last executing test programs: 3m6.632618501s ago: executing program 3 (id=436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x20, 0x30, 0x5, {0x5, 0x6, "b105c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 2m40.450009142s ago: executing program 3 (id=436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x20, 0x30, 0x5, {0x5, 0x6, "b105c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 1m48.569972423s ago: executing program 3 (id=436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x20, 0x30, 0x5, {0x5, 0x6, "b105c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 1m24.298043532s ago: executing program 3 (id=436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x20, 0x30, 0x5, {0x5, 0x6, "b105c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 54.196852566s ago: executing program 3 (id=436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x20, 0x30, 0x5, {0x5, 0x6, "b105c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 25.051116963s ago: executing program 3 (id=436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x20, 0x30, 0x5, {0x5, 0x6, "b105c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 16.14886405s ago: executing program 4 (id=819): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket(0x11, 0x800000003, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)={0x4, 0x0, {0x3, 0x1, 0x1ff, 0x900a2fca523b68a9, 0x4}, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001600)="4ad1ff49ca613b35c12b8bb8475c8e54bea495ec5746b2dd1fa94347faf077cfaf8cb654dcc1e9178075265e1d450f52d3642c7cb01ce8adff2cd2df5ebab60627b9b27b3a00a0412e248d51b3265ab1f5c3b1e9c605fc66326381d582e829dbddb3c18f", 0x64}, {0x0}], 0x2}}], 0x1, 0x9200000004004880) r4 = dup3(r2, r1, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x74a081c1, 0x0) 16.091926286s ago: executing program 2 (id=820): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000840)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x3, 0x4, r3, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0xc, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 15.039096418s ago: executing program 0 (id=822): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r3 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0x1, {0x0, 0x10000000, 0x0, 0x1}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f0000000000"]) 13.938908692s ago: executing program 0 (id=824): io_setup(0x7, &(0x7f0000001700)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000040)={@multicast, @remote, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "1a0c65"}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x181641, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) io_submit(r0, 0x1, &(0x7f0000005fc0)=[&(0x7f0000004d40)={0x0, 0x0, 0x0, 0x1, 0x9, r1, 0x0, 0x0, 0x9, 0x0, 0x2b95bb9ccd75a299}]) 13.593724111s ago: executing program 2 (id=825): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c"}, 0x48, 0xffffffffffffffff) open(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xf}}], 0x1, 0x0) 11.405191637s ago: executing program 1 (id=826): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$AUDIT_SET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, 0x3e9, 0x200, 0x70bd2a, 0x25dfdbfb, {0x24, 0x0, 0x0, 0x0, 0x9, 0x3, 0x2000, 0x0, 0x0, 0xba, 0x5}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c0) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04dac7aabdffffffffff0371d79fee63cd8f57e399fdea10d7392d"], 0xb) syz_open_dev$cec(0x0, 0x0, 0x10140) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000ab0439bf788a2be79420fc707007090a6edeb03880750d2f84971dfba144d9e2e16235c63ee85e1c32cf39cb71d08b45f0be9b47baa444701df0baa206ab30353b52667ac9358c4309d5914638e290a3a2285ba1f64ae6da17db3df92403d8fde9f7da18423ad22817c016e33b2fd1470d80a5ff25d6ca0f413e3792df602fad8f742b56567aad3a2dd7aded5b45acf31e6fc49d44e2fe51dd8bd2567819bf2461f37364ce864ccbcfb39443"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)={0x34, r5, 0x319, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd494037a79928ea546a9db2c7c67f6a8c456d8"], 0xf) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) 11.252448343s ago: executing program 2 (id=827): socket$kcm(0x10, 0x400000002, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.250666005s ago: executing program 0 (id=828): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x410301, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x17) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000680)=ANY=[], 0xfdef) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="150000006501000000000000000baf6463ff"], 0x15) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 10.26953093s ago: executing program 4 (id=829): ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8004551a, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x0, 0x7c}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000740)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2c]}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @multicast1}, 0x1ce}) 8.234890426s ago: executing program 4 (id=830): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x35) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x4c, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x335}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000300)={0x8c93, 0x0, 'client0\x00', 0x0, "fada128e1d9fabfc", "1f15f151ad62129d4b65d8423deaf5612fd98ea9387ef3469e0d395c3520ff23"}) tkill(r1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24", 0xb6, 0xc001, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @ndisc_ra}}}}}, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045e8000025000000190004000400ad6e000d000000000000060400000000", 0x36}], 0x1) 7.364142277s ago: executing program 4 (id=831): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) syz_usb_connect(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f0000000040)=ANY=[@ANYBLOB="36d5e52000006f253301520fec6a8bb400", @ANYRES16=r7, @ANYBLOB="00012cbd7000fcdbdf25320000000c0099000100000075000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x5) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) vmsplice(r3, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001580)="6f16ebb6c62e3f7137461066d4431d743e620607e18a94a14ff4b7e9d9da43be23c5de37c4aca7c3b6064cf0e88bc61c6f5ef70405a475ad86def3bb07891d1d82c1c833aca32e304746db4875ce97e6ad02c68590f32edab4c3a95010499e99876eb92b17b74c0386c9d534e6bec1fc3e1468af628da45b97d0d6b6a3c0c07f77082c49e07e38ddcf365ccaf5e92a63281cbd16b4454a9f3dfe732833f1b754822f8ccee43b41ae12755641f46853d69c311cab0b7a231199e646ba2b316170be29390b408f1eead2c4fef697fc73202bab1acfaf60462c7afae89d58c4d225f3d3cefb773683ddf9340bb1bbee", 0xee}, {&(0x7f0000001800)}], 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001400)}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r1, 0x0, r4, 0x0, 0x4681, 0x5) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000240)='cdg\x00', 0x4) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendto$inet(r8, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)="34ff051962da72203695c632819f3e5c9d078056c2491816c3ef39cfd0f80c8ccb0c37cbc4d085ca9937b538f81e931f4c611d008c34ce308866a88a8264e6b6cba7353aceb7539e2ed16448874af1243dc8b4df91a6ae545436a4937d52b49bde66c034e15d87788ab01907f85d1579f033b3b09083b5bb220c351fbce355c69a5377dbe9bd1f8f6f8e620da181956b170a808d3a201599b10c4ea9536e88279e9dbaa656250d5cc82ecbf0da", 0xad}, {&(0x7f0000000840)="febb04c9930974d693dd07c3c0cc1478319bab17841c9388fcde165e67b524f015151a04c057d82f353c14eefbf3236195989144fac4814173dca64e2153059f0a797f4d523df3c5d70ad92e006aafb9ffd0607491168e79d139abf11035663d1c4704a494cad4a7c7b0cd28699835c81bf83e2166d0e276ab419d0c642f8882946c14743122a7575fac6524f39ab0d3fc8d268a18dc823106d1c965df81ba80e3f83ae1d90cf4d3d895bed6b97b5fb2b1c133f6effec33141c34eae65cdeabd976ad57648aa3b18ccb17229bf08424d475c8b03379f5500d595bed20fe8d3d0b794e5ca7aefb08c63fe3ff13043c1cf53ee37ecfd016d", 0xf7}, {&(0x7f0000000d80)="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", 0x2a9}], 0x3}}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 7.135092366s ago: executing program 0 (id=832): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) personality(0x500006) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x3b}}]}, &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffe}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_procfs(0xffffffffffffffff, 0x0) 7.030143289s ago: executing program 1 (id=833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2a]}, 0x8) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 6.917011341s ago: executing program 2 (id=834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0x8, 0x4) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffffff, 0x3}}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000810) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {0x0, r3, r1}}, 0x18) 5.759231965s ago: executing program 1 (id=835): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x2, 0x0, 0x5, 0x0, 0x5, 0x6, 0x0, 0x8, 0x5, 0x8, 0x4, 0x2, 0x30, 0x6, 0x9, 0x7], 0x4000, 0x32054}) r1 = socket(0x0, 0x3, 0x965) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xf0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) execve(&(0x7f0000000680)='./file1\x00', 0x0, &(0x7f0000000340)) fsopen(&(0x7f0000000880)='proc\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0], 0x100}, 0x1, 0x0, 0x0, 0x4080}, 0x8091) socket(0x9, 0x5, 0xed) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x84000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregset(0x4205, r3, 0x202, &(0x7f00000007c0)={0x0}) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d809f2e2ff", 0x14}], 0x1}, 0x0) 4.746333334s ago: executing program 1 (id=836): socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0xb0d, 0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000040000000000000000c320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x99) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0xc}]}}, &(0x7f0000000800)=""/175, 0x26, 0xaf, 0x1, 0x0, 0x0, @void, @value}, 0x20) capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)={0x0, 0x10001, 0x25, 0x2, 0x1, 0x20}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.742183461s ago: executing program 1 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0), 0xc00}, 0x20) io_setup(0x3ff, &(0x7f0000000500)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f00000004c0)={0x200001000, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {0xf}, &(0x7f0000000740)=""/238, 0xee, &(0x7f0000000100)=""/54, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r3 = getpid() sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r5 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYRESOCT=r3, @ANYRES8=r4], &(0x7f0000002040)=""/4099, 0x26, 0x1003, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioperm(0x0, 0x0, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9111a0400", 0x14}], 0x1}, 0x0) 2.654620894s ago: executing program 1 (id=838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x6, 0x803, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xeb) pread64(r4, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0xa, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401}], {0x14, 0x10}}, 0x3c}}, 0x0) 2.421640388s ago: executing program 2 (id=839): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x202202) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) write$vga_arbiter(r4, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x1383}) 2.416270472s ago: executing program 4 (id=840): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xa5f) syz_emit_ethernet(0x4a, &(0x7f0000000940)=ANY=[@ANYRES32=0x41424344], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x80, 0x5, 0x8, @local, @empty, 0x8000, 0x700, 0x1f, 0x1}}) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000000)=0x8) fchown(r4, 0xffffffffffffffff, 0xffffffffffffffff) r5 = memfd_secret(0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80648c6394f90324fc60586500000a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) 1.656551921s ago: executing program 0 (id=841): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup2(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) tkill(0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r6, 0x10, 0x8000, 0x200, 0x3, {{0x34, 0x4, 0x2, 0x3, 0xd0, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x1f, 0x0, [{0x1, 0x10, "b1c477729992bce20e65bc0ae63b"}, {0x2, 0x9, "a9ea393a40838d"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x31}, @timestamp_addr={0x44, 0x2c, 0x66, 0x1, 0x3, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x5ef}, {@remote, 0x8}, {@multicast2}]}, @timestamp_prespec={0x44, 0x54, 0xeb, 0x3, 0x6, [{@broadcast, 0x7}, {@empty, 0x6}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@local, 0x80000000}, {@empty, 0x3f}, {@multicast2, 0x7}, {@local, 0x85}, {@broadcast}]}, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}]}]}}}}}) socket$netlink(0x10, 0x3, 0xc) write$P9_RGETLOCK(r5, &(0x7f0000000040)={0x21, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, '%+('}}, 0xe6da) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0710670600000f000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000070700004c00d6cfcc75000000000000bf54000000000000070400000400f9ffad4301000000000095004000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b9ff129e609f4c787c6002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17691bb10184031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f729468548e5d8302802e5846b920"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), 0x4) fcntl$setstatus(r3, 0x4, 0x2400) write$UHID_INPUT(r1, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 459.796572ms ago: executing program 4 (id=842): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/222, 0xde) symlink(&(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "da2a1646"}, &(0x7f0000000100)=0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 30.523763ms ago: executing program 0 (id=843): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) capset(&(0x7f0000000080), &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xcc000) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000040)) 0s ago: executing program 2 (id=844): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$AUDIT_SET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, 0x3e9, 0x200, 0x70bd2a, 0x25dfdbfb, {0x24, 0x0, 0x0, 0x0, 0x9, 0x3, 0x2000, 0x0, 0x0, 0xba, 0x5}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c0) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04dac7aabdffffffffff0371d79fee63cd8f57e399fdea10d7392d"], 0xb) syz_open_dev$cec(0x0, 0x0, 0x10140) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000ab0439bf788a2be79420fc707007090a6edeb03880750d2f84971dfba144d9e2e16235c63ee85e1c32cf39cb71d08b45f0be9b47baa444701df0baa206ab30353b52667ac9358c4309d5914638e290a3a2285ba1f64ae6da17db3df92403d8fde9f7da18423ad22817c016e33b2fd1470d80a5ff25d6ca0f413e3792df602fad8f742b56567aad3a2dd7aded5b45acf31e6fc49d44e2fe51dd8bd2567819bf2461f37364ce864ccbcfb39443"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)={0x34, r5, 0x319, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd494037a79928ea546a9db2c7c67f6a8c456d8"], 0xf) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): ering): (slave bond_slave_0): Releasing backup