last executing test programs: 34.569006279s ago: executing program 4 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x1e, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000021000000185000000000000000000000000000009500000000000000185600000900000000000000000000004f19000108000000181a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000185500000b000000000000000000000018220000", @ANYRES32=r0, @ANYBLOB="0000000002000055ae820018230000d07a0e1d76a5d17d63d8d0e974240a6941a205461f76bb233e78", @ANYRES32=r0, @ANYBLOB="0000000007000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x95) unshare(0x8000000) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, 0x0, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f00000003c0), &(0x7f0000000200)=0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x3}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x64, 0x1000000000000, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xb, 0xa, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x410}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 33.402871358s ago: executing program 4 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'ip6erspan0\x00', @random="201a4847569b"}) socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000082c0)={0x2020}, 0x2020) ioperm(0x7, 0x81, 0x2) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2004c840}, 0x4000044) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) bind$nfc_llcp(r5, &(0x7f0000000280)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "d929849825e6573561bd1ca44c226af5160e000000007760760beeab91e81597c80004da0000000200000000d2b6b9c2000000000000000000000000004000", 0x200000000000003}, 0x60) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$UFFDIO_CONTINUE(r4, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) listen(r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) 28.035446143s ago: executing program 4 (id=920): socket(0x21, 0x5, 0x8000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001000000000000000001"], 0x88}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) 24.288167652s ago: executing program 4 (id=930): userfaultfd(0x801) unshare(0x0) syz_emit_vhci(&(0x7f00000028c0)=ANY=[@ANYBLOB="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"], 0xd) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000190081054e81f782db44b904021d005c06007c09e8fe55a10a0005400100142603600e1208001e0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r2 = socket$inet6(0xa, 0x0, 0x4000006) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, 0x0, 0x0) socket(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000740)="10f1e2a2") socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000006dc0), 0x0, 0x10020, 0x0) r4 = syz_usbip_server_init(0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1a}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000200000000000000"], 0x20}}, 0x0) write(r4, &(0x7f0000000080)="0f", 0x1) 18.87566284s ago: executing program 4 (id=933): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$cgroup_procs(r0, &(0x7f0000001600)='tasks\x00', 0x2, 0x0) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001680)={0x0, 0x5, {0x0}, {0xffffffffffffffff}, 0xf6b}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r0, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f00000039c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000001c0)="fa11e0df90d408bffef9f949bff590697ff29c933535bd94640d89331089d9468ea3fddfab2ba2b8776824e61e4fb612b5eb6ffd4d4cb2bb5038cb16a32264d98f425b6f23d9aeeef2753486541de865ca13ff5ab078946042440e34d1fbbd90ca99e1acf85d347598e2540bb6136ac4700fc8511bc689cf3b62f03a30db9ea0a4f41beff1b33a8a891667ef5d0ac98f3cd4b236e362b45768ac8ba1205fedf125c61abcb4e033b03212589f0b7b8ccab284eccb3f6d4ea3c402481e0c76ec3cf5f5031c9ab81b49461aa4438a73b204a91b188c0379927126e23050ce236926aba883d3288be7ad843ff6f3079eb7fef407f5a9b061eb0a5ab653e3349c95a3085ad4149b3c0c19eca432bb5aa3ba5ec52d177e72145a4a7b41d11e3e4138ffb9da9d30ec363d0c1abda293d665d40d016df07e3026ac0e7627f31733a9ff90bdccd6cbc940c9b3ef2bf04ed732496c886b1bbc4fc3ac11ca600e7b78631b7b88f26ac771e7b21d2a31d1bc80321618e873fcccfb124cee2d785f7b569734eb7f70a89c6e8d56aafb4253f60caafd999f017ef8a7680b05d8c75adb7f65aca779c90df6d6cb7f8616d6d3523bdd39657a2593a5124fffda0b3c3eedd270c10b1026244ba7574f4c1a5607c917b2371f9ac9a2ec83b531fffa94655de3a04cc36b538f616570b37a327f34e97d099c38645bde1576eadfdac0867d322fae126292947f99457bfd07b634ccf4758e3eee496f4d1f9e2a6c750b6a6a0933553494eb13c6aa786c90079808e4648326c5a251ee245bd3a699d15698b156e11509a1adb0867bb686f2e948832adf9e419c2ae6068040618b70d5e53ade6b36ccd8447e684bab905882aa0ac4aace7109cd9a6d2586a0fc2e7c162bb365e2455a79a5bbe553a7f89ecbc356525f7dcb0daaead6ee6df5e92048a6e3c659f61871848ddcfa71a2d25656fe7a0d4daef967ca76ba7923bd6e6b2bc1cb240ba54ef96d04ff5bd18b0346c498bc5f48f4013d34311ad977401131268aaf0a9137a4b653db14b6b993a0bd3fba156183c267ac2f89981d8a72c419c71b27be2054486bfbc1fe7e1792f5a99b12ec192688aebb79c4e67e5fbe07941fc109fe53d96a62ca34e44c8ce8d8ba73b28fafadf47ce659ddb004a0c9230bdeb6e9c859b388ed4c714bd4c14ce7bb541e104c8cb8f49914fea9a25a36dda2904d9f9b665e7c34e5a584bb1b1c7c6ea55d7a17f5390ff02b9d7195e6bdc0eba2fdecdce2e810a90987740b5572d6393b96d4ce473c481a687a12ab6484cea5ac41eb496a9226cb9d67b6adba3736b2d438d2d415302862dd0cf8f8b7c0657e68215e8989c61214e25368254195a5208855f39de08cd864125578fb28cd9e4f34f2101cdb9f8c3628b3a2c275e6cd67dc22cd02019ee1a250f2dd93af61fcabc31882703c02281353a952a513603e43a0ddf2fa115c3182d076e791242ae1f584a64e2b06f8f970c689eb0bca071656e1391811c76a8ca28165fd8639109d0ab96e46f40d9094c9aac4303f650539d68511351db1d6bd2425b1cc29ea3837c79614a48e7fbc6706fca692293ba0b1daa946826c90dcedba232e14d2daba47e8e3b1c8e420298e438516b1373f5f2a50f23b05d140650ed54c5a7599672918700a912f8524295152bc162b98271a0ac08ef4c5152909d3c3f5846d37ee1bc2a788b972b0404bfd01a65b7543a34718e82973e50857fad0dfae5078efc53dc32137b309587f26e7510acd3bcca2206b69128a447099a6ac3720ffa210b85e07160ebfe926f91910662f2ced4e3581b853a93d26d01e3569f2890e23766382cb69056c01fe9f5f559f87d0d1b81d2770a68d4106962008362da2e163634bdc383ce09044aa486c20df7d961cb61ad9cdddc5cfcfc9b7753dc45242e1bab22a1e00f2adcf5672fa42b8e6232fe4bcdfe1d2d9832dca172d77e0cbe225f1e74234d19cb345d545fb3eb7ee077ba1bbb374bb9b736176d99d0fe721351a5100636a0907db035f84c9525b46982f37e64ee56c8e1bdebb3e19c3655066b985ce05bc9b0e2d902c74a53db9687a3f89546a8a680402d168e94f3c289f18f15b016333bbe51550c7f168a4da66225cce619c77ffb70b815194c7404fcc1c799f5070c517abfdd4af02c0714a9ed7ac5c47ee11db4ee094fe57227cee722824a40f9b00207407c7af97304a4c46f233640b08a254bff909e28b77c467f4ffcbf986bb76a5989e5de236ad3f5ee144a3d94a1943145fad9346482a0f70d25a29cc17178490f6473f0cccdf89916ea5e7f51bf06dbfdee5a7e0b2a47d122ecdb5540e9dd4667928ae34c3109d3e6ab7edf0f9fe99150bb5c40c40d19dc01dec8eb5b158bd2e29e1686e076d67b9ab527580573a3af01a3df9b53641ed780d13c1196f1d157b8133a95d77a51fbf0ce28ff42580e066e290992008615f60e77d4d1a439b536e19cde7f2917793c23e505031bb2cb425f6ebe6912d003df134dbbcc3f77a0c8291e790a67be619fd65f7b5a0ba5b31530c7013fdb8d68367cf0c0e9a780a959995c191d44954242349e86cc8ec288329935a101faa6810f89cbee1f9a2cf2ad908c851890872c9ce3530cb6e1af1248930dd0ef688e2e45f5d83545c38513052d448d48d6058903e9dbfa95f4dcf6a2ece1c175e4235d213a0911b4a77e65a732bdfe4473f084304e30086d27b7e4462a77fbecf3df93e3f20cd1b39cc313b79a6505f0d7961b01a563aa3a98f7e3682fdf8ab1fe44432bafb8d0d28aa763a2c9de9936caf78f9d49c3cf77df951f0eefeaffdc08aef86eba132d477375a517c1a2766de1b47194e68631e08ceb857eee17a43c090a05fb5f859a250942535bb01fa4a6a5a805b84896412a211dce79b9e6fa2cfbf3e4c6a631e7d83a577f640819c9c87a2f58fece20f95620502729a9b66297a24867cc33b3b436e2c1fe3683fe42201874f42771bf98c439519cfe2e48a1ae65149c295eaaed01cdfdf09d087048c11b7fa2c82360ae09c4a492d7f3268462bafdc460367c264b8fa4ef0df3695ccaf8f8c811806d4f627531a3b196c34c16fbf046f3803aefa0c8ef224dc000462f57c7c581f83c4a665520f469a273a96a83888d282758006bbc0140f2dca3c0577ff6dd6a05fe38328191835181245ca45112c8b28a15190061bceb76916ade4c1d1282ef1a38f22cd75d1705c32df33a6b0b907373bf718d0618be680d04ae94a2df7590b076ed9f98ace164ff8faaf80ab47f969984b7e82bf275868ce48cc1a75dffd594cf313a30486ded9d01bbda5e9025677692f29d9fe59708c678258baf2b748bb148b6cfe9ae044da5425754f01c5407752d7bc84bda19c60c9753095cd6a46288da04f8a78103315409a0244e73a62fb8e45a558a7e0e2c240c33c9080d30090ebd38b51e17d78843946b476179f851ed7e7cd98f77df443e2bebecae188d2a568cf1d14fdb37c54b90ffbead760dcb5a3d820deb682611ae2fbc7f600c8c76f421fdf548b2a42dd4ae19b47add28176327b2dfb0f748b60f8f68d0a4d55316e2928240c845f305ee9d57c21ba0f674fbebec8eefeb04b17ad91ecad0760d45e71dea0a74e980de4797b6acd8f60b155981496846fc5fbb4398b675ff8a51c95a590c977d3af155718cb08570afbca9f8b216a4bfd5603f80037fad8ec0350bfda8838f89256485206ab43e85a516d4014b6dc0124d09b46d49f90cfd05d4acadb6579ce60a53d3ad06b45efd31ad5aa460a23f5026f50b4b1dd22a43a7727440b24a8ab5b1a7a7e29693e6016fd973ccc2f41b770c4e6b7685b473bc55916a018632b62b2c75fd9cefda50f13a41ebd5339ecfcf4078303594620b2e504e313c083756b28e4029482292777d347cc2e32a6d8d9a27b09787316912ad32feb874a29a380154a8ef895ba654c0ebd8e351d2334b2ffa93c31624bcaf99e122feb1365241bfe444a725143392535d9e24ade789960bb5ec5d7217ef3693b660111381c3db09ca5de0ef903d1788c84cebde63696e5468a192c04fc8dda7f39ec6e2fadeee01c6eb335d734ddaa91f43a8bb6f258998379d6189cf0f671e0b45c74aeedb067d03a209341841f3c17c9c6e2155ae739f5b90d0b829c86baced173219e5aad287be04821cf6f820ba791ee917434fda704cba6e201822330185fb8abc7392edc98b59f3adcddab490006d06978d4e7e9044e27284ffe92727a5accac5da2c3640d271cc39d5b8b08ed4700715866dc1c4b0ba64258bfb9a84bd3d8b802bef7b9571bff43be278da8ca594ec26f17c19bfd098e70b6538447d4e062f7053a3832667bfdf6405e36a2597ac8d2c43344da9e605f2d6e193a3aeefc492569becc248bfd3c0fb9bcc6a03bbcdc348d65174c242805d704860d1ecebdf2f7e60b431a4576e80202811e47e9e688ab2df79bed90678560c7c4e1e50a6552ab6a569aa731915d509406be86d19209f5894571202dcbee591fa8e318e1335e6c72dfd1bbe90b1025d78bf491b69970fe4209a6ab7e7ed84859c9476f0ff750c819ac2c8ffd4c1ead8e446a7e82859fcc61a43a53ac33fb73d96dac7ca64ad0accff2a3488e4188f79494ed668c4f0512b68197c6d35edbcea1c0ffc57f148c0b9501113736c689d0ab9620d0a5e20fa4e84476687e3dd2689f06635301e