last executing test programs: 1m39.618941103s ago: executing program 4 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000040)=""/44, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0xfffffffc, 0x539, {0xffffffffffffffff}, {r4}, 0x9406, 0xecc9}) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) 1m20.893143145s ago: executing program 4 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000040)=""/44, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0xfffffffc, 0x539, {0xffffffffffffffff}, {r4}, 0x9406, 0xecc9}) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) 1m2.599647503s ago: executing program 4 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000040)=""/44, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0xfffffffc, 0x539, {0xffffffffffffffff}, {r4}, 0x9406, 0xecc9}) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) 44.465492158s ago: executing program 4 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000040)=""/44, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0xfffffffc, 0x539, {0xffffffffffffffff}, {r4}, 0x9406, 0xecc9}) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) 26.525458914s ago: executing program 4 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000040)=""/44, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0xfffffffc, 0x539, {0xffffffffffffffff}, {r4}, 0x9406, 0xecc9}) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) 9.72311165s ago: executing program 4 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000040)=""/44, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0xfffffffc, 0x539, {0xffffffffffffffff}, {r4}, 0x9406, 0xecc9}) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) 7.866629276s ago: executing program 2 (id=1057): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200040, 0x200000, 0x2, 0x0, 0x0, 0x7}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x18, 0x3b, 0x92, 0x20, 0x13b1, 0x42, 0x5816, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0xa, 0xc0, 0x5, [{{0x9, 0x4, 0x4f, 0x40, 0x1, 0xef, 0xf0, 0x4c, 0x4, [], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x62, 0x3, 0x8}}]}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0x0, r1, {0x4223}}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "0100"}]}}, 0x0}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r7 = add_key$user(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x1}, &(0x7f00000027c0)="c639c4efbf5ecb5eddfb594be2b3978bcc9dc8fe023153c2ed075437f760cd03673f2379ad02010fe69fa6cf11c8157cfabfeedb703e6940614b7bea4ab581", 0x3f, 0xffffffffffffffff) keyctl$read(0xb, r7, &(0x7f0000002e40)=""/72, 0x48) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000180)='cifs.idmap\x00', 0x0) r8 = dup(r5) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) write$vga_arbiter(r8, &(0x7f0000002940)=ANY=[@ANYRES64=r1, @ANYBLOB="3c6e918d55d6d1de75e68eafbd047553e2426f5a2b59363605525fd7b6a263417e997079a60c0eb59f316852b4dcd8a5632314af54feaeb962ede5c4f045f001fdd80949628ebc8bc0c50feeb5d244ee8fd65912b214120e71f236967e1542a93d725fc699600d13092e2a435e44b2bddda0d628c0", @ANYRES16=r2], 0x8) r10 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) write$vga_arbiter(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock mem'], 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) 6.810732454s ago: executing program 1 (id=1062): openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x1000}, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x295, &(0x7f00000004c0)={0x0, 0x8000f33b, 0x10100, 0x2, 0x15f}, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x8, 0x1000000, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.684676918s ago: executing program 1 (id=1063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x1c, 0x48, 0xb16, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x20}}, 0x1c}, 0x1, 0x0, 0x0, 0x48400}, 0x8000) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x840) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x300, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x8, {0x2, 0x4e20, @private=0xa010100}, 'ip_vti0\x00'}) 5.528311546s ago: executing program 1 (id=1065): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x2, 0x50565559, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x10) 5.0968263s ago: executing program 1 (id=1067): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {0x0, 0x4c0}, {}, {0xfffffffd, 0xfffffffc}, {}, {0x0, 0x1000000}]}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bind$can_raw(r5, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) recvmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2020, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095000000000000009f8af2405caa2b46ea87fdeaad90d2908962e9d5e6317b50e68053f90f2ae075afc683c2f200bbc9e4"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 5.078060275s ago: executing program 2 (id=1068): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000800)={0x14, &(0x7f0000000680)={0x0, 0x2, 0x4c, {0x4c, 0x10, "b6a086de5a4247286c33e8978b1959bf765b8cd8ee56d0a0503bf5e4234b07c0eee930ac467b2fef9fd93892184c8607aae5ced361d0da66405dfb9f89d734a5bf846cc58cdeaf2e11d4"}}, &(0x7f0000000700)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "445c06175da6541ede0c0d9e6972b86aac7cbf051e56dd87fd81bdae35e627b9513be3f8e9f29124073b9e532dbcee5a5ff938fc7393bc86cf8e73a62e75d99cc09c8780a90e19b10caf2714ae78504b7e604d42f67c4d3150cd13b73687491f5a951b9d518428eeb513c4f555eb748aee0966a19ae00c97d988068c1910dd5ac395777410fc109b1ae7361921c3d1f1200a1ae26ae031d11e4bc19fef88d92f7db003cdf30ee48979cd73506a3417e58e43435300ee3a5ca558f380b8c462a1"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x20, 0x9, 0xed, "87be15afcb27949720506f49e1b8cfda3f91cb68adcb19f36e8b6fe057bd59092c62c04661e81eca9d4776bce1a998df2b55876b0c1c1d6e8cde352f12686ab6c9df758f7b973ce84045b899ec51b11c07af48f3bc7054cbf6cbfd6320670354e859df073a19bc6cdc7ba14734780b3006d35e97fb0b813af1a44403fe7341909f640f406b5209248fe871b23c777a304d47554f61d2e9c4aed1c67c68d4efab3d2d592a25621cc486b743f470cea976c6fcf2e6a6ad6ad2bd268d2402c376515365ae4a27a641ea1955963ef0f96c0d67acf1f13f31f87b79b9d6a65b7efa9c6061320d62c9351377f9c94d36"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x81, 0x1, "be"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "f40bbd"}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, 'g'}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "13fc49"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "091053"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="3dd8d8a8eb19e5965e122bc0b9f39acfff964f2c6ffba744881611478b07744747b7f54e4cf4821dd7a7829b8b3c489e45c4db6b051f2cbc3828eb6e02b4f3014fbdc953cebbd67b6bfee8f04547f64f6ebcaf55697de28d2ffcf2f2e8faa7e7f125d42edb1d2d0c0bb6c4b98a5cc986d4c2db022c83088a889780bac4e271b2ccc3d3566fced5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c00), 0x5a000, 0x0) 4.905803812s ago: executing program 1 (id=1069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x141341) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000140)={0x1}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fe88000000000000000000000000000100000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xd8}}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="bca4951fb123"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e944f5a733b8f2b51dc5c9dd8b5a9c25"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x44804) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x141341) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) (async) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000140)={0x1}) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fe88000000000000000000000000000100000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xd8}}, 0x20008004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="bca4951fb123"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e944f5a733b8f2b51dc5c9dd8b5a9c25"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x44804) (async) 4.683605348s ago: executing program 0 (id=1070): madvise(&(0x7f0000112000/0xc00000)=nil, 0xc00000, 0xb) mremap(&(0x7f000070b000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000728000/0x1000)=nil) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) madvise(&(0x7f0000112000/0xc00000)=nil, 0xc00000, 0xb) (async) mremap(&(0x7f000070b000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000728000/0x1000)=nil) (async) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) 4.524512654s ago: executing program 0 (id=1071): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x0, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x2200]}}, 0x5c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000900)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r9, 0x403, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 3.563556916s ago: executing program 0 (id=1074): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff486800090400"], 0x0) 3.490086837s ago: executing program 3 (id=1075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@getlink={0x104, 0x12, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x100, 0x20104}, [@IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "45b99a2c88cb9bc5cc395a25edc627cd96ed1ee43fc0dc4bc002"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_VF_PORTS={0x98, 0x18, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x1e}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x12, 0x2, 'ghash-clmulni\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0332b687d61472008700"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f182df158620c3ce947f6adfb2e05a7f"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffd}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "66e1de96906935a0bc4e5792e92d5514"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5a6c67a7bfb874d362349db60f71ece9"}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x79173}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x104}, 0x1, 0x0, 0x0, 0x48400}, 0x8000) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x840) 3.411164512s ago: executing program 3 (id=1076): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x1}}]}, 0x30}}, 0x44080) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x140}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r10, 0x24, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r12, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) ioperm(0x0, 0x9, 0x7) 3.165466265s ago: executing program 1 (id=1077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)={0x14c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x102, 0xa8, @random="2d71e2e1638572db719f10619e0e2f712facb2344d491646f09ce4f251c20a324780bc589fb3264382a3a68464fb2055c7fb3be493de405f15ae51b9537ffaf787b976d9c5eed52b6c267f19df5c5872f117ce6418447efe79008d0a7a6370a9b0139b68d619d46af97c5317aed71124609de022e70402be16e1a823f61e992cc6e7d14a087ae4383e4947cdddbd1001da5ce68aa57779e54e006b61fab592747ee29dd5e7b305dbd9b08f022593cdaad26f8db0efff698a428ec0b724549d486fe34ae8f065ca57e99010a808a554e12f6b5d80a20248775e17c8b2633e2f3800b85e44480aa9f1fe2d72dd6d6ffa65c857fb90f2b2710dd36172fab68f"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48801}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000]}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40010020, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/30, 0x1e}, {&(0x7f00000009c0)=""/100, 0x64}], 0x2, &(0x7f0000000a40)=""/152, 0x98}, 0x40000042) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@fallback, r6, 0xf, 0xc, 0x0, @void, @value}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r10, 0x80045017, &(0x7f0000000040)) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "f4"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"/312], 0x138}}, 0x0) 2.344664559s ago: executing program 3 (id=1078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x8b4, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x43}}}}, [@NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @random="2288c5a4adc9", {0xf, 0x7}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x1, 0x0, 0x3, 0x1}}, 0x1, @random=0x8, 0x15a0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0x6c, {0x7f, 0x7, 0xf2, "2f191b48f8a98dd1cfa26372cdd1b80fcdd344977a4f706f499150789e27655da761ef6176a43f8d8db4c42652372fe9fa31006306edd50a378924419310c0602f5c972a1bb11a10dac775dbc46a0f04694fbd5373c99feb52afc81e1c75e075889ba72895cc8c8959"}}, @val={0x25, 0x3, {0x0, 0x5, 0xf}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x7, 0xb7, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x1, 0x9, 0x41}}, @void}}, @NL80211_ATTR_BEACON_HEAD={0x5b1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x2}}, 0x7, @random=0xff56, 0x0, @void, @val={0x1, 0x5, [{0x1b, 0x1}, {0x36, 0x1}, {0x6, 0x1}, {0x16, 0x1}, {0x30, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xdd, {0x6, 0x8c, 0x3, "9caed79f65a84d2297e6ea40849300b626cf7f2d569b2acaaceab6680283a4f3be475ffc2e372be68475e758b7cae49c48863b934d43e6f7bddd280843f2b2db9a273d0ba45f078a9239572060c76a06292dfd1718f501da290953ea49af01fc260ba1d4e8bb9fc57e97415461b5333275ea5e2eacef1c9441b9ee6dc25a13a344f71d9d391633b9a4bed74b597242c050ca04ffcf9cd863063e70b63bf0be3a62286b30fb91e2f4886be0ab045b3a9f2c87abec216d6ccd1d8187e1edd52f38e0721f1bfe66fa39da669f9c408770ad0a7d1e7386cf0fe2a8a2"}}, @val={0x25, 0x3, {0x1, 0x0, 0x8}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0xff, 0x0, 0x18, 0xf2}}, [{0xdd, 0x68, "60922c6c92a85d0e04b26ff8d61638333d06752daa5a24e42d642819d06f516711b2c98e4e918b38f93676df4b02aa9c84350ab02e49e30dc24843b7cbeea1596838aaf2590564e7d2ef160dfeb81c00dbb3a5b5284fc77d5d73dd7c44806f261289d5680f1911a7"}, {0xdd, 0x1b, "99f889d7227170faae5fb59600c50f4cbac7ab27ff086d29942c44"}, {0xdd, 0xbf, "3a9e9e9cee48bdf21f500e710de74125327ee3e4cb85083fe0736e9061b1cfe2ba64f784d5be01db9e0e248c3412745123eb2fa2c4d6d027742cc75973b2b413be2e50fb743f16cc01091e277138752b321e34d373d320597f0252e8767b5e9d5bc6ba2532433b92904f631851ec9f0f8bce2402e7e4a164ead1031fde9830f65a70a6ce6fc0ba28251708cfae79bafd86b2ece01489ea6a320a631521f8e0f9f66e7a3422a095344e0f95ddeb4062d85fdec402e3e895dd09c80b67541963"}, {0xdd, 0x5a, "6e8277d957c16abb4ee5184dc3e3012641f3822e0458937d8a5170d50311aab7c374025e982f567c8843aa404fb3a65cb5248ac32e42d23864b488e29418de054d95f0b57ae9521d2b905350cb8929f53d631b86891254d58441"}, {0xdd, 0x7e, "70d2229a7725857376023a8711d558ce6d1bd098b02894964d341151e4dcff167321bfc393a80246866265ea01bc9c1de50e4f114584e020c1d15d44be54f8e3614ca08b02f0f55b024754318ac8e89a799bc2c1f3ff99e3d8d218c01122ce0b13955bde07aa89c072e3607043d883ebc461f6c4d464c9a941abbc54f4fe"}, {0xdd, 0xa4, "655822d913e44c15404e75b0a5f985fe8463b759db29950052c39c4a25b8ef9d7eb25c1c5c04f3c1b29e1c6c4dd7810e83219ba927ec39eaeed74ef74227527553f9fc572cb66c0acdc028e5765503673ac48733c56a6f4bf8e4ca19cfe33a862986a8b7cf2747644d8266ae9895a5dd5c95d13c364a1db294447631f43b23bba037f4f5801b613db809fdd3086454b94d4e671be74c98fd4b6a4aa1237d5acc1ab5c922"}, {0xdd, 0xda, "0747e371077addc526c0dc866fbaa70ab4aff6912f2b71dd5783adecff8e41d23f12e0cf51a5951e16e02f845787f9343b75b5e5933c98cb55de934697b2017481e7f7a4f42396202efec5fda2de7ab0359eaab9e4f58d96a9f2b1f239147a96ab4bc9e4c62d73c9c1cd9a2b96ad343dcb179236eb2b0396e0c53e89ea9d17bb2650b6dbed37c5c87a6ca2b44300fd69de92b5befa047ecddc7e29f00a69e2155f02f7a6fd71fc24d92840da11e017209e1531d54add574efad5b4f8a9d35a9ebe5a8ec1b55932bb9964ed898c9f6505502d58eabac7fbd0bfc2"}, {0xdd, 0xc1, "158e0c886ee32a8f7eb81e25e1e12b77248473f4bb435a6ea80b76fe7111c2697a7f7bee79d3aef4e272300128cfda54e5b78dd83fab97f9ea0ff6a32c0e71772435905dd1db87e57ff7fb074dc1100785185426159621b648eb06f1387ba7a9ddfb6f3676fcc6bbeb0b06e72677436f2b484ea89339db81f43a0a41edc258a5a42500139a89ac76801372a5f803f77619343c67088f8738bf10d51661589d1b8b08368420491dfed4c67d32a28632888380ef8e3e10c7febc42d95dd54baa5ecd"}, {0xdd, 0x24, "3e03f9967def432fd243fe54d41224c01b56eba59b00ab8a314a19eef52d2d60ec8ae17b"}]}}, @NL80211_ATTR_BEACON_TAIL={0x153, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}, @perr={0x84, 0x128, {0x5, 0x12, [{{}, @broadcast, 0x5, @void, 0x1c}, {{}, @device_a, 0xfffffe83, @void, 0x21}, {{0x0, 0x1}, @device_a, 0x40, @value, 0x6}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x1b}, {{0x0, 0x1}, @device_b, 0x10000, @value=@device_b, 0x23}, {{0x0, 0x1}, @device_a, 0x401, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x30}, {{}, @broadcast, 0x5, @void, 0x1}, {{0x0, 0x1}, @broadcast, 0x969e, @value=@device_b, 0x37}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x3f}, {{0x0, 