiscuous mode [ 350.950158][ T2471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.066935][ T6646] veth1_macvtap: entered promiscuous mode [ 351.345259][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.396378][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.423053][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.493192][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.543240][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.559281][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.570448][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.587516][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.636433][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.687701][ T29] audit: type=1400 audit(1727089271.814:332): avc: denied { write } for pid=6739 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 351.716709][ T6740] netlink: 'syz.1.209': attribute type 10 has an invalid length. [ 351.784600][ T29] audit: type=1400 audit(1727089271.894:333): avc: denied { block_suspend } for pid=6739 comm="syz.1.209" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.805944][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.967750][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.020693][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.074095][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.141487][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.165933][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.471923][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.482981][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.493962][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.277884][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.393357][ T6646] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.414075][ T6646] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.474450][ T6646] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.505571][ T6646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.767008][ T5794] usbhid 1-1:0.0: can't add hid device: -71 [ 353.773036][ T5794] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 354.314718][ T5794] usb 1-1: USB disconnect, device number 12 [ 359.164559][ T5233] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 359.236001][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.243840][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.443804][ T3041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.480009][ T3041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.143125][ T5282] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 360.713602][ T5233] usb 2-1: device descriptor read/all, error -71 [ 360.757139][ T5282] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 360.775760][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.811493][ T5282] usb 4-1: config 0 has no interface number 0 [ 360.815227][ T5282] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 360.815269][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.815302][ T5282] usb 4-1: Product: syz [ 360.815325][ T5282] usb 4-1: Manufacturer: syz [ 360.815347][ T5282] usb 4-1: SerialNumber: syz [ 360.819374][ T5282] usb 4-1: config 0 descriptor?? [ 360.822866][ T5282] em28xx 4-1:0.230: audio device (2013:0251): interface 230, class 1 [ 361.040414][ T6782] trusted_key: encrypted_key: insufficient parameters specified [ 361.521054][ T6785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.248'. [ 363.110033][ T5281] usb 4-1: USB disconnect, device number 8 [ 364.034438][ T5308] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 471.334326][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 471.341356][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P62/1:b..l [ 471.349683][ C0] rcu: (detected by 0, t=10502 jiffies, g=34445, q=687 ncpus=2) [ 471.357431][ C0] task:kworker/u8:4 state:R running task stack:24128 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 471.370376][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 471.378304][ C0] Call Trace: [ 471.381605][ C0] [ 471.384567][ C0] __schedule+0xe37/0x5490 [ 471.389042][ C0] ? __pfx_mark_lock+0x10/0x10 [ 471.393862][ C0] ? __pfx_mark_lock+0x10/0x10 [ 471.398691][ C0] ? __pfx___schedule+0x10/0x10 [ 471.403592][ C0] ? hlock_class+0x4e/0x130 [ 471.408158][ C0] ? mark_held_locks+0x9f/0xe0 [ 471.412989][ C0] preempt_schedule_irq+0x51/0x90 [ 471.418065][ C0] irqentry_exit+0x36/0x90 [ 471.422517][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 471.428547][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 471.433878][ C0] Code: c1 05 ea b0 98 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 471.453528][ C0] RSP: 0018:ffffc900015d7a70 EFLAGS: 00000206 [ 471.459632][ C0] RAX: dffffc0000000000 RBX: 1ffff920002baf50 RCX: 0000000000000001 [ 471.467641][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cddc0 RDI: ffffffff8bb118a0 [ 471.475642][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2d39ae0 [ 471.483645][ C0] R10: ffffffff969cd707 R11: 0000000000000000 R12: 0000000000000000 [ 471.491660][ C0] R13: 0000000000000000 R14: ffffffff8ddba6a0 R15: 0000000000000000 [ 471.499701][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 471.504802][ C0] ? batadv_iv_ogm_schedule_buff+0x75c/0x14d0 [ 471.510925][ C0] ? __pfx_lock_release+0x10/0x10 [ 471.516026][ C0] batadv_iv_ogm_schedule_buff+0x5ac/0x14d0 [ 471.521971][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x14d0 [ 471.528103][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 471.534484][ C0] ? batadv_send_skb_packet+0x56e/0x6b0 [ 471.540105][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 471.547207][ C0] process_one_work+0x9c5/0x1b40 [ 471.552207][ C0] ? __pfx_batadv_purge_orig+0x10/0x10 [ 471.557717][ C0] ? __pfx_process_one_work+0x10/0x10 [ 471.563169][ C0] ? assign_work+0x1a0/0x250 [ 471.567830][ C0] worker_thread+0x6c8/0xf00 [ 