last executing test programs: 1m39.324092572s ago: executing program 1 (id=1767): socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x2bbd, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x3b8}, &(0x7f0000000040), &(0x7f00000001c0)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x3) r1 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) wait4(0x0, 0x0, 0x0, 0x0) gettid() r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) lseek(r6, 0x9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000240)) 1m37.903630708s ago: executing program 1 (id=1768): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) socket(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = add_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002b40)='n', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r9, &(0x7f0000001b40)=""/4096, 0x1000) keyctl$update(0x2, r9, &(0x7f0000000000)='p', 0x1) r10 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r10) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x3, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) connect$nfc_raw(r3, &(0x7f0000000080)={0x27, r6}, 0x10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m31.28974522s ago: executing program 1 (id=1783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000000c0)=0x32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r6, &(0x7f00000019c0)=""/4107, 0x100b) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000040)=0x4, &(0x7f0000000180)=0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0) 1m29.877894098s ago: executing program 1 (id=1784): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xffffff00) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) syz_open_dev$ndb(&(0x7f000000adc0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x0, 0x0, 0x0) tkill(0x0, 0x14) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)="736f9812671694fd91aa2013d21605cc64aca726843a3d344e", &(0x7f0000000240), 0x810a7c, r1}, 0x38) 1m25.336421326s ago: executing program 1 (id=1791): r0 = memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x400005) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1m23.123155114s ago: executing program 1 (id=1795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001500)=""/4087, 0xff7}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 45.228601999s ago: executing program 2 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e7465720048"], 0x12c}}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x2000000, 0x93, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238c9c82df5a649a4781baeac4da0bf1151b932a24f43608a48841f8083e2bf008a0c7a6415d630057bde8c3589ec5aad0876bd342598daa8affb10c0bccb023f824d8e9fdc94ab245a5d", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) syz_usbip_server_init(0x5) r5 = socket$inet(0xa, 0x801, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) 42.328109374s ago: executing program 2 (id=1851): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01ee00000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000000042503000000"], 0x4c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = add_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002b40)='n', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r11, &(0x7f0000001b40)=""/4096, 0x1000) keyctl$update(0x2, r11, &(0x7f0000000000)='p', 0x1) io_uring_setup(0xad5, &(0x7f0000000100)) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x3, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) connect$nfc_raw(r3, &(0x7f0000000080)={0x27, r8}, 0x10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 40.758666868s ago: executing program 2 (id=1853): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x0, 0x80002, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={0x0}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 38.580241871s ago: executing program 2 (id=1854): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) close(0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) move_mount(r5, &(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000062c0)="692e29b48346037834a292b0c666395dc2c69264aea075e075483e36b7f04d1618cadea12362c720a26bede4dfb15c424b311474ca0c3535a7fbe1d35ebc4adfbfea0077b03711a06a00488fced2ee31a6e541a94c9446f68506d4fec55adc34295ffc38cd69989da20ed159e7c4950876b1a4dd1e8adaf38ab144c5cd27bfab2be0da063e157ade12f247e5242356d33183c82b76442eb430e2611b21a3f17925839f367fd849be939554b6d129c0adf8626c96e4ccae5fc199a7090a1cabc5dbe15f6c76694ea0358514ec0ab7c8de64302f7a373aa2e64833e1f1c1dbf133110fed34c58c0d91fae0bd57addd58f1f382bab63df7a03f57513556c184e329a1347aa38768150ad69d50a55bb0fb267fbe7fb6b17435d04f40ab443ffc2f560191d2e66eb802b072c7febcb9ab3b71a3f156336280483320e7e1ea59a80651975389bb9686315c206522300f03e277f21b2565e80715403d69e9ded3897033744dee8e31a12c7f98265203b08d851bf347000ae388520dabe70fea5d01668e92d77091d85d6a17f70155e50a4515d7e22ba64da0b1b4316a31bfa50b47c3407092cad4367a55c1f84d9f2bd4f9de1703c0478dce8dcb01e413236b63670f98c0bbe4f6ed2d78fb2f2fc8847e6174f9294e91d4bfeca4f0ec1233cdaddc48ce79aea612aa837f473568050beb6c4b4b51292fa900cbe278b2138df88cc2c6c39f79dfc93c66c74c963839d0ee3973396a6ca460cec07748199657ce492880ac9f44b039937af0a215132ea1a9d600cccb6ca1edff9460f40cef5132bee0ca07929944cb5789818ddcfe18164ab147e8c0429bb4c683504212eae809143f794ca51bcfa8acec7f4ae3d01ab0450ce633fa07b29d2ea781a1c8d75d09f4fda39de5d2e8246daaa9f57899ccee9cba44b1bfa64b3a9d0e921213d9d4b4a25524d4c2e3a35684b1511f31b3c08d77f9786925b23b16697c71dac8cc4b6585b12d0777fff914f7672b6d10b66c0a30f870854a65980381c72003ac73f496ac3e0c9fd90355cfea39cab7e333f858f104b07a5241da1c57d838af29978327afdde570cff05faf824989750e06ca5e214c70be260b0fc496eac689e53e4244ed99ff4e1acad81ac91d60adcd2d8261851206e5ddcfbee873356139d5f605ef7d9a0911dbb8a167790d265bd5c946ff0f16d2be8a4d4f81c2f7c9d9de1155d99b2ddbe81d3be6221ddc8e26e0639043b90f66f80a25d2811ce2bdce8a8e1559ac7463e8c4cdee20553057f468c69317b42f6f468f3c064ba5b6ddc9dd59832597a20bdb054962e2c0cf6bb3773509e3b785cc16f0e7488b5d9af28f881a919317e72cedb614406db795fc0a011ad0fbf20acc214f770adc9d4974d7551fa0ca0b9686025cbbf67160ecdf18040259ffdbc115efcb8051f5819f6a35e8a2d8039fb444210d1c151097ac9930fdc9c258208df4e931167e2e3d4e4b6e8931722dc530e5307a0a01fdf10ee5f5b8aec2c0a56193289dab9e98066e0d4cbf01fa303ecee07f9383e2686bf37c97a1db02f05bc8e65b3b0b62a1335b86d96e63c2d3c1d6da723769168ce88a44601117e243130e664555c19bb5e29424a7bc3731da6b3abc063dbb5e65fb0d84d3e1b930be2fac412e5566baeeb5b62563e3baf951f77e3702e0d4075dd42643b9c8f570cdd7de8acc1da0fd296610117e9d603f1d2331d17132c08ff578dde4d560a2cbd6a0fd1a27f568b16e143936c4e15e23c4f996a8b2f3379b7787463fec70210e3c844f4846a9a8f5947ff2fef3f1d9b6fc54ff96d7d26ed6d6a7d2be9ce9a83050fc181e6ad348327e8d088762fd492e47094d956ce82a2b759569bc5b25f53ca22635b62f95130d83c512129269ad446ffeb2006d2cf27b89d1d125f080b859ec34ef4833c16ea03a40a4a3a62e2502b1ce4138b54c9abbe5ebbdd194df39c1e41f3194007d472ead76ae142a9e535ccfdc125d810f2edb65d24341f2d43e99b7ec721f99d5fba3d29b5d4659cae7a8ad5839be1ce7f6ce33fbdc11fb2d2aba0868ca3dc14f3056ca559e0022cb1dcf0bfbb2c7a80704c21a05f437f1e12ea3f92d892adc960441acd735ac6f6475fc774b03e6dff4e489069f6c2d9f8b7575d8f368dd37eef983402d640f1c46f446a5df8f2a4d900c8ab663eaa67629fabd6d81201686bf1bfa34709a6246b77a3c47372906d47e14b6ea148912887ccd452052d66ee4e3f307c8bf0a40117ac5c04839ad3812ea8c846d6fa52a1694c2ad1f3014a1cbed7de8fc283c070e9359bbf9a07911554fd67f38e6dad5a06ff07d233fc32a69cccac9f833362b5ac65166871504620f0b7f4520bb5ba3ccd861140130703bfa2caec6e2d3df9001f3cf6fd885cdf2b31db7630fc518f4e734ccd704763f94f9284a97018f81b6805ef0fd7bdf433c742b66bc3e5599fe1139ae60e31a61f81c69a2b9a5af2a9bf32913080e34ea8f6798f56a3db95b088e2895342c248c323b46aed23fbdc5d0115a84c76d572a6bbd0bf6575767711ed812b7c21d846a5c48ed8d35f0c7756844d66918e09f539248464e1072115570c3e98251dc455250fb3d2f83cb234b4ef4e69f913eb7fb89621c7f6a8e0efef6b1338802449781f3e2bbe02003606d981cf04abf011ec7ec743ac35390cfe6d8f0b7c3a9b811bee3e59e82550c406d3cd2ea9e388770d42f1394f73f5e62ef91505003f48cbdcb34f82218020a32ceee0c7a1cd013b331dd67eda83798b4f9d010b94cbba4c7ce00b322bdf1a4b469be220d377da645aef5e094e32f82be611695b920d41dad7443babc591332ed69c49c65957d3df577e2084a45078ce8f11c7032c2caf481548365623bc7059a00b5d275d1428d65e2a91a3114e2cd1ccec0fe3b148d2f3894ebbbed62c0acf66793e9f5e1c2bdd04b12634cb0a83be5fe674a7279624669c930284d88fbe8a7bdc4d439e5f99de02b3145dfc736223851ead9695c7784a79433785b9fc097f31e1b3da6792de2d4c2cf83ee459784ee06e3c217adb84122344dab8f34f7c42a322d8f6bf30be1e1179362f9556c6a9653f5b8a02fbf8b5ddfb912069bc0ff68a2010b16114b2d39f5de1f84a68672af5de482cf273c012755fdcae4d6a460d4bb08636a75455c1dd8235089a1f6d87e8a0a2e138a5abc696f18c1aa5ddb63b8eabcdde720a7e92110834e3a0179cf8e91369dfe7997aead31720fb71127db6b78f30f40a19b50c27307a01cc64b8d1d8ee7ea9e4dd5b9ccf9dcd164c816724fd24e1fef39906c7275091721aaa01546f479cd9756c4dd1fc9687c050655576580f2905e7b889630f931c81eb7c5b543b04bed696d121e29136678f4b107f3e80862455e30cacfaf13523f6eb2f7280911f62df46897b24c300bbc1123365ef9574ab92b308d5794b47d94faa0a709199af51612bcd051343212d1927c2090b5e448dc58316e7686e741d692702acffd5f5434941955e3af2dd799ffa5aae6df487ad5cd8f295ac813c9378e38667346adacbf27142d571b01bdc2d2dfae3746bb5cf4cc4c11cb919883adb9eabc3d524a3b0de0dcac64b45608a5673d0cac9d7d9eb0b9ce8c4bdf8a9860b7efa9dcd53b89ac5cfc45621ec2262a5e0e6afff6dcb1f4211cf31a68c1d970b4944bd5d36668083fc3563de0b630c57135dc8d7f0a91de631593ba5502d1b3c10d923d4982f12453297009eab45e9304e5bc5fb5f883c1beacfa7701d32d978cd67f24c2a9079e59ec6003639bce40a12f5fee909cfbeb0fb72567fe5f93586cb95e1b5d61a1bd338d77f721c5ddca1df5884fc7de6f2efc0c5ab17c6678f299c89f58e19fbeb139d0b6160ab95f9c7652081ded189dfaadc1fb2aa67eb1c6df972999edc20a918285d04c8f16bf596b85fc91a5733d17b332f50f6fae64b7173f49448a3c74fd238bd76faa4aab8a497ae925e05355511e2b09e65a92758d4cedafbb0982ff6ed8f5cfb4a0dd557d365c4f7e97dd9ff322a259633b4213b0cc54e7e989010ac47f7cd95c8a818384ce90f704bf8f435028e6ac784e64056bc7eb046b1fb5a78f58fac441ebc71188c4e9e8feb63c9132c5ee79327df2547b5a4f73d9ed9ce3210e9366c671dda59260a349cff711c8f6d7ea58d3786cb2efea4145a6e209699342d394443066db995fc111c49c4ff10038bb24a8f0528dfb81e2aacbff13cbd99b0e2a84c4e3de6ca4a0bc876143e51ce2049f65295df8cd4f6e7b122fe44691634474485bb13ac3e915f622f0387b35c20fdd65010caab9f9138e162c9b8a4fd483842a428280f63338cffe29d319cc2e92025d56eb213dfb7349e7853587e96b730eb913322c7532f7d48f048457ccfd025097c86a14e3b59dd0952b439cc6074ff97464f905e5907a8b2da4e6f5d71091486af50d2e3d6e8bce4a4efb9c232cd54b61ce56096ca8d397a2e8bd66615de545a3cc8428c9776ec5bd3a3fe9ee2e0b5197f5a31db389c44f6ab59f91043e01aece884b4e5926ab781c35601908ba2d283989a9312325c7cfc4b074e8cca9d68eea46021a9ca7f1ff5b468e744529a9c50e5c4ee692e13e415fc482d48a8696862b57f17b6b4223c57e3069e23e0842070300f79d99fdaf5c0bae2ad0554888ac72a7ee0aa77d4831538492f5afc33907ff2aded7c7af816255f49bc9875b2e350190ba7419bfd390b19ee784529de4a80c16b6889790039136ff223035ab669eb437c5f80b0d5b90c1510e15da52cd4ee0ad87c38069b22f7509695b4ff9fd5e6823c8b01c25dabf166a18e31962e801f3b5a09778b758b0af9ea34cbb4f36bba5f444e4565a588fa124e82b3f572d9ae68121015f26c7ec5d9ad9320b90876e8dda0854e90771aed96bc0631181185e384f0ccf1cea1eaf38ac79b042ef66a5769d8e14f80e2932ee79580440c66d177ab1588bdf868ff0b597d8c03a34a2db4201b1ca40e155172ffca7a4e21dec5cf709fc84db0e8cf3bc8ff95fb92961157f6fb3e787da42553f1417be1229ddcdddd8828869698e0dcea375922e6ae7e2f752b8da58aa5a4d6168c075659586b2f9e46e2618ba7b5af2f5830367563d4ad16a0e83d8060b16c01b46b3937a1faef9667288e121037e81f9cd44d8e92f3250ed5841bc93f7c85b1194b92fd37d27a0eaa3bfe454f5d8e8e983e512ab644558ded7de92ec003f35e5268db72e5eefcfd720ba164d2ee793257cb52841a8c462509505b6fcf65d18a1379f3a5a8afbd386dfeee464939f52bf619774a2ca8253467e493ea7b969fd33499ddd173ac874cda7fbbdcca6cc1babe0ba62260c11e4feda22034d4c4d2af481c7ee45853ad1e61e64530531bfcdce8eace3e4ccbae5425756ab8786a9291ca8021ae6519a9f28a1d60c4eaa0606b4fde367e8b7c714e0f31f2f5b68e9545c17bbbbd730f63e46384abc97ebba12e43d4bfbfb1bb20aeb60da693c7ff98b5bd7c20ca95e404ac807a881876316c4ebeb9bfc1c279155e87019052a53570213ef7c0711f12f5c2ec420f13ef54dbdf7da1b145e087eb85b5fbd7eb7e5a677d06ed682f654715c0e676f6f967d373f58155c391ecd122794cf2bc772deef39a13b5607f5908872ea13166e692c6c6781fd879838b9f31f9c37fc13be24aa096ba37afa5ca3bd38f4def60096586907a18004ec14d2dfbcb9b1fe55165b47f003d61f128fc0f29206003948ca3aa9e804278c5875b41215d93a086cc5b30a2b8d32a02efb42040af1127341c937be55a2cdebf1808cc7382e3d9ae5358198805fb83eaad50032796d6bd2a6bf4b1e812d1c51ef5eb373f7ef10782c11ae1bb7ba881f69e75813bb066f3ce8f52f3c8985bb90eb6dbfddaffeaf8e83c3dda22bdba9fdc4daea046ad870da83933821fa78a51ee7eef3e88114091dca4c8c57b67e6c40b19b10016327817877fa12d79bfbd4d52dbf4125db6b9240757bac3e52850ba9d658ccc679991cb14dcbf05fe906e613403728e075ca2cd0a96631877dfb3a2c5a16605adec25b1c5009970d948c50b5265fa2fb9c0fd271e201d68e4e2e2f37334a04a2b7dc73c74b83fdee6d6db8ff61ba542342280bb7353e27524b20a461e7e2718899f4c81f6cff6406ca8c25a642f87d954b883b501bfa3334f29f40ab022b490194e029fa668b029c4461191a64b7e6e530538f6f1ff20d761302f40a977599845a1654647e5dd17ce946676b0335a23d55125d1ac36f9e59593287d5773d085e0651d4bbdd2dcae35629bf11e67ca1fee45df8a035eb7d8c7d123361f618e4322eb95ec5b4b6069f3bf4c9673bcd4d1aecc301ebb4f7f39e3372bee07f8b008ceee31313c8d89171293d2008c5fdea22aeeab321dca022f272d983ed253166840f3aeb1d0f9fb4ef7f58174f8b629418b53d7fdad336af0fdd0262d3ac7ad1fe0a037e42085f3815e6648a6856015d2b3686083b3929733790a8c3c0f5f243c60d563e792062ab8ed448a73d9aa1d69024d0f0dcdd91aa6d716d071f03e6b6b689297e3be773643bd672a42cbfd50b05ba45de7f10c1d3f3a01b802ca925a979eb308cd839599cf57b3a8f4c804b88ae5e951ec0293168fc0a1ce695664539ac2f67869ee3fa2ef4fc261d79560304418c43ebbaf15fc64b420e676ae6e7ae1b6c502f9e60810affb9996423c0a98bdc223f328bd663d1bd59c413324f94e008215bffe9e1e4337d24ee03a94e3f69af8a9e7296d6a57bbd4dd33be5e2af0255fb1fc436b514c11d6b18f76bdc1819e7991957b6699cf66b6deb98c8eb9b64f73f37b5f7d4e60d4a0ab1d88f93eda0ad699c44f4bdb59d8a9af20e61c123c7d6c5523855062a895d3e76bb04f71dd3b9913a26e7df52e9288a0e750153fafbb45380ec41e5759e3efac2232d7fa5e252c65c9b613cbd01b36905aad877c477c2e22e0d2a020eb04160591ae1e7fe48eca1f6e7c21761ace8151f9c762ff2d421a327b48bc08d3732892fc2298ee4db85356ab8a299172f20943cd11fa59f059921b63d5246f3fb0bac5c29cc21cdccde6efcbf4f916df81d01aea4fb99592ee6f276a3b0e8a7e0bb04c02f1767f2d2351b7e75c359803d8cafabc47ae7579e6f015f594fc3a089d1e60de4216184aee7b2f4c0fa2233a13e2f9f7aed83c14b48a1f8de0c6c703b315f3653d49538b651bb40236aefc88541bdc892581b93798e907caf0ccd4e26c7c8bbfad35fab4676c0797414f5291dfc36c263e1355ea2e2f37d57368793416881a15e0064e712b1f2d35ac07795847b405d96cfa850a3ec56459ea4c075d3e817f46e00d9d5f0ae49ea694754764540e924190fd42ac45542df700824c2f08030bc5c36180583f8f29403911c6afba9a0914fc60f449b64afb3a69f15fd520692386891f5b0a5bfdf00354e141ae69c262c89d3f1cb46b70ffbd4f9a92d63735791fb244721088c7b1137cde251a4ead7ea56965da19f019da11d59bd877439b3cc241a7eeb992bb3ec194bae8aebcce04e77cb09109f1a37e292207b2c325ad894c23b970f9d6d88d383b56f3e2e95f57368a3697641d8adba2a044f2345a92fc172e1978443032c031286b2480c749a03a1dd836100419585b02a29b64688152e2d3ff94f463bfb4b33c1d27dffae541a6a499cc9df51e9a8ca2fa785e08f2d19ec2abd48fe0d899a395b595eff6eda25552f23a0abb60182407071ddd383b7a528112ca7e4568f69c7505a0eeb7b8fa6beb03014bad679dfd5e907baa8f56cc3bfcf6cf29661c14a14e35d17b0bc0c3c11e0556d7387edec2a385cc45b47f5410e70d139b7e7aef7beec5b55157893f4072a171b42acb32f9cf75b1a832e1a9a13e57b3926d46c5543b671eda7097685ecc9b98384bbe1f13f5f3faa9598290a1a9998d5ee0e16f731248d744a34097c8f5b95c5f590e42b846c5d4ff93256258bd0953bab5c57237d83858daff555f33c593935f345628652d6263b1af3817f2503613149b335557fd25dcaf576278f1cb1004598e734da579f320eaf5ee5a7ee0082531a9a920d13b9f72cc69d57c07208be37d68e8938a706aa8025c82ad5f9b4db69176c2f759635998ed90a451b865e70cf8ad7d3e7a04ee49b776c1ceea7229843c5acaad3a04d7e8b36e952029367200fdfeca65fefd5583000c8b07a3deab5461bbd7157347eafa205446b0f50e29b958ffac71fffe2af4cd64635ef2b20309a143540b7c1b86256c323bf6a602329179ed68813f559b4c3f33a42df16e27a5e4364bb173f53792647bbc4b2dd0c64df8dfe09ebf0db51f1e7a2c504a1d77d9d5171a11bf966bd023ad01dacbce871343d49fe747c3b0afac763c17a0ebb45d260a7327cd101601207fa42f84a2e13004c8095c876fbff9025cd0aeacab3c09eb220bbb88fc6dd61a3a5d14d4a5876c32bc755bd1262dc3dd6f65fcaa1098c023b03919cbe594eb7f4c0cbcbb27c16dcabacf2df9fc0ecdf17ee38735a80aeb60a862206a972cce349cc87873743eb7795af55740247d35e1a63033f2d51b01e1c6987e0ba4834579fdaee06aa618b61fc1c3fb1c7a55b8226bcea94217d897fec1f638e6f59f19ac765edf4a05b34eb718d1416a1c8720b4c30e77f39cc16c0785f219df652716580007753bf6c4feee63050e54f9c17d56e3cfcd223ae461bc73bf6c7d74c30676a7a96cd2fb8f3bf4a05a03d1354814130546a309237229808a99e422bed29b2033de8ae44c83eca8d429871dc11acf5aa31045c91e304020e6378c7ec046f4ac42e499a465f78b62e964c4024ec16d793f9cb5c1ee093222083ead34097ef8c322ce99b24db3f7f479d89e472e59568aa753ff1ce14ae5f8fe10271b2fd8ae2563f7e54245bc5469e3f607aa6dc807b412f737687ba97061227bd682efa749afc72247547eb8887ada6a12ee765c95a20c9b0e7bb85cba2ce2c92d6e76134358d6bd771f3914d1357c00704dd53f56907e3539416389ef9981b61b5641f54a8f59f337be659dcf5ad1fbe10724e83712d317ab43e75b36aac57888564fe3e1d1ada4c4db5be44d5168e5bf5aa869807ad9f6ac1ed605308f58abd62f575ab4565f0becb54bb4fc06e91bc939bdfb11ded451cff90bf27822e4959d8c45638f3b06fe3e269f6c39100184e69a23ef556ec8a33ea71c3fdca27d0b245a7e2ee50a8b0a687458f15d06b1ef7670f4b91b6f0f3a6f85669ada026791a5be6d2f89d63ec6e8a20e115fbe025a9796cb28dafaf60294908e4fa786759f7f041843d2421137cbecefd7dc2ce67e4cfca0b374b905b3dc67fd3eec38a3f426088361cbd1aeb946364d162764fc00b3196d4414b24c5df32f1a14857997ac6b076a9363f358e6a8bd702af33a9ed9064fd387e6e0cf8de60cc9777f95e34007958a7a6224c1b372415c9d6af87eb09502ac08164d9046e6dcb3e3e30f57a1dca4f9c215f6c9a930a1d214bc4950aa15e2a6881f7754d6ff8986a7cc71f8f2eb3e50d45311d6499db6cdfad0db37f2fa974dc2ba630ad420690af128acdf6df25b5d3a55fd1835863a3658347d0c80dc59a28241fa513e138bf67281d7a0960235538fe94f3d8a2eac095343be3bfebf66c93c8a3ce6849006d24e4245e58ec967ddbfc52def9fa70a8809b290eb3991cdc575bd01dec709a9f61209d45b83a2566ba9869777af761a1be5335611324b4461d9fc6335add63771331f1575232be2e21b6978aa21a038eb7e7e697faf46d8df724786ea905f2466e09c25b6656bf5e71d27ae1316d264c541e259f0063e7de2201c6ebfd03f2aae06ca5db19c2f1b15ff60fd0b17561ff185295f0fc7efa1e44052943c02faa43bc1be3e0f6bf067e7f117697a8c85651746029e7dd9fa001697f72629819d7511f4a59653b0493a8b2f945807dfbf7c5d485281828ec8aac4dda53ff3c4546c3f66d78d28d2a033b456d891064de35f40e2797af379dfc030756ebda10d833aae71762843c97af4ca5877912b24ab2f630b5e43cadc18fd47232e9dc11e46c33a64bc2f9c1f940fecba80381c473b52ab4328bbc3d204a71f870885d1d724dcb4f5f7aaf7b6f0a873fbb02b3a2e4fd458d0f111701cb9e71bcd065f8b4eb22e8882f4f3f8eea36f2ca1b468bea68d3f0c331d729403620cb96bd63d61ef7edfa3a18a864e261ec1efbe01cb2806067c40c57bb65e74a59c5f3ab1ad5afe467024770ec10b7adf5a355833ab8ae4c07adf3f0c5d1715abc3efcee1e6f760994edc96ebf5ee857f848a78bcb8e9abd2ea027ced1456e8b2e542a17d349eeeac73603057aa236f33b26cead47ee934762670fbb038274ec556bbc3de2d67f5c76a070d64727ddea830a4838735073ec441357f4cae1b3e60b8c774bb82655b8db6209bb82db1cd277627ad2046c357587d2b7ee1b8a0686936823eb4e1763fc331d53d2ac951d607682708d6461ff0833e3ff8a423a9a72db9e4fe2896bfda2522129b16d6a0398497a6e0eaf5ff22494a383b13e03d9aac78d4d9b3932fb8507341061779064669ddb64ff34decd8099ab4e7079bc8896a80abdc213778fe3d87bf6feaf0d98a6797a7b8a35bcefb3721eea2d07e605253aedc8cdf1e3bda09275b6b54c2c2730b92e1077cf4fdc9c55e90bee0dc0c2cf361b4a6e77c8918d670f0dcdaaea085f3d8e4a39e784bf50eadf8999f676213011802bf7f0071d3d8a1f83f39cf9417a6ad47c33d48b9fd6adeb0099be25c77debec89ba9b0b694a3d635db15905e5478ebe85bdcb35224d7eb0e731d4abc8a77fc53dced140b17b387e3f2fc1a9b509c1d9d6adfbb2f599f04145ea81e33219637dd95b68743932b31afa620f7fd14abe8125c8f53bb6b09983d60eee1a2b936dbcad57ebc1435f583bef46abfffc1aa99336511dfda6b1b0bb669b1db5b0aed8954bed5c52511b4be80bc81ff52b931ee7c5c075b55c8c29658a0715b1d93717364be182eaa8129bfb4e3a6d95d03b1704080e59dc4b909056a78dde8d6248fc4feb744dee47ca979001b352ef21aeed31fb6720f729f9517467c833923561253039640e97682653315075aaae2416d3660466af9f5424eb7d1048c40d54feb867c29ba24a9433c37759bff8a67cbfc69378544935c998eb65322ff7c891149bb8d65907ba20e98381b662d40a9e04cd4d7284bd648814e3483a42b235960a757e16b9847b0e6c3961188c115eceb523acb64cabdb607d450a0ec544c365ddd636ccddef4bf49212a23f59e90aeda2f5e88eb1c42036cb310f290bd1b1859083cc7e846880fad9cf048d13313b1627314823b04e5c5b84fe4b734d02ba6707316eca4f2b7258afae5216f871194922b18544fa40750f3db61fad8c3d474097c9659f4240556253c5a0b71f1e42f3ff23604f20521b6ee076e5007b6fda86c9b9abf30fdeafdb0175477216d6cb38afdca0ba6f21fe4bdb453e5f585bafd35e039b34f54a6c3fe69aa2325c74ec3e0e2cc9de92ea7fe7ea1dcf65677fba75b2db1001ef1ddbc330a7f832dc1aff28cea3e6f1bedec60b0ac90c1badd9f63ab084f944638bdaa21234663bd73cf4af00dff2b1eb", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}}}, 