0x1}, @device_a, 0x40, @value=@device_b, 0x2d}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x3f}, {{}, @device_a, 0x40, @void, 0x5}, {{}, @device_a, 0xf, @void, 0x28}, {{}, @broadcast, 0x8, @void, 0x3a}, {{}, @device_a, 0x7, @void, 0x1a}, {{}, @broadcast, 0x8, @void, 0x40}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x1}]}}, @mic={0x8c, 0x18, {0xd7f, "b193b65d4811", @long="7e49344560222b604eae1e51465f35cf"}}, @dsss={0x3, 0x1, 0xb7}]}, @NL80211_ATTR_IE_PROBE_RESP={0x67, 0x7f, [@ht={0x2d, 0x1a, {0x10, 0x2, 0x7, 0x0, {0x400, 0x1991, 0x0, 0x1f7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x8, 0x4}}, @sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0x42, {0x34, 0x4, [{{0x0, 0x1}, @device_b, 0xffff, @value=@device_b, 0x30}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x13}, {{}, @device_b, 0x5, @void, 0x23}, {{}, @device_b, 0x8, @void, 0x2f}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x59, 0x7f, [@mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x6, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x84, 0x5}}, @ssid={0x0, 0x6, @default_ap_ssid}, @tim={0x5, 0x2f, {0x7f, 0x4c, 0xd, "2b1cdb7d688f81cc021f52f6eeba35386e92f97ef36b35b32f0b92917caeaeca2a14e2388e5c63b2e772b6c3"}}, @cf={0x4, 0x6, {0x3, 0x7, 0x8, 0x5}}]}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x40}, 0x200c80c5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1000000, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff004788ae8e000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000e2ffffffffffff070000000000000000000000000000000000000000000000000000000000000000feffffff00000000d960cc545052ecb50999166621055c8d7c3c7867d99351b29278a4f96c5edda4a6d02764de48b813a9d606d7d6bdf26b954d5d10db2f78c194810fb8ba639b78cad71a165aa441159e7539ecf39e"]}, 0x156) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1000000, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff004788ae8e000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000e2ffffffffffff070000000000000000000000000000000000000000000000000000000000000000feffffff00000000d960cc545052ecb50999166621055c8d7c3c7867d99351b29278a4f96c5edda4a6d02764de48b813a9d606d7d6bdf26b954d5d10db2f78c194810fb8ba639b78cad71a165aa441159e7539ecf39e"]}, 0x156) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.141279648s ago: executing program 3 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0xc, 0x7fffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xf02da000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000034000100fffff7ff95"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x400, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 2.061579594s ago: executing program 3 (id=1080): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="15fff4000800000000000000009fde"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="74726103003d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache,k']) truncate(&(0x7f0000000080)='./file0\x00', 0x101000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x402, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.948421922s ago: executing program 2 (id=1081): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x3, 0x8001}, {}], 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000002080)=[{0x5, 0x0, 0x0, 0x7ffc0003}]}) openat$mice(0xffffffffffffff9c, 0x0, 0x20001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getnetconf={0x14, 0x52, 0x921}, 0x14}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) futex(&(0x7f0000000000), 0x7, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setresgid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) pipe2(&(0x7f0000000040), 0x0) 1.784314127s ago: executing program 3 (id=1082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000f40801040000000000000000021000050900010073797a3100000000c645fc05906081dbda1f04483496b6bba64ebacfea53732a4ac71d5f991139c8c87b55d32f4964186cd941df36216deef72757fae017e1f5009558ad1bc7b7e2707f3c45e2c6960c3c577cc7551dfcf92a63f990fd4bd4056568e656ae2bab156d27d3d5fcf4b2d46df869f6f636305028b7d1000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x98}, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r4], 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004850) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='jbd2_update_log_tail\x00', r5}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x20, 0x1, 0x3, 0xfe, 0x2}}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r9 = dup(r8) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406"], 0x0) r11 = dup(r10) sendfile(r11, r9, 0x0, 0x89ffc) 865.644022ms ago: executing program 2 (id=1083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1414bb000000000000002000000000fe8000000000000000000000000000aa00488153e2e1d41a7a0000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c00000000000000000000000000000000000000000000000200000000000000000000000000004800000000000000000000000000000000000000000000000000000000000000000000001004000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x138}}, 0x20000000) 748.71306ms ago: executing program 0 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) 717.670619ms ago: executing program 2 (id=1085): openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x1000}, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x295, &(0x7f00000004c0)={0x0, 0x8000f33b, 0x10100, 0x2, 0x15f}, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x8, 0x1000000, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 521.819359ms ago: executing program 0 (id=1086): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004800160b28bd7000ffdbdf250a002000", @ANYRES32=0x0, @ANYBLOB="000000002355e74f02017d6d9b5271be9f9838934fb6d700dceffad2ca771d0ba4f33456989abe6224fba739bde6859ea42ce165acfc5ef59272b66e90a1d6d9a123160c485d12b08b09f728d031cfaa5bec7dd874353d5573129459c1dc9e566e164cbc2c782ed4d5045381f85d8b3c21dd2d50750e36990e164550ba1ffc12ac3fcf664a137e524e6b593b5f50413d125b2f946b86e775254016984a397fedce9e4c641129c9644276a2da"], 0x1c}, 0x1, 0x0, 0x0, 0x48400}, 0x8000) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x20004001) 336.03351ms ago: executing program 0 (id=1087): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async, rerun: 32) clock_adjtime(0x0, &(0x7f0000000040)={0x37dc, 0xf423f, 0xfffffffffffffffc, 0x7, 0x200000000001, 0x6, 0x0, 0x0, 0x1175, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x5, 0x2, 0xfffffffffffff111, 0x7, 0x4, 0x200, 0xc33, 0xfffffffffffffffd, 0x1fffffffffe, 0xa}) (async, rerun: 32) syz_io_uring_setup(0x6c8f, &(0x7f0000000240)={0x0, 0xf4b4, 0x200, 0x1, 0x167}, &(0x7f0000000180), &(0x7f0000002140)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) readahead(r4, 0x919f, 0x10000) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000002180)=0x10005, 0x4) (async, rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x13, 0x0, @void}, 0x10) (async, rerun: 32) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002240)="6cc1f5bb1902598356808adde443abaea595847115d5a51d30aa4e5fe3f480d7bd4fbd542f9d01143b0d918e65c2ff1f5733b71c04ba75e00fd755292143ba978a4599de2656164b30da73424fdef2f064b152d9d4470b0f443ff0e56a39d28dc55acef4cc0597857e8ca2e2d5c3b47f0cfe26b3fa8f831c2c00866c29afe767", 0x80}], 0x1}, 0x4000151) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = socket$inet6(0xa, 0xa, 0x3e) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) (async, rerun: 64) r7 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000340)={0x3, r0}) (async) signalfd4(r3, &(0x7f0000002100)={[0xfffffffffffeffff]}, 0xfffffffffffffe8f, 0x80000) (async) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000040)={@empty, @multicast2, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49", 0x100, 0x0, 0x2, 0x7}, 0x3c) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) 0s ago: executing program 2 (id=1088): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x40000000009, 0x8}, 0x0) (async) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x40000000009, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x84443, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x6a, 0x2, 0x7fe, 0x58, @loopback, @empty, 0x10, 0x8010, 0x6, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x6a, 0x2, 0x7fe, 0x58, @loopback, @empty, 0x10, 0x8010, 0x6, 0x8}}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e40)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440), 0x0, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [r1, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r2, r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r1, r1, r2]}}], 0x100, 0x8001}}], 0x1, 0x40000) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x108) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000006d000000959487d382bac41212472a9acc3ec53cd403fb1fea2971", @ANYRES8=r3, @ANYRESOCT=r6], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_server\x00', r3, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='afs_server\x00', r3, 0x0, 0x1}, 0x18) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000001380)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000001380)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5, 0x42031, 0xffffffffffffffff, 0x100000000) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f00000000c0)=0x5, 0x4) (async) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f00000000c0)=0x5, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): et [ 236.742444][T10564] binder: 10563:10564 ioctl 4018620d 20000040 returned -16 [ 236.799866][T10564] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 236.809336][T10570] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 236.846273][ T29] audit: type=1400 audit(1735129629.313:694): avc: denied { write } for pid=10563 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 236.956801][ T29] audit: type=1400 audit(1735129629.353:695): avc: denied { mount } for pid=10575 comm="syz.0.703" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 237.068629][T10166] team0: Port device team_slave_0 added [ 237.087695][T10166] team0: Port device team_slave_1 added [ 237.259432][T10166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.316099][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.440294][T10166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.501995][T10166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.519976][ T29] audit: type=1400 audit(1735129630.033:696): avc: denied { setopt } for pid=10597 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.553564][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.595633][ T29] audit: type=1400 audit(1735129630.063:697): avc: denied { getopt } for pid=10597 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.655317][T10166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.784499][T10598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.847307][T10166] hsr_slave_0: entered promiscuous mode [ 237.861162][T10166] hsr_slave_1: entered promiscuous mode [ 237.931747][T10166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.939576][T10166] Cannot create hsr debugfs directory [ 238.349308][T10603] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 238.531116][ T5815] Bluetooth: hci4: command tx timeout [ 238.558545][ T29] audit: type=1400 audit(1735129631.073:698): avc: denied { bind } for pid=10644 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.571362][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 239.643166][T10648] syz.3.716 (10648) used greatest stack depth: 20032 bytes left [ 240.275598][T10166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.325052][T10166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.351709][T10166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.379778][T10166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.533354][T10166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.561621][T10166] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.596739][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.603873][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.660608][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.667701][ T6282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.715280][T10166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.726010][T10166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.805110][T10677] xt_l2tp: missing protocol rule (udp|l2tpip) [ 241.374182][T10689] netlink: 72 bytes leftover after parsing attributes in process `syz.3.723'. [ 242.105746][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 242.131077][ T29] audit: type=1326 audit(1735129634.373:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bec985d29 code=0x0 [ 242.349275][ T29] audit: type=1326 audit(1735129634.423:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 242.378921][ T29] audit: type=1326 audit(1735129634.423:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 242.403993][ T29] audit: type=1326 audit(1735129634.433:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 242.428570][ T29] audit: type=1326 audit(1735129634.433:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 242.452858][ T29] audit: type=1326 audit(1735129634.433:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 242.640906][T10166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.658064][ T29] audit: type=1326 audit(1735129634.433:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 242.764913][T10712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.918224][ T29] audit: type=1326 audit(1735129634.433:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 243.217710][ T29] audit: type=1326 audit(1735129634.433:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 243.279385][ T29] audit: type=1326 audit(1735129634.433:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 243.414315][T10721] syz.3.726: attempt to access beyond end of device [ 243.414315][T10721] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 243.487423][T10721] FAT-fs (loop3): unable to read boot sector [ 243.688069][T10166] veth0_vlan: entered promiscuous mode [ 243.774371][T10166] veth1_vlan: entered promiscuous mode [ 243.810382][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.894428][T10166] veth0_macvtap: entered promiscuous mode [ 243.918842][T10166] veth1_macvtap: entered promiscuous mode [ 244.057403][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.114825][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.128179][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.144047][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.155350][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.175591][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.185604][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.196282][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.206221][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.216731][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.227509][T10166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.237180][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.247704][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.257575][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.268202][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.278096][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.288590][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.298649][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.309593][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.357672][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.461987][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.984568][T10166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.000663][T10166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.009424][T10166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.023085][T10166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.032843][T10166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.618487][T10768] FAULT_INJECTION: forcing a failure. [ 245.618487][T10768] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 245.877189][T10768] CPU: 0 UID: 0 PID: 10768 Comm: syz.3.734 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 245.887868][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.897897][T10768] Call Trace: [ 245.901153][T10768] [ 245.904060][T10768] dump_stack_lvl+0x16c/0x1f0 [ 245.908717][T10768] should_fail_ex+0x497/0x5b0 [ 