interface [ 310.417973][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.431366][ T62] bond0 (unregistering): Released all slaves [ 310.590322][ T5302] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 310.628499][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 310.868310][ T5302] usb 5-1: Using ep0 maxpacket: 16 [ 310.899963][ T5225] Bluetooth: hci3: command tx timeout [ 310.946389][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 311.604674][ T5302] usb 5-1: config 0 has no interfaces? [ 311.612375][ T25] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 311.628079][ T5302] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21 [ 311.644807][ T25] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 311.662599][ T5302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.681863][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 311.694912][ T5302] usb 5-1: Product: syz [ 311.715846][ T5302] usb 5-1: Manufacturer: syz [ 311.722661][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.735546][ T5302] usb 5-1: SerialNumber: syz [ 311.747829][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.760673][ T5302] usb 5-1: config 0 descriptor?? [ 311.795941][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.818383][ T7807] chnl_net:caif_netlink_parms(): no params data found [ 311.825733][ T25] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 311.844051][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.925784][ T25] usb 3-1: config 0 descriptor?? [ 312.000174][ T62] hsr_slave_0: left promiscuous mode [ 312.030320][ T62] hsr_slave_1: left promiscuous mode [ 312.057010][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.077695][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.110365][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.125021][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.171791][ T25] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 312.223152][ T62] veth1_macvtap: left promiscuous mode [ 312.236540][ T62] veth0_macvtap: left promiscuous mode [ 312.242725][ T62] veth1_vlan: left promiscuous mode [ 312.253706][ T62] veth0_vlan: left promiscuous mode [ 312.624701][ T25] usb 5-1: USB disconnect, device number 20 [ 312.741307][ T939] usb 3-1: USB disconnect, device number 16 [ 312.792586][ T939] usblp0: removed [ 312.980011][ T5225] Bluetooth: hci3: command tx timeout [ 315.049160][ T5225] Bluetooth: hci3: command tx timeout [ 315.311255][ T62] team0 (unregistering): Port device team_slave_1 removed [ 315.392037][ T62] team0 (unregistering): Port device team_slave_0 removed [ 315.478367][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 315.710410][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.768582][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.785106][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 315.794594][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.827686][ T8] usb 2-1: config 0 descriptor?? [ 316.247870][ T8] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 316.265816][ T8] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 316.464665][ T8] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 316.815867][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.879843][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.979144][ T7807] bridge_slave_0: entered allmulticast mode [ 317.033186][ T7807] bridge_slave_0: entered promiscuous mode [ 317.127025][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.142555][ T5225] Bluetooth: hci3: command tx timeout [ 317.194347][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.203845][ T7807] bridge_slave_1: entered allmulticast mode [ 317.211159][ T7807] bridge_slave_1: entered promiscuous mode [ 317.307763][ T8] usb 2-1: USB disconnect, device number 12 [ 317.333142][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.353804][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.541740][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.548854][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.741117][ T7807] team0: Port device team_slave_0 added [ 317.769396][ T7807] team0: Port device team_slave_1 added [ 317.848491][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.858410][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.889612][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.902771][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.918581][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.033484][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.190726][ T7807] hsr_slave_0: entered promiscuous mode [ 319.388862][ T7807] hsr_slave_1: entered promiscuous mode [ 319.511955][ T7807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.597747][ T7807] Cannot create hsr debugfs directory [ 320.338381][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 320.406623][ T7952] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.563' sets config #0 [ 320.511629][ T9] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.629926][ T9] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 320.895967][ T9] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 321.117205][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 321.168655][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.210456][ T7943] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.508851][ T5270] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 321.658242][ T5302] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 321.672863][ T7807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.683447][ T5270] usb 3-1: Using ep0 maxpacket: 8 [ 321.696639][ T7807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.707864][ T5270] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 321.717167][ T5270] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.731744][ T7807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.739054][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.755046][ T7807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.763568][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.803778][ T5270] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.848380][ T5302] usb 2-1: Using ep0 maxpacket: 8 [ 321.869009][ T5302] usb 2-1: config 0 has no interfaces? [ 321.869024][ T5270] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.900460][ T5302] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 321.931918][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.955919][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.025971][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.033281][ T5302] usb 2-1: config 0 descriptor?? [ 322.093902][ T7807] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.124201][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.131395][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.182584][ T5270] usb 3-1: usb_control_msg returned -32 [ 322.193885][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.201096][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.227675][ T5270] usbtmc 3-1:16.0: can't read capabilities [ 322.686292][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.860204][ T7807] veth0_vlan: entered promiscuous mode [ 322.930908][ T7807] veth1_vlan: entered promiscuous mode [ 322.999860][ T7990] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 323.214874][ T7807] veth0_macvtap: entered promiscuous mode [ 323.228700][ T5270] usb 3-1: USB disconnect, device number 17 [ 324.171067][ T7807] veth1_macvtap: entered promiscuous mode [ 324.180843][ T9] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 324.220149][ T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input13 [ 324.244430][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.358300][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.373664][ T9] usb 5-1: USB disconnect, device number 21 [ 324.379740][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 324.414814][ T937] usb 2-1: USB disconnect, device number 13 [ 324.418728][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.457832][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.522394][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.556041][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.579134][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.601462][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.615104][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.633283][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 324.688456][ T5270] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 324.734173][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.755416][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.808776][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.837541][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.849058][ T5270] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 324.887064][ T5270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.907996][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.928915][ T5270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.941019][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.961352][ T5270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.975998][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.997870][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.009473][ T5270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.018496][ T5270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.025770][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.033648][ T5270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.057957][ T7807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.073452][ T7807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.082363][ T7807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.091275][ T7807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.144137][ T5302] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 325.201295][ T5270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.211278][ T5270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.224107][ T5270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.232118][ T5270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.249981][ T5270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.264020][ T5270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.272008][ T5270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.281746][ T5270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.297880][ T5270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.305994][ T5270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.318921][ T5270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.339816][ T5270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.387633][ T5302] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.399070][ T5302] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 325.526647][ T5270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.545163][ T5270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.556199][ T5270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.564582][ T5270] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.573800][ T5270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.617738][ T5270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.655911][ T5270] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 325.665932][ T5270] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 325.679772][ T5270] usb 1-1: Product: syz [ 325.684253][ T5270] usb 1-1: Manufacturer: syz [ 325.697284][ T5270] usb 1-1: SerialNumber: syz [ 325.822297][ T5270] usb 1-1: config 0 descriptor?? [ 325.939764][ T5270] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 326.514146][ T5302] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 326.525419][ T5302] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 326.534743][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.552987][ T8012] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 326.562096][ T5302] hub 2-1:1.0: bad descriptor, ignoring hub [ 326.568057][ T5302] hub 2-1:1.0: probe with driver hub failed with error -5 [ 326.576246][ T5302] cdc_wdm 2-1:1.0: skipping garbage [ 326.608622][ T5302] cdc_wdm 2-1:1.0: skipping garbage [ 326.615920][ T5302] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 326.623110][ T5302] cdc_wdm 2-1:1.0: Unknown control protocol [ 327.107540][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 327.222083][ T937] usb 1-1: USB disconnect, device number 21 [ 327.250483][ T937] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 327.418227][ T5302] usb 2-1: USB disconnect, device number 14 [ 327.739542][ T937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 327.906194][ T937] usb 2-1: Using ep0 maxpacket: 8 [ 327.926415][ T937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.956347][ T937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 327.987796][ T937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 328.012244][ T937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 328.063703][ T937] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 328.099066][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.156077][ T937] hub 2-1:1.0: bad descriptor, ignoring hub [ 328.167011][ T937] hub 2-1:1.0: probe with driver hub failed with error -5 [ 328.197183][ T937] cdc_wdm 2-1:1.0: skipping garbage [ 328.205415][ T937] cdc_wdm 2-1:1.0: skipping garbage [ 328.232416][ T937] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 328.254787][ T937] cdc_wdm 2-1:1.0: Unknown control protocol [ 328.391434][ T8052] Cannot find add_set index 0 as target [ 328.525560][ T937] usb 2-1: USB disconnect, device number 15 [ 329.339825][ T5302] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 329.508305][ T5302] usb 2-1: Using ep0 maxpacket: 8 [ 329.632426][ T5302] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 329.641944][ T5302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.650063][ T5302] usb 2-1: Product: syz [ 329.654264][ T5302] usb 2-1: Manufacturer: syz [ 329.659057][ T5302] usb 2-1: SerialNumber: syz [ 330.808634][ T5302] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 332.011838][ T5302] usb 2-1: USB disconnect, device number 16 [ 332.033310][ T5302] usblp0: removed [ 332.827054][ T6095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.864535][ T6095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.919381][ T6095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.927444][ T6095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.751432][ T4610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.787881][ T4610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.874019][ T4610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.939362][ T4610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.961451][ T4610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.971657][ T4610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.148541][ T8094] Cannot find add_set index 0 as target [ 337.284775][ T4610] Bluetooth: hci3: command tx timeout [ 338.523942][ T939] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 338.682585][ T939] usb 1-1: Using ep0 maxpacket: 32 [ 338.691108][ T939] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 338.702588][ T939] usb 1-1: config 0 has no