0x0, 0x0, 0x0, 0x0}) 38.135453853s ago: executing program 2 (id=1855): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01004000"/17]) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 37.639954064s ago: executing program 2 (id=1857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b80100001800c000100636f756e7465720048"], 0x12c}}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x2000000, 0x6f, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238c9c82df5a649a4781baeac4da0bf1151b932a24f43608a48841f8083e2bf008a0c7a6415d6", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) syz_usbip_server_init(0x5) r7 = socket$inet(0xa, 0x801, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) 10.218674389s ago: executing program 0 (id=1924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='virtiofs\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 8.760197794s ago: executing program 0 (id=1926): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 7.474487677s ago: executing program 0 (id=1931): io_uring_setup(0x5, &(0x7f00000002c0)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2, @ANYBLOB='q'], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="40440105"], 0x4) fcntl$setlease(r0, 0x400, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x3634}], 0x7}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @pix_mp={0x2, 0x2, 0x52424752, 0x9, 0x12, [{0x2, 0x7}, {0xef8c, 0x9}, {0x0, 0x101}, {0x85, 0x8000007}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0xffff0001}, {0x1}], 0xf, 0x8f, 0x7, 0x2, 0x6}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {}, {0x6}]}) creat(&(0x7f0000001180)='./file0\x00', 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) open$dir(0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) syz_emit_ethernet(0x32, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}, {0x3f00, 0x88be, 0x10, 0x0, @opaque="0300000097dcaf25"}}}}}, 0x0) sendfile(r5, r8, 0x0, 0x200) 7.23984189s ago: executing program 3 (id=1932): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000000ac0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000000500)="1519bf9d0c4abc2bd842464092d5a3dcb40683da01f6a2c3a73913921c59e8ccae0c4edd3cf1d26c817e6ae20e352855e40dbad315f2096bc50b04531f70469b1256d77f965231200102fc6a961bbd706908cf2ebdc080f6ccb428664689588f65e9acd3f6d6", 0x66, 0x0, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x1, r3, &(0x7f0000000580)="e04f2b9e185b77cf2f967f4a8fb93e4e057d4f9b5b6db4730eed4ca9ca29b6eed0076d2a3409b8421564e26fd50e34a1519af5e0f0db7c880cb8cbb1bc12411856ec2420c3c4227f2d35ff6ac5ddc67432716b21e3547d44ddb0db711a065e23448d92152e45e9c409187a397efac1890f66eb4111a6f35f", 0x78, 0xb3cc}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f0000000780)="26db05ab530bdec7a497572128faed8146c796066e102845d40ad046a5fbfaf57316d2804f96c68d3802141fe9f0c61a1be6b7ea129c3fa4f36ed52a0e6b82cc4b43830fea700e967434c33ef9c42a699eddbe5131fb5103601228feab08e87e74a86d85a7c0327353cbf9cf812f21e47fece3", 0x73, 0x7, 0x0, 0x1}, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4d35, 0xffffffffffffffff, &(0x7f0000000a40)}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func, @map_fd, @generic, @initr0, @exit, @printk={@llu, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x6c}}, 0x0) 5.627997259s ago: executing program 4 (id=1935): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00'}) lseek(r3, 0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000180)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$vhost_msg_v2(r5, &(0x7f0000000400)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x4030582a, &(0x7f0000000240)) 5.284605779s ago: executing program 3 (id=1936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6154040000000000000014000000"], 0x28}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) 5.187173232s ago: executing program 0 (id=1937): socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x5f) 4.061404338s ago: executing program 3 (id=1938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x2, {0x0, @link_local, 'macvtap0\x00'}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0xa8, 0x0, 0xa8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 3.801029928s ago: executing program 0 (id=1939): epoll_create(0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) write$UHID_CREATE(r0, &(0x7f0000000880)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000540)=""/26, 0x1a}}, 0x120) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r6 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r8 = epoll_create1(0x0) syz_usb_control_io$hid(r5, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x22, 0x12, {[@local=@item_4={0x3, 0x2, 0xa, "e4332cd7"}, @main=@item_012={0x2, 0x0, 0x9, 'T!'}, @local=@item_4={0x3, 0x2, 0x9, "b98399db"}, @global=@item_4={0x3, 0x1, 0x2, "5aacbfb8"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0xc84}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000740)={0x40, 0xa, 0x67, "cab6769a8e44696552e8fee6d11b1c7f01ad2c4df13d23c59c513be6fe8108f60bcd51e7916f623e8bf07ac1cbdabfa414d89204253cda1371d1d62545090ecb873b419dabeb23fd9f8c4fde5203050d6b53ff505ad4a4355825e136096696a1c3a01e66715d6e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x1, 0x3d, "961574b6a712397ee32b0d91726b2faadd1db837432aba6f437082c40a3aa652b744b54f4efd3be03c6d3502b04f456a3cde0ab484ef180c884cacdd51"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x65}}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000700)={0x1a}) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000010401010000000000000002000000000a000200ffffffff00000000"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, 0x0) 3.614600298s ago: executing program 4 (id=1940): setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2, 0xffffffffffffffff}, 0x0) r0 = socket(0x10, 0x803, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 2.784118758s ago: executing program 3 (id=1941): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@can_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_FILTER={0xc}, @CGW_SRC_IF={0x8, 0x9, r1}, @CGW_DST_IF={0x8}]}, 0x30}}, 0x0) 2.532905409s ago: executing program 4 (id=1942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x0) 2.303983172s ago: executing program 3 (id=1943): socket$nl_netfilter(0x10, 0x3, 0xc) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.123483015s ago: executing program 4 (id=1944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 1.616054269s ago: executing program 4 (id=1945): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000000ac0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000000500)="1519bf9d0c4abc2bd842464092d5a3dcb40683da01f6a2c3a73913921c59e8ccae0c4edd3cf1d26c817e6ae20e352855e40dbad315f2096bc50b04531f70469b1256d77f965231200102fc6a961bbd706908cf2ebdc080f6ccb428664689588f65e9acd3f6d6", 0x66, 0x0, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x1, r3, &(0x7f0000000580)="e04f2b9e185b77cf2f967f4a8fb93e4e057d4f9b5b6db4730eed4ca9ca29b6eed0076d2a3409b8421564e26fd50e34a1519af5e0f0db7c880cb8cbb1bc12411856ec2420c3c4227f2d35ff6ac5ddc67432716b21e3547d44ddb0db711a065e23448d92152e45e9c409187a397efac1890f66eb4111a6f35f", 0x78, 0xb3cc}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f0000000780)="26db05ab530bdec7a497572128faed8146c796066e102845d40ad046a5fbfaf57316d2804f96c68d3802141fe9f0c61a1be6b7ea129c3fa4f36ed52a0e6b82cc4b43830fea700e967434c33ef9c42a699eddbe5131fb5103601228feab08e87e74a86d85a7c0327353cbf9cf812f21e47fece3", 0x73, 0x7, 0x0, 0x1}, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4d35, 0xffffffffffffffff, &(0x7f0000000a40)}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func, @map_fd, @generic, @initr0, @exit, @printk={@llu, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x6c}}, 0x0) 214.350284ms ago: executing program 3 (id=1946): io_setup(0x0, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc4c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0xf0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c6"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x9, 0x40}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x1, 0x0, 0x37, 0x9, 0x1f}, @acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x1f, 0x7fff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x61}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc1, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x2, 0xa, 0x8, 0xfc}, 0x4c, &(0x7f00000001c0)={0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x6c, 0xffff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "e1c12e4953e95652f92ea7ad11fd5ac3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf2, 0x8, 0x7, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c2084e74e011acafa7d2bd01f325e399"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "da582397830a80cba3c89b977de5fee09051f100d9c51117c655ee802f8fa44e30ee334e5bf7bd98bb276b034d390cb115b6457a2648e18a418a0a2324f428a58fbe177719341c215efdf84e407e3fc092c7e2cd1cb86cbf9cd2b1cbb1f835d52b8752e1b37be11932884c869e9274c2c13e27b32611188987477ca243a596e48300439b609e371f5e010311c30165ad89d84e90c2974c58abd664e3332fddb3aa6816a1cb"}}, {0x4d, &(0x7f00000003c0)=@string={0x4d, 0x3, "c67758f80b2fb2d79732fe21bea01b163b7d491bfef70e1fc5856825c294de4e6c6f6726aa627ba9550dec71de353efaa4899b1344391617b887b3cd0930d0ced79e36971f469fa8943894"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x81a}}, {0x6b, &(0x7f0000000480)=@string={0x6b, 0x3, "bec9a58fdb60d5936738d0a5f6bf3fc759a41ada184f4982ff7ff293bb6418994d3d6a049d358287dfa137fa7b1c154e3a4d5b280ebfc8e838cc3ccecc28f8e0912ba02ada0f43d9475584cd72f2938e59d395a7cf93764fb241de1accbfc00b59d917076499a94cec"}}, {0xfe, &(0x7f0000000500)=@string={0xfe, 0x3, "02929dd786c901d96904eebbcded991b7f8df46ba8e332650e5dab8591694f9d7995b6743aa51ea3fdf92308bb3f80f3f2dcb3e402d01c6c445fc6c7015dc576b4341a9b7288b282b8bdb69c1e9dd982ba8b39663533bc991739ac85ab6727bd2944a8f0e1f4cfbb0f19e6d77d141d79240526843d286cfb9380e760a92981626be6d1c6dcd8d50a809765c7dfc84622de4b20f26378a9037b30ae9a3394988f13d0b2aeb6fff0ae05ba03096a3f3587ed1b3d88b5efcf92cec5f364735c20e01118303c182113fe1944902d16180c27ccbc21f84f4f4ef2598b0622230da143068859b8dfb546d8935ab3fb8eb2be64066ee77d6a18b14f5f1a184e"}}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 57.398365ms ago: executing program 0 (id=1947): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0) 0s ago: executing program 4 (id=1948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000300)={0xc0000000, 0x0, "47c3f0362e9c6ee76a81a8d92dbd0c7af5945a0c68f1c2342003e42820bd8d2d"}) kernel console output (not intermixed with test programs): for pid=12450 comm="syz.1.1624" path="socket:[46657]" dev="sockfs" ino=46657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 896.844579][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 898.798535][ T5143] usb 2-1: USB disconnect, device number 25 [ 899.200845][ T29] audit: type=1400 audit(1720205573.533:377): avc: denied { create } for pid=12519 comm="syz.0.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 899.825405][ T5142] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 900.045126][ T5142] usb 5-1: Using ep0 maxpacket: 16 [ 900.061998][ T5142] usb 5-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 900.084102][ T5142] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 900.114713][ T5142] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 900.135682][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.186475][ T5142] usb 5-1: config 0 descriptor?? [ 900.223327][ T5142] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 900.275200][T12531] team0: entered promiscuous mode [ 900.311113][T12531] team_slave_0: entered promiscuous mode [ 900.344436][T12531] team_slave_1: entered promiscuous mode [ 901.569454][T12521] random: crng reseeded on system resumption [ 901.819582][T12530] team0: left promiscuous mode [ 901.833922][T12530] team_slave_0: left promiscuous mode [ 901.839694][T12530] team_slave_1: left promiscuous mode [ 903.304599][T12540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.341396][T12540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.609562][T12539] Bluetooth: hci4: command 0x0406 tx timeout [ 903.635606][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1651'. [ 903.960998][T12574] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.1652'. [ 904.250848][ T8] usb 5-1: USB disconnect, device number 22 [ 905.031866][T12592] team0: entered promiscuous mode [ 905.055761][T12592] team_slave_0: entered promiscuous mode [ 905.093440][T12592] team_slave_1: entered promiscuous mode [ 905.549830][T12591] team0: left promiscuous mode [ 905.573338][T12591] team_slave_0: left promiscuous mode [ 905.614137][T12591] team_slave_1: left promiscuous mode [ 906.061001][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.086893][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.106512][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.142798][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.170518][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.202263][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.225565][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.252475][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.274206][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.284158][ T4496] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 906.312555][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.322836][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.338361][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.350392][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.391069][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.417162][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.437802][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.448487][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.468561][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.487062][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.515222][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.522970][ T4496] usb 4-1: config 0 has no interfaces? [ 906.551864][ T4496] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 906.568868][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.587322][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.598125][ T4496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.616308][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.631681][ T4496] usb 4-1: config 0 descriptor?? [ 906.642247][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.703925][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.713132][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.733539][ T5143] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 906.749876][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.763395][ T5143] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 906.777827][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.790521][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.812713][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.890235][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.910739][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.934076][T12618] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.1663'. [ 906.945838][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.972849][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.991049][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.013973][ T5143] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 907.023851][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.044885][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.066479][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.113907][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.154128][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.182268][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.208135][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.443320][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.463488][ T5143] usb 2-1: config 0 has no interfaces? [ 907.476319][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 907.492869][ T5143] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 908.412107][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 908.425453][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.439144][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 908.457520][ T5143] usb 2-1: config 0 descriptor?? [ 908.466471][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 908.505561][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 908.533840][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 908.561793][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 908.593928][ T4496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 908.640093][ T4496] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 909.276257][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1660'. [ 909.606878][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1668'. [ 