245.913376][T10768] _copy_from_user+0x2e/0xd0 [ 245.918467][T10768] do_sock_getsockopt+0x5f6/0x800 [ 245.923472][T10768] ? trace_lock_acquire+0x90/0x1f0 [ 245.928564][T10768] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 245.934098][T10768] ? lock_acquire+0x2f/0xb0 [ 245.938576][T10768] ? __fget_files+0x40/0x3a0 [ 245.943142][T10768] ? __fget_files+0x206/0x3a0 [ 245.947806][T10768] __sys_getsockopt+0x12f/0x260 [ 245.952638][T10768] __x64_sys_getsockopt+0xbd/0x160 [ 245.957722][T10768] ? do_syscall_64+0x91/0x250 [ 245.962377][T10768] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.967551][T10768] do_syscall_64+0xcd/0x250 [ 245.972031][T10768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.977902][T10768] RIP: 0033:0x7f7bec985d29 [ 245.982295][T10768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.001876][T10768] RSP: 002b:00007f7bed88e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 246.010263][T10768] RAX: ffffffffffffffda RBX: 00007f7becb75fa0 RCX: 00007f7bec985d29 [ 246.018221][T10768] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 246.026168][T10768] RBP: 00007f7bed88e090 R08: 00000000200000c0 R09: 0000000000000000 [ 246.034112][T10768] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 246.042069][T10768] R13: 0000000000000000 R14: 00007f7becb75fa0 R15: 00007ffe68e6e3b8 [ 246.050018][T10768] [ 246.095811][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.218844][T10768] IPVS: length: 101 != 8 [ 246.311944][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.350557][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.393776][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.534577][T10770] netlink: 156 bytes leftover after parsing attributes in process `syz.2.733'. [ 247.661560][T10808] loop9: detected capacity change from 0 to 7 [ 247.674359][T10808] Dev loop9: unable to read RDB block 7 [ 247.680523][T10808] loop9: AHDI p2 p3 [ 247.684436][T10808] loop9: partition table partially beyond EOD, truncated [ 247.693217][T10808] loop9: p2 start 4294934367 is beyond EOD, truncated [ 247.811569][T10893] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 247.821819][T10893] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 248.348163][T10924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64788 sclass=netlink_route_socket pid=10924 comm=syz.2.740 [ 249.105915][ T1320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.224377][ T1320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.301683][ T1320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.373119][ T1320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.462535][ T1320] bridge_slave_1: left allmulticast mode [ 249.468807][ T1320] bridge_slave_1: left promiscuous mode [ 249.475403][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.483789][ T1320] bridge_slave_0: left allmulticast mode [ 249.489409][ T1320] bridge_slave_0: left promiscuous mode [ 249.495333][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.472075][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 250.472094][ T29] audit: type=1326 audit(1735129642.473:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.507504][ T29] audit: type=1326 audit(1735129642.473:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.530956][ T29] audit: type=1326 audit(1735129642.473:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.554388][ T29] audit: type=1326 audit(1735129642.473:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.577897][ T29] audit: type=1326 audit(1735129642.473:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.601774][ T29] audit: type=1326 audit(1735129642.473:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.650909][ T29] audit: type=1326 audit(1735129642.473:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.674292][ T29] audit: type=1326 audit(1735129642.473:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.698215][ T29] audit: type=1326 audit(1735129642.473:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.722007][ T29] audit: type=1326 audit(1735129642.473:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 250.799083][T10960] netlink: 87 bytes leftover after parsing attributes in process `syz.1.743'. [ 250.858829][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.869294][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.877569][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.886719][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.895209][ T5829] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 250.902772][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.111008][ T1320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.128661][ T1320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.142075][ T5866] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 251.152398][ T1320] bond0 (unregistering): Released all slaves [ 251.222146][T10965] vivid-006: disconnect [ 251.228094][T10964] vivid-006: reconnect [ 251.456883][ T5866] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.468181][ T5866] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.681489][ T5866] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.712464][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.717611][T10978] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 251.720910][ T5864] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 251.770013][T10961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.777271][T10978] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 251.791872][ T5866] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 251.848327][T10962] chnl_net:caif_netlink_parms(): no params data found [ 251.930293][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 251.936919][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.994579][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 252.006229][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 252.017304][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 252.027406][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.049419][ T5864] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 252.074035][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.082196][ T5866] usb 3-1: USB disconnect, device number 39 [ 252.101184][ T5864] usb 1-1: Product: syz [ 252.117838][ T5864] usb 1-1: Manufacturer: syz [ 252.134784][ T5864] usb 1-1: SerialNumber: syz [ 252.165038][ T5864] usb 1-1: config 0 descriptor?? [ 252.191338][ T5864] xbox_remote_probe: endpoint_in message size==0? [ 252.685135][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.783241][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.935862][ T5829] Bluetooth: hci4: command tx timeout [ 253.055732][T10962] bridge_slave_0: entered allmulticast mode [ 253.212824][T10962] bridge_slave_0: entered promiscuous mode [ 253.263160][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.286052][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.298222][T10962] bridge_slave_1: entered allmulticast mode [ 253.307573][T10962] bridge_slave_1: entered promiscuous mode [ 253.324919][ T1320] hsr_slave_0: left promiscuous mode [ 253.332210][ T1320] hsr_slave_1: left promiscuous mode [ 253.352524][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.360118][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.373220][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.381155][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.400168][ T1320] veth1_macvtap: left promiscuous mode [ 253.405962][ T1320] veth0_macvtap: left promiscuous mode [ 253.411727][ T1320] veth1_vlan: left promiscuous mode [ 253.420441][ T1320] veth0_vlan: left promiscuous mode [ 253.439395][T11028] netlink: 72 bytes leftover after parsing attributes in process `syz.3.756'. [ 254.407023][ T5814] usb 1-1: USB disconnect, device number 21 [ 254.451598][ T1320] team0 (unregistering): Port device team_slave_1 removed [ 254.509131][ T1320] team0 (unregistering): Port device team_slave_0 removed [ 254.552219][ T5866] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 254.800350][ T5824] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 254.828536][ T5866] usb 4-1: too many configurations: 139, using maximum allowed: 8 [ 254.838863][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 254.858591][ T5866] usb 4-1: can't read configurations, error -61 [ 254.941444][ T5824] usb 3-1: device descriptor read/64, error -71 [ 254.992433][ T5866] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 255.011411][ T5829] Bluetooth: hci4: command tx timeout [ 255.127968][T10962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.158623][T10962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.175080][ T5866] usb 4-1: too many configurations: 139, using maximum allowed: 8 [ 255.190311][ T5824] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 255.198859][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 255.217642][ T5866] usb 4-1: can't read configurations, error -61 [ 255.239457][ T5866] usb usb4-port1: attempt power cycle [ 255.248826][T10962] team0: Port device team_slave_0 added [ 255.274559][T10962] team0: Port device team_slave_1 added [ 255.326110][T10962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.334849][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.336459][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.341370][ T5824] usb 3-1: device descriptor read/64, error -71 [ 255.375939][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.396108][T10962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.427789][T10962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.458281][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.550274][ T5824] usb usb3-port1: attempt power cycle [ 255.556279][T10962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.590401][ T5866] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 255.642995][ T5866] usb 4-1: too many configurations: 139, using maximum allowed: 8 [ 255.652534][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 255.660104][ T5866] usb 4-1: can't read configurations, error -61 [ 255.882385][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 255.921180][ T5866] usb 4-1: too many configurations: 139, using maximum allowed: 8 [ 255.931990][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 255.981627][ T5866] usb 4-1: can't read configurations, error -61 [ 256.172113][T10962] hsr_slave_0: entered promiscuous mode [ 256.605559][ T5866] usb usb4-port1: unable to enumerate USB device [ 256.651101][T10962] hsr_slave_1: entered promiscuous mode [ 256.657135][T10962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.716468][T10962] Cannot create hsr debugfs directory [ 256.770314][ T5824] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 256.874474][ T5824] usb 3-1: device descriptor read/8, error -71 [ 257.108843][ T5829] Bluetooth: hci4: command tx timeout [ 257.950590][ T5824] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 258.340728][ T5824] usb 3-1: device descriptor read/8, error -71 [ 258.425068][T11092] netlink: 72 bytes leftover after parsing attributes in process `syz.3.767'. [ 258.450523][ T5824] usb usb3-port1: unable to enumerate USB device [ 259.061157][T11109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.772'. [ 259.170319][ T5829] Bluetooth: hci4: command tx timeout [ 259.180419][T11110] sp0: Synchronizing with TNC [ 259.185383][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 259.220647][ T5824] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 259.286900][T11117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.410385][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 259.450525][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.537573][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 259.981533][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 260.013983][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 260.177815][T11124] veth0_to_batadv: entered promiscuous mode [ 260.185440][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.185955][T11124] veth0_to_batadv: left promiscuous mode [ 260.200671][ T5824] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 260.215813][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.246947][ T5824] usb 1-1: Product: syz [ 260.304914][ T5824] usb 1-1: Manufacturer: syz [ 260.309544][ T5824] usb 1-1: SerialNumber: syz [ 260.331839][ T5824] usb 1-1: config 0 descriptor?? [ 260.349306][ T5824] xbox_remote_probe: endpoint_in message size==0? [ 260.417456][T10962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.491559][T10962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.542251][T10962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.071419][T10962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.465186][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.488156][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.513946][T10962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.524427][T10962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.579732][ T1531] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 261.611816][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.618868][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.627100][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.634161][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.643280][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 261.643292][ T29] audit: type=1326 audit(1735129654.163:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 261.689503][ T29] audit: type=1326 audit(1735129654.163:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 261.750246][ T1531] usb 4-1: Using ep0 maxpacket: 16 [ 261.765339][ T1531] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024 [ 261.789766][ T29] audit: type=1326 audit(1735129654.193:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 261.814830][ T1531] usb 4-1: config 1 interface 0 has no altsetting 0 [ 261.844985][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.850858][ T1531] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.868258][ T1531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.900379][ T1531] usb 4-1: Product: syz [ 261.906473][ T29] audit: type=1326 audit(1735129654.193:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 261.945020][ T1531] usb 4-1: Manufacturer: syz [ 261.961542][ T1531] usb 4-1: SerialNumber: syz [ 261.984945][ T29] audit: type=1326 audit(1735129654.193:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 262.032867][T11160] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.076136][ T29] audit: type=1326 audit(1735129654.193:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 262.099644][ T29] audit: type=1326 audit(1735129654.193:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 262.123092][ T29] audit: type=1326 audit(1735129654.193:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 262.146558][ T29] audit: type=1326 audit(1735129654.193:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 262.170325][ T29] audit: type=1326 audit(1735129654.193:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 262.345080][T10962] veth0_vlan: entered promiscuous mode [ 262.371726][T10962] veth1_vlan: entered promiscuous mode [ 262.398006][ T1531] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 262.432744][T10962] veth0_macvtap: entered promiscuous mode [ 262.485082][T10962] veth1_macvtap: entered promiscuous mode [ 262.519265][ T1531] usb 4-1: USB disconnect, device number 23 [ 262.559306][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.587507][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.606112][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.669670][ T5865] usb 1-1: USB disconnect, device number 22 [ 262.690338][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.708972][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.742240][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.760579][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.771803][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.782417][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.793200][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.857970][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.904462][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.934741][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.945299][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.959530][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.008419][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.047505][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.106873][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.181152][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.191683][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.202406][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.216562][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.300819][T11224] netlink: set zone limit has 4 unknown bytes [ 263.874084][T10962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.920264][T10962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.962832][T10962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.020403][T10962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.103424][T11231] usb usb8: usbfs: process 11231 (syz.0.784) did not claim interface 0 before use [ 264.277697][ T8527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.278772][ T6304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.293993][ T6304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.303055][ T8527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.670510][ T5865] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 264.857208][ T5865] usb 4-1: device descriptor read/64, error -71 [ 265.240306][ T5865] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 265.603997][ T5865] usb 4-1: device descriptor read/64, error -71 [ 265.727962][ T5865] usb usb4-port1: attempt power cycle [ 266.280931][ T5865] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 266.823468][ T5865] usb 4-1: device descriptor read/8, error -71 [ 267.108271][T11413] syz.1.800 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 267.161053][T11414] usb usb8: usbfs: process 11414 (syz.2.799) did not claim interface 0 before use [ 267.290288][ T5865] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 267.388783][ T6303] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.454270][ T5865] usb 4-1: device descriptor read/8, error -71 [ 267.580616][ T5865] usb usb4-port1: unable to enumerate USB device [ 267.640690][ T6303] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.769566][ T6303] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.046432][ T6303] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.210979][ T6303] bridge_slave_1: left allmulticast mode [ 268.216653][ T6303] bridge_slave_1: left promiscuous mode [ 268.226078][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.235649][ T6303] bridge_slave_0: left allmulticast mode [ 268.241541][ T6303] bridge_slave_0: left promiscuous mode [ 268.247203][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.721482][T11449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 269.383557][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.409881][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.419693][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.433450][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.440549][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 269.440561][ T29] audit: type=1400 audit(1735129661.953:772): avc: denied { map } for pid=11456 comm="syz.0.806" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 269.440981][ T5815] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.455832][ T29] audit: type=1400 audit(1735129661.953:773): avc: denied { execute } for pid=11456 comm="syz.0.806" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 269.470539][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.444945][ T6303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.570849][T11482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.808'. [ 270.590799][ T6303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.612384][ T6303] bond0 (unregistering): Released all slaves [ 270.665023][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 271.478332][ T29] audit: type=1400 audit(1735129663.613:774): avc: denied { create } for pid=11492 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 271.597933][ T5815] Bluetooth: hci4: command tx timeout [ 271.716871][T11503] fuse: Bad value for 'user_id' [ 271.721996][T11503] fuse: Bad value for 'user_id' [ 271.984179][T11511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.814'. [ 272.019238][ T29] audit: type=1400 audit(1735129664.493:775): avc: denied { watch } for pid=11510 comm="syz.2.814" path="/176" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 273.064986][ T29] audit: type=1400 audit(1735129664.493:776): avc: denied { watch_sb } for pid=11510 comm="syz.2.814" path="/176" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 273.354357][T11463] chnl_net:caif_netlink_parms(): no params data found [ 273.401369][T11536] x_tables: ip_tables: osf match: only valid for protocol 6 [ 273.496617][ T6303] hsr_slave_0: left promiscuous mode [ 273.513028][T11644] netlink: 48 bytes leftover after parsing attributes in process `syz.1.820'. [ 273.588474][ T6303] hsr_slave_1: left promiscuous mode [ 273.600351][ T5864] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 273.617442][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 273.652120][ T5829] Bluetooth: hci4: command tx timeout [ 273.703589][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.727527][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.750323][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 273.772197][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.774651][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.774785][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.775523][ T5864] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22 [ 273.775548][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.775568][ T5864] usb 1-1: Product: syz [ 273.775582][ T5864] usb 1-1: Manufacturer: syz [ 273.775597][ T5864] usb 1-1: SerialNumber: syz [ 273.779654][ T5864] usb 1-1: config 0 descriptor?? [ 273.790447][ T5864] usbserial_generic 1-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 273.790479][ T5864] usbserial_generic 1-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 273.790544][ T5864] usbserial_generic 1-1:0.0: device has no bulk endpoints [ 274.049611][ T6303] veth1_macvtap: left promiscuous mode [ 274.062682][ T6303] veth0_macvtap: left promiscuous mode [ 274.076994][ T6303] veth1_vlan: left promiscuous mode [ 274.082680][ T6303] veth0_vlan: left promiscuous mode [ 274.206327][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.823'. [ 274.269086][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.282371][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.906573][ T6303] team0 (unregistering): Port device team_slave_1 removed [ 274.938656][ T6303] team0 (unregistering): Port device team_slave_0 removed [ 275.257697][T11662] netlink: 68 bytes leftover after parsing attributes in process `syz.2.823'. [ 275.260210][ T5824] usb 1-1: USB disconnect, device number 23 [ 275.407676][ T29] audit: type=1326 audit(1735129667.893:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.431186][ T29] audit: type=1326 audit(1735129667.893:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.454633][ T29] audit: type=1326 audit(1735129667.903:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.478673][ T29] audit: type=1326 audit(1735129667.903:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.502397][ T29] audit: type=1326 audit(1735129667.903:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.526252][ T29] audit: type=1326 audit(1735129667.903:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.549690][ T29] audit: type=1326 audit(1735129667.903:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.573498][ T29] audit: type=1326 audit(1735129667.903:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.597236][ T29] audit: type=1326 audit(1735129667.903:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.620599][ T29] audit: type=1326 audit(1735129667.903:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4d385d29 code=0x7ffc0000 [ 275.681777][T11463] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.730334][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 275.804916][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.821009][T11463] bridge_slave_0: entered allmulticast mode [ 275.827777][T11463] bridge_slave_0: entered promiscuous mode [ 275.850782][T11463] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.857859][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.886426][T11463] bridge_slave_1: entered allmulticast mode [ 275.927210][T11463] bridge_slave_1: entered promiscuous mode [ 276.353655][T11463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.595572][T11463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.876029][T11463] team0: Port device team_slave_0 added [ 276.925515][T11463] team0: Port device team_slave_1 added [ 277.036749][T11816] overlayfs: failed to clone upperpath [ 277.047124][T11463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.067218][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.209762][T11463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.602224][T11463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.737540][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.763706][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.811030][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 277.830342][T11463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.051873][T11463] hsr_slave_0: entered promiscuous mode [ 278.072860][T11463] hsr_slave_1: entered promiscuous mode [ 278.115362][T11463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.123185][T11463] Cannot create hsr debugfs directory [ 278.158121][T11842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.835'. [ 278.207229][T11836] @: renamed from vlan0 (while UP) [ 278.223410][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 278.233348][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 278.259509][T11846] netlink: 72 bytes leftover after parsing attributes in process `syz.2.837'. [ 278.273927][T11836] bridge0: port 1(bridge_slave_1) entered blocking state [ 278.315251][T11836] bridge0: port 1(bridge_slave_1) entered disabled state [ 278.322561][T11836] bridge_slave_1: entered allmulticast mode [ 278.329465][T11836] bridge_slave_1: entered promiscuous mode [ 278.400911][T11849] netlink: 188 bytes leftover after parsing attributes in process `syz.0.838'. [ 278.429896][T11849] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 278.520990][ T5824] IPVS: starting estimator thread 0... [ 278.548660][T11859] delete_channel: no stack [ 278.563988][T11859] netlink: 52 bytes leftover after parsing attributes in process `syz.3.841'. [ 278.620314][T11856] IPVS: using max 30 ests per chain, 72000 per kthread [ 278.841934][T11863] usb usb8: usbfs: process 11863 (syz.0.842) did not claim interface 0 before use [ 279.259839][T11463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.300045][T11463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.314711][T11463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.886897][T11463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.893966][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 280.183108][T11463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.215589][T11909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.850'. [ 280.228831][T11463] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.244791][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 280.256930][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.264018][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.286606][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.293712][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.310308][ T5824] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 280.416529][T11926] netlink: 72 bytes leftover after parsing attributes in process `syz.1.852'. [ 280.510272][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.563594][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.644297][ T5824] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 280.761413][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.804866][ T5824] usb 4-1: config 0 descriptor?? [ 280.984764][T11463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.221909][ T5824] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x2 [ 281.237136][ T5824] logitech-hidpp-device 0003:046D:C086.0008: item fetching failed at offset 3/5 [ 281.956731][ T5824] logitech-hidpp-device 0003:046D:C086.0008: hidpp_probe:parse failed [ 281.965037][ T5824] logitech-hidpp-device 0003:046D:C086.0008: probe with driver logitech-hidpp-device failed with error -22 [ 281.997755][ T5824] usb 4-1: USB disconnect, device number 28 [ 282.582412][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 282.582440][ T29] audit: type=1400 audit(1735129675.093:852): avc: denied { bind } for pid=11960 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.858305][T11971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11971 comm=syz.3.858 [ 282.981109][T11463] veth0_vlan: entered promiscuous mode [ 282.989928][T11463] veth1_vlan: entered promiscuous mode [ 283.006888][T11463] veth0_macvtap: entered promiscuous mode [ 283.014805][T11463] veth1_macvtap: entered promiscuous mode [ 283.026662][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.037133][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.047407][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.058150][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.068008][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.078507][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.088359][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.098829][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.108673][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.119225][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.133921][T11463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.142226][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.152882][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.162936][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.173436][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.183269][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.193809][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.203689][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.214140][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.223959][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.234414][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.246398][T11463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.256989][T11463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.265799][T11463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.274522][T11463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.283233][T11463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.319943][ T29] audit: type=1326 audit(1735129675.823:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 283.343499][ T29] audit: type=1326 audit(1735129675.823:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 283.367240][ T29] audit: type=1326 audit(1735129675.823:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 283.395033][ T29] audit: type=1326 audit(1735129675.823:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 283.424422][ T29] audit: type=1326 audit(1735129675.823:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 283.459010][ T29] audit: type=1326 audit(1735129675.823:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 283.482537][ T29] audit: type=1326 audit(1735129675.823:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 283.506129][ T29] audit: type=1326 audit(1735129675.823:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 283.530767][ T29] audit: type=1400 audit(1735129675.943:861): avc: denied { append } for pid=11974 comm="syz.2.860" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.678303][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.678324][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.690309][ T5814] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 283.699700][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.699718][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.456215][T12119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12119 