interface number 0 [ 338.745250][ T939] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 338.756424][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.781286][ T939] usb 1-1: Product: syz [ 338.785455][ T939] usb 1-1: Manufacturer: syz [ 338.804794][ T939] usb 1-1: SerialNumber: syz [ 338.821623][ T939] usb 1-1: config 0 descriptor?? [ 338.844549][ T939] smsc95xx v2.0.0 [ 339.239903][ T939] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 339.263913][ T939] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 339.456051][ T4610] Bluetooth: hci3: command tx timeout [ 339.884170][ T29] audit: type=1400 audit(1727516933.964:579): avc: denied { setattr } for pid=8115 comm="syz.1.594" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.167488][ T6095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.190741][ T29] audit: type=1400 audit(1727516934.294:580): avc: denied { write } for pid=8117 comm="syz.1.595" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.258250][ T29] audit: type=1400 audit(1727516934.294:581): avc: denied { add_name } for pid=8117 comm="syz.1.595" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.341025][ T29] audit: type=1400 audit(1727516934.294:582): avc: denied { create } for pid=8117 comm="syz.1.595" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 340.375832][ T29] audit: type=1400 audit(1727516934.294:583): avc: denied { associate } for pid=8117 comm="syz.1.595" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 340.450047][ T6095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.468834][ T29] audit: type=1400 audit(1727516934.554:584): avc: denied { read } for pid=8119 comm="syz.4.596" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 340.543947][ T8123] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 340.572154][ T29] audit: type=1400 audit(1727516934.554:585): avc: denied { open } for pid=8119 comm="syz.4.596" path="/83/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 340.651323][ T29] audit: type=1400 audit(1727516934.564:586): avc: denied { ioctl } for pid=8119 comm="syz.4.596" path="/83/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 340.698809][ T6095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.834076][ T6095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.941278][ T29] audit: type=1400 audit(1727516935.034:587): avc: denied { connect } for pid=8128 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.058340][ T29] audit: type=1400 audit(1727516935.034:588): avc: denied { setopt } for pid=8128 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.204028][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 341.528739][ T4610] Bluetooth: hci3: command tx timeout [ 341.538474][ T6095] bridge_slave_1: left allmulticast mode [ 341.544151][ T6095] bridge_slave_1: left promiscuous mode [ 341.578630][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.613182][ T6095] bridge_slave_0: left allmulticast mode [ 341.619088][ T6095] bridge_slave_0: left promiscuous mode [ 341.631614][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.634541][ T939] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 341.693225][ T939] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 341.913642][ T939] usb 1-1: USB disconnect, device number 22 [ 342.008849][ T8140] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 342.019564][ T8140] cramfs: wrong magic [ 344.302947][ T5225] Bluetooth: hci3: command tx timeout [ 345.311771][ T5225] Bluetooth: hci0: command 0x0406 tx timeout [ 347.694921][ T8174] ubi: mtd0 is already attached to ubi0 [ 348.744535][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.755719][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.767158][ T6095] bond0 (unregistering): Released all slaves [ 348.894540][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.948353][ T939] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 348.958294][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.981797][ T8091] bridge_slave_0: entered allmulticast mode [ 349.000243][ T8091] bridge_slave_0: entered promiscuous mode [ 349.048911][ T8181] KVM: debugfs: duplicate directory 8181-4 [ 349.066958][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.081340][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.095736][ T8091] bridge_slave_1: entered allmulticast mode [ 349.105301][ T8091] bridge_slave_1: entered promiscuous mode [ 349.118233][ T939] usb 1-1: Using ep0 maxpacket: 16 [ 349.126035][ T939] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 349.140484][ T939] usb 1-1: config 0 has no interface number 0 [ 349.152793][ T939] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 349.171387][ T939] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 349.181363][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.198251][ T939] usb 1-1: Product: syz [ 349.211940][ T939] usb 1-1: Manufacturer: syz [ 349.226882][ T939] usb 1-1: SerialNumber: syz [ 349.252246][ T939] usb 1-1: config 0 descriptor?? [ 349.287220][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.300167][ T5271] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 349.315957][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.340714][ T6095] hsr_slave_0: left promiscuous mode [ 349.347976][ T6095] hsr_slave_1: left promiscuous mode [ 349.365334][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.374165][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.392286][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.533940][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.548324][ T5271] usb 5-1: Using ep0 maxpacket: 8 [ 349.561513][ T5271] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 350.192604][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.201538][ T5271] usb 5-1: Product: syz [ 350.230285][ T6095] veth1_macvtap: left promiscuous mode [ 350.235962][ T6095] veth0_macvtap: left promiscuous mode [ 350.268043][ T5271] usb 5-1: Manufacturer: syz [ 350.272808][ T5271] usb 5-1: SerialNumber: syz [ 350.284204][ T6095] veth1_vlan: left promiscuous mode [ 350.300354][ T6095] veth0_vlan: left promiscuous mode [ 350.344062][ T5271] usb 5-1: config 0 descriptor?? [ 350.371698][ T5271] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 350.429712][ T939] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 350.476520][ T939] usb 1-1: USB disconnect, device number 23 [ 350.591747][ T8193] kvm: kvm [8192]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xfe00000000 [ 350.614584][ T8193] kvm: kvm [8192]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x27e00000080 [ 350.636580][ T8193] kvm: kvm [8192]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x3ef00000000 [ 351.801512][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 351.801527][ T29] audit: type=1326 audit(1727516945.914:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.2.617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb2417dff9 code=0x0 [ 353.050009][ T8213] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 353.122267][ T8213] kvm: pic: non byte read [ 353.127450][ T8213] kvm: pic: level sensitive irq not supported [ 353.129490][ T8213] kvm: pic: non byte read [ 354.911202][ T29] audit: type=1400 audit(1727516948.964:592): avc: denied { recv } for pid=8228 comm="syz.4.623" saddr=10.128.0.169 src=33350 daddr=10.128.1.116 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 355.131198][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 356.600499][ T8238] Falling back ldisc for ptm0. [ 356.708854][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 358.153503][ T29] audit: type=1400 audit(1727516951.684:593): avc: denied { read } for pid=8244 comm="syz.1.626" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 358.197167][ T29] audit: type=1400 audit(1727516951.684:594): avc: denied { open } for pid=8244 comm="syz.1.626" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 358.395376][ T29] audit: type=1400 audit(1727516951.694:595): avc: denied { ioctl } for pid=8244 comm="syz.1.626" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 362.668305][ T5271] gspca_sonixj: reg_w1 err -110 [ 362.678994][ T5271] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 362.721793][ T5271] usb 5-1: USB disconnect, device number 22 [ 362.786741][ T8284] kvm: emulating exchange as write [ 362.927479][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.938048][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.946505][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.955565][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.963586][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 362.970967][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.343037][ T5271] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 363.571334][ T5271] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 364.135074][ T5271] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 364.188271][ T5271] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 364.197695][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.049505][ T5225] Bluetooth: hci4: command tx timeout [ 365.856813][ T8091] team0: Port device team_slave_0 added [ 365.886685][ T8091] team0: Port device team_slave_1 added [ 366.015776][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.058492][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.403976][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.475022][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.643'. [ 366.582178][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.609359][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.652315][ T5271] usb 3-1: can't set config #27, error -71 [ 366.696438][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.958612][ T8091] hsr_slave_0: entered promiscuous mode [ 366.964767][ T8091] hsr_slave_1: entered promiscuous mode [ 366.976010][ T8091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.985365][ T8091] Cannot create hsr debugfs directory [ 367.026720][ T5271] usb 3-1: USB disconnect, device number 18 [ 367.129354][ T5225] Bluetooth: hci4: command tx timeout [ 367.534215][ T6095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.744980][ T6095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.817294][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 367.958961][ T6095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.154178][ T6095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.517310][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.526675][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.881640][ T8285] bridge_slave_0: entered allmulticast mode [ 369.327890][ T5225] Bluetooth: hci4: command tx timeout [ 369.380644][ T8285] bridge_slave_0: entered promiscuous mode [ 369.429167][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.436289][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.698437][ T8285] bridge_slave_1: entered allmulticast mode [ 369.712450][ T8285] bridge_slave_1: entered promiscuous mode [ 369.881696][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.913726][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.972080][ T8285] team0: Port device team_slave_0 added [ 369.981251][ T8345] raw_sendmsg: syz.4.650 forgot to set AF_INET. Fix it! [ 370.021976][ T6095] bridge_slave_1: left allmulticast mode [ 370.027946][ T6095] bridge_slave_1: left promiscuous mode [ 370.057082][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.082678][ T6095] bridge_slave_0: left allmulticast mode [ 370.096169][ T6095] bridge_slave_0: left promiscuous mode [ 370.132437][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.374427][ T5225] Bluetooth: hci4: command tx timeout [ 371.836871][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.859998][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.886565][ T6095] bond0 (unregistering): Released all slaves [ 371.930612][ T8285] team0: Port device team_slave_1 added [ 372.227404][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.240586][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.267122][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.280327][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.287311][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.313584][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.358028][ T8091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 372.367980][ T8091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 372.396779][ T8091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.440020][ T8285] hsr_slave_0: entered promiscuous mode [ 372.455809][ T8285] hsr_slave_1: entered promiscuous mode [ 372.467427][ T8285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.475482][ T8285] Cannot create hsr debugfs directory [ 372.481871][ T8091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 372.499276][ T8377] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 372.532838][ T8375] kvm: pic: non byte read [ 372.559321][ T8375] kvm: pic: level sensitive irq not supported [ 372.559394][ T8375] kvm: pic: non byte read [ 372.596432][ T8375] kvm: pic: level sensitive irq not supported [ 372.596750][ T8375] kvm: pic: non byte read [ 372.806812][ T6095] hsr_slave_0: left promiscuous mode [ 372.848560][ T6095] hsr_slave_1: left promiscuous mode [ 372.864818][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.909764][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.935486][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.945610][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.003147][ T6095] veth1_macvtap: left promiscuous mode [ 373.023014][ T6095] veth0_macvtap: left promiscuous mode [ 373.189721][ T6095] veth1_vlan: left promiscuous mode [ 373.201904][ T6095] veth0_vlan: left promiscuous mode [ 375.523776][ T6095] team0 (unregistering): Port device vlan0 removed [ 375.940369][ T4610] Bluetooth: hci2: command 0x0406 tx timeout [ 376.193583][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 376.473693][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 376.589359][ T29] audit: type=1326 audit(1727516970.704:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.4.666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfdbd7dff9 code=0x0 [ 377.399305][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'. [ 377.413700][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 377.430512][ T8403] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 377.439184][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.446352][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.470631][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.477881][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.485415][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.492543][ T8403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.503451][ T8403] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 378.041084][ T5271] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 378.310954][ T5271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.322552][ T5271] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 378.332745][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.376497][ T5271] usb 2-1: config 0 descriptor?? [ 378.427850][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.435960][ T5271] pwc: Askey VC010 type 2 USB webcam