909.676834][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1662'. [ 910.603885][ T5140] usb 4-1: USB disconnect, device number 21 [ 911.180197][ T5140] usb 2-1: USB disconnect, device number 26 [ 911.321008][T12539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 911.332783][T12539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 911.342698][T12539] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 911.354375][T12539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 911.362446][T12539] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 911.372481][T12539] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 911.413864][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.458845][T12649] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 911.472783][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.514016][T12649] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.1675'. [ 911.515738][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.531280][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.539564][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.552102][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.560413][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.570050][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.584095][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.591674][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.599863][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.612120][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.625704][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.659098][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.692907][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.712734][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.730440][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.738747][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.759182][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.769936][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.786245][ T4496] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 911.804080][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.811765][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.832059][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.839684][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.856170][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.864934][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.879258][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.891246][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.920598][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.943701][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.974584][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 911.984081][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 911.999918][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.011097][ T4496] usb 3-1: config 0 has no interfaces? [ 912.021562][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 912.038213][ T4496] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 912.038529][T12660] team0: entered promiscuous mode [ 912.054655][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.062264][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 912.072166][ T4496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.085653][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.085661][ T6178] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 912.104497][T11794] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 912.125502][T12660] team_slave_0: entered promiscuous mode [ 912.144515][ T4496] usb 3-1: config 0 descriptor?? [ 912.169154][T11794] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 912.189205][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.251391][T12660] team_slave_1: entered promiscuous mode [ 912.267714][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.295049][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.305583][ T6178] usb 5-1: config 0 has no interfaces? [ 912.305648][ T6178] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 912.305691][ T6178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.341830][ T6178] usb 5-1: config 0 descriptor?? [ 912.422668][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.465193][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.483324][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 912.520742][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.548981][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.597852][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.646808][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.694107][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.701587][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.717057][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.725349][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.735469][ T5140] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 912.750518][ T5140] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 913.173268][T12650] chnl_net:caif_netlink_parms(): no params data found [ 913.443958][ T9576] Bluetooth: hci1: command tx timeout [ 913.497369][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1673'. [ 913.857710][T12659] team0: left promiscuous mode [ 913.862548][T12659] team_slave_0: left promiscuous mode [ 913.873302][T12659] team_slave_1: left promiscuous mode [ 913.948057][T12669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1674'. [ 913.959444][T12650] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.243884][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.371667][T12650] bridge_slave_0: entered allmulticast mode [ 915.394952][T12650] bridge_slave_0: entered promiscuous mode [ 915.406603][T12650] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.440995][T12650] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.458978][ T8] usb 3-1: USB disconnect, device number 21 [ 915.483978][T12650] bridge_slave_1: entered allmulticast mode [ 915.526287][ T9576] Bluetooth: hci1: command tx timeout [ 915.540427][T12650] bridge_slave_1: entered promiscuous mode [ 915.566604][T11794] usb 5-1: USB disconnect, device number 23 [ 915.789992][T12650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.841919][T12650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.970412][T12650] team0: Port device team_slave_0 added [ 916.018785][T12650] team0: Port device team_slave_1 added [ 916.190814][T12650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.198742][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.228642][T12650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.257210][T12650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.271445][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.277862][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.315651][T12650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.329114][ T928] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 916.338199][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.369644][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.406150][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.417131][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.438431][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.453147][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.462082][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.475145][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.491594][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.511466][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.546430][ T928] usb 3-1: Using ep0 maxpacket: 32 [ 916.577862][ T928] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 916.592457][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.609402][ T928] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 916.621433][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.629272][ T6178] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 916.666456][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.679749][ T928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 916.710817][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.729015][ T928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 916.744868][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.756938][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.770491][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.797426][ T928] usb 3-1: Product: syz [ 916.813204][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.830979][ T928] usb 3-1: Manufacturer: syz [ 916.848360][ T6178] usb 5-1: config 0 has no interfaces? [ 916.855280][ T928] usb 3-1: SerialNumber: syz [ 916.860708][ T6178] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 916.871271][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.912480][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.913386][T12650] hsr_slave_0: entered promiscuous mode [ 916.928214][ T6178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.944020][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.957591][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 916.967547][ T6178] usb 5-1: config 0 descriptor?? [ 917.023298][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 917.040257][T12650] hsr_slave_1: entered promiscuous mode [ 917.043710][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 917.079129][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 917.089860][T12650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.121031][T12650] Cannot create hsr debugfs directory [ 917.145047][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 917.196841][ T8] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 917.604063][ T9576] Bluetooth: hci1: command tx timeout [ 917.869039][ T928] usb 3-1: 0:2 : does not exist [ 917.998500][ T928] usb 3-1: USB disconnect, device number 22 [ 918.204945][T12650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.312148][T12707] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 918.320225][T12707] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.1686'. [ 918.356918][T12635] udevd[12635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.405345][T12650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.145850][T12650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.190285][T12705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1683'. [ 919.293365][T12717] team0: entered promiscuous mode [ 919.333801][T12717] team_slave_0: entered promiscuous mode [ 919.339815][T12717] team_slave_1: entered promiscuous mode [ 919.546700][T12650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.683935][ T9576] Bluetooth: hci1: command tx timeout [ 919.816512][T12716] team0: left promiscuous mode [ 919.843238][T12716] team_slave_0: left promiscuous mode [ 919.878309][T12716] team_slave_1: left promiscuous mode [ 920.435919][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.496116][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.509416][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.545168][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.569855][ T5142] usb 5-1: USB disconnect, device number 24 [ 920.588216][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.639811][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.649416][T12650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 920.669135][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.690909][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.710359][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.719136][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.743863][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.767743][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.772016][T12650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 920.777829][T11794] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 920.801115][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.821664][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.841559][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.867354][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.896660][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.929840][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.931979][T12650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 920.962915][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 920.973216][ T9576] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 920.986923][T11794] usb 2-1: config 0 has no interfaces? [ 920.996106][T11794] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 921.012026][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 921.040921][T11794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.049330][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 921.063851][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 921.078374][T11794] usb 2-1: config 0 descriptor?? [ 921.083911][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 921.091793][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 921.107359][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 921.115211][ T4496] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 921.128070][ T4496] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 921.150791][T12650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 921.158912][ T9576] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 921.266740][T12737] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 921.282504][T12737] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 921.961090][T12650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.094051][T12650] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.177473][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.184910][T11794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.242615][T11794] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.249912][T11794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.043853][ T9576] Bluetooth: hci5: command 0x0406 tx timeout [ 923.344138][ T6178] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 924.360505][ T6178] usb 5-1: No LPM exit latency info found, disabling LPM. [ 924.374331][ T6178] usb 5-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.392742][ T6178] usb 5-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 924.407198][ T6178] usb 5-1: config 1 interface 0 has no altsetting 0 [ 924.415932][ T6178] usb 5-1: language id specifier not provided by device, defaulting to English [ 924.432599][ T4496] usb 2-1: USB disconnect, device number 27 [ 924.433424][ T6178] usb 5-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 924.582519][ T6178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.603769][ T6178] usb 5-1: Product: Ъ [ 924.607922][ T6178] usb 5-1: Manufacturer: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 924.656202][ T6178] usb 5-1: SerialNumber: ဌ [ 924.711476][T12745] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 925.059158][T12764] team0: entered promiscuous mode [ 925.115206][T12764] team_slave_0: entered promiscuous mode [ 925.368994][T12745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12745 comm=syz.4.1696 [ 925.464857][T12764] team_slave_1: entered promiscuous mode [ 925.550735][ T6178] usbhid 5-1:1.0: can't add hid device: -71 [ 925.582313][ T6178] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 925.619390][ T6178] usb 5-1: USB disconnect, device number 25 [ 925.627056][T12650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.650182][T12763] team0: left promiscuous mode [ 925.655857][T12763] team_slave_0: left promiscuous mode [ 925.671165][T12763] team_slave_1: left promiscuous mode [ 925.894825][T12650] veth0_vlan: entered promiscuous mode [ 925.940660][T12650] veth1_vlan: entered promiscuous mode [ 926.084861][T12650] veth0_macvtap: entered promiscuous mode [ 926.108795][T12650] veth1_macvtap: entered promiscuous mode [ 926.185927][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.233860][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.253822][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.310836][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.334140][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.363728][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.383786][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.399823][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.441486][T12650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.512476][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.555733][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.577695][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.616972][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.643931][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.666404][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.678844][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.698306][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.713319][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.733552][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.760588][T12650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.814437][T12650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.823362][T12650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.858063][T12650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.883787][T12650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.991876][ T9576] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 927.085784][ T9576] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 927.221287][T12787] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 927.258510][T12787] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 927.766498][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.828230][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.865684][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 927.918630][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 927.950766][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 927.987303][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.003730][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.018980][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.030445][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.043068][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.050078][T12796] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 928.059238][T12796] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 928.069306][T12796] vhci_hcd vhci_hcd.0: Device attached [ 