comm=syz.3.868 [ 284.474526][T12119] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 284.475097][ T5814] usb 3-1: device descriptor read/64, error -71 [ 284.930437][ T5814] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 284.961728][T12123] bond1: (slave gretap1): making interface the new active one [ 284.972677][T12123] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 285.100472][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 285.109606][ T5814] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 285.127107][ T5814] usb 3-1: config 0 has no interface number 0 [ 285.134910][ T5814] usb 3-1: config 0 interface 184 has no altsetting 0 [ 285.148900][ T5814] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 285.158687][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.168012][ T5814] usb 3-1: Product: syz [ 285.173052][ T5814] usb 3-1: Manufacturer: syz [ 285.177721][ T5814] usb 3-1: SerialNumber: syz [ 285.189353][ T5814] usb 3-1: config 0 descriptor?? [ 285.197968][ T5814] smsc75xx v1.0.0 [ 285.694351][ T6273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.921308][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 285.932183][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 286.279102][ T6273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.343852][ T6273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.413300][ T6273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.582492][ T6273] bridge_slave_1: left allmulticast mode [ 286.588191][ T6273] bridge_slave_1: left promiscuous mode [ 286.596680][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.644867][ T6273] bridge_slave_0: left allmulticast mode [ 286.651499][ T6273] bridge_slave_0: left promiscuous mode [ 286.676691][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.678538][ T29] audit: type=1326 audit(1735129680.073:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 287.701832][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.717772][ T29] audit: type=1326 audit(1735129680.073:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 287.741916][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.761426][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.765017][ T29] audit: type=1326 audit(1735129680.073:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 287.793104][ T29] audit: type=1326 audit(1735129680.073:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 287.816552][ T29] audit: type=1326 audit(1735129680.083:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 287.840005][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.841414][ T29] audit: type=1326 audit(1735129680.083:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 287.870266][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.879797][ T29] audit: type=1326 audit(1735129680.083:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 287.903130][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.918016][ T29] audit: type=1326 audit(1735129680.083:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 287.941467][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.972811][ T5815] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.983138][ T29] audit: type=1326 audit(1735129680.083:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 288.006704][ T29] audit: type=1326 audit(1735129680.083:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12160 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 288.030247][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.372176][ T5866] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 288.567140][ T6273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.618758][ T6273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.650082][ T6273] bond0 (unregistering): Released all slaves [ 288.700432][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 288.718111][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 288.728034][ T5814] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 288.765961][ T5814] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 288.842981][ T5814] usb 3-1: USB disconnect, device number 45 [ 288.948771][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.089092][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.304281][T12164] chnl_net:caif_netlink_parms(): no params data found [ 289.321187][ T5864] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 289.551170][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 289.730346][ T5864] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1023 [ 289.750335][ T5864] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024 [ 289.770260][ T5864] usb 3-1: config 1 interface 0 has no altsetting 0 [ 289.816722][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.825910][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.834536][ T5864] usb 3-1: Product: syz [ 289.838784][ T5864] usb 3-1: Manufacturer: syz [ 289.843435][ T5864] usb 3-1: SerialNumber: syz [ 289.881430][T12187] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 289.888819][T12187] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 290.051995][ T6273] hsr_slave_0: left promiscuous mode [ 290.084850][ T6273] hsr_slave_1: left promiscuous mode [ 290.130810][ T5815] Bluetooth: hci4: command tx timeout [ 290.137797][ T6273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.148794][ T6273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.190062][ T6273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.198405][ T6273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.243453][ T5815] Bluetooth: hci0: unexpected event 0x3e length: 318 > 260 [ 290.243484][ T5815] Bluetooth: hci0: unexpected subevent 0x0d length: 317 > 260 [ 290.264684][ T6273] veth1_macvtap: left promiscuous mode [ 290.270319][ T6273] veth0_macvtap: left promiscuous mode [ 290.275900][ T6273] veth1_vlan: left promiscuous mode [ 290.281280][ T6273] veth0_vlan: left promiscuous mode [ 290.398011][ T5864] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 290.427011][ T5864] usb 3-1: USB disconnect, device number 46 [ 290.800633][ T6273] team0 (unregistering): Port device team_slave_1 removed [ 290.868398][ T6273] team0 (unregistering): Port device team_slave_0 removed [ 292.150573][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.161772][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 292.169355][ T5866] usb 1-1: can't read configurations, error -71 [ 292.211260][ T5815] Bluetooth: hci4: command tx timeout [ 292.861199][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 292.861246][ T29] audit: type=1400 audit(1735129685.323:873): avc: denied { ioctl } for pid=12242 comm="syz.0.891" path="socket:[28233]" dev="sockfs" ino=28233 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.412005][T12164] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.424966][T12164] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.439254][T12164] bridge_slave_0: entered allmulticast mode [ 293.468996][T12164] bridge_slave_0: entered promiscuous mode [ 293.479649][T12164] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.534827][T12164] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.559281][T12164] bridge_slave_1: entered allmulticast mode [ 293.586891][T12164] bridge_slave_1: entered promiscuous mode [ 294.302841][T12164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.339138][ T5815] Bluetooth: hci4: command tx timeout [ 294.398683][T12399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.894'. [ 294.412594][ T29] audit: type=1400 audit(1735129686.933:874): avc: denied { watch_sb watch_reads } for pid=12359 comm="syz.1.894" path="/223/net_prio.prioidx" dev="tmpfs" ino=1221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 294.534925][T12164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.672790][T12164] team0: Port device team_slave_0 added [ 294.711680][T12164] team0: Port device team_slave_1 added [ 294.767652][T12164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.783579][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.826196][T12164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.868258][T12164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.880221][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.956482][T12164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.990524][T12164] hsr_slave_0: entered promiscuous mode [ 294.996545][T12164] hsr_slave_1: entered promiscuous mode [ 295.012049][T12164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.024115][T12164] Cannot create hsr debugfs directory [ 295.070649][ T5814] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 295.220398][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 295.227522][ T5814] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 295.265257][ T5814] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 295.300329][ T5814] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 295.359545][ T5814] usb 3-1: string descriptor 0 read error: -71 [ 295.367373][T12502] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 295.376271][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.404454][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.580921][ T5814] usb 3-1: can't set config #1, error -71 [ 295.598439][ T5814] usb 3-1: USB disconnect, device number 47 [ 296.404071][ T5815] Bluetooth: hci4: command tx timeout [ 297.370433][T12164] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.404681][T12164] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.426406][T12164] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.460828][ T5873] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 297.477254][T12164] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.650106][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.652625][T12556] 9pnet_fd: Insufficient options for proto=fd [ 297.662662][T12164] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.674623][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.681713][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.743689][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.750767][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.761731][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.771929][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.781878][ T5873] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.791916][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.824178][ T5873] usb 3-1: SerialNumber: syz [ 298.399048][ T5873] usb 3-1: 0:2 : does not exist [ 298.456503][ T5873] usb 3-1: unit 5 not found! [ 298.877465][ T5873] usb 3-1: USB disconnect, device number 48 [ 299.032749][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 299.227246][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.645511][ T29] audit: type=1400 audit(1735129691.963:875): avc: denied { setopt } for pid=12591 comm="syz.0.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.850524][ T29] audit: type=1400 audit(1735129691.963:876): avc: denied { audit_read } for pid=12591 comm="syz.0.915" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.880788][ T5873] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 300.430684][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 300.458324][ T5873] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 300.469711][ T5873] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.483512][ T5873] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.560901][ T5873] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.569950][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.610357][ T29] audit: type=1400 audit(1735129693.073:877): avc: denied { create } for pid=12623 comm="syz.3.922" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.621153][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 300.655398][ T5873] usb 3-1: Product: syz [ 300.750410][ T29] audit: type=1400 audit(1735129693.103:878): avc: denied { getopt } for pid=12623 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.791546][ T5873] usb 3-1: Manufacturer: syz [ 300.796256][ T5873] usb 3-1: SerialNumber: syz [ 301.350499][ T29] audit: type=1326 audit(1735129693.863:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 301.354563][T12164] veth0_vlan: entered promiscuous mode [ 301.395941][ T29] audit: type=1326 audit(1735129693.863:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 301.421578][ T5873] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 301.447940][T12164] veth1_vlan: entered promiscuous mode [ 301.450248][ T29] audit: type=1326 audit(1735129693.863:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 301.540228][ T29] audit: type=1326 audit(1735129693.873:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 301.563650][ T29] audit: type=1326 audit(1735129693.873:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 301.587234][ T29] audit: type=1326 audit(1735129693.893:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7772785d29 code=0x7ffc0000 [ 301.592928][T12164] veth0_macvtap: entered promiscuous mode [ 301.683907][T12164] veth1_macvtap: entered promiscuous mode [ 301.788689][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.813525][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.970265][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.356603][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.387395][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.402427][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.412338][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.413290][T12655] netlink: 72 bytes leftover after parsing attributes in process `syz.0.929'. [ 302.422894][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.422908][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.452371][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.463264][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.481128][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.491715][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.501932][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.512528][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.522402][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.533045][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.542925][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.553430][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.563282][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.573935][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.574043][T12659] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 302.586379][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.601504][T12164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.610515][T12164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.619707][T12164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.628481][T12164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.662258][T12663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 302.773186][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.930'. [ 302.786447][ T6276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.823297][ T6276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.964484][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'. [ 302.964621][ T5873] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 302.982420][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.987028][T12675] overlayfs: failed to clone lowerpath [ 303.000432][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.039887][ T5873] usb 3-1: USB disconnect, device number 49 [ 303.277972][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.527318][T12705] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 303.672742][ T1320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.807085][ T1320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.897756][ T1320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.978670][ T1320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.121720][ T1320] bridge_slave_1: left allmulticast mode [ 304.127386][ T1320] bridge_slave_1: left promiscuous mode [ 304.150386][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.163909][ T1320] bridge_slave_0: left allmulticast mode [ 304.169600][ T1320] bridge_slave_0: left promiscuous mode [ 304.175727][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.418759][ T1320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.428703][ T1320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.438326][ T1320] bond0 (unregistering): Released all slaves [ 305.724563][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.313435][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.438304][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.652473][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.738294][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 306.739506][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.142353][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 307.202795][T12759] tty tty25: ldisc open failed (-12), clearing slot 24 [ 307.278373][ T1320] hsr_slave_0: left promiscuous mode [ 307.325420][ T1320] hsr_slave_1: left promiscuous mode [ 307.343509][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.363386][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.371589][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 307.371603][ T29] audit: type=1400 audit(1735129699.893:890): avc: denied { write } for pid=12780 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.400796][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.419519][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.444005][ T1320] veth1_macvtap: left promiscuous mode [ 307.449479][ T1320] veth0_macvtap: left promiscuous mode [ 307.458920][ T29] audit: type=1400 audit(1735129699.973:891): avc: denied { map } for pid=12780 comm="syz.3.947" path="socket:[30806]" dev="sockfs" ino=30806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 307.469232][ T1320] veth1_vlan: left promiscuous mode [ 307.505642][ T1320] veth0_vlan: left promiscuous mode [ 307.542436][ T29] audit: type=1400 audit(1735129699.973:892): avc: denied { read } for pid=12780 comm="syz.3.947" path="socket:[30806]" dev="sockfs" ino=30806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 307.959014][ T1320] team0 (unregistering): Port device team_slave_1 removed [ 307.993854][ T1320] team0 (unregistering): Port device team_slave_0 removed [ 308.305293][T12788] wireguard0: entered promiscuous mode [ 308.325993][T12788] wireguard0: entered allmulticast mode [ 308.600572][ T5928] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 308.770237][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.787107][ T5928] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 308.796458][ T5928] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 308.805712][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.833700][ T5928] usb 4-1: config 0 descriptor?? [ 309.010550][ T5831] Bluetooth: hci4: command tx timeout [ 310.200624][ T5866] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 310.363647][ T5866] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.374405][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.387765][ T5866] usb 3-1: config 0 descriptor?? [ 310.395477][ T5866] cp210x 3-1:0.0: cp210x converter detected [ 310.453752][T12924] overlayfs: failed to resolve './file1': -2 [ 310.813635][ T5866] usb 3-1: cp210x converter now attached to ttyUSB0 [ 310.834776][ T5866] usb 3-1: USB disconnect, device number 50 [ 310.855979][ T5866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 310.864550][ T5866] cp210x 3-1:0.0: device disconnected [ 311.091672][ T5831] Bluetooth: hci4: command tx timeout [ 311.263987][T12751] chnl_net:caif_netlink_parms(): no params data found [ 311.771048][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 311.803538][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.862556][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.881498][T12751] bridge_slave_0: entered allmulticast mode [ 311.893542][T12751] bridge_slave_0: entered promiscuous mode [ 311.902579][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.910329][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.917470][T12751] bridge_slave_1: entered allmulticast mode [ 311.926275][T12751] bridge_slave_1: entered promiscuous mode [ 311.955828][T12751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.974639][T12751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.476970][T12751] team0: Port device team_slave_0 added [ 312.492028][T12751] team0: Port device team_slave_1 added [ 312.540654][ T5865] usb 4-1: USB disconnect, device number 29 [ 313.170573][ T5831] Bluetooth: hci4: command tx timeout [ 313.390457][ T29] audit: type=1400 audit(1735129705.903:893): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 313.759401][T12751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.770447][T12751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.839125][T12751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.872801][T12751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.888146][T12751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.980229][T12751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.458115][T12751] hsr_slave_0: entered promiscuous mode [ 314.464742][T12751] hsr_slave_1: entered promiscuous mode [ 314.471935][T12751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.479542][T12751] Cannot create hsr debugfs directory [ 314.490376][T13084] tipc: Started in network mode [ 314.495239][T13084] tipc: Node identity 326b0000000000000080ffffffffffff, cluster identity 4711 [ 314.613003][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 314.727487][T13101] .: renamed from bond0 (while UP) [ 314.768951][T13101] overlayfs: failed to resolve './file0': -2 [ 314.791956][ T5866] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 314.950259][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 314.957903][ T5866] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.975538][ T5866] usb 3-1: config 0 has no interface number 0 [ 314.990252][ T5866] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 315.014768][ T5866] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8244, setting to 1024 [ 315.028175][ T5866] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 315.045604][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.059853][T12751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.067095][ T5866] usb 3-1: config 0 descriptor?? [ 315.080599][T12751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.094930][T12751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.109944][T12751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.185904][T12751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.212125][T12751] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.224931][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.232090][ T6304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.250935][ T5831] Bluetooth: hci4: command tx timeout [ 315.261931][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.269006][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.342639][T12751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.746965][ T5866] uclogic 0003:28BD:0094.0009: pen parameters not found [ 315.778628][ T5866] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 316.097723][T13135] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.973'. [ 316.099624][ T5866] usb 3-1: USB disconnect, device number 51 [ 316.106967][T13135] openvswitch: netlink: Missing key (keys=40, expected=80) [ 316.148953][T12751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.133687][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.140054][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.194721][ T29] audit: type=1326 audit(1735129709.553:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 317.359131][ T29] audit: type=1326 audit(1735129709.553:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 317.428556][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 317.466557][ T29] audit: type=1326 audit(1735129709.553:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 317.816129][ T29] audit: type=1326 audit(1735129709.553:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 317.950971][ T29] audit: type=1326 audit(1735129709.553:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 318.050808][ T29] audit: type=1326 audit(1735129709.553:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 318.153743][ T29] audit: type=1326 audit(1735129709.553:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 318.252233][ T29] audit: type=1326 audit(1735129709.553:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 318.338545][ T29] audit: type=1326 audit(1735129709.563:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7bec985d29 code=0x7ffc0000 [ 318.459402][T12751] veth0_vlan: entered promiscuous mode [ 318.469163][T12751] veth1_vlan: entered promiscuous mode [ 318.496477][T12751] veth0_macvtap: entered promiscuous mode [ 318.517840][T12751] veth1_macvtap: entered promiscuous mode [ 318.706146][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.415943][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.425840][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.436351][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.446240][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.456707][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.466566][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.477029][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.487305][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.498038][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.509292][T12751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.518293][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.528773][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.538634][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.549112][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.558990][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.569920][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.584721][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.595236][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.606027][T12751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.616579][T12751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.627396][T13193] usb usb8: usbfs: process 13193 (syz.2.983) did not claim interface 0 before use [ 319.627583][T12751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.705626][T12751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.714417][T12751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.723652][T12751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.732839][T12751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.850566][ T6304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.858404][ T6304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.889661][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.940262][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.002125][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 320.002136][ T29] audit: type=1400 audit(1735129712.523:918): avc: denied { setopt } for pid=13212 comm="syz.3.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 320.350669][ T5866] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 320.552936][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 320.585485][ T5866] usb 4-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 320.623574][ T5866] usb 4-1: config 0 interface 0 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 320.719964][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.729914][ T5866] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 320.755094][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.764074][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 320.768195][ T5866] usb 4-1: Product: syz [ 320.790918][ T5866] usb 4-1: Manufacturer: syz [ 320.800779][ T5866] usb 4-1: SerialNumber: syz [ 320.818994][ T5866] usb 4-1: config 0 descriptor?? [ 321.188548][ T5866] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 321.209365][ T5866] usb 4-1: USB disconnect, device number 30 [ 321.316731][T13258] usb usb8: usbfs: process 13258 (syz.0.996) did not claim interface 0 before use [ 321.632628][ T6276] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.259487][ T6276] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.335446][ T6276] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.420372][ T6276] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.548719][ T6276] bridge_slave_1: left allmulticast mode [ 322.564918][ T6276] bridge_slave_1: left promiscuous mode [ 322.573450][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.585459][ T6276] bridge_slave_0: left allmulticast mode [ 322.593132][ T6276] bridge_slave_0: left promiscuous mode [ 322.598883][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.854274][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 323.505531][T13341] trusted_key: encrypted_key: insufficient parameters specified [ 324.289401][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.299765][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.369413][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.379608][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.389140][ T5815] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 324.459439][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.144407][T13361] ceph: No mds server is up or the cluster is laggy [ 325.278047][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.298505][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.388753][ T6276] bond0 (unregistering): Released all slaves [ 325.613375][T13349] chnl_net:caif_netlink_parms(): no params data found [ 325.918057][T13405] trusted_key: encrypted_key: insufficient parameters specified [ 326.511146][T13349] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.520146][T13349] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.534455][T13349] bridge_slave_0: entered allmulticast mode [ 326.541305][T13349] bridge_slave_0: entered promiscuous mode [ 326.582791][ T29] audit: type=1326 audit(1735130232.061:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd098d85d29 code=0x7ffc0000 [ 326.623877][ T5815] Bluetooth: hci4: command tx timeout [ 326.644842][ T29] audit: type=1326 audit(1735130232.090:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd098d85d29 code=0x7ffc0000 [ 326.668627][ T29] audit: type=1326 audit(1735130232.090:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd098d85d29 code=0x7ffc0000 [ 326.692210][ T29] audit: type=1326 audit(1735130232.090:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd098d85d29 code=0x7ffc0000 [ 326.715651][ T29] audit: type=1326 audit(1735130232.090:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd098d85d29 code=0x7ffc0000 [ 326.739770][ T29] audit: type=1326 audit(1735130232.090:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd098d85d29 code=0x7ffc0000 [ 326.763600][ T29] audit: type=1326 audit(1735130232.090:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd098d85d29 code=0x7ffc0000 [ 326.775774][ T6276] hsr_slave_0: left promiscuous mode [ 326.787110][ T29] audit: type=1326 audit(1735130232.090:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd098d87c47 code=0x7ffc0000 [ 326.787144][ T29] audit: type=1326 audit(1735130232.090:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd098d87bbc code=0x7ffc0000 [ 326.839671][ T29] audit: type=1326 audit(1735130232.090:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd098d87af4 code=0x7ffc0000 [ 326.863114][ T6276] hsr_slave_1: left promiscuous mode [ 326.869543][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.886680][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.897053][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.910554][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.924737][ T9574] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 326.931636][ T6276] veth1_macvtap: left promiscuous mode [ 326.937889][ T6276] veth0_macvtap: left promiscuous mode [ 326.943420][ T6276] veth1_vlan: left promiscuous mode [ 326.951703][ T6276] veth0_vlan: left promiscuous mode [ 327.090106][ T9574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.108839][ T9574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.123881][ T9574] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 327.133619][ T9574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.151300][ T5865] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 327.165286][ T9574] usb 3-1: config 0 descriptor?? [ 327.301152][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 327.316079][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 327.322838][ T5865] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 327.340105][ T5865] usb 4-1: config 0 has no interface number 0 [ 327.346242][ T5865] usb 4-1: config 0 interface 12 has no altsetting 0 [ 327.347373][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 327.354888][ T5865] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 327.370774][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.380248][ T5865] usb 4-1: Product: syz [ 327.384569][ T5865] usb 4-1: Manufacturer: syz [ 327.394806][ T5865] usb 4-1: SerialNumber: syz [ 327.401311][ T5865] usb 4-1: config 0 descriptor?? [ 327.723209][T13426] ALSA: mixer_oss: invalid OSS volume '' [ 328.324951][ T9574] sony 0003:054C:0268.000A: item fetching failed at offset 3/5 [ 328.332952][ T9574] sony 0003:054C:0268.000A: parse failed [ 328.339874][ T9574] sony 0003:054C:0268.000A: probe with driver sony failed with error -22 [ 328.551949][T13349] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.559412][T13349] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.568666][T13349] bridge_slave_1: entered allmulticast mode [ 328.575352][T13349] bridge_slave_1: entered promiscuous mode [ 328.634350][T13349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.647607][T13349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.686988][T13349] team0: Port device team_slave_0 added [ 328.698416][T13349] team0: Port device team_slave_1 added [ 328.714760][ T5815] Bluetooth: hci4: command tx timeout [ 328.763602][T13349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.772770][T13349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.799769][T13349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.813508][T13349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.820601][T13349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.847003][T13349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.943012][T13349] hsr_slave_0: entered promiscuous mode [ 328.964300][T13349] hsr_slave_1: entered promiscuous mode [ 328.973550][T13349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.981672][T13349] Cannot create hsr debugfs directory [ 329.646937][ T9574] usb 3-1: USB disconnect, device number 52 [ 329.833335][T13456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.868427][T13456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.900017][ T5865] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 329.915213][ T5865] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 329.922524][ T5865] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 329.930187][ T5865] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 329.955058][ T5865] usb 4-1: USB disconnect, device number 31 [ 330.714216][ T9574] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 330.837088][ T5815] Bluetooth: hci4: command tx timeout [ 330.892179][ T9574] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 330.901853][ T9574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.923711][ T9574] usb 3-1: Product: syz [ 330.927895][ T9574] usb 3-1: Manufacturer: syz [ 330.976470][ T9574] usb 3-1: SerialNumber: syz [ 331.024281][ T9574] usb 3-1: config 0 descriptor?? [ 331.061046][T13349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.071556][T13349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.090295][T13349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.099527][T13349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.158357][T13480] trusted_key: encrypted_key: insufficient parameters specified [ 331.685373][ T9574] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 331.693742][ T9574] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 331.956481][ T9574] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 331.967562][ T9574] usb 3-1: USB disconnect, device number 53 [ 332.013950][T13349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.725413][T13349] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.752875][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.760055][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.810182][ T5865] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 332.839936][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.847036][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.973125][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 332.976825][ T5815] Bluetooth: hci4: command tx timeout [ 333.024442][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.599400][ T5865] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 333.608521][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.617542][T13508] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 333.629488][ T5865] usb 4-1: config 0 descriptor?? [ 333.705660][T13349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.731522][T13349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.863772][ T5865] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 334.025136][T13529] sch_fq: defrate 0 ignored. [ 334.135867][T13349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.497709][ T5865] usb 4-1: USB disconnect, device number 32 [ 334.503774][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 334.800221][T13349] veth0_vlan: entered promiscuous mode [ 334.845547][T13349] veth1_vlan: entered promiscuous mode [ 334.928512][T13578] trusted_key: encrypted_key: insufficient parameters specified [ 335.433099][T13349] veth0_macvtap: entered promiscuous mode [ 335.452637][T13349] veth1_macvtap: entered promiscuous mode [ 335.466184][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.481549][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.491442][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.501899][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.512055][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.522838][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.527951][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 335.527961][ T29] audit: type=1400 audit(1735130240.805:944): avc: denied { map } for pid=13583 comm="syz.3.1040" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 335.532654][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.532670][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.532679][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.532691][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.533429][T13349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.679746][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.690273][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.700288][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.710779][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.720895][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.731711][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.741746][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.753338][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.763226][T13349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.773702][T13349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.784348][T13349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.798593][T13590] ip6gre1: entered promiscuous mode [ 335.858013][T13349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.867403][T13349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.876176][T13349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.897170][T13349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.924476][ T29] audit: type=1400 audit(1735130241.188:945): avc: denied { accept } for pid=13594 comm="syz.0.1041" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.015428][ T29] audit: type=1400 audit(1735130241.267:946): avc: denied { sys_chroot } for pid=13599 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 336.049486][ T29] audit: type=1400 audit(1735130241.306:947): avc: denied { setgid } for pid=13599 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 336.105539][ T29] audit: type=1400 audit(1735130241.306:948): avc: denied { setrlimit } for pid=13599 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 336.210703][ T29] audit: type=1400 audit(1735130241.306:949): avc: denied { read } for pid=13602 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 336.253802][ T5873] kernel write not supported for file /amidi2 (pid: 5873 comm: kworker/0:6) [ 336.325949][ T6273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.344858][ T6273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.899298][ T6273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.908329][ T6273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.933550][ T29] audit: type=1400 audit(1735130242.182:950): avc: denied { mounton } for pid=13349 comm="syz-executor" path="/root/syzkaller.qzm6BZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 336.962373][T13622] ceph: No mds server is up or the cluster is laggy [ 336.979797][ T29] audit: type=1400 audit(1735130242.221:951): avc: denied { mount } for pid=13349 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 337.401017][ T5824] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 337.563870][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 337.575506][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.604110][ T5814] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 337.619943][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.671512][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 337.693489][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.715483][ T5824] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 337.725432][ T5824] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.735942][ T5824] usb 4-1: Manufacturer: syz [ 337.743691][ T5824] usb 4-1: config 0 descriptor?? [ 337.769739][ T5814] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 337.781286][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.813368][ T29] audit: type=1400 audit(1735130243.048:952): avc: denied { ioctl } for pid=13666 comm="syz.2.1054" path="socket:[33427]" dev="sockfs" ino=33427 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 337.834430][ T5814] usb 1-1: Product: syz [ 337.842833][ T5814] usb 1-1: Manufacturer: syz [ 337.847527][ T5814] usb 1-1: SerialNumber: syz [ 337.881649][ T5814] usb 1-1: config 0 descriptor?? [ 338.329614][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.351887][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.507881][T13695] overlayfs: failed to clone lowerpath [ 338.703200][ T5814] usb 1-1: Firmware version (0.0) predates our first public release. [ 338.739487][ T5814] usb 1-1: Please update to version 0.2 or newer [ 338.914422][ T6305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.056829][ T5814] usb 1-1: USB disconnect, device number 26 [ 339.172139][ T6305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.248400][ T6305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.332161][ T6305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.474745][ T6305] bridge_slave_1: left allmulticast mode [ 339.489140][ T6305] bridge_slave_1: left promiscuous mode [ 339.495001][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.505086][ T6305] bridge_slave_0: left allmulticast mode [ 339.510737][ T6305] bridge_slave_0: left promiscuous mode [ 339.516720][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.740290][ T6305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.750485][ T6305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.760309][ T6305] bond0 (unregistering): Released all slaves [ 340.021836][ T6305] hsr_slave_0: left promiscuous mode [ 340.027539][ T6305] hsr_slave_1: left promiscuous mode [ 340.034491][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.042254][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.053344][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.062105][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.077020][ T6305] veth1_macvtap: left promiscuous mode [ 340.085152][ T6305] veth0_macvtap: left promiscuous mode [ 340.090835][ T6305] veth1_vlan: left promiscuous mode [ 340.100890][ T6305] veth0_vlan: left promiscuous mode [ 340.116993][ T5873] usb 4-1: USB disconnect, device number 33 [ 340.545112][ T5814] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 340.864533][T13746] netlink: 'syz.3.1061': attribute type 4 has an invalid length. [ 340.936403][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.949490][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 340.951355][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.963155][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.963534][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.980010][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.987345][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.994585][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.028379][ T5814] usb 3-1: config 253 has an invalid interface number: 79 but max is 0 [ 341.036977][ T5814] usb 3-1: config 253 has no interface number 0 [ 341.059958][ T5814] usb 3-1: config 253 interface 79 altsetting 64 endpoint 0x3 has an invalid bInterval 98, changing to 10 [ 341.126691][ T5814] usb 3-1: config 253 interface 79 has no altsetting 0 [ 341.144816][ T5814] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 341.163645][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.171694][ T5814] usb 3-1: Product: syz [ 341.181510][ T5814] usb 3-1: Manufacturer: syz [ 341.199834][ T5814] usb 3-1: SerialNumber: syz [ 341.385129][ T6305] team0 (unregistering): Port device team_slave_1 removed [ 341.459821][ T6305] team0 (unregistering): Port device team_slave_0 removed [ 341.519372][T13734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.527855][T13734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.657879][ T29] audit: type=1400 audit(1735130246.808:953): avc: denied { read } for pid=13731 comm="syz.2.1057" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 342.048546][ T8527] usb 3-1: Failed to submit usb control message: -71 [ 342.053366][ T5814] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 342.064372][ T8527] usb 3-1: unable to send the bmi data to the device: -71 [ 342.081026][ T5814] usb 3-1: USB disconnect, device number 54 [ 342.089741][ T8527] usb 3-1: unable to get target info from device [ 342.097174][ T8527] usb 3-1: could not get target info (-71) [ 342.119418][ T8527] usb 3-1: could not probe fw (-71) [ 343.067324][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1066'. [ 343.115619][T13745] chnl_net:caif_netlink_parms(): no params data found [ 343.122533][ T5815] Bluetooth: hci4: command tx timeout [ 343.277198][ T5866] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 343.324808][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.342681][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.383495][T13745] bridge_slave_0: entered allmulticast mode [ 343.407739][T13745] bridge_slave_0: entered promiscuous mode [ 343.419235][ T5866] usb 3-1: device descriptor read/64, error -71 [ 343.426770][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.437592][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.444726][T13745] bridge_slave_1: entered allmulticast mode [ 343.451556][T13745] bridge_slave_1: entered promiscuous mode [ 343.576740][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.600519][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.630327][T13803] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1072'. [ 343.701744][ T5866] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 344.170174][T13745] team0: Port device team_slave_0 added [ 344.286221][T13745] team0: Port device team_slave_1 added [ 344.331689][ T5866] usb 3-1: device descriptor read/64, error -71 [ 344.377594][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.384810][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.446158][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.459134][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.466074][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.492422][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.519857][ T5866] usb usb3-port1: attempt power cycle [ 344.556448][T13745] hsr_slave_0: entered promiscuous mode [ 344.562548][T13745] hsr_slave_1: entered promiscuous mode [ 344.578753][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.586976][T13745] Cannot create hsr debugfs directory [ 344.841238][ T5873] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 344.881460][ T29] audit: type=1400 audit(1735130250.034:954): avc: denied { read } for pid=13827 comm="syz.1.