0f966269a7a73625de35c6d5c6297ebf39eb630f1362c39e97e563c61101ba63c8d8956399f6cbea0f4e25696910d82ba2b7ccb41986fa09576af254be69ad02744265d30e62d97b2219b916ad31cdc5cf20f1b1bbe42c481a84b4ecd7bbc5a18d29b1151139932dbdad7a301e916bfedaf312403b75506f6697ecf8770f9ecd2a34111c6f60ec50cdae85df021709db0f145a208c4174502381522646573caa3089fab31e9c21932b3b07d3674d963498306bb7246b008d365bb9d84b54b32defa4eba120c0a8dccc73cf7f9a9c3456d2de606b72b99019c4d0a941b4ebc38ff70a36d64a913a61c7fab3d24cba6576ea6014093a81603dca98b52cfc7382f5d8dd7dd16200e1d1d78af454b506359d24a723b0d847fc28985325b00cfdcf2b79ffb59f456435356ad1cb2c769fe63a6aee6ef3355eb7765e24ca1103edce05a732d3ac3fbef8a9fd834d7b3f3b0f31ee9b33e1ecbe4372623d7ee16b2a8fc3e53f749534d24bdc178e9aa846fd43723eb96cf552cb1fa910949f1dd3bd713081219f0f02842534206233b9528acb6c80630a729131a37cbe3de6f6b0fef2d8fa7d750e6230a8e2e053a9740ac4f5a534f3597471e7a2a9f927b755f1c7e3fb6f5ee5d551a78416624f9c15c0a87dd3bd483932c3339d67c26e6e5db128bf7a4d99fc6d87214a511c2249689ac0556a8feb3ac130f28917e65d9758593da9ea737c0ae6d22a562228a37cfbd4d49becf2aef7c1869cd411990521cf2c7f7ae2a7f1964df5612c04a8119c648675b2bf7ca567cf1ba29a22f244edcb18de913f0b243e7016a8bb101358ee3c1e0e3bef0fe5b71b02c792d5d07783b3a06f591ed850f4eb9922e411a82913451ae9d9b9af583e98080870d3c18b54abaa01511c5ad41cf6fc2eb51ee745fdf82ebbe923e85de5b885fc8d8c9f22b6e222ff8d3fbef64618d56abcd586675484287eb4b209fc3f20e28e78c377a530712fc06672def6086abe151560576367c5f76db6cefe719f114aa206eabe4f3803256f659807de54a893af845b06584d7064baf3be8ea7ca78af0b817dd27e488fbfc76a85e48aae595", 0x1000}, {&(0x7f00000011c0)="452fe20fe95ef62422aef232f41d2b79c8dd28bb85088028b81de4028823f79a0956884bc6b60d64db1086d1907858ae0e55163415059f5b9c9a38ba2604604621db6172a858e457b9f2f2d690176e685a8c885eaafa10414bc7", 0x5a}, {&(0x7f0000001240)="bf4a97a50d4dc38b9d5fc8dc5fc01dd23854b7c74cdd92032da0553b964e773fc4d4ddbb58ca7db4b904bcc0ab9d74255a3951343b156f1e5ecc18066bbfa25678ea68b1fec9df61d32317bcae2e832d728dd1f130558bfaeb842a9f17e9174033e6a9042024d877e7332a52c3bfb6b25cdbe25f4e6714b83789e37f08d8091a57fe6275ce2089a9de0cbf60b1240f", 0x8f}, {&(0x7f0000001340)="6c5f919dc19f84c60ce5bcfc3cb11035c2fa74c0ef3b635e51adb13e7bd65e43a51d6a7132eb9fe11a5b485a", 0x2c}, {&(0x7f00000013c0)="dc5f006328f729408a824c8947f5c49f73e5f99f39e11226f95f59972091123f316966040209357c0a9eccf56e04939edfb10b3b86c31fd750021dbc1761dd70ced0a54770293903e55764109cccfde7155bb3a7548364a63998861f1f22006997c74023c2b96bdf798cf8f8d794932e789eaeca56be2deaff76c9c8695d636069e22fc755a03d42b9a2b208afc413b2650972c92a9ed81877d14299dea6b1498bb220b7617020d0213bb284b958198bd35566063f233d04b707d48d94320221f36ddb0b769142d1dabd666639e2873a4a2d08abda44c641af0d8c959bbb22614ffbbcfb9155bae79c58c3b9900436dc22f4a9", 0xf3}, {&(0x7f00000014c0)="3945fda71a3b81ac947d", 0xa}, {&(0x7f0000001500)="6e1b4de14d2c1b71fd503dcc", 0xc}], 0x7, &(0x7f0000003900)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r0, r0, r0, r3, 0xffffffffffffffff, r4, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, r0, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee00}}}], 0xc0, 0x2000400d}, 0x0) flock(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000003a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$unix(r1, &(0x7f0000003bc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setregid(0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f0000003dc0)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x88, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2400000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) accept4$unix(r1, &(0x7f0000003e00)=@abs, &(0x7f0000003e80)=0x6e, 0x0) 18.508331602s ago: executing program 4 (id=934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x0, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=""/148, &(0x7f0000000100)=0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x4089de1835c869fe, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 9.319506325s ago: executing program 0 (id=963): socket(0x21, 0x5, 0x8000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001000000000000000001"], 0x88}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) 4.92704644s ago: executing program 0 (id=974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffcf9, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) syz_io_uring_setup(0x73fd, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa96, &(0x7f0000000140)={0x0, 0x0, 0x2000}, 0x0, &(0x7f00000005c0)) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x2}, 0x18) sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffca9, &(0x7f00000001c0)=[{&(0x7f0000000100)='9', 0x1}, {0x0, 0x1}], 0x2}, 0x4040080) 4.714502421s ago: executing program 1 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=""/148, &(0x7f0000000100)=0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x4089de1835c869fe, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.946160215s ago: executing program 3 (id=976): mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884123, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000000000034000000008001e0040000000", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x7, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, 0xffffffffffffffff, 0x5}, 0x10) r2 = socket(0x0, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000080)=@udp6=r2}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000058c0)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)) bind$unix(r2, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="414c5450434d20274d617374657220436170564f7106c84de7cbdad0747572652053776974636827"], 0x34) close(r5) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 3.711775982s ago: executing program 2 (id=977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x1e, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000021000000185000000000000000000000000000009500000000000000185600000900000000000000000000004f19000108000000181a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000185500000b000000000000000000000018220000", @ANYRES32=r0, @ANYBLOB="0000000002000055ae820018230000d07a0e1d76a5d17d63d8d0e974240a6941a205461f76bb233e78", @ANYRES32=r0, @ANYBLOB="0000000007000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x95) unshare(0x8000000) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, 0x0, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f00000003c0), &(0x7f0000000200)=0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x3}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x64, 0x1000000000000, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xb, 0xa, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x410}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.617123869s ago: executing program 0 (id=978): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001fc0)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) (async) close(r0) 3.247752563s ago: executing program 3 (id=979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a}) r4 = syz_io_uring_setup(0x5e65, &(0x7f0000000140)={0x0, 0x122f, 0x2000, 0x40000}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r6, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x336, 0x5b}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0x2000408c) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000100)) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r13, r12, 0x0) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r14, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r14, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000880)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x0, 0x40000000000}, @ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_binder}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}], 0x1, 0xfeffff, &(0x7f0000000280)="df"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 3.247416083s ago: executing program 0 (id=980): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$cgroup_procs(r0, &(0x7f0000001600)='tasks\x00', 0x2, 0x0) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001680)={0x0, 0x5, {0x0}, {0xffffffffffffffff}, 0xf6b}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r0, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f00000039c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="452fe20fe95ef62422aef232f41d2b79c8dd28bb85088028b81de4028823f79a0956884bc6b60d64db1086d1907858ae0e55163415059f5b9c9a38ba2604604621db6172a858e457b9f2f2d690176e685a8c885eaafa10414bc7", 0x5a}, {&(0x7f0000001240)="bf4a97a50d4dc38b9d5fc8dc5fc01dd23854b7c74cdd92032da0553b964e773fc4d4ddbb58ca7db4b904bcc0ab9d74255a3951343b156f1e5ecc18066bbfa25678ea68b1fec9df61d32317bcae2e832d728dd1f130558bfaeb842a9f17e9174033e6a9042024d877e7332a52c3bfb6b25cdbe25f4e6714b83789e37f08d8091a57fe6275ce2089a9de0cbf60b1240f5e", 0x90}, {&(0x7f0000001340)="6c5f919dc19f84c60ce5bcfc3cb11035c2fa74c0ef3b635e51adb13e7bd65e43a51d6a7132eb9fe11a5b485a", 0x2c}, {&(0x7f00000013c0)="dc5f006328f729408a824c8947f5c49f73e5f99f39e11226f95f59972091123f316966040209357c0a9eccf56e04939edfb10b3b86c31fd750021dbc1761dd70ced0a54770293903e55764109cccfde7155bb3a7548364a63998861f1f22006997c74023c2b96bdf798cf8f8d794932e789eaeca56be2deaff76c9c8695d636069e22fc755a03d42b9a2b208afc413b2650972c92a9ed81877d14299dea6b1498bb220b7617020d0213bb284b958198bd35566063f233d04b707d48d94320221f36ddb0b769142d1dabd666639e2873a4a2d08abda44c641af0d8c959bbb22614ffbbcfb9155bae79c58c3b9900436dc22f4a9", 0xf3}, {&(0x7f00000014c0)="3945fda71a3b81ac947d", 0xa}, {&(0x7f0000001500)="6e1b4de14d2c1b71fd503dcc", 0xc}], 0x7, &(0x7f0000003900)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r0, r0, r0, r3, 0xffffffffffffffff, r4, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, r0, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee00}}}], 0xc0, 0x2000400d}, 0x0) flock(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000003a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$unix(r1, &(0x7f0000003bc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setregid(0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f0000003dc0)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x88, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2400000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) accept4$unix(r1, &(0x7f0000003e00)=@abs, &(0x7f0000003e80)=0x6e, 