928.087376][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.101956][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.127871][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.156350][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.181299][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.211548][T12799] vhci_hcd: connection closed [ 928.212160][ T989] vhci_hcd: stop threads [ 928.222552][T11794] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 928.239897][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.247318][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.247425][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.282351][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.292238][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.311921][ T989] vhci_hcd: release socket [ 928.344104][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.347437][ T989] vhci_hcd: disconnect device [ 928.359096][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.366825][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.386363][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.401349][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.417689][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.429701][T12804] team0: entered promiscuous mode [ 928.447744][T11794] usb 3-1: config 0 has no interfaces? [ 928.452981][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.453397][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.473855][T11794] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 928.474277][T12804] team_slave_0: entered promiscuous mode [ 928.491309][T11794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.511369][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.514718][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.541754][T12804] team_slave_1: entered promiscuous mode [ 928.544580][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.550374][T11794] usb 3-1: config 0 descriptor?? [ 928.561392][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.571443][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.597171][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.638829][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.640986][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.670567][ T5142] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 928.709410][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.727740][ T5142] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 928.754026][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 928.810432][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.864422][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.871990][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 928.971783][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.007275][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.033462][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.048474][ T9] usb 4-1: config 0 has no interfaces? [ 929.054305][ T9] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 929.063522][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.064528][ T9576] Bluetooth: hci5: command 0x0406 tx timeout [ 929.082186][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.108298][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.163193][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.172675][ T9] usb 4-1: config 0 descriptor?? [ 929.208006][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.249719][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.296084][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.325489][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.359495][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.417423][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.439461][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.455085][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.490987][ T5133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 929.576495][ T5133] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 929.667007][T12803] team0: left promiscuous mode [ 929.769866][T12803] team_slave_0: left promiscuous mode [ 929.887464][T12803] team_slave_1: left promiscuous mode [ 930.274969][T12802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1709'. [ 930.549122][T12815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1706'. [ 930.793722][ T9] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 930.998377][ T9] usb 2-1: No LPM exit latency info found, disabling LPM. [ 931.019243][ T9] usb 2-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.063280][ T9] usb 2-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 931.108904][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 931.129024][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 931.183013][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 931.210176][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.234663][ T9] usb 2-1: Product: Ъ [ 931.249435][ T9] usb 2-1: Manufacturer: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 931.557656][ T9] usb 2-1: SerialNumber: ဌ [ 932.563272][T11794] usb 4-1: USB disconnect, device number 22 [ 932.593657][T12825] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 932.800490][ T928] usb 3-1: USB disconnect, device number 23 [ 933.713546][T12825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12825 comm=syz.1.1713 [ 934.334473][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 934.342527][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 934.396355][ T9] usb 2-1: USB disconnect, device number 28 [ 934.533021][ T9576] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 934.661190][ T9576] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 934.759933][T12856] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 934.768757][T12856] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 934.883827][T12844] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 935.109898][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.133109][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.139233][T12844] usb 1-1: Using ep0 maxpacket: 32 [ 935.162086][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.166212][T12844] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 935.190846][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.204282][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.212515][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.221430][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.255698][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.278994][T12844] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 935.281189][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.323858][T12844] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 935.362814][T12844] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 935.368911][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.379575][T12844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.379618][T12844] usb 1-1: Product: syz [ 935.379644][T12844] usb 1-1: Manufacturer: syz [ 935.379671][T12844] usb 1-1: SerialNumber: syz [ 935.428540][T11794] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 935.543075][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.581549][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.604004][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.664147][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.671623][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.700131][T11794] usb 4-1: config 0 has no interfaces? [ 935.717094][T12864] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1721'. [ 935.735602][T11794] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 935.764435][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.784110][T12864] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1721'. [ 935.793940][T11794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.808044][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.830983][T11794] usb 4-1: config 0 descriptor?? [ 935.840496][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.900025][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.923798][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.948836][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.972803][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 935.987184][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 936.008149][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 936.032297][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 936.069104][ T4496] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 936.131608][ T4496] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 936.353911][T12869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 936.360855][T12869] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 936.371380][T12869] vhci_hcd vhci_hcd.0: Device attached [ 936.519031][T12870] vhci_hcd: connection closed [ 936.537844][ T6071] vhci_hcd: stop threads [ 936.567077][ T9576] Bluetooth: hci5: command 0x0406 tx timeout [ 936.615967][ T6071] vhci_hcd: release socket [ 936.648581][T12844] usb 1-1: 0:2 : does not exist [ 936.691931][ T6071] vhci_hcd: disconnect device [ 936.704809][ T4496] usb 12-1: SetAddress Request (11) to port 0 [ 936.728925][ T4496] usb 12-1: new SuperSpeed USB device number 11 using vhci_hcd [ 936.766226][T12844] usb 1-1: USB disconnect, device number 27 [ 936.818573][ T4496] usb 12-1: enqueue for inactive port 0 [ 936.952420][T12876] team0: entered promiscuous mode [ 936.969892][T12876] team_slave_0: entered promiscuous mode [ 936.993469][T12876] team_slave_1: entered promiscuous mode [ 937.101346][T12635] udevd[12635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.276069][ T4496] usb usb12-port1: attempt power cycle [ 938.005290][ T4496] usb usb12-port1: unable to enumerate USB device [ 938.058990][T12844] usb 4-1: USB disconnect, device number 23 [ 938.493051][T12875] team0: left promiscuous mode [ 938.663260][T12875] team_slave_0: left promiscuous mode [ 938.790459][T12875] team_slave_1: left promiscuous mode [ 939.604595][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 939.668499][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 939.713773][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 939.751990][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 939.772582][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 939.793365][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 939.953974][ T9576] Bluetooth: hci1: command tx timeout [ 940.062136][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.069774][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.079148][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.086875][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.105448][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.239404][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.247427][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.258781][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.267471][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.276228][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.286372][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.294622][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.303127][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.311629][ T4496] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 940.326309][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.350749][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.386015][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.615935][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.628592][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.637806][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 940.653027][ T5142] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 941.727758][ T5142] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 941.902012][ T4496] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 941.943720][ T4496] usb 4-1: can't read configurations, error -71 [ 942.103789][T12916] team0: entered promiscuous mode [ 942.108991][T12916] team_slave_0: entered promiscuous mode [ 942.134277][T12916] team_slave_1: entered promiscuous mode [ 943.406016][T12915] team0: left promiscuous mode [ 943.523823][T12915] team_slave_0: left promiscuous mode [ 943.699641][T12915] team_slave_1: left promiscuous mode [ 945.024498][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.031989][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.059502][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.132237][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.153883][T12930] overlayfs: overlapping lowerdir path [ 945.185891][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.248097][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.283964][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.291446][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.300643][T12939] team0: entered promiscuous mode [ 945.325704][T12939] team_slave_0: entered promiscuous mode [ 945.331776][T12939] team_slave_1: entered promiscuous mode [ 945.344892][T12844] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 945.365992][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.404140][T12939] bridge3: entered promiscuous mode [ 945.420004][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.444132][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.451794][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.483109][T12939] bridge4: entered promiscuous mode [ 945.519301][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.560026][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.833107][T12844] usb 5-1: config 0 has no interfaces? [ 945.840079][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 945.847658][T12844] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 946.023894][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.040570][T12844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.055729][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.063192][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.083975][T12844] usb 5-1: config 0 descriptor?? [ 946.108589][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.116516][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.139006][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.160791][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.172805][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.206928][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.257029][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.290484][ T6178] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 946.321030][T12844] usb 5-1: USB disconnect, device number 26 [ 946.592314][ T6178] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 947.993729][T11794] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 948.163996][ T9576] Bluetooth: hci3: command 0x0406 tx timeout [ 948.227477][T12937] team0: left promiscuous mode [ 948.232346][T12937] team_slave_0: left promiscuous mode [ 948.246071][T11794] usb 4-1: Using ep0 maxpacket: 16 [ 948.277670][T11794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 948.327366][T11794] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 948.352789][T11794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.396035][T11794] usb 4-1: config 0 descriptor?? [ 948.458150][T12937] team_slave_1: left promiscuous mode [ 948.511975][T12937] bridge3: left promiscuous mode [ 948.580900][T12937] bridge4: left promiscuous mode [ 949.031957][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.066190][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.125510][T11794] hid (null): unknown global tag 0x83 [ 949.141285][T11794] hid (null): unknown global tag 0xc [ 949.186135][T11794] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 949.202264][T11794] hid-generic 0003:0158:0100.0013: unexpected long global item [ 949.235301][T11794] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22 [ 949.378574][T11794] usb 4-1: USB disconnect, device number 26 [ 950.095458][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 950.144645][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 950.180207][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 950.246414][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 950.296084][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 950.333786][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 950.343907][T11794] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 950.380412][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 950.713383][T11794] usb 3-1: config 0 has no interfaces? [ 950.719675][T11794] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 950.733778][T11794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.067597][T11794] usb 3-1: config 0 descriptor?? [ 951.075078][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.108859][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.132082][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.142053][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.151162][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.161543][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.171292][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.181284][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.190283][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.203969][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.217259][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.233166][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.263255][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.273030][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.286043][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.296044][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.312699][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.330558][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.363645][T12844] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 951.555048][T12844] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 952.373819][ T6178] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 952.611431][ T6178] usb 2-1: No LPM exit latency info found, disabling LPM. [ 952.627840][ T6178] usb 2-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.673738][ T6178] usb 2-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 952.757490][ T6178] usb 2-1: config 1 interface 0 has no altsetting 0 [ 952.825665][ T6178] usb 2-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 952.843712][ T6178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.865337][T13001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1749'. [ 