detected. [ 378.638443][ T5271] pwc: send_video_command error -71 [ 378.644282][ T5271] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 378.664376][ T5271] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 378.691579][ T5271] usb 2-1: USB disconnect, device number 17 [ 378.755786][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.775275][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.782473][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.990775][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.997613][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.596644][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.603831][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.778403][ T5271] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 379.978492][ T8438] Bluetooth: MGMT ver 1.23 [ 379.987034][ T5271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.158045][ T5271] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 380.351674][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.493596][ T5271] usb 2-1: config 0 descriptor?? [ 380.530398][ T5271] pwc: Askey VC010 type 2 USB webcam detected. [ 380.661283][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.708523][ T5271] pwc: send_video_command error -71 [ 380.710630][ T8285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.713978][ T5271] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 380.728804][ T5271] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 380.749004][ T5271] usb 2-1: USB disconnect, device number 18 [ 380.771898][ T8285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.813455][ T8285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.851802][ T8285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.884341][ T8091] veth0_vlan: entered promiscuous mode [ 380.963286][ T8449] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 380.999708][ T8091] veth1_vlan: entered promiscuous mode [ 381.175713][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.213431][ T8091] veth0_macvtap: entered promiscuous mode [ 381.265221][ T8091] veth1_macvtap: entered promiscuous mode [ 381.287736][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.334786][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.341971][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.377033][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.384215][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.404125][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.416646][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.432305][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.444178][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.459192][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.485713][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.506033][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.532861][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.547385][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.563606][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.575363][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.592312][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.606278][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.634856][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.665066][ T8091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.677478][ T8091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.704652][ T8091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.713553][ T8091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.009789][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.054280][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.143539][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.207861][ T29] audit: type=1326 audit(1727516976.314:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.1.678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff255f7dff9 code=0x0 [ 382.236767][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.286570][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.623918][ T8478] Cannot find add_set index 0 as target [ 384.635635][ T8285] veth0_vlan: entered promiscuous mode [ 384.744711][ T8285] veth1_vlan: entered promiscuous mode [ 384.827480][ T8285] veth0_macvtap: entered promiscuous mode [ 384.859544][ T8285] veth1_macvtap: entered promiscuous mode [ 384.914642][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.925395][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.945691][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.957004][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.974443][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.987389][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.999356][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.010386][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.059361][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.105697][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.121224][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.137388][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.151988][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.167996][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.189011][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.205577][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.255890][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.292039][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.340932][ T8285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.387063][ T8285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.420329][ T8285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.441425][ T8285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.585395][ T2969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.721399][ T2969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.787119][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.820906][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.873350][ T2969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.916640][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.935932][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.988037][ T2969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.090995][ T2969] bridge_slave_1: left allmulticast mode [ 387.235496][ T2969] bridge_slave_1: left promiscuous mode [ 387.254255][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.078938][ T2969] bridge_slave_0: left allmulticast mode [ 388.084634][ T2969] bridge_slave_0: left promiscuous mode [ 388.207378][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.637402][ T4610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.664938][ T4610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.674032][ T4610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.687087][ T4610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.694767][ T4610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 388.702128][ T4610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.395884][ T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 389.511453][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.526205][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.541559][ T2969] bond0 (unregistering): Released all slaves [ 389.568421][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 389.605576][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.683866][ T25] usb 2-1: config 0 has no interfaces? [ 389.693249][ T25] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 389.705288][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.732360][ T25] usb 2-1: config 0 descriptor?? [ 390.898466][ T4610] Bluetooth: hci1: command tx timeout [ 391.259944][ T5307] usb 2-1: USB disconnect, device number 19 [ 391.515538][ T2969] hsr_slave_0: left promiscuous mode [ 391.582327][ T2969] hsr_slave_1: left promiscuous mode [ 391.640292][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.661285][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.693319][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.716454][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.968304][ T2969] veth1_macvtap: left promiscuous mode [ 391.974225][ T2969] veth0_macvtap: left promiscuous mode [ 392.569866][ T2969] veth1_vlan: left promiscuous mode [ 392.618540][ T2969] veth0_vlan: left promiscuous mode [ 392.801122][ T8539] Cannot find add_set index 0 as target [ 392.968361][ T4610] Bluetooth: hci1: command tx timeout [ 393.468434][ T5307] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 393.638328][ T5307] usb 1-1: Using ep0 maxpacket: 8 [ 393.713230][ T5307] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 393.728031][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.803547][ T5307] usb 1-1: config 0 descriptor?? [ 394.008443][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 394.116999][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 394.174108][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.184647][ T9] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 394.212354][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.230235][ T9] usb 5-1: config 0 descriptor?? [ 394.239282][ T9] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 394.263349][ T9] command write [95] error -22 [ 394.277022][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 394.539672][ T9] usb 5-1: USB disconnect, device number 23 [ 394.850682][ T8549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.878558][ T8549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.048396][ T4610] Bluetooth: hci1: command tx timeout [ 395.217237][ T9] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 396.380028][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 396.389385][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 396.397734][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.415856][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 396.437792][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 396.449856][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 396.548849][ T9] usb 3-1: string descriptor 0 read error: -22 [ 396.555574][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 396.567937][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.599575][ T9] usb 3-1: config 0 descriptor?? [ 396.647316][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 396.666384][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 396.975485][ T8557] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 396.984511][ T8557] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 397.128348][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 397.136116][ T4610] Bluetooth: hci1: command tx timeout [ 397.303977][ T9] usb 3-1: USB disconnect, device number 19 [ 398.716588][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.311601][ T5307] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 399.324238][ T5307] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 399.335274][ T5307] asix 1-1:0.0: probe with driver asix failed with error -71 [ 399.347898][ T5307] usb 1-1: USB disconnect, device number 24 [ 399.396204][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.480497][ T8502] bridge_slave_0: entered allmulticast mode [ 399.495275][ T8576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8576 comm=syz.1.705 [ 399.506942][ T8502] bridge_slave_0: entered promiscuous mode [ 399.509012][ T29] audit: type=1400 audit(1727516993.614:598): avc: denied { read } for pid=8575 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 399.526108][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.579578][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.597405][ T8502] bridge_slave_1: entered allmulticast mode [ 399.669467][ T8502] bridge_slave_1: entered promiscuous mode [ 399.802895][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.845832][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.914145][ T29] audit: type=1400 audit(1727516994.014:599): avc: denied { sqpoll } for pid=8582 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 399.969534][ T8502] team0: Port device team_slave_0 added [ 399.977214][ T8502] team0: Port device team_slave_1 added [ 400.065251][ T29] audit: type=1400 audit(1727516994.174:600): avc: denied { create } for pid=8589 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 400.093183][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.110684][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.211073][ T8593] Cannot find add_set index 0 as target [ 400.488767][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.509015][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.516374][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.553540][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.570798][ T29] audit: type=1326 audit(1727516994.664:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfdbd7dff9 code=0x0 [ 400.700961][ T8502] hsr_slave_0: entered promiscuous mode [ 400.722938][ T8502] hsr_slave_1: entered promiscuous mode [ 402.597571][ T29] audit: type=1400 audit(1727516995.984:602): avc: denied { mount } for pid=8602 comm="syz.0.711" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 402.684171][ T29] audit: type=1400 audit(1727516996.794:603): avc: denied { unmount } for pid=8285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 402.971091][ T8613] delete_channel: no stack [ 403.139007][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 403.298314][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 403.310127][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.620246][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.639950][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 403.649789][ T9] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 403.673610][ T9] usb 1-1: Product: syz [ 403.677826][ T9] usb 1-1: Manufacturer: syz [ 403.861965][ T9] usb 1-1: config 0 descriptor?? [ 404.974875][ T9] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 405.023904][ T9] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 405.032767][ T9] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 405.439530][ T9] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device [ 405.584934][ T9] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse [ 405.716876][ T9] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -32 [ 405.754175][ T8502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 405.763107][ T9] usb 1-1: USB disconnect, device number 25 [ 405.827004][ T8502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.862160][ T8502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.877639][ T8502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.942386][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.964737][ T8502] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.991818][ T8502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.002747][ T8502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.021644][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.028805][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.041489][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.048623][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.194028][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.244814][ T8502] veth0_vlan: entered promiscuous mode [ 406.257667][ T8502] veth1_vlan: entered promiscuous mode [ 406.327809][ T8502] veth0_macvtap: entered promiscuous mode [ 406.342728][ T8502] veth1_macvtap: entered promiscuous mode [ 406.363606][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.377448][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.407061][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.434363][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.593588][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.606300][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.620320][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.944972][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.962314][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.013156][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.023876][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.034013][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.044764][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.054780][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.065364][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.075358][ T8502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.085926][ T8502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.097826][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.116896][ T8502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.125912][ T8502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.134865][ T8502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.143726][ T8502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.242844][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.251135][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.295946][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.328722][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.858543][ T29] audit: type=1400 audit(1727517001.504:604): avc: denied { lock } for pid=8639 comm="syz.1.720" path="socket:[29182]" dev="sockfs" ino=29182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 408.503754][ T8645] lo speed is unknown, defaulting to 1000 [ 408.511459][ T8645] lo speed is unknown, defaulting to 1000 [ 408.517826][ T8645] lo speed is unknown, defaulting to 1000 [ 409.580798][ T29] audit: type=1400 audit(1727517003.674:605): avc: denied { bind } for pid=8652 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.613337][ T29] audit: type=1400 audit(1727517003.674:606): avc: denied { listen } for pid=8652 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.640542][ T29] audit: type=1400 audit(1727517003.694:607): avc: denied { connect } for pid=8652 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.750840][ T29] audit: type=1400 audit(1727517003.714:608): avc: denied { write } for pid=8652 comm="syz.1.724" path="socket:[29207]" dev="sockfs" ino=29207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.854086][ T6095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.883620][ T8645] infiniband syz1: set active [ 409.913683][ T8645] infiniband syz1: added lo [ 409.930588][ T8645] syz1: rxe_create_cq: returned err = -12 [ 409.947515][ T939] lo speed is unknown, defaulting to 1000 [ 409.959561][ T8645] infiniband syz1: Couldn't create ib_mad CQ [ 409.997642][ T8645] infiniband syz1: Couldn't open port 1 [ 410.078948][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.101049][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.114576][ T8645] RDS/IB: syz1: added [ 410.122015][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.124513][ T8645] smc: adding ib device syz1 with port count 1 [ 410.142488][ T8645] smc: ib device syz1 port 1 has pnetid [ 410.151140][ T939] lo speed is unknown, defaulting to 1000 [ 410.165637][ T8645] lo speed is unknown, defaulting to 1000 [ 410.178755][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.198423][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 410.217746][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.364444][ T8656] lo speed is unknown, defaulting to 1000 [ 410.628034][ T8645] lo speed is unknown, defaulting to 1000 [ 410.923926][ T8645] lo speed is unknown, defaulting to 1000 [ 411.169130][ T4610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.189176][ T4610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.203856][ T4610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.213926][ T4610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.230742][ T4610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 411.238063][ T4610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.268416][ T6095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.349237][ T8656] chnl_net:caif_netlink_parms(): no params data found [ 411.387675][ T8645] lo speed is unknown, defaulting to 1000 [ 411.547151][ T6095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.567549][ T8645] lo speed is unknown, defaulting to 1000 [ 411.606495][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.628573][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.649461][ T8656] bridge_slave_0: entered allmulticast mode [ 411.668532][ T8656] bridge_slave_0: entered promiscuous mode [ 411.689877][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.717328][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.727602][ T8656] bridge_slave_1: entered allmulticast mode [ 411.747815][ T8656] bridge_slave_1: entered promiscuous mode [ 411.755203][ T8662] lo speed is unknown, defaulting to 1000 [ 411.807155][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.834951][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.909429][ T8656] team0: Port device team_slave_0 added [ 411.958587][ T8656] team0: Port device team_slave_1 added [ 412.070051][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.077096][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.203777][ T8656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.263957][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.293074][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.339421][ T4610] Bluetooth: hci1: command tx timeout [ 412.416156][ T8656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.486376][ T5225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.502320][ T5225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.512269][ T5225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.523903][ T5225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.558546][ T8656] hsr_slave_0: entered promiscuous mode [ 412.570677][ T8656] hsr_slave_1: entered promiscuous mode [ 412.581143][ T8656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.590311][ T8656] Cannot create hsr debugfs directory [ 412.615000][ T6095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.675536][ T5225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 412.683713][ T5225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.882997][ T8656] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.127122][ T8656] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.207718][ T8673] lo speed is unknown, defaulting to 1000 [ 413.311567][ T6095] bridge_slave_1: left allmulticast mode [ 413.317227][ T6095] bridge_slave_1: left promiscuous mode [ 413.389189][ T5225] Bluetooth: hci3: command tx timeout [ 413.411877][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.530453][ T6095] bridge_slave_0: left allmulticast mode [ 413.538461][ T6095] bridge_slave_0: left promiscuous mode [ 413.544241][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.107631][ T8677] netlink: 168 bytes leftover after parsing attributes in process `syz.0.727'. [ 414.118208][ T29] audit: type=1400 audit(1727517008.224:609): avc: denied { write } for pid=8675 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 414.147672][ T29] audit: type=1400 audit(1727517008.224:610): avc: denied { nlmsg_read } for pid=8675 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 414.408329][ T5225] Bluetooth: hci1: command tx timeout [ 414.519453][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.541978][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.562348][ T6095] bond0 (unregistering): Released all slaves [ 414.638058][ T8656] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.672481][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 414.728386][ T5225] Bluetooth: hci5: command tx timeout [ 416.073140][ T5225] Bluetooth: hci3: command tx timeout [ 416.117980][ T29] audit: type=1400 audit(1727517010.184:611): avc: denied { listen } for pid=8689 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 416.458602][ T29] audit: type=1400 audit(1727517010.354:612): avc: denied { accept } for pid=8689 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 416.480759][ T8656] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.708441][ T5225] Bluetooth: hci1: command tx timeout [ 416.785381][ T8694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.730'. [ 416.888737][ T5225] Bluetooth: hci5: command tx timeout [ 417.770730][ T8656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.789987][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.797122][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.822135][ T8662] bridge_slave_0: entered allmulticast mode [ 417.839289][ T8662] bridge_slave_0: entered promiscuous mode [ 417.943883][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.961880][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.000375][ T8662] bridge_slave_1: entered allmulticast mode [ 418.007154][ T8662] bridge_slave_1: entered promiscuous mode [ 418.026890][ T8656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.039306][ T8656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.201805][ T5225] Bluetooth: hci3: command tx timeout [ 418.738678][ T5225] Bluetooth: hci1: command tx timeout [ 418.877848][ T8656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.953637][ T6095] hsr_slave_0: left promiscuous mode [ 418.964076][ T6095] hsr_slave_1: left promiscuous mode [ 418.969528][ T5225] Bluetooth: hci5: command tx timeout [ 418.979414][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.986857][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.016844][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.048097][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.071299][ T6095] veth1_macvtap: left promiscuous mode [ 419.085965][ T6095] veth0_macvtap: left promiscuous mode [ 419.092792][ T6095] veth1_vlan: left promiscuous mode [ 419.105937][ T6095] veth0_vlan: left promiscuous mode [ 419.723106][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 419.787852][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 420.257769][ T5225] Bluetooth: hci3: command tx timeout [ 420.561762][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.048300][ T5225] Bluetooth: hci5: command tx timeout [ 421.375532][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.633490][ T8662] team0: Port device team_slave_0 added [ 421.661006][ T8662] team0: Port device team_slave_1 added [ 421.831423][ T8673] chnl_net:caif_netlink_parms(): no params data found [ 422.474422][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.496152][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.698856][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.819385][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.826357][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.878321][ T29] audit: type=1400 audit(1727517016.974:613): avc: denied { create } for pid=8738 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 422.904692][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.968813][ T29] audit: type=1400 audit(1727517016.984:614): avc: denied { listen } for pid=8738 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 423.041201][ T29] audit: type=1400 audit(1727517016.984:615): avc: denied { accept } for pid=8738 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 423.127075][ T8662] hsr_slave_0: entered promiscuous mode [ 423.134132][ T8662] hsr_slave_1: entered promiscuous mode [ 423.161814][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.170468][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.179539][ T8673] bridge_slave_0: entered allmulticast mode [ 423.186183][ T8673] bridge_slave_0: entered promiscuous mode [ 423.248673][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.256602][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.266575][ T8673] bridge_slave_1: entered allmulticast mode [ 423.276239][ T8673] bridge_slave_1: entered promiscuous mode [ 423.398806][ T6095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.606807][ T6095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.626196][ T8673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.661635][ T8673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.706377][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.785386][ T6095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.947774][ T6095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.989646][ T8673] team0: Port device team_slave_0 added [ 424.013369][ T8673] team0: Port device team_slave_1 added [ 424.159888][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.167142][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.194195][ T8673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.209834][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.216838][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.243916][ T8673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.271947][ T8656] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.360358][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.367516][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.657240][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.664441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.825262][ T29] audit: type=1400 audit(1727517018.844:616): avc: denied { accept } for pid=8755 comm="syz.0.