0x0) 3.112927629s ago: executing program 3 (id=981): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x8c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fa480ef95ef9645"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4d5c1e4c9f8e0d415b95318721d43e54"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffc}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "44c42797553a479f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f625565bc4514ed23f6bbe54f79e9da8"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x8c}}, 0x80) socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{}, "0d54c35538947a23", "1ab9ab66d3cce1a9f43816747889cefb", "a716d7c6", "81b80f4c9a029f04"}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x5, 0x0, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "460ea0bfebec5f8d"}}, 0x48}}, 0x0) 3.008787446s ago: executing program 0 (id=982): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) (fail_nth: 1) socket$netlink(0x10, 0x3, 0x0) 2.717464655s ago: executing program 2 (id=983): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1]) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) (async) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) syz_open_dev$dri(0x0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) (async) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffdef) (async) shutdown(r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf254400000008000300", @ANYRES32=r0, @ANYBLOB="0c009900f7ffffff1b0001000400bf0008000c0064000000"], 0x34}, 0x1, 0x0, 0x0, 0x8d1}, 0x20050000) 2.659849771s ago: executing program 3 (id=984): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.252981379s ago: executing program 0 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000080), 0x0) 2.080458194s ago: executing program 2 (id=986): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) setreuid(r0, r1) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.82790575s ago: executing program 2 (id=987): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffcf9, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) r3 = syz_io_uring_setup(0x73fd, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa96, &(0x7f0000000140)={0x0, 0x0, 0x2000}, 0x0, &(0x7f00000005c0)) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2}, 0x18) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0xfffffffffffffca9, &(0x7f00000001c0)=[{&(0x7f0000000100)='9', 0x1}, {0x0, 0x1}], 0x2}, 0x4040080) 1.753356823s ago: executing program 1 (id=988): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x121d00, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) 1.214264029s ago: executing program 1 (id=989): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002200)={0x1c, 0x1e, 0x323, 0x0, 0x0, "", [@generic="000615ad8c4ae20c95"]}, 0x1c}], 0x1}, 0x0) 966.405359ms ago: executing program 1 (id=990): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x4020400) r2 = dup(r1) ioctl$KVM_GET_NESTED_STATE(r2, 0x40103d02, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x1a}, 0x20) unshare(0x10000000) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/73, 0x49, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$getflags(r4, 0x401) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1202"], 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0a003400020202020202000008004a000000000004004900"], 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="02002d9d700076bf6950176e96f1399d40b7", @ANYRES32=0x0, @ANYBLOB="0c009900010000006f00000008003500010000000a0034000202020202020000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4040011) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) mremap(&(0x7f00000e9000/0x400000)=nil, 0x400000, 0x1000, 0x0, &(0x7f00003b1000/0x1000)=nil) madvise(&(0x7f00000d9000/0x2000)=nil, 0x2000, 0x14) 681.893413ms ago: executing program 2 (id=991): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$cgroup_procs(r0, &(0x7f0000001600)='tasks\x00', 0x2, 0x0) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001680)={0x0, 0x5, {0x0}, {0xffffffffffffffff}, 0xf6b}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r0, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f00000039c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="452fe20fe95ef62422aef232f41d2b79c8dd28bb85088028b81de4028823f79a0956884bc6b60d64db1086d1907858ae0e55163415059f5b9c9a38ba2604604621db6172a858e457b9f2f2d690176e685a8c885eaafa10414bc7", 0x5a}, {&(0x7f0000001240)="bf4a97a50d4dc38b9d5fc8dc5fc01dd23854b7c74cdd92032da0553b964e773fc4d4ddbb58ca7db4b904bcc0ab9d74255a3951343b156f1e5ecc18066bbfa25678ea68b1fec9df61d32317bcae2e832d728dd1f130558bfaeb842a9f17e9174033e6a9042024d877e7332a52c3bfb6b25cdbe25f4e6714b83789e37f08d8091a57fe6275ce2089a9de0cbf60b1240f5e", 0x90}, {&(0x7f0000001340)="6c5f919dc19f84c60ce5bcfc3cb11035c2fa74c0ef3b635e51adb13e7bd65e43a51d6a7132eb9fe11a5b485a", 0x2c}, {&(0x7f00000013c0)="dc5f006328f729408a824c8947f5c49f73e5f99f39e11226f95f59972091123f316966040209357c0a9eccf56e04939edfb10b3b86c31fd750021dbc1761dd70ced0a54770293903e55764109cccfde7155bb3a7548364a63998861f1f22006997c74023c2b96bdf798cf8f8d794932e789eaeca56be2deaff76c9c8695d636069e22fc755a03d42b9a2b208afc413b2650972c92a9ed81877d14299dea6b1498bb220b7617020d0213bb284b958198bd35566063f233d04b707d48d94320221f36ddb0b769142d1dabd666639e2873a4a2d08abda44c641af0d8c959bbb22614ffbbcfb9155bae79c58c3b9900436dc22f4a9", 0xf3}, {&(0x7f00000014c0)="3945fda71a3b81ac947d", 0xa}, {&(0x7f0000001500)="6e1b4de14d2c1b71fd503dcc", 0xc}], 0x7, &(0x7f0000003900)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r0, r0, r0, r3, 0xffffffffffffffff, r4, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, r0, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee00}}}], 0xc0, 0x2000400d}, 0x0) flock(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000003a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$unix(r1, &(0x7f0000003bc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setregid(0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f0000003dc0)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x88, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2400000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) accept4$unix(r1, &(0x7f0000003e00)=@abs, &(0x7f0000003e80)=0x6e, 0x0) 519.350059ms ago: executing program 2 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x1e, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000021000000185000000000000000000000000000009500000000000000185600000900000000000000000000004f19000108000000181a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000185500000b000000000000000000000018220000", @ANYRES32=r0, @ANYBLOB="0000000002000055ae820018230000d07a0e1d76a5d17d63d8d0e974240a6941a205461f76bb233e78", @ANYRES32=r0, @ANYBLOB="0000000007000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x95) unshare(0x8000000) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, 0x0, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f00000003c0), &(0x7f0000000200)=0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x3}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x64, 0x1000000000000, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xb, 0xa, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x410}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 346.491566ms ago: executing program 1 (id=993): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x8c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fa480ef95ef9645"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4d5c1e4c9f8e0d415b95318721d43e54"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffc}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "44c42797553a479f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f625565bc4514ed23f6bbe54f79e9da8"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x8c}}, 0x80) socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{}, "0d54c35538947a23", "1ab9ab66d3cce1a9f43816747889cefb", "a716d7c6", "81b80f4c9a029f04"}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x5, 0x0, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "460ea0bfebec5f8d"}}, 0x48}}, 0x0) 345.185274ms ago: executing program 3 (id=994): syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xfffe}, [{0x2, 0x60b, 0x0, 0x0, 0x0, 0x0, 0x1}]}, 0x78) 67.647822ms ago: executing program 3 (id=995): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0xfffffecc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000280)=""/2, 0x2}], 0x1}}], 0x1, 0x7fb10727dc89, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x7fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet(r7, &(0x7f0000000700)="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", 0x131, 0x40040, 0x0, 0x0) syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000180)) 0s ago: executing program 1 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): ype=1400 audit(1720212912.436:479): avc: denied { getopt } for pid=6111 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.614737][ T29] audit: type=1400 audit(1720212912.676:480): avc: denied { ioctl } for pid=6127 comm="syz.3.235" path="socket:[12057]" dev="sockfs" ino=12057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.064240][ T29] audit: type=1400 audit(1720212913.126:481): avc: denied { write } for pid=6140 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.452776][ T29] audit: type=1400 audit(1720212913.516:482): avc: denied { connect } for pid=6148 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.931834][ T29] audit: type=1400 audit(1720212913.996:483): avc: denied { mount } for pid=6130 comm="syz.2.238" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 187.035860][ T29] audit: type=1400 audit(1720212913.996:484): avc: denied { remount } for pid=6130 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 