471.572507][ C0] ? __kthread_parkme+0x148/0x220 [ 471.577594][ C0] ? __pfx_worker_thread+0x10/0x10 [ 471.582754][ C0] kthread+0x2c1/0x3a0 [ 471.586875][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.592141][ C0] ? __pfx_kthread+0x10/0x10 [ 471.596789][ C0] ret_from_fork+0x45/0x80 [ 471.601266][ C0] ? __pfx_kthread+0x10/0x10 [ 471.605906][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.610749][ C0] [ 471.613813][ C0] rcu: rcu_preempt kthread starved for 9872 jiffies! g34445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 471.624961][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 471.634973][ C0] rcu: RCU grace-period kthread stack dump: [ 471.640877][ C0] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 471.652665][ C0] Call Trace: [ 471.655967][ C0] [ 471.658934][ C0] __schedule+0xe37/0x5490 [ 471.663406][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 471.668686][ C0] ? __pfx___schedule+0x10/0x10 [ 471.673594][ C0] ? schedule+0x298/0x350 [ 471.677970][ C0] ? __pfx_lock_release+0x10/0x10 [ 471.683048][ C0] ? __pfx___mod_timer+0x10/0x10 [ 471.688072][ C0] ? lock_acquire+0x1b1/0x560 [ 471.692802][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 471.698316][ C0] schedule+0xe7/0x350 [ 471.702438][ C0] schedule_timeout+0x136/0x2a0 [ 471.707349][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 471.712778][ C0] ? __pfx_process_timeout+0x10/0x10 [ 471.718118][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 471.723975][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 471.729510][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 471.734321][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 471.739651][ C0] ? rcu_gp_init+0xc82/0x1630 [ 471.744375][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 471.749661][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 471.755517][ C0] rcu_gp_kthread+0x271/0x380 [ 471.760246][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 471.765517][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 471.770789][ C0] ? __kthread_parkme+0x148/0x220 [ 471.775854][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 471.781099][ C0] kthread+0x2c1/0x3a0 [ 471.785212][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.790462][ C0] ? __pfx_kthread+0x10/0x10 [ 471.795106][ C0] ret_from_fork+0x45/0x80 [ 471.799588][ C0] ? __pfx_kthread+0x10/0x10 [ 471.804242][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.809080][ C0] [ 471.812140][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 471.818501][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 471.828537][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 471.838616][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 471.843947][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 78 a2 eb 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 56 a4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 471.863592][ C0] RSP: 0018:ffffffff8da07d70 EFLAGS: 00000246 [ 471.869720][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b181979 [ 471.877732][ C0] RDX: 0000000000000001 RSI: ffff888020e97800 RDI: ffff888020e97864 [ 471.885756][ C0] RBP: ffff888020e97864 R08: 0000000000000001 R09: ffffed1017106fd9 [ 471.893756][ C0] R10: ffff8880b8837ecb R11: 0000000000000000 R12: ffff888021721800 [ 471.901794][ C0] R13: ffffffff8e9faa20 R14: 0000000000000000 R15: 0000000000000000 [ 471.909807][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 471.918778][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.925399][ C0] CR2: 00000000201e0000 CR3: 0000000021f4c000 CR4: 00000000003506f0 [ 471.933407][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.941425][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 471.949440][ C0] Call Trace: [ 471.952762][ C0] [ 471.955631][ C0] ? show_regs+0x8c/0xa0 [ 471.959927][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 471.966301][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 471.971537][ C0] ? rcu_sched_clock_irq+0x24f4/0x33e0 [ 471.977057][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 471.982798][ C0] ? tmigr_requires_handle_remote+0x141/0x480 [ 471.988910][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 471.995384][ C0] ? hrtimer_run_queues+0x97/0x450 [ 472.000557][ C0] ? update_process_times+0x175/0x220 [ 472.005992][ C0] ? __pfx_update_process_times+0x10/0x10 [ 472.011753][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 472.017262][ C0] ? update_wall_time+0x1c/0x40 [ 472.022167][ C0] ? tick_nohz_handler+0x376/0x530 [ 472.027329][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 472.032834][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 472.038262][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 472.044042][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 472.050169][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 472.055344][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 472.061535][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 472.067394][ C0] [ 472.070367][ C0] [ 472.073326][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 472.079540][ C0] ? ct_kernel_exit+0x139/0x190 [ 472.084422][ C0] ? acpi_safe_halt+0x1a/0x20 [ 472.089137][ C0] acpi_idle_enter+0xc5/0x160 [ 472.093860][ C0] cpuidle_enter_state+0xaa/0x4f0 [ 472.098929][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 472.104794][ C0] cpuidle_enter+0x4e/0xa0 [ 472.109261][ C0] do_idle+0x313/0x3f0 [ 472.113388][ C0] ? __pfx_do_idle+0x10/0x10 [ 472.118040][ C0] cpu_startup_entry+0x4f/0x60 [ 472.122864][ C0] rest_init+0x16b/0x2b0 [ 472.127165][ C0] ? acpi_subsystem_init+0x133/0x180 [ 472.132505][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 472.138102][ C0] start_kernel+0x3e4/0x4d0 [ 472.142680][ C0] x86_64_start_reservations+0x18/0x30 [ 472.148212][ C0] x86_64_start_kernel+0xb2/0xc0 [ 472.153215][ C0] common_startup_64+0x13e/0x148 [ 472.158230][ C0]