952.903653][ T6178] usb 2-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 952.975526][ T6178] usb 2-1: SerialNumber: Ъ [ 953.014790][T13000] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 953.746133][T13000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13000 comm=syz.1.1754 [ 955.346283][ T6178] usbhid 2-1:1.0: can't add hid device: -71 [ 955.376955][ T6178] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 955.425197][ T6178] usb 2-1: USB disconnect, device number 29 [ 955.500582][ T4496] usb 3-1: USB disconnect, device number 24 [ 955.972873][T13010] team0: entered promiscuous mode [ 955.993215][T13010] team_slave_0: entered promiscuous mode [ 956.003490][T13010] team_slave_1: entered promiscuous mode [ 956.025633][T13010] bridge3: entered promiscuous mode [ 956.031183][T13010] bridge4: entered promiscuous mode [ 957.844843][ T9576] Bluetooth: hci5: command 0x0406 tx timeout [ 960.426768][ T9576] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 961.731408][ T9576] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 961.799673][T13010] team0: left promiscuous mode [ 961.804686][T13010] team_slave_0: left promiscuous mode [ 961.813162][T13010] team_slave_1: left promiscuous mode [ 961.852246][T13010] bridge3: left promiscuous mode [ 961.885700][T13010] bridge4: left promiscuous mode [ 961.906862][T13047] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 961.946489][T13047] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 962.495521][ T9576] Bluetooth: hci5: command 0x0406 tx timeout [ 964.047009][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 968.099137][T13099] overlayfs: missing 'workdir' [ 968.122430][T13093] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1778'. [ 969.865588][T13107] nbd3: detected capacity change from 0 to 8388607 [ 970.719251][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1785'. [ 971.326256][T13133] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1788'. [ 971.384042][T13133] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1788'. [ 971.621219][T13107] block nbd3: shutting down sockets [ 971.681519][ C0] blk_print_req_error: 24 callbacks suppressed [ 971.681561][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.697237][ C0] buffer_io_error: 23 callbacks suppressed [ 971.697258][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 971.740828][ T98] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.750267][ T98] Buffer I/O error on dev nbd3, logical block 0, async page read [ 971.832206][T13105] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.869186][T13105] Buffer I/O error on dev nbd3, logical block 0, async page read [ 971.887291][T13105] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.902664][T13105] Buffer I/O error on dev nbd3, logical block 0, async page read [ 971.912918][T13105] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.942832][T13105] Buffer I/O error on dev nbd3, logical block 0, async page read [ 973.317581][T13105] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.334838][T13105] Buffer I/O error on dev nbd3, logical block 0, async page read [ 973.557323][T13105] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.587781][T13105] Buffer I/O error on dev nbd3, logical block 0, async page read [ 973.623804][T13105] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.717661][T13105] Buffer I/O error on dev nbd3, logical block 0, async page read [ 973.729791][T13133] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 973.736458][T13133] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 973.746835][T13133] vhci_hcd vhci_hcd.0: Device attached [ 973.796677][T13105] ldm_validate_partition_table(): Disk read failed. [ 973.814612][T13105] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.848171][T13105] Buffer I/O error on dev nbd3, logical block 0, async page read [ 973.857648][T13105] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.878945][T13142] vhci_hcd: connection closed [ 973.881785][ T51] vhci_hcd: stop threads [ 973.882880][T13105] Buffer I/O error on dev nbd3, logical block 0, async page read [ 973.925665][ T51] vhci_hcd: release socket [ 973.935411][ T51] vhci_hcd: disconnect device [ 974.014901][T13105] Dev nbd3: unable to read RDB block 0 [ 974.134580][T13105] nbd3: unable to read partition table [ 974.169212][T12461] ldm_validate_partition_table(): Disk read failed. [ 974.186994][T12461] Dev nbd3: unable to read RDB block 0 [ 974.200234][T12461] nbd3: unable to read partition table [ 974.240278][T12461] ldm_validate_partition_table(): Disk read failed. [ 974.297873][T12461] Dev nbd3: unable to read RDB block 0 [ 974.311658][T12461] nbd3: unable to read partition table [ 974.424540][ T6178] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 974.545987][T13148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1792'. [ 974.639759][ T6178] usb 5-1: No LPM exit latency info found, disabling LPM. [ 974.666237][ T6178] usb 5-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.699335][ T6178] usb 5-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 974.751274][ T6178] usb 5-1: config 1 interface 0 has no altsetting 0 [ 974.777907][ T6178] usb 5-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 974.797838][ T6178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.823855][ T6178] usb 5-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 974.886289][ T6178] usb 5-1: SerialNumber: Ъ [ 974.908966][T13144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 976.619738][T13144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13144 comm=syz.4.1790 [ 976.746926][ T6178] usbhid 5-1:1.0: can't add hid device: -71 [ 976.777923][ T6178] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 976.825772][ T6178] usb 5-1: USB disconnect, device number 27 [ 977.073733][ T4496] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 977.277640][ T4496] usb 1-1: Using ep0 maxpacket: 16 [ 977.296124][ T4496] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 977.353723][ T4496] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 977.408702][ T4496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.454658][ T4496] usb 1-1: config 0 descriptor?? [ 977.773415][T13164] random: crng reseeded on system resumption [ 978.275447][T13171] team0: entered promiscuous mode [ 978.280728][T13171] team_slave_0: entered promiscuous mode [ 978.314275][T13171] team_slave_1: entered promiscuous mode [ 978.981989][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.034637][T13169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.054570][T13169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.081647][T12539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 979.106921][T12539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 979.116525][T12539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 979.130854][T12539] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 979.140638][T12539] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 979.148577][T12539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 979.501231][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.642926][T13186] team0: entered promiscuous mode [ 979.654515][T13186] team_slave_0: entered promiscuous mode [ 979.673289][T13186] team_slave_1: entered promiscuous mode [ 979.715984][T13169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.747537][T13169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.798841][ T4496] hid (null): unknown global tag 0x83 [ 979.810833][ T4496] hid (null): unknown global tag 0xc [ 979.830516][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.839134][ T4496] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 979.861866][ T4496] hid-generic 0003:0158:0100.0015: unexpected long global item [ 979.897141][ T4496] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 979.952961][T13170] team0: left promiscuous mode [ 979.970057][T13170] team_slave_0: left promiscuous mode [ 980.001044][T13170] team_slave_1: left promiscuous mode [ 980.130373][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.174421][ T6178] usb 1-1: USB disconnect, device number 28 [ 981.064194][T13183] team0: left promiscuous mode [ 981.069388][T13183] team_slave_0: left promiscuous mode [ 981.106159][T13183] team_slave_1: left promiscuous mode [ 981.214687][ T9576] Bluetooth: hci2: command tx timeout [ 981.329752][ T51] bridge_slave_1: left allmulticast mode [ 981.348143][ T51] bridge_slave_1: left promiscuous mode [ 981.374371][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.428218][ T51] bridge_slave_0: left allmulticast mode [ 981.438249][ T51] bridge_slave_0: left promiscuous mode [ 981.446051][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.335794][ T9576] Bluetooth: hci2: command tx timeout [ 984.100976][T13215] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1807'. [ 984.123927][T13215] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1807'. [ 984.726596][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.761642][T13219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1808'. [ 984.778532][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.811943][ T51] bond0 (unregistering): Released all slaves [ 984.939071][T13225] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 984.945748][T13225] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 984.954318][T13225] vhci_hcd vhci_hcd.0: Device attached [ 985.027819][T13221] team0: entered promiscuous mode [ 985.078193][T13221] team_slave_0: entered promiscuous mode [ 985.115171][T13221] team_slave_1: entered promiscuous mode [ 985.162565][T13226] vhci_hcd: connection closed [ 985.165252][ T12] vhci_hcd: stop threads [ 985.197871][ T12] vhci_hcd: release socket [ 985.203089][T13221] bridge3: entered promiscuous mode [ 985.211486][ T12] vhci_hcd: disconnect device [ 985.234227][T13221] bridge4: entered promiscuous mode [ 985.364269][ T9576] Bluetooth: hci2: command tx timeout [ 986.486424][T13220] team0: left promiscuous mode [ 986.495876][T13220] team_slave_0: left promiscuous mode [ 986.501608][T13220] team_slave_1: left promiscuous mode [ 986.555322][T13220] bridge3: left promiscuous mode [ 986.560648][T13220] bridge4: left promiscuous mode [ 987.162102][T13246] team0: entered promiscuous mode [ 987.231021][T13246] team_slave_0: entered promiscuous mode [ 987.257247][T13246] team_slave_1: entered promiscuous mode [ 987.455129][ T9576] Bluetooth: hci2: command tx timeout [ 987.490364][T13173] chnl_net:caif_netlink_parms(): no params data found [ 987.573971][T13257] overlayfs: overlapping lowerdir path [ 987.589936][ T51] hsr_slave_0: left promiscuous mode [ 987.621099][ T51] hsr_slave_1: left promiscuous mode [ 987.652599][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.684999][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.741638][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.783227][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.001226][ T51] veth1_macvtap: left promiscuous mode [ 988.021018][ T51] veth0_macvtap: left promiscuous mode [ 988.031071][ T51] veth1_vlan: left promiscuous mode [ 988.048412][ T51] veth0_vlan: left promiscuous mode [ 991.127661][T13284] overlayfs: overlapping lowerdir path [ 992.574435][ T51] team0 (unregistering): Port device team_slave_1 removed [ 992.804831][ T51] team0 (unregistering): Port device team_slave_0 removed [ 994.560073][T13245] team0: left promiscuous mode [ 994.571096][T13245] team_slave_0: left promiscuous mode [ 994.584103][T13245] team_slave_1: left promiscuous mode [ 994.652792][T13306] team0: entered promiscuous mode [ 994.658488][T13306] team_slave_0: entered promiscuous mode [ 994.664830][T13306] team_slave_1: entered promiscuous mode [ 994.912370][T13306] team0: left promiscuous mode [ 994.927034][T13306] team_slave_0: left promiscuous mode [ 994.950408][T13306] team_slave_1: left promiscuous mode [ 994.998320][T13316] team0: entered promiscuous mode [ 995.003444][T13316] team_slave_0: entered promiscuous mode [ 995.063997][T13316] team_slave_1: entered promiscuous mode [ 995.082524][T13316] bridge3: entered promiscuous mode [ 995.145571][T13316] bridge4: entered promiscuous mode [ 995.648415][T12539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 995.673326][T12539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 995.694717][T12539] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 995.713047][T12539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 995.724228][T12539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 995.743787][T12539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 995.959561][T13173] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.992539][T13173] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.005007][T13173] bridge_slave_0: entered allmulticast mode [ 996.037144][T13173] bridge_slave_0: entered promiscuous mode [ 996.133772][T13315] team0: left promiscuous mode [ 996.138646][T13315] team_slave_0: left promiscuous mode [ 996.175168][T13315] team_slave_1: left promiscuous mode [ 996.180897][T13315] bridge3: left promiscuous mode [ 996.213972][T13315] bridge4: left promiscuous mode [ 996.238266][T13173] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.253970][T13173] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.274371][T13173] bridge_slave_1: entered allmulticast mode [ 996.295104][T13173] bridge_slave_1: entered promiscuous mode [ 996.482546][T13173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.597705][T13173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.950788][T13352] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1830'. [ 997.004209][T13352] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1830'. [ 997.964869][ T9576] Bluetooth: hci3: command tx timeout [ 998.072793][T13173] team0: Port device team_slave_0 added [ 998.320509][T13173] team0: Port device team_slave_1 added [ 998.471684][ T989] bridge_slave_1: left allmulticast mode [ 998.511181][ T989] bridge_slave_1: left promiscuous mode [ 998.602115][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.685802][ T989] bridge_slave_0: left allmulticast mode [ 998.691621][ T989] bridge_slave_0: left promiscuous mode [ 998.707637][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.844079][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 998.963896][T13369] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 998.970550][T13369] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 998.978426][T13369] vhci_hcd vhci_hcd.0: Device attached [ 999.033650][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 999.045765][ T9] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 999.063701][ T9] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 999.072534][ T9] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 999.108961][T13370] vhci_hcd: connection closed [ 999.124391][ T11] vhci_hcd: stop threads [ 999.137047][ T11] vhci_hcd: release socket [ 999.141584][ T11] vhci_hcd: disconnect device [ 999.163663][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 999.204332][ T9] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 999.222994][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 999.248887][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 999.261355][ T9] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 999.289706][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 999.327743][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.363657][ T9] usb 3-1: Product: В [ 999.367864][ T9] usb 3-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 999.413653][ T9] usb 3-1: SerialNumber: syz [ 999.451520][ T9] usb 3-1: config 0 descriptor?? [ 999.495608][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 999.520657][ T9] pvrusb2: ********** [ 999.535617][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 999.555751][T13373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1833'. [ 999.566348][ T9] pvrusb2: Important functionality might not be entirely working. [ 999.588957][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 999.602290][ T9] pvrusb2: ********** [ 999.714936][ T1977] pvrusb2: Invalid write control endpoint [ 999.794002][ T9] usb 3-1: USB disconnect, device number 25 [ 999.942597][ T1977] pvrusb2: Invalid write control endpoint [ 999.956538][ T1977] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 999.966892][ T1977] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 999.975141][ T1977] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 999.985873][ T1977] pvrusb2: Device being rendered inoperable [ 999.992007][ T1977] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1000.000092][ T1977] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1000.004237][ T9576] Bluetooth: hci3: command tx timeout [ 1000.011150][ T1977] pvrusb2: Attached sub-driver cx25840 [ 1000.030567][ T1977] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1000.041158][ T1977] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1000.322177][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.357872][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.388290][ T989] bond0 (unregistering): Released all slaves [ 1000.632495][T13173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.647958][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.694424][T13173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.717253][T13173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.741814][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.783656][T13173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.084043][ T9576] Bluetooth: hci3: command tx timeout [ 1002.118987][T13389] team0: entered promiscuous mode [ 1002.130355][T13389] team_slave_0: entered promiscuous mode [ 1002.137215][T13389] team_slave_1: entered promiscuous mode [ 1002.143357][T13389] bridge3: entered promiscuous mode [ 1002.149426][T13389] bridge4: entered promiscuous mode [ 1002.234613][T13173] hsr_slave_0: entered promiscuous mode [ 1002.242212][T13173] hsr_slave_1: entered promiscuous mode [ 1002.250856][T13173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.259655][T13173] Cannot create hsr debugfs directory [ 1002.636292][ T989] hsr_slave_0: left promiscuous mode [ 1002.649623][ T989] hsr_slave_1: left promiscuous mode [ 1002.667098][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.677071][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.687076][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.696845][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.765897][ T989] veth1_macvtap: left promiscuous mode [ 1002.771512][ T989] veth0_macvtap: left promiscuous mode [ 1002.784108][ T989] veth1_vlan: left promiscuous mode [ 1002.789780][ T989] veth0_vlan: left promiscuous mode [ 1004.050253][ T989] team0 (unregistering): Port device team_slave_1 removed [ 1004.163925][ T9576] Bluetooth: hci3: command tx timeout [ 1004.187433][ T989] team0 (unregistering): Port device team_slave_0 removed [ 1005.373918][T13388] team0: left promiscuous mode [ 1005.409396][T13388] team_slave_0: left promiscuous mode [ 1005.424034][T13388] team_slave_1: left promiscuous mode [ 1005.429789][T13388] bridge3: left promiscuous mode [ 1005.437884][T13388] bridge4: left promiscuous mode [ 1005.752880][T13333] chnl_net:caif_netlink_parms(): no params data found [ 1006.766722][T13333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.788391][T13333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.815707][T13333] bridge_slave_0: entered allmulticast mode [ 1006.850701][T13333] bridge_slave_0: entered promiscuous mode [ 1007.165051][T13333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.204136][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.232622][T13333] bridge_slave_1: entered allmulticast mode [ 1007.267252][T13333] bridge_slave_1: entered promiscuous mode [ 1008.958209][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.013146][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.037039][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.056129][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.148150][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.176507][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.210344][T13333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.211204][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.253407][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.266424][ T5140] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1009.283687][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.293756][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.307284][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.320931][T13333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.323896][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.338067][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.361294][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.369692][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.393397][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.402738][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.420501][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.430542][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.450374][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.462245][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.480145][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.488161][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.513967][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.521887][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.535987][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.545794][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.553251][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.567577][ T5143] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1009.579307][ T5140] usb 4-1: config 0 has no interfaces? [ 1009.584946][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.606634][ T5140] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1009.642494][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.655557][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.664447][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.903368][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.911533][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1009.920950][ T5140] usb 4-1: config 0 descriptor?? [ 1009.926147][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1009.934303][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1010.345878][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1010.355541][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1010.919518][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1010.947861][ T5143] usb 3-1: config 0 has no interfaces? [ 1010.964351][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1010.972174][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1010.979891][ T5143] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1010.990631][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.001498][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1011.012403][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.021073][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.028972][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1011.044075][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.063505][ T5143] usb 3-1: config 0 descriptor?? [ 1011.069041][T11794] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1011.077235][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.096312][ T5140] usb 4-1: can't set config #0, error -71 [ 1011.115461][ T989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.131856][T11794] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1011.141815][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.156755][ T5140] usb 4-1: USB disconnect, device number 27 [ 1011.162913][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.194013][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.208309][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.220366][ T5142] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1011.247980][ T5142] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1011.612475][ T989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.706257][T13333] team0: Port device team_slave_0 added [ 1011.810359][ T989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.871915][T13333] team0: Port device team_slave_1 added [ 1012.060761][ T989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.259004][T13333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.321494][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.378821][T13333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.500119][T13173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1012.577476][T13333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.611064][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.646031][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'. [ 1012.710209][T13333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.025333][T13173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1013.090986][T13173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1013.199814][T13333] hsr_slave_0: entered promiscuous mode [ 1013.223400][T13333] hsr_slave_1: entered promiscuous mode [ 1013.273715][T13173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1014.011627][ T989] bridge_slave_1: left allmulticast mode [ 1014.037303][ T989] bridge_slave_1: left promiscuous mode [ 1014.043459][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.175448][ T989] bridge_slave_0: left allmulticast mode [ 1014.181260][ T989] bridge_slave_0: left promiscuous mode [ 1014.208831][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.304564][T12844] usb 3-1: USB disconnect, device number 26 [ 1014.463232][T13490] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1848'. [ 1014.507196][T13490] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1848'. [ 1015.228427][T13496] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1015.235031][T13496] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1015.243133][T13496] vhci_hcd vhci_hcd.0: Device attached [ 1015.387877][T13497] vhci_hcd: connection closed [ 1015.394344][ T12] vhci_hcd: stop threads [ 1015.403433][ T12] vhci_hcd: release socket [ 1015.442070][ T12] vhci_hcd: disconnect device [ 1015.569512][T13504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1849'. [ 1015.933733][ T5142] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1016.146940][ T5142] usb 5-1: No LPM exit latency info found, disabling LPM. [ 1016.180103][ T5142] usb 5-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.223748][ T5142] usb 5-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1016.283788][ T5142] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1016.316235][ T5142] usb 5-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 1016.335366][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.363813][ T5142] usb 5-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 1016.413716][ T5142] usb 5-1: SerialNumber: Ъ [ 1016.436126][T13507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1016.670985][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.699636][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.717661][ T989] bond0 (unregistering): Released all slaves [ 1016.884188][T13505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13505 comm=syz.4.1850 [ 1016.976418][ T5142] usbhid 5-1:1.0: can't add hid device: -71 [ 1016.988368][ T5142] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1017.055739][ T5142] usb 5-1: USB disconnect, device number 28 [ 1018.262789][ T989] hsr_slave_0: left promiscuous mode [ 1018.306898][ T989] hsr_slave_1: left promiscuous mode [ 1018.401203][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.439627][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.475520][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.517597][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.697871][ T989] veth1_macvtap: left promiscuous mode [ 1018.724764][ T989] veth0_macvtap: left promiscuous mode [ 1018.730910][ T989] veth1_vlan: left promiscuous mode [ 1018.749050][ T989] veth0_vlan: left promiscuous mode [ 1020.049038][ T989] team0 (unregistering): Port device team_slave_1 removed [ 1020.114451][ T989] team0 (unregistering): Port device team_slave_0 removed [ 1020.889635][T13568] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1021.318645][T13173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.602925][T13173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.901028][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1021.956256][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.963497][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.984309][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1021.991796][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.015948][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.037325][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.083740][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.091205][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.140909][T12844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.148256][T12844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.156768][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.176930][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.196493][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.204921][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1022.223648][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.231221][T13333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1022.248388][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.280447][T13333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1022.301982][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.323991][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.331461][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.346940][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.355943][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.368939][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.381439][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.415520][ T9] usb 5-1: config 0 has no interfaces? [ 1022.421179][ T9] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1022.442148][T13333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1022.443747][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.456543][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.494487][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.502125][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.505302][T13333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1022.511515][ T9] usb 5-1: config 0 descriptor?? [ 1022.583712][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.593065][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.628509][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.666110][ T8] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1022.757497][ T8] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1023.338972][ T989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.512026][ T989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.639786][T12539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1024.650531][T12539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1024.662365][T12539] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1024.682412][T12539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1024.691508][T12539] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1024.700737][T12539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1024.845541][ T989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.016087][ T989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.136568][T13606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1856'. [ 1025.743501][T13173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.066416][ T989] bridge_slave_1: left allmulticast mode [ 1026.089362][ T989] bridge_slave_1: left promiscuous mode [ 1026.105973][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.146876][ T989] bridge_slave_0: left allmulticast mode [ 1026.153022][ T989] bridge_slave_0: left promiscuous mode [ 1026.165815][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.226933][ T29] audit: type=1400 audit(1720205700.563:378): avc: denied { read write } for pid=13611 comm="syz.3.1860" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1026.276649][ T29] audit: type=1400 audit(1720205700.563:379): avc: denied { open } for pid=13611 comm="syz.3.1860" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1026.386871][T12844] usb 5-1: USB disconnect, device number 29 [ 1026.543811][ T928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1026.743673][ T928] usb 4-1: Using ep0 maxpacket: 8 [ 1026.753489][ T928] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1026.765708][ T928] usb 4-1: config 0 has no interface number 0 [ 1026.777788][ T928] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1026.796086][ T928] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1026.810710][ T928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.814643][ T9576] Bluetooth: hci0: command tx timeout [ 1026.831294][ T928] usb 4-1: config 0 descriptor?? [ 1026.851055][ T928] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1027.038939][ T989] team0: Port device bridge3 removed [ 1027.117500][ T989] team0: Port device bridge4 removed [ 1027.380784][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.401848][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.418932][ T989] bond0 (unregistering): Released all slaves [ 1027.445746][ T989] bond1 (unregistering): Released all slaves [ 1027.469702][ T989] bond2 (unregistering): Released all slaves [ 1027.751050][T13333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.783900][T13604] chnl_net:caif_netlink_parms(): no params data found [ 1028.717061][T13333] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.796055][ T989] hsr_slave_0: left promiscuous mode [ 1028.815054][ T989] hsr_slave_1: left promiscuous mode [ 1028.837013][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.866720][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.884734][ T9576] Bluetooth: hci0: command tx timeout [ 1028.984675][ T989] veth1_macvtap: left promiscuous mode [ 1028.990438][ T989] veth0_macvtap: left promiscuous mode [ 1029.014544][ T989] veth1_vlan: left promiscuous mode [ 1029.020166][ T989] veth0_vlan: left promiscuous mode [ 1029.190193][ T9] usb 4-1: USB disconnect, device number 28 [ 1029.225065][ T9] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 1030.749016][ T989] team0 (unregistering): Port device team_slave_1 removed [ 1030.820535][ T29] audit: type=1400 audit(1720205705.153:380): avc: denied { write } for pid=13664 comm="syz.3.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1030.850248][ T29] audit: type=1400 audit(1720205705.173:381): avc: denied { nlmsg_read } for pid=13664 comm="syz.3.