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.054381][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 345.071122][T13831] trusted_key: encrypted_key: insufficient parameters specified [ 345.217678][ T5815] Bluetooth: hci4: command tx timeout [ 345.427559][ T5866] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 345.457408][ T5866] usb 3-1: device descriptor read/8, error -71 [ 345.533366][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 345.540187][ T5873] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 345.551261][ T5873] usb 1-1: config 0 has no interface number 1 [ 345.559074][ T5873] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 345.569275][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.577598][ T5873] usb 1-1: Product: syz [ 345.592209][ T5873] usb 1-1: Manufacturer: syz [ 345.602512][ T5873] usb 1-1: SerialNumber: syz [ 345.623550][ T5873] usb 1-1: config 0 descriptor?? [ 345.712279][ T5873] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 345.740783][ T6324] udevd[6324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.759680][ T5866] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 345.790384][ T5866] usb 3-1: device descriptor read/8, error -71 [ 345.844287][ T5928] usb 1-1: USB disconnect, device number 27 [ 345.914757][ T5866] usb usb3-port1: unable to enumerate USB device [ 346.008549][T13745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.039610][T13745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.067351][T13745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.102194][T13745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.107042][T13860] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 346.231731][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.307122][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.329573][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.336723][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.351627][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.358731][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.113111][T13745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.123697][T13745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.260571][ T29] audit: type=1400 audit(1735130251.659:955): avc: denied { append } for pid=13862 comm="syz.2.1081" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 347.297082][T13978] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1083'. [ 347.312926][ T5815] Bluetooth: hci4: command tx timeout [ 347.353274][ T5814] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 347.471242][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.516652][ T5814] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 347.546808][ T5814] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 347.596671][ T5814] usb 4-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 347.639072][ T5814] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.669468][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 347.680667][ T5814] usb 4-1: SerialNumber: syz [ 452.866735][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 452.873709][ C1] rcu: 0-...!: (1 GPs behind) idle=b774/1/0x4000000000000000 softirq=48446/48447 fqs=1 [ 452.884704][ C1] rcu: (detected by 1, t=10505 jiffies, g=34929, q=489 ncpus=2) [ 452.892424][ C1] Sending NMI from CPU 1 to CPUs 0: [ 452.892449][ C0] NMI backtrace for cpu 0 [ 452.892458][ C0] CPU: 0 UID: 0 PID: 13847 Comm: syz.1.1077 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 452.892475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 452.892483][ C0] RIP: 0010:hlock_class+0x56/0x130 [ 452.892508][ C0] Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 1c e5 96 e8 c2 f7 86 00 48 0f a3 1d 7a 4b 6f 15 <73> 13 48 69 c3 c8 00 00 00 5b 48 05 e0 20 e5 96 c3 cc cc cc cc 48 [ 452.892522][ C0] RSP: 0018:ffffc90000007b28 EFLAGS: 00000047 [ 452.892535][ C0] RAX: 0000000000000001 RBX: 0000000000000ac6 RCX: ffffffff8175d13e [ 452.892544][ C0] RDX: fffffbfff2dca3c4 RSI: 0000000000000008 RDI: ffffffff96e51e18 [ 452.892554][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dca3c3 [ 452.892564][ C0] R10: ffffffff96e51e1f R11: 0000000000000001 R12: 0000000000000002 [ 452.892573][ C0] R13: ffff88807c0b0000 R14: 0000000000000ac6 R15: ffff88807c0b0ae0 [ 452.892583][ C0] FS: 00007f77705d56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 452.892599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.892610][ C0] CR2: ffffffffffffffff CR3: 00000000593ce000 CR4: 00000000003526f0 [ 452.892620][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 452.892629][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 452.892638][ C0] Call Trace: [ 452.892644][ C0] [ 452.892651][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 452.892669][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 452.892683][ C0] ? nmi_handle+0x1ac/0x5d0 [ 452.892699][ C0] ? hlock_class+0x56/0x130 [ 452.892718][ C0] ? default_do_nmi+0x6a/0x160 [ 452.892732][ C0] ? exc_nmi+0x170/0x1e0 [ 452.892751][ C0] ? end_repeat_nmi+0xf/0x53 [ 452.892773][ C0] ? hlock_class+0x4e/0x130 [ 452.892792][ C0] ? hlock_class+0x56/0x130 [ 452.892811][ C0] ? hlock_class+0x56/0x130 [ 452.892829][ C0] ? hlock_class+0x56/0x130 [ 452.892848][ C0] [ 452.892852][ C0] [ 452.892857][ C0] __lock_acquire+0x410/0x3c40 [ 452.892875][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 452.892892][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 452.892908][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 452.892925][ C0] lock_acquire.part.0+0x11b/0x380 [ 452.892940][ C0] ? advance_sched+0xd8/0xc60 [ 452.892957][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 452.892972][ C0] ? rcu_is_watching+0x12/0xc0 [ 452.892991][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 452.893010][ C0] ? advance_sched+0xd8/0xc60 [ 452.893025][ C0] ? lock_acquire+0x2f/0xb0 [ 452.893038][ C0] ? advance_sched+0xd8/0xc60 [ 452.893053][ C0] ? __pfx_advance_sched+0x10/0x10 [ 452.893066][ C0] _raw_spin_lock+0x2e/0x40 [ 452.893081][ C0] ? advance_sched+0xd8/0xc60 [ 452.893094][ C0] advance_sched+0xd8/0xc60 [ 452.893110][ C0] ? timerqueue_del+0x83/0x150 [ 452.893124][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 452.893142][ C0] ? __pfx_advance_sched+0x10/0x10 [ 452.893155][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 452.893177][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 452.893195][ C0] ? read_tsc+0x9/0x20 [ 452.893217][ C0] hrtimer_interrupt+0x392/0x8e0 [ 452.893239][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 452.893257][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 452.893275][ C0] [ 452.893280][ C0] [ 452.893285][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.893304][ C0] RIP: 0010:lock_release+0x3e5/0x6f0 [ 452.893333][ C0] Code: 7e 83 f8 01 0f 85 fe 01 00 00 9c 58 f6 c4 02 0f 85 e9 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 452.893345][ C0] RSP: 0018:ffffc9000438f660 EFLAGS: 00000206 [ 452.893357][ C0] RAX: dffffc0000000000 RBX: 1ffff92000871ece RCX: ffffc9000438f6b0 [ 452.893367][ C0] RDX: 1ffff1100f81615a RSI: ffffffff8b6cdce0 RDI: ffffffff8bd1ed60 [ 452.893377][ C0] RBP: ffffffffffffffff R08: 0000000000000000 R09: fffffbfff20be6aa [ 452.893386][ C0] R10: ffffffff905f3557 R11: 0000000000000001 R12: 0000000000000000 [ 452.893395][ C0] R13: 0000000000000001 R14: ffff88807c0b0ad8 R15: ffff88807c0b0000 [ 452.893411][ C0] ? __unix_dgram_recvmsg+0x829/0xe50 [ 452.893431][ C0] ? __pfx_lock_release+0x10/0x10 [ 452.893446][ C0] ? __pfx_lock_release+0x10/0x10 [ 452.893462][ C0] ? mark_held_locks+0x9f/0xe0 [ 452.893477][ C0] __mutex_unlock_slowpath+0xa3/0x690 [ 452.893496][ C0] ? put_pid+0xd/0x30 [ 452.893509][ C0] ? __scm_recv_common.constprop.0+0x19f/0x650 [ 452.893526][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 452.893544][ C0] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 452.893568][ C0] __unix_dgram_recvmsg+0x829/0xe50 [ 452.893589][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 452.893607][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 452.893626][ C0] ? find_held_lock+0x2d/0x110 [ 452.893646][ C0] ? __might_fault+0x13b/0x190 [ 452.893667][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 452.893686][ C0] ____sys_recvmsg+0x5f8/0x6b0 [ 452.893705][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 452.893726][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 452.893747][ C0] ___sys_recvmsg+0x115/0x1a0 [ 452.893762][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 452.893775][ C0] ? find_held_lock+0x2d/0x110 [ 452.893798][ C0] ? __pfx___might_resched+0x10/0x10 [ 452.893816][ C0] ? __might_fault+0xe3/0x190 [ 452.893835][ C0] do_recvmmsg+0x2f8/0x740 [ 452.893850][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 452.893864][ C0] ? __pfx_lock_release+0x10/0x10 [ 452.893887][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 452.893902][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 452.893920][ C0] do_syscall_64+0xcd/0x250 [ 452.893938][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.893956][ C0] RIP: 0033:0x7f7772785d29 [ 452.893969][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.893982][ C0] RSP: 002b:00007f77705d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 452.893995][ C0] RAX: ffffffffffffffda RBX: 00007f7772976080 RCX: 00007f7772785d29 [ 452.894005][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000008 [ 452.894013][ C0] RBP: 00007f7772801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 452.894022][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 452.894030][ C0] R13: 0000000000000000 R14: 00007f7772976080 R15: 00007ffe5b1de8b8 [ 452.894045][ C0] [ 452.894444][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g34929 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 453.544007][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 453.553971][ C1] rcu: RCU grace-period kthread stack dump: [ 453.559869][ C1] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 453.571641][ C1] Call Trace: [ 453.574925][ C1] [ 453.577856][ C1] __schedule+0xe58/0x5ad0 [ 453.582276][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 453.587491][ C1] ? __pfx___schedule+0x10/0x10 [ 453.592344][ C1] ? schedule+0x298/0x350 [ 453.596671][ C1] ? __pfx_lock_release+0x10/0x10 [ 453.601696][ C1] ? lock_acquire+0x2f/0xb0 [ 453.606194][ C1] ? schedule+0x1fd/0x350 [ 453.610524][ C1] schedule+0xe7/0x350 [ 453.614592][ C1] schedule_timeout+0x124/0x280 [ 453.619445][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 453.624820][ C1] ? __pfx_process_timeout+0x10/0x10 [ 453.630376][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 453.636184][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 453.641646][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 453.646411][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 453.651695][ C1] ? rcu_gp_init+0xc82/0x1630 [ 453.656373][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 453.661577][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 453.667384][ C1] rcu_gp_kthread+0x271/0x380 [ 453.672062][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 453.677263][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.682470][ C1] ? __kthread_parkme+0x148/0x220 [ 453.687500][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 453.692697][ C1] kthread+0x2c1/0x3a0 [ 453.696765][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.701959][ C1] ? __pfx_kthread+0x10/0x10 [ 453.706550][ C1] ret_from_fork+0x45/0x80 [ 453.710965][ C1] ? __pfx_kthread+0x10/0x10 [ 453.715556][ C1] ret_from_fork_asm+0x1a/0x30 [ 453.720335][ C1] [ 453.723346][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 453.729662][ C1] CPU: 1 UID: 0 PID: 6282 Comm: kworker/u8:12 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 453.740588][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 453.750638][ C1] Workqueue: events_unbound toggle_allocation_gate [ 453.757144][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 453.763819][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ba 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 453.783423][ C1] RSP: 0018:ffffc90003077998 EFLAGS: 00000293 [ 453.789489][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818e071c [ 453.797455][ C1] RDX: ffff888036154880 RSI: ffffffff818e06f6 RDI: 0000000000000005 [ 453.805429][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 453.813395][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 453.821362][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 453.829328][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 453.838255][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.844836][ C1] CR2: 00007fea4d43aaa2 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 453.852805][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 453.860773][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 453.868739][ C1] Call Trace: [ 453.872011][ C1] [ 453.874849][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 453.881179][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 453.886380][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 453.891852][ C1] ? timekeeping_advance+0x72e/0xa90 [ 453.897135][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 453.902771][ C1] ? __asan_memcpy+0x3c/0x60 [ 453.907366][ C1] ? rcu_is_watching+0x12/0xc0 [ 453.912134][ C1] ? update_process_times+0x178/0x2d0 [ 453.917508][ C1] ? __pfx_update_process_times+0x10/0x10 [ 453.923229][ C1] ? update_wall_time+0x1c/0x40 [ 453.928078][ C1] ? tick_nohz_handler+0x376/0x530 [ 453.933197][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 453.938659][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 453.944042][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 453.949760][ C1] ? read_tsc+0x9/0x20 [ 453.953839][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 453.958965][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 453.965119][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 453.970936][ C1] [ 453.973863][ C1] [ 453.976789][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.982950][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 453.989017][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 453.995085][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 454.001153][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 454.007224][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 454.012254][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 454.017277][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 454.022395][ C1] text_poke_bp_batch+0x22b/0x760 [ 454.027428][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 454.032975][ C1] ? __jump_label_patch+0x1db/0x400 [ 454.038181][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 454.044432][ C1] text_poke_finish+0x30/0x40 [ 454.049114][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 454.055099][ C1] jump_label_update+0x1d7/0x400 [ 454.060045][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 454.065941][ C1] static_key_enable+0x1a/0x20 [ 454.070706][ C1] toggle_allocation_gate+0xfc/0x260 [ 454.075990][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 454.081881][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 454.087083][ C1] ? process_one_work+0x921/0x1ba0 [ 454.092192][ C1] ? lock_acquire+0x2f/0xb0 [ 454.096694][ C1] ? process_one_work+0x921/0x1ba0 [ 454.101806][ C1] process_one_work+0x9c5/0x1ba0 [ 454.106748][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 454.112123][ C1] ? __pfx_process_one_work+0x10/0x10 [ 454.117497][ C1] ? rcu_is_watching+0x12/0xc0 [ 454.122268][ C1] ? assign_work+0x1a0/0x250 [ 454.126856][ C1] worker_thread+0x6c8/0xf00 [ 454.131456][ C1] ? __pfx_worker_thread+0x10/0x10 [ 454.136568][ C1] kthread+0x2c1/0x3a0 [ 454.140635][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.145833][ C1] ? __pfx_kthread+0x10/0x10 [ 454.150427][ C1] ret_from_fork+0x45/0x80 [ 454.154842][ C1] ? __pfx_kthread+0x10/0x10 [ 454.159433][ C1] ret_from_fork_asm+0x1a/0x30 [ 454.164215][ C1]