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 425.391106][ T6095] bridge_slave_1: left allmulticast mode [ 425.397020][ T6095] bridge_slave_1: left promiscuous mode [ 425.404077][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.429297][ T6095] bridge_slave_0: left allmulticast mode [ 425.435195][ T6095] bridge_slave_0: left promiscuous mode [ 425.441288][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.477031][ T6095] bridge_slave_1: left allmulticast mode [ 425.488245][ T6095] bridge_slave_1: left promiscuous mode [ 425.494108][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.505241][ T6095] bridge_slave_0: left allmulticast mode [ 425.518244][ T6095] bridge_slave_0: left promiscuous mode [ 425.524409][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.670001][ T25] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 425.841903][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 425.849549][ T25] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 425.860683][ T25] usb 1-1: config 0 has no interface number 0 [ 425.890613][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 425.912570][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.928524][ T25] usb 1-1: Product: syz [ 425.933041][ T25] usb 1-1: Manufacturer: syz [ 425.943229][ T25] usb 1-1: SerialNumber: syz [ 425.999853][ T25] usb 1-1: config 0 descriptor?? [ 426.057132][ T25] smsc95xx v2.0.0 [ 426.618292][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 426.640771][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 426.977977][ T6095] bridge0 (unregistering): left allmulticast mode [ 427.172441][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.185457][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.196474][ T6095] bond0 (unregistering): Released all slaves [ 427.370115][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.386206][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.397914][ T6095] bond0 (unregistering): Released all slaves [ 427.468016][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 427.532655][ T8673] hsr_slave_0: entered promiscuous mode [ 427.566940][ T8673] hsr_slave_1: entered promiscuous mode [ 427.587288][ T8673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.607086][ T8673] Cannot create hsr debugfs directory [ 428.334510][ T8662] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.382376][ T8662] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.492590][ T8662] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.539969][ T8662] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.813567][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.260118][ T8656] veth0_vlan: entered promiscuous mode [ 429.269659][ T8673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.299601][ T6095] hsr_slave_0: left promiscuous mode [ 429.315885][ T6095] hsr_slave_1: left promiscuous mode [ 429.333176][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.342163][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.358823][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.366710][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.379206][ T6095] hsr_slave_0: left promiscuous mode [ 429.390498][ T6095] hsr_slave_1: left promiscuous mode [ 429.400782][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.408939][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.431391][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.439267][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.516655][ T6095] veth1_macvtap: left promiscuous mode [ 429.524600][ T6095] veth0_macvtap: left promiscuous mode [ 429.545778][ T6095] veth1_vlan: left promiscuous mode [ 429.551551][ T6095] veth0_vlan: left promiscuous mode [ 429.561029][ T6095] veth1_macvtap: left promiscuous mode [ 429.566943][ T6095] veth0_macvtap: left promiscuous mode [ 429.574151][ T6095] veth1_vlan: left promiscuous mode [ 429.580228][ T6095] veth0_vlan: left promiscuous mode [ 429.947454][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 429.977173][ T25] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 430.001607][ T25] usb 1-1: USB disconnect, device number 26 [ 430.553586][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 430.666559][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 432.879739][ T8797] mmap: syz.1.751 (8797) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 432.943532][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 433.473933][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 433.518641][ T29] audit: type=1326 audit(1727517027.614:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.1.752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff255f7dff9 code=0x0 [ 434.121729][ T8673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.145753][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.160361][ T8788] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 434.171419][ T8656] veth1_vlan: entered promiscuous mode [ 434.181220][ T8788] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 434.191612][ T8673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.205503][ T8673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.208358][ T8788] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 434.394821][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.437451][ T8656] veth0_macvtap: entered promiscuous mode [ 434.503613][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.510778][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.529867][ T8656] veth1_macvtap: entered promiscuous mode [ 434.899503][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.906672][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.208300][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.258254][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.278255][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.288787][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.323513][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.333675][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.348984][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.369199][ T8656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.398373][ T8656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.413196][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.626579][ T8656] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.642845][ T8656] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.654065][ T8656] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.668477][ T8656] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.754389][ T8662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.843855][ T8662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.108994][ T8673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.022631][ T8673] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.040506][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.058872][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.127258][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.134435][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.197392][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.204585][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.275084][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.295666][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.322770][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.359386][ T5302] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 437.424228][ T8662] veth0_vlan: entered promiscuous mode [ 437.480819][ T8662] veth1_vlan: entered promiscuous mode [ 437.546803][ T5302] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 437.564005][ T8662] veth0_macvtap: entered promiscuous mode [ 437.575755][ T5302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.595032][ T5302] usb 2-1: Product: syz [ 437.603633][ T8662] veth1_macvtap: entered promiscuous mode [ 437.610435][ T5302] usb 2-1: Manufacturer: syz [ 437.615766][ T5302] usb 2-1: SerialNumber: syz [ 437.651303][ T5302] usb 2-1: config 0 descriptor?? [ 437.714601][ T5302] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 437.737888][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.756514][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.774768][ T5302] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 437.782772][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.806919][ T5302] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 437.855287][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.894959][ T5302] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 438.014240][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.053159][ T5302] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 438.149695][ T5302] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 438.172686][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.232197][ T29] audit: type=1400 audit(1727517032.244:618): avc: denied { ioctl } for pid=8823 comm="syz.1.757" path="socket:[28598]" dev="sockfs" ino=28598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.262140][ T5302] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 438.348904][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.359230][ T5302] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 438.386699][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.408096][ T5302] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 438.459193][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.483398][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.495683][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.510455][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.538182][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.552216][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.592369][ T8826] bond_slave_0: entered promiscuous mode [ 438.598670][ T8826] bond_slave_1: entered promiscuous mode [ 438.604435][ T8826] bridge0: entered promiscuous mode [ 438.623959][ T8826] bond_slave_0: left promiscuous mode [ 438.629520][ T8826] bond_slave_1: left promiscuous mode [ 438.635201][ T8826] bridge0: left promiscuous mode [ 438.676100][ T8662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.691477][ T8662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.703806][ T8662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.716535][ T8662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.743289][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.775549][ T5307] usb 2-1: USB disconnect, device number 20 [ 438.782007][ T5224] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 438.798862][ T5307] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 438.842516][ T5307] keyspan 2-1:0.0: device disconnected [ 438.943159][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.957954][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.958485][ T5302] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 438.973598][ T5224] usb 3-1: Using ep0 maxpacket: 32 [ 438.991345][ T5224] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 439.005090][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.008431][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.029376][ T5224] usb 3-1: Product: syz [ 439.034342][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.038735][ T5224] usb 3-1: Manufacturer: syz [ 439.059614][ T5224] usb 3-1: SerialNumber: syz [ 439.068739][ T5224] usb 3-1: config 0 descriptor?? [ 439.076991][ T5224] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 439.188434][ T5302] usb 1-1: Using ep0 maxpacket: 32 [ 439.197583][ T5302] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 439.207339][ T5302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.217460][ T8673] veth0_vlan: entered promiscuous mode [ 439.224070][ T5302] usb 1-1: Product: syz [ 439.236089][ T5302] usb 1-1: Manufacturer: syz [ 439.242685][ T8673] veth1_vlan: entered promiscuous mode [ 439.248529][ T5302] usb 1-1: SerialNumber: syz [ 439.257936][ T5302] usb 1-1: config 0 descriptor?? [ 439.281923][ T5302] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 439.299536][ T8673] veth0_macvtap: entered promiscuous mode [ 439.309756][ T8673] veth1_macvtap: entered promiscuous mode [ 439.329344][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.340921][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.352282][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.363466][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.374419][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.388444][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.404377][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.418004][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.457115][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.479214][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.496377][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.507944][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.525356][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.564404][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.577511][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.593928][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.604980][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.623533][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.647662][ T8673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.660974][ T8673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.678491][ T8673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.687317][ T8673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.412590][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.419632][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.459762][ T6095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.583393][ T6095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.664525][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.676272][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.726321][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.735868][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.852723][ T6095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.249017][ T6095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.591106][ T6095] bridge_slave_1: left allmulticast mode [ 441.597322][ T6095] bridge_slave_1: left promiscuous mode [ 441.605945][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.708852][ T6095] bridge_slave_0: left allmulticast mode [ 441.714541][ T6095] bridge_slave_0: left promiscuous mode [ 441.748749][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.892086][ T4610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.903187][ T4610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.914480][ T4610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.932027][ T4610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.945828][ T4610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 441.954278][ T4610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.714601][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.739523][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.762853][ T6095] bond0 (unregistering): Released all slaves [ 442.993574][ T8870] lo speed is unknown, defaulting to 1000 [ 443.232033][ T29] audit: type=1326 audit(1727517037.344:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.4.762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d8d37dff9 code=0x0 [ 443.262412][ T5224] gspca_stk1135: reg_w 0x1b err -71 [ 443.270850][ T5224] gspca_stk1135: serial bus timeout: status=0x00 [ 443.293326][ T5224] gspca_stk1135: Sensor write failed [ 443.304107][ T5224] gspca_stk1135: serial bus timeout: status=0x00 [ 443.330493][ T5224] gspca_stk1135: Sensor write failed [ 443.348997][ T5224] gspca_stk1135: serial bus timeout: status=0x00 [ 443.358360][ T5224] gspca_stk1135: Sensor read failed [ 443.367884][ T5224] gspca_stk1135: serial bus timeout: status=0x00 [ 443.384803][ T5224] gspca_stk1135: Sensor read failed [ 443.393315][ T5224] gspca_stk1135: Detected sensor type unknown (0x0) [ 443.403475][ T5302] gspca_stk1135: reg_w 0x19 err -71 [ 443.416801][ T5302] gspca_stk1135: serial bus timeout: status=0x00 [ 443.427334][ T5224] gspca_stk1135: serial bus timeout: status=0x00 [ 443.437195][ T5302] gspca_stk1135: Sensor write failed [ 443.462594][ T5302] gspca_stk1135: serial bus timeout: status=0x00 [ 443.469501][ T5224] gspca_stk1135: Sensor read failed [ 443.493157][ T5224] gspca_stk1135: serial bus timeout: status=0x00 [ 443.505578][ T5302] gspca_stk1135: Sensor write failed [ 443.519742][ T5224] gspca_stk1135: Sensor read failed [ 443.525255][ T5302] gspca_stk1135: serial bus timeout: status=0x00 [ 443.532371][ T5224] gspca_stk1135: serial bus timeout: status=0x00 [ 443.539522][ T5302] gspca_stk1135: Sensor read failed [ 443.545150][ T5302] gspca_stk1135: serial bus timeout: status=0x00 [ 443.561669][ T5224] gspca_stk1135: Sensor write failed [ 443.581485][ T5224] gspca_stk1135: serial bus timeout: status=0x00 [ 443.589521][ T5302] gspca_stk1135: Sensor read failed [ 443.600394][ T5302] gspca_stk1135: Detected sensor type unknown (0x0) [ 443.607366][ T5224] gspca_stk1135: Sensor write failed [ 443.628471][ T5224] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 443.636726][ T5302] gspca_stk1135: serial bus timeout: status=0x00 [ 443.643533][ T5302] gspca_stk1135: Sensor read failed [ 443.649470][ T5302] gspca_stk1135: serial bus timeout: status=0x00 [ 443.678996][ T5224] usb 3-1: USB disconnect, device number 20 [ 443.691063][ T5302] gspca_stk1135: Sensor read failed [ 443.696771][ T5302] gspca_stk1135: serial bus timeout: status=0x00 [ 443.775633][ T5302] gspca_stk1135: Sensor write failed [ 443.804767][ T5302] gspca_stk1135: serial bus timeout: status=0x00 [ 443.840138][ T5302] gspca_stk1135: Sensor write failed [ 443.845519][ T5302] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 443.925061][ T5302] usb 1-1: USB disconnect, device number 27 [ 444.010502][ T5225] Bluetooth: hci0: command tx timeout [ 444.064774][ T6095] hsr_slave_0: left promiscuous mode [ 444.075356][ T6095] hsr_slave_1: left promiscuous mode [ 444.081845][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.140373][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.154230][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.162333][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.900949][ T6095] veth1_macvtap: left promiscuous mode [ 444.906527][ T6095] veth0_macvtap: left promiscuous mode [ 444.912403][ T6095] veth1_vlan: left promiscuous mode [ 444.918460][ T6095] veth0_vlan: left promiscuous mode [ 446.498179][ T4610] Bluetooth: hci0: command tx timeout [ 446.900937][ T8900] hub 9-0:1.0: USB hub found [ 446.934138][ T8900] hub 9-0:1.0: 8 ports detected [ 446.945225][ T29] audit: type=1400 audit(1727517041.034:620): avc: denied { ioctl } for pid=8895 comm="syz.0.767" path="/dev/usbmon0" dev="devtmpfs" ino=705 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 447.958294][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 448.147673][ T9] usb 5-1: config 0 has no interfaces? [ 448.154856][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 448.246932][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.274563][ T9] usb 5-1: config 0 descriptor?? [ 448.575271][ T4610] Bluetooth: hci0: command tx timeout [ 448.681724][ T8903] kvm: pic: non byte read [ 448.687232][ T8903] kvm: pic: non byte read [ 448.692943][ T8903] kvm: pic: non byte read [ 448.697925][ T8903] kvm: pic: single mode not supported [ 448.697997][ T8903] kvm: pic: non byte read [ 448.711238][ T8903] kvm: pic: single mode not supported [ 448.711315][ T8903] kvm: pic: level sensitive irq not supported [ 448.719058][ T8903] kvm: pic: non byte read [ 448.739503][ T8903] kvm: pic: non byte read [ 448.744121][ T8903] kvm: pic: single mode not supported [ 448.744187][ T8903] kvm: pic: non byte read [ 448.761258][ T8903] kvm: pic: non byte read [ 448.775280][ T8903] kvm: pic: single mode not supported [ 448.775348][ T8903] kvm: pic: non byte read [ 448.818697][ T8903] kvm: pic: non byte read [ 448.824188][ T8903] kvm: pic: level sensitive irq not supported [ 448.824341][ T8903] kvm: pic: single mode not supported [ 448.838495][ T8903] kvm: pic: level sensitive irq not supported [ 448.845668][ T8903] kvm: pic: single mode not supported [ 448.859203][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 449.785794][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 449.846677][ T5224] usb 5-1: USB disconnect, device number 24 [ 450.649293][ T4610] Bluetooth: hci0: command tx timeout [ 450.755448][ T8924] netlink: 'syz.4.773': attribute type 20 has an invalid length. [ 452.091204][ T8870] chnl_net:caif_netlink_parms(): no params data found [ 453.031463][ T8944] Cannot find add_set index 0 as target [ 453.686747][ T29] audit: type=1326 audit(1727517047.794:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac3fb7dff9 code=0x0 [ 454.655641][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.663006][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.671299][ T8870] bridge_slave_0: entered allmulticast mode [ 454.679964][ T8870] bridge_slave_0: entered promiscuous mode [ 454.696182][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.703760][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.712480][ T8870] bridge_slave_1: entered allmulticast mode [ 454.724497][ T8870] bridge_slave_1: entered promiscuous mode [ 455.635930][ T8870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.651435][ T8870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.812077][ T8870] team0: Port device team_slave_0 added [ 455.910656][ T8870] team0: Port device team_slave_1 added [ 456.007306][ T8988] usb usb8: usbfs: process 8988 (syz.1.784) did not claim interface 0 before use [ 456.697986][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.705272][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.763080][ T8986] picdev_read: 11 callbacks suppressed [ 456.763101][ T8986] kvm: pic: non byte read [ 457.701526][ T8870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.714171][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.723534][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.723568][ T8870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.017151][ T8870] hsr_slave_0: entered promiscuous mode [ 458.023317][ T8870] hsr_slave_1: entered promiscuous mode [ 458.746164][ T5224] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 459.870754][ T9012] usb usb9: usbfs: process 9012 (syz.0.791) did not claim interface 0 before use [ 460.617369][ T8870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.709321][ T8870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.740697][ T8870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.571026][ T8870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.545000][ T8870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.664560][ T8870] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.540557][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.547704][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.699526][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.706721][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.044038][ T9038] ebtables: ebtables: counters copy to user failed while replacing table [ 464.108277][ T5224] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 464.292743][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.330649][ T5224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.345943][ T5224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.422978][ T5224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.425061][ T8870] veth0_vlan: entered promiscuous mode [ 464.456787][ T8870] veth1_vlan: entered promiscuous mode [ 464.508486][ T5270] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 464.530804][ T5224] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 464.546166][ T8870] veth0_macvtap: entered promiscuous mode [ 464.565195][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.570917][ T8870] veth1_macvtap: entered promiscuous mode [ 464.624260][ T5224] usb 5-1: config 0 descriptor?? [ 464.678350][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 464.696400][ T5270] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 464.727044][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.738532][ T5270] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 464.768453][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.798437][ T5270] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.817662][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.851955][ T5270] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.871667][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.874915][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.065959][ T5270] usb 1-1: Product: syz [ 465.074038][ T5270] usb 1-1: Manufacturer: syz [ 465.084076][ T5270] usb 1-1: SerialNumber: syz [ 465.096532][ T5224] pyra 0003:1E7D:2C24.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0 [ 465.113982][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.126590][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.120961][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.131016][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.168410][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.233622][ T8870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.248375][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.262350][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.354151][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.416675][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.435908][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.455488][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.467443][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.483639][ T8870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.508989][ T8870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.535550][ T8870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.631536][ T5270] usb 1-1: 0:2 : does not exist [ 467.661605][ T8870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.683197][ T5270] usb 1-1: USB disconnect, device number 28 [ 467.696656][ T8870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.730759][ T8870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.816577][ T8870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.990722][ T9060] lo speed is unknown, defaulting to 1000 [ 468.107952][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.131620][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.168041][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.184075][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.419398][ T5224] usb 5-1: USB disconnect, device number 25 [ 469.814256][ T5742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.333550][ T5742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.824697][ T5742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.847254][ T9089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.808'. [ 472.034279][ T5742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.052601][ T9084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.808'. [ 472.070333][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.071324][ T9089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.808'. [ 472.095744][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.116173][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.145931][ T29] audit: type=1326 audit(1727517066.256:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9094 comm="syz.1.810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff255f7dff9 code=0x0 [ 472.172605][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.214529][ T5225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 472.223082][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.303597][ T9092] lo speed is unknown, defaulting to 1000 [ 473.318726][ T5742] bridge_slave_1: left allmulticast mode [ 473.324429][ T5742] bridge_slave_1: left promiscuous mode [ 473.334563][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.377792][ T5742] bridge_slave_0: left allmulticast mode [ 473.393924][ T5742] bridge_slave_0: left promiscuous mode [ 473.414504][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.342937][ T5225] Bluetooth: hci0: command tx timeout [ 474.621648][ T9120] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.815'. [ 474.641949][ T9120] netlink: get zone limit has 8 unknown bytes [ 474.706453][ T9120] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 474.722498][ T9120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 475.217750][ T9123] random: crng reseeded on system resumption [ 476.488760][ T5225] Bluetooth: hci0: command tx timeout [ 476.533419][ T5742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.698346][ T5742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.739499][ T5742] bond0 (unregistering): Released all slaves [ 477.093511][ T29] audit: type=1400 audit(1727517071.196:623): avc: denied { ioctl } for pid=9122 comm="syz.2.816" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 478.569799][ T5225] Bluetooth: hci0: command tx timeout [ 479.678521][ T5270] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 480.142705][ T5270] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 480.255104][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.295105][ T5270] usb 2-1: Product: syz [ 480.299885][ T5270] usb 2-1: Manufacturer: syz [ 480.310151][ T5270] usb 2-1: SerialNumber: syz [ 480.488076][ T5270] usb 2-1: config 0 descriptor?? [ 481.544706][ T5225] Bluetooth: hci0: command tx timeout [ 482.522859][ T5270] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 482.544460][ T5742] hsr_slave_0: left promiscuous mode [ 482.560231][ T5742] hsr_slave_1: left promiscuous mode [ 482.683340][ T5270] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 482.723719][ T5270] usb 2-1: USB disconnect, device number 21 [ 482.747751][ T5742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.790002][ T5742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.804610][ T5742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.824887][ T5742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.028351][ T5742] veth1_macvtap: left promiscuous mode [ 483.033916][ T5742] veth0_macvtap: left promiscuous mode [ 483.035468][ T29] audit: type=1400 audit(1727517077.116:624): avc: denied { mount } for pid=9164 comm="syz.0.828" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 483.045500][ T5742] veth1_vlan: left promiscuous mode [ 483.125572][ T5742] veth0_vlan: left promiscuous mode [ 483.191949][ T29] audit: type=1400 audit(1727517077.196:625): avc: denied { read } for pid=9164 comm="syz.0.828" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 484.865155][ T5742] team0 (unregistering): Port device team_slave_1 removed [ 484.955809][ T5742] team0 (unregistering): Port device team_slave_0 removed [ 485.671183][ T9167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.678811][ T9167] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 485.724705][ T9167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.740764][ T9167] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 485.797085][ T9183] netlink: 'syz.4.830': attribute type 4 has an invalid length. [ 485.897341][ T9092] chnl_net:caif_netlink_parms(): no params data found [ 485.929177][ T9167] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 485.937096][ T9167] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 485.992628][ T9167] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 486.165841][ T9167] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 486.245813][ T9167] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 486.252561][ T9167] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 486.291244][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.298625][ T9092] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.305772][ T9092] bridge_slave_0: entered allmulticast mode [ 486.313416][ T9092] bridge_slave_0: entered promiscuous mode [ 486.318452][ T9167] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 486.321318][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.332762][ T9092] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.340105][ T9092] bridge_slave_1: entered allmulticast mode [ 486.346753][ T9092] bridge_slave_1: entered promiscuous mode [ 486.424045][ T9167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 486.459978][ T9092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.469742][ T9167] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 486.575741][ T9092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.588897][ T9167] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 486.719834][ T9092] team0: Port device team_slave_0 added [ 486.817844][ T9092] team0: Port device team_slave_1 added [ 486.896537][ T29] audit: type=1400 audit(1727517080.996:626): avc: denied { map } for pid=9191 comm="syz.0.832" path="/dev/uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 486.896550][ T9092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.896586][ T29] audit: type=1400 audit(1727517081.006:627): avc: denied { execute } for pid=9191 comm="syz.0.832" path="/dev/uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 486.926635][ T9092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.101430][ T9092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.151503][ T9092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.178023][ T9197] netlink: 'syz.0.832': attribute type 2 has an invalid length. [ 487.179523][ T9092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.968712][ T4610] Bluetooth: hci2: command 0x0406 tx timeout [ 487.974841][ T4610] Bluetooth: hci4: command 0x0c1a tx timeout [ 487.981112][ T9092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.994294][ T9197] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 488.008250][ T4610] Bluetooth: hci1: command 0x0c1a tx timeout [ 488.329897][ T4610] Bluetooth: hci5: command 0x0c1a tx timeout [ 488.368723][ T9092] hsr_slave_0: entered promiscuous mode [ 488.448635][ T9092] hsr_slave_1: entered promiscuous mode [ 488.479417][ T29] audit: type=1400 audit(1727517082.586:628): avc: denied { create } for pid=9206 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 488.516935][ T4610] Bluetooth: hci0: command 0x0c1a tx timeout [ 490.158284][ T4610] Bluetooth: hci4: command 0x0c1a tx timeout [ 490.164449][ T4610] Bluetooth: hci2: command 0x0406 tx timeout [ 490.170907][ T4610] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.408403][ T5225] Bluetooth: hci5: command 0x0c1a tx timeout [ 491.019568][ T5225] Bluetooth: hci0: command 0x0c1a tx timeout [ 491.147491][ T9092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 491.190142][ T9092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 491.219262][ T9092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 491.258970][ T9092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 491.437589][ T9092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.508660][ T939] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 491.554247][ T9092] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.602725][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.609846][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.668539][ T939] usb 2-1: Using ep0 maxpacket: 8 [ 491.713980][ T29] audit: type=1400 audit(1727517085.826:629): avc: denied { write } for pid=9225 comm="syz.2.839" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 491.736102][ T9092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.747388][ T9092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.772117][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.779376][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.841095][ T939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.866511][ T939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.878329][ T939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.889134][ T939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.890737][ T9229] 9pnet_fd: Insufficient options for proto=fd [ 491.902340][ T939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.902376][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.930283][ T29] audit: type=1400 audit(1727517085.996:630): avc: denied { read write } for pid=9225 comm="syz.2.839" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 491.974032][ T29] audit: type=1400 audit(1727517085.996:631): avc: denied { open } for pid=9225 comm="syz.2.839" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 492.112517][ T939] usb 2-1: GET_CAPABILITIES returned 0 [ 492.119963][ T939] usbtmc 2-1:16.0: can't read capabilities [ 492.214526][ T9092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.249706][ T5225] Bluetooth: hci1: command 0x0c1a tx timeout [ 492.249717][ T4610] Bluetooth: hci4: command 0x0c1a tx timeout [ 492.318969][ T9092] veth0_vlan: entered promiscuous mode [ 492.488517][ T5225] Bluetooth: hci5: command 0x0c1a tx timeout [ 492.518627][ T9092] veth1_vlan: entered promiscuous mode [ 492.574638][ T9236] xt_nfacct: accounting object `syz1' does not exists [ 492.577100][ T9236] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 493.129060][ T5225] Bluetooth: hci0: command 0x0c1a tx timeout [ 493.361292][ T9092] veth0_macvtap: entered promiscuous mode [ 493.365831][ T9092] veth1_macvtap: entered promiscuous mode [ 493.386113][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.386133][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.386141][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.386151][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.386159][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.386169][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.386177][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.386187][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.389555][ T9092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.391335][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.391352][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.391360][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.391370][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.391378][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.391387][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.391395][ T9092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.391405][ T9092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.395341][ T9092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.405601][ T9092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.405679][ T9092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.405700][ T9092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.405721][ T9092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.660389][ T9248] [ 494.662756][ T9248] ====================================================== [ 494.669870][ T9248] WARNING: possible circular locking dependency detected [ 494.676906][ T9248] 6.11.0-syzkaller-11728-gad46e8f95e93 #0 Not tainted [ 494.683672][ T9248] ------------------------------------------------------ [ 494.690689][ T9248] syz.0.843/9248 is trying to acquire lock: [ 494.696613][ T9248] ffff88807dbe5128 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x39c/0x2370 [ 494.707372][ T9248] [ 494.707372][ T9248] but task is already holding lock: [ 494.714743][ T9248] ffff88807b6b6098 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 494.724796][ T9248] [ 494.724796][ T9248] which lock already depends on the new lock. [ 494.724796][ T9248] [ 494.735210][ T9248] [ 494.735210][ T9248] the existing dependency chain (in reverse order) is: [ 494.744226][ T9248] [ 494.744226][ T9248] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 494.751812][ T9248] down_read_killable+0x9d/0x380 [ 494.757295][ T9248] lock_mm_and_find_vma+0x3a9/0x6a0 [ 494.763033][ T9248] do_user_addr_fault+0x2b5/0x13f0 [ 494.768693][ T9248] exc_page_fault+0x5c/0xc0 [ 494.773740][ T9248] asm_exc_page_fault+0x26/0x30 [ 494.779130][ T9248] fault_in_readable+0x126/0x230 [ 494.784597][ T9248] fault_in_iov_iter_readable+0x101/0x2c0 [ 494.790866][ T9248] generic_perform_write+0x21b/0x920 [ 494.796683][ T9248] shmem_file_write_iter+0x10e/0x140 [ 494.802507][ T9248] vfs_write+0x6b5/0x1140 [ 494.807376][ T9248] ksys_write+0x12f/0x260 [ 494.812244][ T9248] do_syscall_64+0xcd/0x250 [ 494.817283][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.823717][ T9248] [ 494.823717][ T9248] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 494.832438][ T9248] __lock_acquire+0x250b/0x3ce0 [ 494.837830][ T9248] lock_acquire.part.0+0x11b/0x380 [ 494.843467][ T9248] down_write+0x93/0x200 [ 494.848250][ T9248] process_measurement+0x39c/0x2370 [ 494.853990][ T9248] ima_file_mmap+0x146/0x1d0 [ 494.859122][ T9248] security_mmap_file+0x8bd/0x990 [ 494.864688][ T9248] __do_sys_remap_file_pages+0x526/0x900 [ 494.870860][ T9248] do_syscall_64+0xcd/0x250 [ 494.875897][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.882328][ T9248] [ 494.882328][ T9248] other info that might help us debug this: [ 494.882328][ T9248] [ 494.892564][ T9248] Possible unsafe locking scenario: [ 494.892564][ T9248] [ 494.900013][ T9248] CPU0 CPU1 [ 494.905380][ T9248] ---- ---- [ 494.910746][ T9248] lock(&mm->mmap_lock); [ 494.915087][ T9248] lock(&sb->s_type->i_mutex_key#12); [ 494.923171][ T9248] lock(&mm->mmap_lock); [ 494.930028][ T9248] lock(&sb->s_type->i_mutex_key#12); [ 494.935506][ T9248] [ 494.935506][ T9248] *** DEADLOCK *** [ 494.935506][ T9248] [ 494.943656][ T9248] 1 lock held by syz.0.843/9248: [ 494.948605][ T9248] #0: ffff88807b6b6098 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 494.959100][ T9248] [ 494.959100][ T9248] stack backtrace: [ 494.965000][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: syz.0.843 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 494.975274][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 494.985340][ T9248] Call Trace: [ 494.988614][ T9248] [ 494.991539][ T9248] dump_stack_lvl+0x116/0x1f0 [ 494.996237][ T9248] print_circular_bug+0x41c/0x610 [ 495.001270][ T9248] check_noncircular+0x31a/0x400 [ 495.006214][ T9248] ? __pfx_check_noncircular+0x10/0x10 [ 495.011679][ T9248] ? lockdep_lock+0xc6/0x200 [ 495.016273][ T9248] ? __pfx_lockdep_lock+0x10/0x10 [ 495.021300][ T9248] __lock_acquire+0x250b/0x3ce0 [ 495.026163][ T9248] ? __pfx___lock_acquire+0x10/0x10 [ 495.031379][ T9248] lock_acquire.part.0+0x11b/0x380 [ 495.036528][ T9248] ? process_measurement+0x39c/0x2370 [ 495.041930][ T9248] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.047734][ T9248] ? rcu_is_watching+0x12/0xc0 [ 495.052508][ T9248] ? trace_lock_acquire+0x14a/0x1d0 [ 495.057710][ T9248] ? process_measurement+0x39c/0x2370 [ 495.063092][ T9248] ? lock_acquire+0x2f/0xb0 [ 495.067602][ T9248] ? process_measurement+0x39c/0x2370 [ 495.072979][ T9248] down_write+0x93/0x200 [ 495.077226][ T9248] ? process_measurement+0x39c/0x2370 [ 495.082622][ T9248] ? __pfx_down_write+0x10/0x10 [ 495.087553][ T9248] process_measurement+0x39c/0x2370 [ 495.092760][ T9248] ? __pfx_process_measurement+0x10/0x10 [ 495.098400][ T9248] ? avc_has_perm_noaudit+0x119/0x3a0 [ 495.105945][ T9248] ? __pfx_lock_release+0x10/0x10 [ 495.111003][ T9248] ? trace_lock_acquire+0x14a/0x1d0 [ 495.116272][ T9248] ? lock_acquire+0x2f/0xb0 [ 495.120811][ T9248] ? file_map_prot_check+0x1eb/0x360 [ 495.126099][ T9248] ima_file_mmap+0x146/0x1d0 [ 495.130699][ T9248] ? __pfx_ima_file_mmap+0x10/0x10 [ 495.136083][ T9248] ? __pfx_down_write_killable+0x10/0x10 [ 495.141742][ T9248] security_mmap_file+0x8bd/0x990 [ 495.146774][ T9248] __do_sys_remap_file_pages+0x526/0x900 [ 495.152408][ T9248] ? __pfx_do_futex+0x10/0x10 [ 495.157089][ T9248] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 495.163250][ T9248] ? __x64_sys_futex+0x1e1/0x4c0 [ 495.168201][ T9248] ? xfd_validate_state+0x5d/0x180 [ 495.173418][ T9248] ? rcu_is_watching+0x12/0xc0 [ 495.178190][ T9248] do_syscall_64+0xcd/0x250 [ 495.182698][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.188593][ T9248] RIP: 0033:0x7f4ef1b7dff9 [ 495.193021][ T9248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.212652][ T9248] RSP: 002b:00007f4ef29ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 495.221073][ T9248] RAX: ffffffffffffffda RBX: 00007f4ef1d36130 RCX: 00007f4ef1b7dff9 [ 495.229042][ T9248] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000 [ 495.237010][ T9248] RBP: 00007f4ef1bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 495.245061][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.253028][ T9248] R13: 0000000000000000 R14: 00007f4ef1d36130 R15: 00007ffe112b1468 [ 495.261003][ T9248] [ 495.264045][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.273291][ T8829] usb 2-1: USB disconnect, device number 22 [ 495.473379][ T9248] program syz.0.843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.647487][ T5225] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 495.772855][ T9092] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 495.790207][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.821130][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.855661][ T5742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.863642][ T5742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.293940][ T6008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.353321][ T6008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.413076][ T6008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.466902][ T6008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.563939][ T6008] bridge_slave_1: left allmulticast mode [ 498.572196][ T6008] bridge_slave_1: left promiscuous mode [ 498.577924][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.586998][ T6008] bridge_slave_0: left allmulticast mode [ 498.592881][ T6008] bridge_slave_0: left promiscuous mode [ 498.599197][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.747166][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.758006][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.769948][ T6008] bond0 (unregistering): Released all slaves [ 499.026613][ T6008] hsr_slave_0: left promiscuous mode [ 499.032756][ T6008] hsr_slave_1: left promiscuous mode [ 499.052873][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.071414][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.079187][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.086592][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.097575][ T6008] veth1_macvtap: left promiscuous mode [ 499.103475][ T6008] veth0_macvtap: left promiscuous mode [ 499.111253][ T6008] veth1_vlan: left promiscuous mode [ 499.116528][ T6008] veth0_vlan: left promiscuous mode [ 499.334147][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 499.347104][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 501.849742][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.861974][ T1264] ieee802154 phy1 wpan1: encryption failed: -22