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1030.877763][ T989] team0 (unregistering): Port device team_slave_0 removed [ 1030.979983][ T9576] Bluetooth: hci0: command tx timeout [ 1031.739594][T13633] team0: entered promiscuous mode [ 1031.751161][T13633] team_slave_0: entered promiscuous mode [ 1031.757892][T13633] team_slave_1: entered promiscuous mode [ 1031.866485][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.873843][T11794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.902684][T13604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.924131][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.931555][T13604] bridge_slave_0: entered allmulticast mode [ 1031.946381][T13604] bridge_slave_0: entered promiscuous mode [ 1031.960914][T13604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.969460][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.983931][T13604] bridge_slave_1: entered allmulticast mode [ 1032.006132][T13604] bridge_slave_1: entered promiscuous mode [ 1032.022618][T13633] team0: left promiscuous mode [ 1032.031315][T13633] team_slave_0: left promiscuous mode [ 1032.038258][T13633] team_slave_1: left promiscuous mode [ 1032.098658][T13173] veth0_vlan: entered promiscuous mode [ 1032.132578][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.139950][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.382887][T13604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.442979][T13173] veth1_vlan: entered promiscuous mode [ 1032.494624][T13604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.134012][ T9576] Bluetooth: hci0: command tx timeout [ 1033.907079][T13604] team0: Port device team_slave_0 added [ 1033.999234][T13604] team0: Port device team_slave_1 added [ 1034.198529][T13604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.212358][T13604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.274900][T13604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.296543][T13604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.310414][T13604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.339816][T13604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.423241][ T29] audit: type=1400 audit(1720205708.753:382): avc: denied { getopt } for pid=13703 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1034.606265][ T29] audit: type=1400 audit(1720205708.943:383): avc: denied { getopt } for pid=13703 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1034.628812][T13711] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1879'. [ 1034.671251][T13711] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1035.122173][T13604] hsr_slave_0: entered promiscuous mode [ 1035.160361][T13604] hsr_slave_1: entered promiscuous mode [ 1035.216011][T13604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.232290][T13604] Cannot create hsr debugfs directory [ 1035.339494][T13173] veth0_macvtap: entered promiscuous mode [ 1035.354940][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1035.516388][T13173] veth1_macvtap: entered promiscuous mode [ 1035.554268][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1035.562575][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1035.576326][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1035.584521][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1035.596697][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.613095][ T9] usb 4-1: config 0 descriptor?? [ 1035.628893][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1035.696056][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.711110][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.722273][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.733049][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.746989][T13173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.761276][T13333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.787297][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.800423][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.813911][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1035.823213][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.850503][ T9] usb 4-1: USB disconnect, device number 29 [ 1035.865591][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.882606][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.905319][ T8] usb 5-1: config 0 descriptor?? [ 1035.926596][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.950279][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.967524][T13173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.151354][T13173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.163333][T13173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.175402][T13173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.184752][T13173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.345086][ T8] hid (null): bogus close delimiter [ 1036.562436][ T8] usb 5-1: language id specifier not provided by device, defaulting to English [ 1036.620887][ T29] audit: type=1400 audit(1720205710.953:384): avc: denied { bind } for pid=13737 comm="syz.3.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1036.739439][T13333] veth0_vlan: entered promiscuous mode [ 1036.801824][ T2456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.840577][ T2456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.888622][T13333] veth1_vlan: entered promiscuous mode [ 1037.013035][ T8] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0019/input/input5 [ 1037.045294][ T2456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.063233][ T2456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.089351][ T29] audit: type=1400 audit(1720205711.423:385): avc: denied { read } for pid=4520 comm="acpid" name="mouse1" dev="devtmpfs" ino=2675 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.143483][ T29] audit: type=1400 audit(1720205711.423:386): avc: denied { open } for pid=4520 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2675 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.202331][ T29] audit: type=1400 audit(1720205711.513:387): avc: denied { ioctl } for pid=4520 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2675 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.208243][ T8] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0019/input/input6 [ 1037.329379][T13333] veth0_macvtap: entered promiscuous mode [ 1037.356075][ T8] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0019/input/input7 [ 1037.418102][T13333] veth1_macvtap: entered promiscuous mode [ 1037.462887][ T8] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0019/input/input8 [ 1037.562579][T13604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1037.613143][ T8] uclogic 0003:256C:006D.0019: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1037.660136][T13604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1037.715608][ T8] usb 5-1: USB disconnect, device number 30 [ 1037.742976][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.810386][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.851602][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.888626][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.913932][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.944450][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.966517][T13333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.985595][T13604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1038.169379][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.210660][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.241354][ T29] audit: type=1400 audit(1720205712.573:388): avc: denied { append } for pid=13756 comm="syz.4.1888" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1038.268807][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.282534][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.294463][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.300725][ T5141] kernel write not supported for file /input/event0 (pid: 5141 comm: kworker/0:5) [ 1038.306633][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.355743][T13333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.377771][T13604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1038.439898][T13333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.512864][T13333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.553615][T13333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.603743][T13333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.625177][T12539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1038.634966][T13766] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13766 comm=syz.4.1890 [ 1038.652437][T12539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1038.669516][ T29] audit: type=1400 audit(1720205713.003:389): avc: denied { read } for pid=13765 comm="syz.4.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1038.710002][T12539] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1038.726840][T12539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1038.738100][T12539] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1038.746077][T12539] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1038.800375][T11794] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1039.010166][T11794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.032325][T11794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.062346][T11794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1039.116910][T11794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1039.177887][T11794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.255168][T11794] usb 4-1: config 0 descriptor?? [ 1039.461337][ T2488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.774109][T11794] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1039.806709][T11794] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 1039.880238][ T2488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.883136][T11794] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1040.238718][ T2488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.256608][ T29] audit: type=1400 audit(1720205714.573:390): avc: denied { ioctl } for pid=13781 comm="syz.4.1892" path="/dev/input/event0" dev="devtmpfs" ino=834 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1040.311817][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.342319][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.432803][ T2488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.803980][ T9576] Bluetooth: hci1: command tx timeout [ 1040.889261][T13604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.923185][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.951906][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.103398][T13604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.345816][T13762] usb 4-1: string descriptor 0 read error: -71 [ 1041.926681][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.934321][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.176809][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.184220][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.430372][ T2488] bridge_slave_1: left allmulticast mode [ 1042.466183][ T2488] bridge_slave_1: left promiscuous mode [ 1042.472177][ T2488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.502213][ T2488] bridge_slave_0: left allmulticast mode [ 1042.513812][ T2488] bridge_slave_0: left promiscuous mode [ 1042.519793][ T2488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.746599][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 1042.883716][ T9576] Bluetooth: hci1: command tx timeout [ 1042.942838][T12844] usb 4-1: USB disconnect, device number 30 [ 1043.851782][ T2488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.878028][ T2488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.908296][ T2488] bond0 (unregistering): Released all slaves [ 1043.987832][T12844] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1044.000435][T13763] chnl_net:caif_netlink_parms(): no params data found [ 1044.938621][ T29] audit: type=1400 audit(1720205719.263:391): avc: denied { read } for pid=13839 comm="syz.3.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1044.950253][T12844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 1044.964125][ T9576] Bluetooth: hci1: command tx timeout [ 1044.990753][T12844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1045.043291][T12844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1045.139051][T12844] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1045.167104][T12844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.193710][T12844] usb 5-1: config 0 descriptor?? [ 1045.199937][T13832] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1045.457477][T13849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13849 comm=syz.3.1910 [ 1045.595209][ T2488] hsr_slave_0: left promiscuous mode [ 1045.612844][ T2488] hsr_slave_1: left promiscuous mode [ 1045.647868][ T2488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.667793][T12844] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1045.683847][ T2488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.691238][T12844] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1045.706273][T12844] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1045.706709][ T2488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.716248][T12844] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1045.731065][T12844] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1045.738709][T12844] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1045.752895][ T2488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.773740][T12844] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 1045.797240][T12844] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1045.892202][ T2488] veth1_macvtap: left promiscuous mode [ 1045.905431][ T2488] veth0_macvtap: left promiscuous mode [ 1045.924038][ T2488] veth1_vlan: left promiscuous mode [ 1045.950664][ T2488] veth0_vlan: left promiscuous mode [ 1045.959781][ T5141] usb 5-1: USB disconnect, device number 31 [ 1047.051467][ T9576] Bluetooth: hci1: command tx timeout [ 1047.224067][ T29] audit: type=1400 audit(1720205721.503:392): avc: denied { ioctl } for pid=13867 comm="syz.3.1917" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1047.990135][ T2488] team0 (unregistering): Port device team_slave_1 removed [ 1048.109464][T13875] Driver unsupported XDP return value 0 on prog (id 545) dev N/A, expect packet loss! [ 1048.123228][ T2488] team0 (unregistering): Port device team_slave_0 removed [ 1048.232325][T13877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13877 comm=syz.3.1920 [ 1049.135350][T13858] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1049.940339][T13898] virtio-fs: tag <(null)> not found [ 1050.673752][ T29] audit: type=1400 audit(1720205724.223:393): avc: denied { setopt } for pid=13887 comm="syz.3.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1050.715636][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.723004][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.774006][T13763] bridge_slave_0: entered allmulticast mode [ 1050.833845][T13763] bridge_slave_0: entered promiscuous mode [ 1050.901484][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.908984][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.929254][ T29] audit: type=1400 audit(1720205725.263:394): avc: denied { setopt } for pid=13899 comm="syz.4.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1050.934213][T13763] bridge_slave_1: entered allmulticast mode [ 1051.017713][T13763] bridge_slave_1: entered promiscuous mode [ 1051.396964][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.437286][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.341841][T13763] team0: Port device team_slave_0 added [ 1052.399729][T13763] team0: Port device team_slave_1 added [ 1053.679194][ T29] audit: type=1400 audit(1720205727.563:395): avc: denied { read } for pid=13935 comm="syz.4.1934" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1053.808817][ T29] audit: type=1400 audit(1720205727.563:396): avc: denied { open } for pid=13935 comm="syz.4.1934" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1053.935359][ T29] audit: type=1326 audit(1720205728.123:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13920 comm="syz.0.1931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3903f75bd9 code=0x0 [ 1054.005740][T13937] veth0_to_hsr: entered promiscuous mode [ 1054.011681][T13937] vlan2: entered promiscuous mode [ 1054.037232][T13937] veth0_to_hsr: left promiscuous mode [ 1054.104805][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.111834][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.231978][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.338966][ T29] audit: type=1400 audit(1720205728.673:398): avc: denied { write } for pid=13943 comm="syz.4.1935" name="task" dev="proc" ino=55145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1054.345626][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.398990][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.441580][ T29] audit: type=1400 audit(1720205728.723:399): avc: denied { add_name } for pid=13943 comm="syz.4.1935" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1054.476507][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.492421][ T29] audit: type=1400 audit(1720205728.723:400): avc: denied { create } for pid=13943 comm="syz.4.1935" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 1054.908809][ T29] audit: type=1400 audit(1720205728.723:401): avc: denied { associate } for pid=13943 comm="syz.4.1935" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1054.933271][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1936'. [ 1056.785927][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.790761][T13965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13965 comm=syz.4.1940 [ 1056.803795][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.819528][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.828179][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.843718][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.883924][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.897811][T13763] hsr_slave_0: entered promiscuous mode [ 1056.915310][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.924072][T13763] hsr_slave_1: entered promiscuous mode [ 1056.929999][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.938617][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.951253][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.958968][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1056.974845][T13763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.993163][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.008534][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.015025][T13763] Cannot create hsr debugfs directory [ 1057.046618][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.063785][ T5140] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1057.092112][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.112899][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.121808][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.135160][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.143429][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.193790][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.229431][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.239899][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.257136][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.269268][ T5140] usb 1-1: config 0 has no interfaces? [ 1057.278188][ T5140] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1057.293349][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.307256][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.323002][ T5140] usb 1-1: config 0 descriptor?? [ 1057.350266][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.366070][T13604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.390863][T11794] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1057.416862][T11794] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1057.463713][ T29] audit: type=1400 audit(1720205731.793:402): avc: denied { bind } for pid=13971 comm="syz.3.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1057.514995][T13972] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 1057.551783][ T29] audit: type=1400 audit(1720205731.823:403): avc: denied { setopt } for pid=13971 comm="syz.3.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1057.981418][T13972] team0: Failed to send options change via netlink (err -105) [ 1058.000586][T13972] team0: Port device netdevsim0 added [ 1058.077696][ T5140] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1058.133188][T13976] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 1058.238321][T13976] team0: Failed to send options change via netlink (err -105) [ 1058.278587][T13976] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1058.345203][T13976] team0: Port device netdevsim0 removed [ 1059.199566][T13976] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1059.334052][T11794] usb 1-1: USB disconnect, device number 29 [ 1059.391893][T13984] veth0_to_hsr: entered promiscuous mode [ 1059.398007][T13984] vlan2: entered promiscuous mode [ 1059.408933][T13984] veth0_to_hsr: left promiscuous mode [ 1059.714156][ C1] hrtimer: interrupt took 29227152 ns [ 1072.507582][T12539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1072.713717][T12539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1072.983705][T12539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1073.223334][T14014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1073.239337][T14014] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1073.249256][T14014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1073.260626][T14014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1073.270965][T14014] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1073.282001][T14014] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1073.290396][T14014] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1073.302276][T14014] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1073.312158][T14014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1073.326970][T14014] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1073.336637][T14014] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1073.365795][T14014] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1073.397724][T14014] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1073.407032][T14014] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1073.415331][T14014] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1103.343802][T14016] Bluetooth: hci2: command tx timeout [ 1103.350473][T14016] Bluetooth: hci7: command tx timeout [ 1103.357113][T14016] Bluetooth: hci6: command tx timeout [ 1104.264594][T14016] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1104.607724][T14016] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1104.656786][T14017] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1104.668612][T12539] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1104.690162][T14017] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1104.709937][T12539] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1104.718871][T14017] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1104.730676][T14017] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1104.738645][T14017] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1104.757974][T12539] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1104.771239][T14017] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1104.781254][ T9576] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1192.873644][T14017] Bluetooth: hci6: command tx timeout [ 1192.879134][T14017] Bluetooth: hci7: command tx timeout [ 1192.886971][T14017] Bluetooth: hci2: command tx timeout [ 1192.892562][T14017] Bluetooth: hci8: command tx timeout [ 1192.900038][T14017] Bluetooth: hci9: command tx timeout [ 1297.793447][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1297.800491][ C0] rcu: 1-...!: (1 GPs behind) idle=59e4/1/0x4000000000000000 softirq=60844/60851 fqs=11 [ 1297.812135][ C0] rcu: hardirqs softirqs csw/system [ 1297.818578][ C0] rcu: number: 4 50 10 [ 1297.825020][ C0] rcu: cputime: 0 7 0 ==> 105100(ms) [ 1297.832943][ C0] rcu: (detected by 0, t=10505 jiffies, g=98665, q=758 ncpus=2) [ 1297.840707][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1297.845952][ C1] NMI backtrace for cpu 1 [ 1297.845974][ C1] CPU: 1 PID: 13994 Comm: syz.4.1948 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1297.846005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1297.846021][ C1] RIP: 0010:rcu_is_watching+0x79/0xc0 [ 1297.846059][ C1] Code: 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 <65> ff 0d b8 a1 8f 7e 74 07 5b 5d c3 cc cc cc cc e8 02 6a 8c ff 5b [ 1297.846085][ C1] RSP: 0018:ffffc90000a184e0 EFLAGS: 00000002 [ 1297.846107][ C1] RAX: 0000000000000001 RBX: ffff8880b9337ee8 RCX: ffffffff817b013e [ 1297.846125][ C1] RDX: 0000000000000000 RSI: ffffffff8b8ff600 RDI: ffffffff8d4ceb48 [ 1297.846142][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1297.846158][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880b932cac0 [ 1297.846175][ C1] R13: ffff88801cab0340 R14: ffff8880b932c9c0 R15: ffffffff88f93790 [ 1297.846193][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1297.846219][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1297.846237][ C1] CR2: 00007f126bf76440 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 1297.846255][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1297.846271][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1297.846287][ C1] Call Trace: [ 1297.846298][ C1] [ 1297.846307][ C1] ? show_regs+0x8c/0xa0 [ 1297.846347][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1297.846387][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1297.846423][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1297.846463][ C1] ? rcu_is_watching+0x79/0xc0 [ 1297.846487][ C1] ? default_do_nmi+0x6a/0x160 [ 1297.846512][ C1] ? exc_nmi+0x170/0x1e0 [ 1297.846534][ C1] ? end_repeat_nmi+0xf/0x53 [ 1297.846558][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1297.846586][ C1] ? __hrtimer_run_queues+0x5fe/0xcc0 [ 1297.846618][ C1] ? rcu_is_watching+0x79/0xc0 [ 1297.846642][ C1] ? rcu_is_watching+0x79/0xc0 [ 1297.846666][ C1] ? rcu_is_watching+0x79/0xc0 [ 1297.846690][ C1] [ 1297.846697][ C1] [ 1297.846705][ C1] __hrtimer_run_queues+0x9ea/0xcc0 [ 1297.846739][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1297.846771][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 1297.846814][ C1] hrtimer_interrupt+0x31b/0x800 [ 1297.846850][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1297.846893][ C1] sysvec_apic_timer_interrupt+0x43/0xb0 [ 1297.846925][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1297.846969][ C1] RIP: 0010:unwind_next_frame+0x5e4/0x23a0 [ 1297.847013][ C1] Code: 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 71 18 00 00 45 0f b6 74 24 05 <31> ff 41 83 e6 07 44 89 f6 e8 3e 02 51 00 45 84 f6 0f 84 ec fd ff [ 1297.847038][ C1] RSP: 0018:ffffc90000a18780 EFLAGS: 00000246 [ 1297.847068][ C1] RAX: 0000000000000000 RBX: ffffc90000a18800 RCX: ffffffff813ccc24 [ 1297.847086][ C1] RDX: 0000000000000005 RSI: ffffffff813cdcb2 RDI: 0000000000000006 [ 1297.847103][ C1] RBP: 0000000000000002 R08: 0000000000000006 R09: ffffffff845ffb64 [ 1297.847120][ C1] R10: ffffffff845ff81c R11: 0000000000000000 R12: ffffffff90a98900 [ 1297.847138][ C1] R13: ffffffff90a98905 R14: 0000000000000002 R15: ffffc90000a18835 [ 1297.847157][ C1] ? bio_put+0xc/0x5b0 [ 1297.847195][ C1] ? bio_put+0x354/0x5b0 [ 1297.847231][ C1] ? __orc_find+0xc4/0x130 [ 1297.847268][ C1] ? unwind_next_frame+0x5b2/0x23a0 [ 1297.847312][ C1] ? bio_put+0x355/0x5b0 [ 1297.847349][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1297.847387][ C1] arch_stack_walk+0x100/0x170 [ 1297.847416][ C1] ? bio_put+0x355/0x5b0 [ 1297.847453][ C1] ? mempool_free+0xe7/0x3b0 [ 1297.847479][ C1] stack_trace_save+0x95/0xd0 [ 1297.847514][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1297.847552][ C1] kasan_save_stack+0x33/0x60 [ 1297.847590][ C1] ? kasan_save_stack+0x33/0x60 [ 1297.847626][ C1] ? kasan_save_track+0x14/0x30 [ 1297.847663][ C1] ? kasan_save_free_info+0x3b/0x60 [ 1297.847694][ C1] ? poison_slab_object+0xf7/0x160 [ 1297.847730][ C1] ? __kasan_slab_free+0x32/0x50 [ 1297.847768][ C1] ? kmem_cache_free+0x12f/0x3a0 [ 1297.847807][ C1] ? mempool_free+0xe7/0x3b0 [ 1297.847831][ C1] ? bvec_free+0xfb/0x120 [ 1297.847867][ C1] ? bio_free+0xaa/0x130 [ 1297.847903][ C1] ? bio_put+0x355/0x5b0 [ 1297.847951][ C1] kasan_save_track+0x14/0x30 [ 1297.847988][ C1] kasan_save_free_info+0x3b/0x60 [ 1297.848020][ C1] poison_slab_object+0xf7/0x160 [ 1297.848063][ C1] __kasan_slab_free+0x32/0x50 [ 1297.848103][ C1] kmem_cache_free+0x12f/0x3a0 [ 1297.848142][ C1] ? mempool_free+0xe7/0x3b0 [ 1297.848168][ C1] ? __pfx_mempool_free_slab+0x10/0x10 [ 1297.848195][ C1] mempool_free+0xe7/0x3b0 [ 1297.848222][ C1] bvec_free+0xfb/0x120 [ 1297.848261][ C1] bio_free+0xaa/0x130 [ 1297.848298][ C1] ? ext4_put_io_end_defer+0x6a/0x460 [ 1297.848326][ C1] bio_put+0x355/0x5b0 [ 1297.848364][ C1] ext4_end_bio+0x2d7/0x590 [ 1297.848390][ C1] ? bio_uninit+0x1b0/0x410 [ 1297.848425][ C1] ? __pfx_ext4_end_bio+0x10/0x10 [ 1297.848451][ C1] bio_endio+0x644/0x760 [ 1297.848490][ C1] blk_update_request+0x704/0x1850 [ 1297.848535][ C1] scsi_end_request+0x7b/0x9b0 [ 1297.848568][ C1] scsi_io_completion+0x17c/0x14c0 [ 1297.848603][ C1] ? __pfx_scsi_io_completion+0x10/0x10 [ 1297.848635][ C1] ? scsi_device_unbusy+0x29a/0x390 [ 1297.848667][ C1] ? __pfx_sd_done+0x10/0x10 [ 1297.848704][ C1] scsi_complete+0x124/0x250 [ 1297.848737][ C1] blk_complete_reqs+0xae/0xf0 [ 1297.848773][ C1] handle_softirqs+0x216/0x8f0 [ 1297.848806][ C1] ? handle_edge_irq+0x40f/0xd10 [ 1297.848847][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1297.848879][ C1] irq_exit_rcu+0xbb/0x120 [ 1297.848909][ C1] common_interrupt+0xb0/0xd0 [ 1297.848951][ C1] [ 1297.848958][ C1] [ 1297.848967][ C1] asm_common_interrupt+0x26/0x40 [ 1297.849008][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1297.849039][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 c7 80 f6 48 89 df e8 ce 44 81 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 86 72 f6 65 8b 05 b6 d3 18 75 85 c0 74 16 5b [ 1297.849069][ C1] RSP: 0018:ffffc900033c79e8 EFLAGS: 00000246 [ 1297.849089][ C1] RAX: 0000000000000002 RBX: ffffffff94d52858 RCX: 1ffffffff1fc7f49 [ 1297.849106][ C1] RDX: 0000000000000000 RSI: ffffffff8b2caf00 RDI: ffffffff8b8ff680 [ 1297.849124][ C1] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000001 [ 1297.849141][ C1] R10: ffffffff8fe43cd7 R11: ffffffff8b2e3680 R12: 0000000000000001 [ 1297.849158][ C1] R13: ffff888029de1c40 R14: 1ffff92000678f44 R15: ffffffff94d52850 [ 1297.849183][ C1] debug_object_activate+0x34d/0x540 [ 1297.849225][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1297.849257][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1297.849300][ C1] ? __pfx_delayed_free_vfsmnt+0x10/0x10 [ 1297.849327][ C1] ? __call_rcu_common.constprop.0+0x2c/0x790 [ 1297.849367][ C1] __call_rcu_common.constprop.0+0x2c/0x790 [ 1297.849405][ C1] ? cleanup_mnt+0x266/0x450 [ 1297.849433][ C1] task_work_run+0x14e/0x250 [ 1297.849458][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1297.849481][ C1] ? switch_task_namespaces+0xe0/0x110 [ 1297.849515][ C1] do_exit+0xa9b/0x2ba0 [ 1297.849553][ C1] ? get_signal+0x8f2/0x2710 [ 1297.849584][ C1] ? __pfx_do_exit+0x10/0x10 [ 1297.849620][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1297.849647][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1297.849676][ C1] do_group_exit+0xd3/0x2a0 [ 1297.849715][ C1] get_signal+0x2616/0x2710 [ 1297.849746][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1297.849782][ C1] ? __pfx_unix_dgram_connect+0x10/0x10 [ 1297.849818][ C1] ? __pfx_get_signal+0x10/0x10 [ 1297.849848][ C1] ? __pfx_do_futex+0x10/0x10 [ 1297.849883][ C1] ? fput+0x32/0x390 [ 1297.849907][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 1297.849941][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1297.849979][ C1] syscall_exit_to_user_mode+0x14a/0x2a0 [ 1297.850014][ C1] do_syscall_64+0xda/0x250 [ 1297.850050][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.850098][ C1] RIP: 0033:0x7f7593575bd9 [ 1297.850122][ C1] Code: Unable to access opcode bytes at 0x7f7593575baf. [ 1297.850133][ C1] RSP: 002b:00007f759438b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1297.850156][ C1] RAX: 000000000000000b RBX: 00007f7593703f60 RCX: 00007f7593575bd9 [ 1297.850174][ C1] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000004 [ 1297.850191][ C1] RBP: 00007f75935e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1297.850208][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.850224][ C1] R13: 000000000000000b R14: 00007f7593703f60 R15: 00007ffe38651678 [ 1297.850246][ C1] [ 1297.850946][ C0] rcu: rcu_preempt kthread starved for 10450 jiffies! g98665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1298.710719][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1298.720724][ C0] rcu: RCU grace-period kthread stack dump: [ 1298.726641][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1298.738444][ C0] Call Trace: [ 1298.741756][ C0] [ 1298.744720][ C0] __schedule+0xf15/0x5d00 [ 1298.749216][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1298.754488][ C0] ? __pfx___schedule+0x10/0x10 [ 1298.759388][ C0] ? schedule+0x298/0x350 [ 1298.763769][ C0] ? __pfx_lock_release+0x10/0x10 [ 1298.768857][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1298.774554][ C0] ? lock_acquire+0x1b1/0x560 [ 1298.779302][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 1298.784839][ C0] schedule+0xe7/0x350 [ 1298.788956][ C0] schedule_timeout+0x136/0x2a0 [ 1298.793877][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1298.799311][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1298.804659][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1298.810513][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 1298.816040][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1298.820864][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1298.826381][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1298.831631][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1298.837486][ C0] rcu_gp_kthread+0x271/0x380 [ 1298.842271][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1298.847526][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1298.852778][ C0] ? __kthread_parkme+0x148/0x220 [ 1298.857853][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1298.863110][ C0] kthread+0x2c1/0x3a0 [ 1298.867231][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1298.872482][ C0] ? __pfx_kthread+0x10/0x10 [ 1298.877128][ C0] ret_from_fork+0x45/0x80 [ 1298.881613][ C0] ? __pfx_kthread+0x10/0x10 [ 1298.886258][ C0] ret_from_fork_asm+0x1a/0x30 [ 1298.891092][ C0] [ 1298.894255][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1298.900603][ C0] CPU: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 1298.910711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1298.921065][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1298.927632][ C0] RIP: 0010:smp_call_function_many_cond+0x4e7/0x1420 [ 1298.934357][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 4b 38 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 [ 1298.954016][ C0] RSP: 0018:ffffc90000107908 EFLAGS: 00000293 [ 1298.960175][ C0] RAX: 0000000000000000 RBX: ffff8880b9344900 RCX: ffffffff8181ac6b [ 1298.968196][ C0] RDX: ffff8880172f3c00 RSI: ffffffff8181ac45 RDI: 0000000000000005 [ 1298.976305][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1298.984319][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed1017268921 [ 1298.992329][ C0] R13: 0000000000000001 R14: ffff8880b9344908 R15: ffff8880b923fd80 [ 1299.000339][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1299.009313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1299.015948][ C0] CR2: 00007f3791503ff8 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 1299.023965][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1299.031986][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1299.039998][ C0] Call Trace: [ 1299.043310][ C0] [ 1299.046182][ C0] ? show_regs+0x8c/0xa0 [ 1299.050594][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1299.056999][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1299.062336][ C0] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 1299.067865][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1299.073559][ C0] ? __asan_memcpy+0x3c/0x60 [ 1299.078273][ C0] ? update_process_times+0x175/0x220 [ 1299.083689][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1299.089453][ C0] ? update_wall_time+0x1c/0x40 [ 1299.094360][ C0] ? tick_nohz_handler+0x376/0x530 [ 1299.099649][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1299.105163][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 1299.110586][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1299.116355][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 1299.122580][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 1299.127764][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1299.133992][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 1299.139851][ C0] [ 1299.142813][ C0] [ 1299.145774][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1299.152003][ C0] ? smp_call_function_many_cond+0x50b/0x1420 [ 1299.158123][ C0] ? smp_call_function_many_cond+0x4e5/0x1420 [ 1299.164239][ C0] ? smp_call_function_many_cond+0x4e7/0x1420 [ 1299.170369][ C0] ? smp_call_function_many_cond+0x4e5/0x1420 [ 1299.176574][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1299.182952][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1299.188734][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1299.193805][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1299.198976][ C0] text_poke_bp_batch+0x659/0x760 [ 1299.204065][ C0] ? kmem_cache_alloc_bulk_noprof+0x198/0x930 [ 1299.210180][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1299.215772][ C0] ? __jump_label_patch+0x1db/0x400 [ 1299.221024][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1299.227320][ C0] text_poke_finish+0x30/0x40 [ 1299.232045][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1299.238084][ C0] jump_label_update+0x1d7/0x400 [ 1299.243077][ C0] static_key_disable_cpuslocked+0x154/0x1c0 [ 1299.249145][ C0] static_key_disable+0x1a/0x20 [ 1299.254053][ C0] toggle_allocation_gate+0x143/0x250 [ 1299.259486][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1299.265463][ C0] process_one_work+0x9c5/0x1b40 [ 1299.270550][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1299.275642][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1299.281236][ C0] ? assign_work+0x1a0/0x250 [ 1299.285889][ C0] worker_thread+0x6c8/0xf30 [ 1299.290546][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1299.295702][ C0] kthread+0x2c1/0x3a0 [ 1299.299823][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1299.305065][ C0] ? __pfx_kthread+0x10/0x10 [ 1299.309707][ C0] ret_from_fork+0x45/0x80 [ 1299.314183][ C0] ? __pfx_kthread+0x10/0x10 [ 1299.318830][ C0] ret_from_fork_asm+0x1a/0x30 [ 1299.323657][ C0]