187.131270][ T29] audit: type=1400 audit(1720212914.106:485): avc: denied { search } for pid=4516 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.231462][ T29] audit: type=1400 audit(1720212914.286:486): avc: denied { bind } for pid=6158 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.995378][ T5137] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.004833][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 188.210929][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.227180][ T25] usb 5-1: config index 0 descriptor too short (expected 10770, got 27) [ 188.239490][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.257732][ T5137] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 188.268549][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.297599][ T25] usb 5-1: config 48 has too many interfaces: 93, using maximum allowed: 32 [ 188.304252][ T5137] usb 2-1: config 0 descriptor?? [ 188.345387][ T25] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 188.366378][ T25] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 93 [ 188.405020][ T25] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 188.422249][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.454904][ T25] usb 5-1: Product: syz [ 188.464645][ T25] usb 5-1: Manufacturer: syz [ 188.476901][ T25] usb 5-1: SerialNumber: syz [ 188.764933][ T25] usb 5-1: USB disconnect, device number 2 [ 188.823952][ T29] audit: type=1400 audit(1720212915.886:487): avc: denied { unmount } for pid=5482 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.858888][ T5137] wacom 0003:056A:00D0.0001: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 188.938093][ T5137] wacom 0003:056A:00D0.0001: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 189.062743][ T5137] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.0001/input/input5 [ 190.056301][ T6193] Non-string source [ 190.162301][ T5137] usb 2-1: USB disconnect, device number 7 [ 190.248819][ T6201] syz.3.267[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.249047][ T6201] syz.3.267[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.394952][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 190.631786][ T25] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 190.669490][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.714685][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.844819][ T5135] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 190.924888][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 190.924906][ T29] audit: type=1400 audit(1720212917.996:492): avc: denied { write } for pid=6202 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 190.961853][ T25] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 191.012140][ T25] usb 5-1: USB disconnect, device number 3 [ 191.097148][ T5135] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 191.108950][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.212980][ T5135] usb 4-1: config 0 descriptor?? [ 191.229219][ T5135] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 191.297658][ T6178] udevd[6178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.685735][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 191.852694][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.874195][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.953113][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.016866][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.257904][ T5135] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 192.285824][ T29] audit: type=1400 audit(1720212919.356:493): avc: denied { setopt } for pid=6232 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.053470][ T29] audit: type=1400 audit(1720212919.516:494): avc: denied { write } for pid=6232 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.208199][ T29] audit: type=1400 audit(1720212919.516:495): avc: denied { connect } for pid=6232 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.284784][ T5135] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 194.319455][ T5135] usb 4-1: USB disconnect, device number 2 [ 194.360215][ T29] audit: type=1400 audit(1720212921.066:496): avc: denied { name_connect } for pid=6232 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 194.442686][ T29] audit: type=1400 audit(1720212921.496:497): avc: denied { write } for pid=6245 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.462839][ T29] audit: type=1400 audit(1720212921.496:498): avc: denied { read } for pid=6245 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.346129][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.352490][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.763119][ T29] audit: type=1400 audit(1720212922.826:499): avc: denied { create } for pid=6255 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 195.989575][ T29] audit: type=1400 audit(1720212923.036:500): avc: denied { bind } for pid=6259 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.071743][ T29] audit: type=1400 audit(1720212923.046:501): avc: denied { setopt } for pid=6259 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.801937][ T6270] kvm: kvm [6268]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xfe00000000 [ 196.871681][ T6270] kvm: kvm [6268]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x27e00000080 [ 197.016271][ T6270] kvm: kvm [6268]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x3ef00000000 [ 197.103811][ T29] audit: type=1326 audit(1720212924.166:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 197.139475][ T29] audit: type=1326 audit(1720212924.166:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 197.169482][ T29] audit: type=1326 audit(1720212924.176:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 197.249570][ T29] audit: type=1326 audit(1720212924.176:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 197.394611][ T29] audit: type=1326 audit(1720212924.186:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 198.159832][ T29] audit: type=1400 audit(1720212925.196:507): avc: denied { mounton } for pid=6289 comm="syz.2.296" path="/proc/69/task" dev="proc" ino=13422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 198.757100][ T6301] 9pnet_fd: Insufficient options for proto=fd [ 198.850319][ T29] audit: type=1400 audit(1720212925.916:508): avc: denied { write } for pid=6299 comm="syz.4.297" name="file0" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.949003][ T29] audit: type=1400 audit(1720212925.916:509): avc: denied { open } for pid=6299 comm="syz.4.297" path="/77/file0" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.314736][ T5133] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.513306][ T6309] syzkaller0: entered promiscuous mode [ 199.544590][ T6309] syzkaller0: entered allmulticast mode [ 199.834595][ T5133] usb 5-1: Using ep0 maxpacket: 16 [ 199.847899][ T5133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 199.861909][ T5133] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 199.872853][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.900310][ T5133] usb 5-1: config 0 descriptor?? [ 200.867235][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.030887][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.383218][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.394041][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.764362][ T6337] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 201.846461][ T5133] hid (null): unknown global tag 0xe2 [ 201.876095][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 201.883555][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.891102][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.898699][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.912112][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.920114][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.930901][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.938581][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.972119][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.982188][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 201.996512][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.003947][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.019144][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.036018][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.043476][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.053632][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.074134][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.091797][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 202.092428][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 202.105287][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.144305][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.154146][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.163204][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.170733][ T5092] Bluetooth: hci2: command 0x0406 tx timeout [ 202.181116][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.189388][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.200209][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.209070][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.216564][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.224098][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.231808][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.239312][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.248067][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.258819][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.266359][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.273822][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.281570][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.293258][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.300811][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.314560][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.322051][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.334153][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.366041][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.373498][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.379604][ T6343] netlink: 100 bytes leftover after parsing attributes in process `syz.2.312'. [ 202.387898][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.407898][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.427087][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.449090][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.472029][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.487440][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.534631][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.555012][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.565621][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 202.573075][ T5133] hid-generic 0003:0158:0100.0002: unknown main item tag 0xe [ 202.580580][ T5133] hid-generic 0003:0158:0100.0002: unexpected long global item [ 202.597042][ T5133] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 202.627918][ T5133] usb 5-1: USB disconnect, device number 4 [ 208.027977][ T6369] sched: RT throttling activated [ 214.351084][ T5092] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 214.526987][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 214.533831][ T5092] Bluetooth: Wrong link type (-22) [ 214.539345][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 214.549110][ T5092] Bluetooth: Wrong link type (-22) [ 214.732138][ T6393] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 214.784621][ T6393] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 215.237346][ T5092] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 216.389755][ T6407] debugfs: Directory 'C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' with parent 'ieee80211' already present! [ 216.409797][ T5092] Bluetooth: hci5: command 0x0406 tx timeout [ 216.822714][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 216.822759][ T29] audit: type=1400 audit(1720212943.856:518): avc: denied { ioctl } for pid=6417 comm="syz.0.333" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 216.854182][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.727563][ T29] audit: type=1400 audit(1720212945.786:519): avc: denied { setopt } for pid=6430 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 230.271592][ T5083] Bluetooth: hci5: command 0x0406 tx timeout [ 230.565396][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.578241][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.586210][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.595882][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.633835][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.663459][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.675220][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.687789][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.705661][ T5092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.722457][ T5092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.738307][ T5092] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.746347][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.921997][ T6483] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 230.955200][ T6483] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 231.016464][ T2784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.054889][ T29] audit: type=1400 audit(1720212958.126:520): avc: denied { write } for pid=6480 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.210032][ T2784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.359898][ T2784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.519854][ T2784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.725484][ T5099] Bluetooth: hci0: command tx timeout [ 232.732649][ T5092] Bluetooth: hci2: command 0x0406 tx timeout [ 232.805895][ T5092] Bluetooth: hci3: command tx timeout [ 234.805184][ T5092] Bluetooth: hci0: command tx timeout [ 234.874897][ T2784] bridge_slave_1: left allmulticast mode [ 234.880670][ T2784] bridge_slave_1: left promiscuous mode [ 234.887516][ T5092] Bluetooth: hci3: command tx timeout [ 234.934098][ T2784] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.096090][ T2784] bridge_slave_0: left allmulticast mode [ 235.101875][ T2784] bridge_slave_0: left promiscuous mode [ 235.228955][ T2784] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.272483][ T5092] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 236.885877][ T5092] Bluetooth: hci0: command tx timeout [ 236.964801][ T5092] Bluetooth: hci3: command tx timeout [ 237.135682][ T2784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.162805][ T2784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.178104][ T2784] bond0 (unregistering): Released all slaves [ 237.252710][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 237.264197][ T6548] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 237.303068][ T6472] chnl_net:caif_netlink_parms(): no params data found [ 237.314774][ T6548] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 237.516356][ T2784] tipc: Disabling bearer [ 237.544421][ T2784] tipc: Left network mode [ 238.154980][ T29] audit: type=1400 audit(1720212964.726:521): avc: denied { read } for pid=6558 comm="syz.4.361" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 238.322376][ T29] audit: type=1400 audit(1720212964.726:522): avc: denied { open } for pid=6558 comm="syz.4.361" path="/dev/ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 238.346895][ T5092] Bluetooth: hci2: command 0x0406 tx timeout [ 238.968436][ T5092] Bluetooth: hci0: command tx timeout [ 239.048476][ T5099] Bluetooth: hci3: command tx timeout [ 243.941883][ T29] audit: type=1400 audit(1720212971.006:523): avc: denied { connect } for pid=6593 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 243.955057][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.014603][ T29] audit: type=1400 audit(1720212971.066:524): avc: denied { connect } for pid=6593 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 244.050307][ T6594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.619469][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.654821][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.679234][ T6473] bridge_slave_0: entered allmulticast mode [ 244.717568][ T6473] bridge_slave_0: entered promiscuous mode [ 244.778246][ T2784] hsr_slave_0: left promiscuous mode [ 244.798248][ T2784] hsr_slave_1: left promiscuous mode [ 244.825093][ T2784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.839951][ T2784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.852065][ T2784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.860114][ T2784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.901807][ T2784] veth1_macvtap: left promiscuous mode [ 244.907613][ T2784] veth0_macvtap: left promiscuous mode [ 244.924847][ T2784] veth1_vlan: left promiscuous mode [ 244.931606][ T2784] veth0_vlan: left promiscuous mode [ 245.911361][ T2784] team0 (unregistering): Port device team_slave_1 removed [ 245.975212][ T2784] team0 (unregistering): Port device team_slave_0 removed [ 246.856037][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.864395][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.874675][ T6473] bridge_slave_1: entered allmulticast mode [ 246.890853][ T6473] bridge_slave_1: entered promiscuous mode [ 247.011539][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.026870][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.036627][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.052030][ T6472] bridge_slave_0: entered allmulticast mode [ 247.070843][ T6472] bridge_slave_0: entered promiscuous mode [ 247.106694][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.144864][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.152159][ T6472] bridge_slave_1: entered allmulticast mode [ 247.195851][ T6472] bridge_slave_1: entered promiscuous mode [ 247.218825][ T5092] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 247.286660][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.476697][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.536582][ T6629] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 247.552661][ T6473] team0: Port device team_slave_0 added [ 247.569666][ T6629] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 247.640777][ T6473] team0: Port device team_slave_1 added [ 247.696926][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.045348][ T6472] team0: Port device team_slave_0 added [ 248.060103][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.091424][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.165571][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 248.214582][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.250074][ T6472] team0: Port device team_slave_1 added [ 248.348855][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.362223][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.398384][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.733377][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.733849][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.773380][ T6654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.774952][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.827957][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.427394][ T5099] Bluetooth: hci2: command 0x0406 tx timeout [ 249.486538][ T6473] hsr_slave_0: entered promiscuous mode [ 249.546495][ T6473] hsr_slave_1: entered promiscuous mode [ 249.594408][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.602940][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.688639][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.813538][ T6670] netlink: 64 bytes leftover after parsing attributes in process `syz.4.377'. [ 249.847024][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.377'. [ 249.884370][ T2784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.460336][ T2784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.772645][ T2784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.069529][ T6472] hsr_slave_0: entered promiscuous mode [ 251.119691][ T6472] hsr_slave_1: entered promiscuous mode [ 251.209960][ T6472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.232849][ T6472] Cannot create hsr debugfs directory [ 251.362858][ T2784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.556250][ T6695] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 252.594575][ T6695] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 252.851228][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 252.930622][ T6708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.827664][ T5099] Bluetooth: hci1: command 0x0406 tx timeout [ 258.849618][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.864632][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.010107][ T6721] netlink: 64 bytes leftover after parsing attributes in process `syz.2.386'. [ 259.031348][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.2.386'. [ 259.160527][ T2784] bridge_slave_1: left allmulticast mode [ 259.166669][ T2784] bridge_slave_1: left promiscuous mode [ 259.178818][ T2784] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.227435][ T2784] bridge_slave_0: left allmulticast mode [ 259.233304][ T2784] bridge_slave_0: left promiscuous mode [ 259.262514][ T2784] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.692730][ T5099] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 260.787868][ T6745] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 260.794431][ T6745] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.810989][ T6745] vhci_hcd vhci_hcd.0: Device attached [ 260.879686][ T2784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.891696][ T2784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.906041][ T2784] bond0 (unregistering): Released all slaves [ 261.004751][ T5082] vhci_hcd: vhci_device speed not set [ 261.044348][ T6741] netlink: 'syz.2.392': attribute type 5 has an invalid length. [ 261.065098][ T6735] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 261.073627][ T6735] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 261.125214][ T5082] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 261.332663][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 261.364153][ T6751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.386552][ T6746] vhci_hcd: connection closed [ 261.387407][ T51] vhci_hcd: stop threads [ 261.747366][ T51] vhci_hcd: release socket [ 261.765784][ T5099] Bluetooth: hci5: command 0x0406 tx timeout [ 262.061303][ T51] vhci_hcd: disconnect device [ 262.293143][ T5099] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 262.606291][ T6758] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 262.632924][ T6758] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 262.781658][ T2784] hsr_slave_0: left promiscuous mode [ 262.788328][ T6767] netlink: 64 bytes leftover after parsing attributes in process `syz.2.397'. [ 262.812090][ T6767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.397'. [ 262.825944][ T2784] hsr_slave_1: left promiscuous mode [ 262.838827][ T2784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.863526][ T2784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.890313][ T2784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.907015][ T2784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.994312][ T2784] veth1_macvtap: left promiscuous mode [ 263.002794][ T2784] veth0_macvtap: left promiscuous mode [ 263.019556][ T2784] veth1_vlan: left promiscuous mode [ 263.038619][ T2784] veth0_vlan: left promiscuous mode [ 263.393285][ T6778] netlink: 56 bytes leftover after parsing attributes in process `syz.0.398'. [ 264.326023][ T5099] Bluetooth: hci5: command 0x0406 tx timeout [ 265.636658][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 265.679282][ T6795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.795242][ T6797] binder: BINDER_SET_CONTEXT_MGR already set [ 265.801961][ T6797] binder: 6792:6797 ioctl 4018620d 20000040 returned -16 [ 266.516958][ T5082] vhci_hcd: vhci_device speed not set [ 266.531078][ T2784] team0 (unregistering): Port device team_slave_1 removed [ 266.632748][ T2784] team0 (unregistering): Port device team_slave_0 removed [ 267.386050][ T6814] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 267.392703][ T6814] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.401160][ T6814] vhci_hcd vhci_hcd.0: Device attached [ 267.670065][ T5082] vhci_hcd: vhci_device speed not set [ 267.739393][ T6816] vhci_hcd: connection closed [ 267.741382][ T1094] vhci_hcd: stop threads [ 267.750991][ T5082] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 267.754644][ T1094] vhci_hcd: release socket [ 267.763289][ T1094] vhci_hcd: disconnect device [ 267.796314][ T5082] usb 9-1: enqueue for inactive port 0 [ 267.885083][ T5082] vhci_hcd: vhci_device speed not set [ 268.426982][ T6806] netlink: 'syz.0.405': attribute type 5 has an invalid length. [ 268.660590][ T29] audit: type=1326 audit(1720212995.726:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 268.790392][ T29] audit: type=1326 audit(1720212995.746:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 268.901187][ T29] audit: type=1326 audit(1720212995.746:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 269.025097][ T29] audit: type=1326 audit(1720212995.746:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 269.162111][ T29] audit: type=1326 audit(1720212995.756:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 269.205075][ T6829] netlink: 56 bytes leftover after parsing attributes in process `syz.0.409'. [ 269.258333][ T6472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.298995][ T29] audit: type=1326 audit(1720212995.756:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 269.380992][ T6472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.394396][ T29] audit: type=1326 audit(1720212995.756:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 269.481734][ T6472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.521661][ T29] audit: type=1326 audit(1720212995.766:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 269.561290][ T6472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.670316][ T29] audit: type=1326 audit(1720212995.766:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 269.810915][ T29] audit: type=1326 audit(1720212995.766:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276fb75bd9 code=0x7ffc0000 [ 271.186644][ T6854] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.712397][ T6473] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.830912][ T6473] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.913853][ T6473] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.964094][ T6863] netlink: 'syz.2.415': attribute type 5 has an invalid length. [ 272.012902][ T6473] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.212489][ T6870] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 272.219060][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.234753][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 272.360875][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.454992][ T5201] vhci_hcd: vhci_device speed not set [ 272.503010][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.677076][ T5201] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 272.721016][ T6871] vhci_hcd: connection closed [ 272.721616][ T1094] vhci_hcd: stop threads [ 272.741699][ T1094] vhci_hcd: release socket [ 272.783884][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.791092][ T1094] vhci_hcd: disconnect device [ 272.791181][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.823507][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.830811][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.504387][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.581141][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.686949][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.694235][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.818331][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.825670][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.340188][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.611770][ T6472] veth0_vlan: entered promiscuous mode [ 274.691944][ T6472] veth1_vlan: entered promiscuous mode [ 274.845392][ T6472] veth0_macvtap: entered promiscuous mode [ 274.890275][ T6472] veth1_macvtap: entered promiscuous mode [ 275.002875][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.030401][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.060687][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.082313][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.115320][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.134764][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.173134][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.233563][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.258737][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.284257][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.321846][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.336972][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.348454][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.397391][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.439805][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.508978][ T6472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.118024][ T6472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.166260][ T6472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.188727][ T6472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.391073][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 276.451719][ T6927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.663308][ T6473] veth0_vlan: entered promiscuous mode [ 277.429886][ T6473] veth1_vlan: entered promiscuous mode [ 277.702030][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.722195][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.900051][ T5201] vhci_hcd: vhci_device speed not set [ 277.910188][ T6473] veth0_macvtap: entered promiscuous mode [ 277.960973][ T6944] netlink: 'syz.2.426': attribute type 5 has an invalid length. [ 278.002963][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.013679][ T6473] veth1_macvtap: entered promiscuous mode [ 278.045477][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.214179][ T6951] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 278.220087][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.220804][ T6951] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 278.236547][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.426237][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.450853][ T6951] vhci_hcd vhci_hcd.0: Device attached [ 278.467631][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.699504][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.988162][ T5201] vhci_hcd: vhci_device speed not set [ 279.001727][ T6953] vhci_hcd: connection closed [ 279.017782][ T12] vhci_hcd: stop threads [ 279.075556][ T5201] usb 13-1: device descriptor read/64, error -110 [ 279.235769][ T12] vhci_hcd: release socket [ 279.240243][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.645428][ T12] vhci_hcd: disconnect device [ 279.696832][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.824975][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.983831][ T5201] vhci_hcd: vhci_device speed not set [ 280.051489][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.103180][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.119741][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.141224][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.162732][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.108341][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 281.144666][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.196901][ T6978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.200610][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.380641][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.457348][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.529708][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.579502][ T6473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.620959][ T6473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.654889][ T6473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.664265][ T6473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.543298][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.567528][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.759654][ T6392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.814941][ T6392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.937481][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 282.937502][ T29] audit: type=1400 audit(1720213009.986:588): avc: denied { setattr } for pid=7014 comm="syz.1.439" name="tun" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 284.137349][ T29] audit: type=1400 audit(1720213011.196:589): avc: denied { getopt } for pid=7036 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 284.623643][ T7043] netlink: 'syz.3.442': attribute type 5 has an invalid length. [ 284.798040][ T7049] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 284.804595][ T7049] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 284.855826][ T7049] vhci_hcd vhci_hcd.0: Device attached [ 285.221554][ T5133] vhci_hcd: vhci_device speed not set [ 285.485957][ T5133] usb 15-1: new full-speed USB device number 3 using vhci_hcd [ 285.952768][ T7051] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 285.962466][ T7050] vhci_hcd: connection closed [ 286.028454][ T994] vhci_hcd: stop threads [ 286.037853][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 286.089517][ T994] vhci_hcd: release socket [ 286.091541][ T7060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.132366][ T994] vhci_hcd: disconnect device [ 288.762270][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 288.798665][ T7101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.124754][ T7118] netlink: 'syz.3.457': attribute type 5 has an invalid length. [ 290.665669][ T5133] vhci_hcd: vhci_device speed not set [ 290.892379][ T7127] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 290.898962][ T7127] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.974876][ T7127] vhci_hcd vhci_hcd.0: Device attached [ 291.022817][ T7134] vhci_hcd: connection closed [ 291.028340][ T51] vhci_hcd: stop threads [ 291.108337][ T51] vhci_hcd: release socket [ 291.126376][ T51] vhci_hcd: disconnect device [ 291.224628][ T5133] vhci_hcd: vhci_device speed not set [ 291.874647][ T29] audit: type=1326 audit(1720213018.936:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.027964][ T29] audit: type=1326 audit(1720213018.946:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.113719][ T29] audit: type=1326 audit(1720213019.026:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.276936][ T29] audit: type=1326 audit(1720213019.026:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.302248][ T29] audit: type=1326 audit(1720213019.036:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.379513][ T29] audit: type=1326 audit(1720213019.046:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.445527][ T29] audit: type=1326 audit(1720213019.046:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.551617][ T29] audit: type=1326 audit(1720213019.046:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.674838][ T29] audit: type=1326 audit(1720213019.046:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.698228][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.803317][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 292.844359][ T29] audit: type=1326 audit(1720213019.066:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9310b75bd9 code=0x7ffc0000 [ 292.926753][ T7164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.814991][ T7194] netlink: 'syz.1.474': attribute type 5 has an invalid length. [ 297.046012][ T7206] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 297.052557][ T7206] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 297.144767][ T7206] vhci_hcd vhci_hcd.0: Device attached [ 297.223627][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.257572][ T7215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.449732][ T5201] vhci_hcd: vhci_device speed not set [ 297.466140][ T7207] vhci_hcd: connection closed [ 297.474764][ T2827] vhci_hcd: stop threads [ 297.614953][ T5201] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 297.628499][ T2827] vhci_hcd: release socket [ 298.154883][ T2827] vhci_hcd: disconnect device [ 298.203093][ T5201] usb 11-1: enqueue for inactive port 0 [ 298.294896][ T5201] vhci_hcd: vhci_device speed not set [ 300.370886][ T7246] binder: 7239:7246 ioctl c0306201 0 returned -14 [ 300.391724][ T7246] binder: BINDER_SET_CONTEXT_MGR already set [ 300.398019][ T7246] binder: 7239:7246 ioctl 4018620d 20000040 returned -16 [ 303.910961][ T7267] binder: BINDER_SET_CONTEXT_MGR already set [ 303.917452][ T7267] binder: 7261:7267 ioctl 4018620d 20000040 returned -16 [ 304.459658][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 304.486799][ T7268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.487502][ T7272] netlink: 'syz.2.497': attribute type 5 has an invalid length. [ 305.833783][ T7285] Zero length message leads to an empty skb [ 306.287224][ T7286] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 306.293772][ T7286] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 306.335543][ T7286] vhci_hcd vhci_hcd.0: Device attached [ 306.478805][ T7287] vhci_hcd: connection closed [ 306.480325][ T35] vhci_hcd: stop threads [ 306.670272][ T5135] vhci_hcd: vhci_device speed not set [ 306.684398][ T35] vhci_hcd: release socket [ 306.767751][ T5135] usb 13-1: new full-speed USB device number 5 using vhci_hcd [ 306.914403][ T7297] binder: 7290:7297 ioctl c0306201 0 returned -14 [ 306.978591][ T7297] binder: BINDER_SET_CONTEXT_MGR already set [ 306.984796][ T7297] binder: 7290:7297 ioctl 4018620d 20000040 returned -16 [ 307.814619][ T35] vhci_hcd: disconnect device [ 308.026532][ T7299] xt_hashlimit: invalid interval [ 310.614239][ T5099] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 311.354285][ T7316] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 311.406502][ T7316] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 312.648635][ T5099] Bluetooth: hci1: command 0x0406 tx timeout [ 312.805631][ T5135] vhci_hcd: vhci_device speed not set [ 313.897922][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.988658][ T7330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.903664][ T7362] netlink: 'syz.3.515': attribute type 5 has an invalid length. [ 317.196198][ T7371] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 317.202767][ T7371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 317.211288][ T7371] vhci_hcd vhci_hcd.0: Device attached [ 317.965460][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.983272][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.044544][ T7372] vhci_hcd: connection closed [ 318.046815][ T2784] vhci_hcd: stop threads [ 318.125152][ T5135] vhci_hcd: vhci_device speed not set [ 318.144736][ T2784] vhci_hcd: release socket [ 318.150777][ T2784] vhci_hcd: disconnect device [ 318.274877][ T5135] usb 15-1: new full-speed USB device number 4 using vhci_hcd [ 318.310721][ T5135] usb 15-1: enqueue for inactive port 0 [ 318.444697][ T5135] vhci_hcd: vhci_device speed not set [ 318.679431][ T7390] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 318.694849][ T7390] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 319.632678][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 320.625835][ T7398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.859985][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'. [ 322.142110][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 322.142123][ T29] audit: type=1400 audit(1720213049.206:618): avc: denied { map } for pid=7415 comm="syz.1.531" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 322.314504][ T7421] binder: BINDER_SET_CONTEXT_MGR already set [ 322.320743][ T7421] binder: 7416:7421 ioctl 4018620d 20000040 returned -16 [ 323.015823][ T29] audit: type=1400 audit(1720213050.016:619): avc: denied { execute } for pid=7415 comm="syz.1.531" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 323.832268][ T7436] 9pnet_fd: Insufficient options for proto=fd [ 323.978978][ T7438] netlink: 'syz.1.537': attribute type 5 has an invalid length. [ 324.244860][ T7442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 324.251451][ T7442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 324.270664][ T5099] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 324.280900][ T5099] CPU: 0 PID: 5099 Comm: kworker/u9:7 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 324.291182][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 324.301249][ T5099] Workqueue: hci3 hci_rx_work [ 324.305960][ T5099] Call Trace: [ 324.309237][ T5099] [ 324.312165][ T5099] dump_stack_lvl+0x16c/0x1f0 [ 324.316861][ T5099] sysfs_warn_dup+0x7f/0xa0 [ 324.321416][ T5099] sysfs_create_dir_ns+0x24d/0x2b0 [ 324.326544][ T5099] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 324.332191][ T5099] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 324.337746][ T5099] ? do_raw_spin_unlock+0x172/0x230 [ 324.342948][ T5099] kobject_add_internal+0x2c8/0x990 [ 324.348157][ T5099] kobject_add+0x16f/0x240 [ 324.352587][ T5099] ? __pfx_kobject_add+0x10/0x10 [ 324.357630][ T5099] ? do_raw_spin_unlock+0x172/0x230 [ 324.362842][ T5099] ? kobject_put+0xbe/0x5b0 [ 324.367361][ T5099] device_add+0x289/0x1a70 [ 324.371804][ T5099] ? __pfx_dev_set_name+0x10/0x10 [ 324.376919][ T5099] ? __pfx_device_add+0x10/0x10 [ 324.381794][ T5099] hci_conn_add_sysfs+0x17e/0x230 [ 324.386831][ T5099] hci_sync_conn_complete_evt+0x900/0xa10 [ 324.392579][ T5099] hci_event_packet+0x9e3/0x1170 [ 324.397524][ T5099] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 324.403783][ T5099] ? __pfx_hci_event_packet+0x10/0x10 [ 324.409165][ T5099] ? mark_held_locks+0x9f/0xe0 [ 324.413944][ T5099] ? kcov_remote_start+0x3d1/0x6e0 [ 324.419067][ T5099] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.424276][ T5099] hci_rx_work+0x2c4/0x1610 [ 324.428797][ T5099] process_one_work+0x9c5/0x1b40 [ 324.433746][ T5099] ? __pfx_lock_acquire+0x10/0x10 [ 324.438788][ T5099] ? __pfx_process_one_work+0x10/0x10 [ 324.444165][ T5099] ? assign_work+0x1a0/0x250 [ 324.448773][ T5099] worker_thread+0x6c8/0xf30 [ 324.453369][ T5099] ? __kthread_parkme+0x148/0x220 [ 324.458409][ T5099] ? __pfx_worker_thread+0x10/0x10 [ 324.463527][ T5099] kthread+0x2c1/0x3a0 [ 324.467603][ T5099] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.472811][ T5099] ? __pfx_kthread+0x10/0x10 [ 324.477409][ T5099] ret_from_fork+0x45/0x80 [ 324.481838][ T5099] ? __pfx_kthread+0x10/0x10 [ 324.486450][ T5099] ret_from_fork_asm+0x1a/0x30 [ 324.491236][ T5099] [ 324.494322][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.501944][ T5099] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 324.516023][ T5099] Bluetooth: hci3: failed to register connection device [ 324.530583][ T7442] vhci_hcd vhci_hcd.0: Device attached [ 324.803088][ T7443] vhci_hcd: connection closed [ 324.803574][ T994] vhci_hcd: stop threads [ 324.837444][ T994] vhci_hcd: release socket [ 324.842327][ T994] vhci_hcd: disconnect device [ 324.890157][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 324.904792][ T7451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.950197][ T7453] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 324.986282][ T7453] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 326.615903][ T5099] Bluetooth: hci3: command tx timeout [ 326.945386][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 327.275745][ T7471] binder: BINDER_SET_CONTEXT_MGR already set [ 327.281826][ T7471] binder: 7466:7471 ioctl 4018620d 20000040 returned -16 [ 328.066480][ T7469] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 328.252758][ T7472] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 328.696679][ T7472] syz.1.544 (7472) used greatest stack depth: 21280 bytes left [ 330.031045][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 330.158221][ T7494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.600559][ T7503] netlink: 'syz.2.554': attribute type 5 has an invalid length. [ 330.870385][ T7511] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 330.876961][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.888692][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 331.114651][ T5152] vhci_hcd: vhci_device speed not set [ 331.184624][ T5152] usb 13-1: new full-speed USB device number 6 using vhci_hcd [ 331.407662][ T7513] vhci_hcd: connection closed [ 331.407992][ T51] vhci_hcd: stop threads [ 331.464582][ T51] vhci_hcd: release socket [ 331.480058][ T51] vhci_hcd: disconnect device [ 331.863967][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'. [ 333.044226][ T7535] binder: BINDER_SET_CONTEXT_MGR already set [ 333.050597][ T7535] binder: 7530:7535 ioctl 4018620d 20000040 returned -16 [ 335.394111][ T7552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.983163][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.569'. [ 336.994793][ T5152] vhci_hcd: vhci_device speed not set [ 337.066164][ T7568] netlink: 'syz.2.570': attribute type 5 has an invalid length. [ 337.265001][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 337.338188][ T7575] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 337.344736][ T7575] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 337.382267][ T7575] vhci_hcd vhci_hcd.0: Device attached [ 337.736353][ T7586] binder: BINDER_SET_CONTEXT_MGR already set [ 337.742540][ T7586] binder: 7578:7586 ioctl 4018620d 20000040 returned -16 [ 338.463440][ T5152] vhci_hcd: vhci_device speed not set [ 338.473279][ T7580] vhci_hcd: connection closed [ 338.500543][ T51] vhci_hcd: stop threads [ 338.534758][ T51] vhci_hcd: release socket [ 338.534791][ T5152] usb 13-1: device descriptor read/64, error -110 [ 338.574645][ T51] vhci_hcd: disconnect device [ 338.774643][ T5152] vhci_hcd: vhci_device speed not set [ 339.273843][ T7600] binder: 7599:7600 ioctl c0306201 0 returned -14 [ 340.189550][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.631382][ T7609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.973281][ T7623] netlink: 36 bytes leftover after parsing attributes in process `syz.2.583'. [ 343.433644][ T7635] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 344.845225][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.585'. [ 344.855053][ T7635] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 344.889197][ T7642] netlink: 'syz.1.588': attribute type 5 has an invalid length. [ 345.204122][ T7646] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 345.210683][ T7646] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 345.225374][ T7646] vhci_hcd vhci_hcd.0: Device attached [ 345.288040][ T5099] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 345.444736][ T25] vhci_hcd: vhci_device speed not set [ 345.555821][ T25] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 345.672088][ T7647] vhci_hcd: connection closed [ 345.672419][ T12] vhci_hcd: stop threads [ 345.698272][ T12] vhci_hcd: release socket [ 345.738622][ T12] vhci_hcd: disconnect device [ 346.419384][ T7654] debugfs: Directory 'C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' with parent 'ieee80211' already present! [ 347.773180][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 347.800313][ T7664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.035820][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.053047][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.072723][ T5092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.083465][ T5092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.106853][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.122116][ T5092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.129784][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.456590][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.616902][ T7686] netlink: 36 bytes leftover after parsing attributes in process `syz.3.597'. [ 349.631586][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.881390][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.165556][ T5092] Bluetooth: hci4: command tx timeout [ 350.608734][ T12] bridge_slave_1: left allmulticast mode [ 350.615392][ T12] bridge_slave_1: left promiscuous mode [ 350.621093][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.686770][ T12] bridge_slave_0: left allmulticast mode [ 350.693743][ T12] bridge_slave_0: left promiscuous mode [ 350.722311][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.748405][ T25] vhci_hcd: vhci_device speed not set [ 351.595221][ T7712] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 351.601783][ T7712] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 351.643916][ T7712] vhci_hcd vhci_hcd.0: Device attached [ 351.834617][ T5136] vhci_hcd: vhci_device speed not set [ 351.853632][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.890655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.905633][ T12] bond0 (unregistering): Released all slaves [ 351.914656][ T5136] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 352.106902][ T7707] netlink: 'syz.4.602': attribute type 5 has an invalid length. [ 352.133427][ T7713] vhci_hcd: connection closed [ 352.133897][ T994] vhci_hcd: stop threads [ 352.205091][ T994] vhci_hcd: release socket [ 352.229688][ T994] vhci_hcd: disconnect device [ 352.244842][ T5092] Bluetooth: hci4: command tx timeout [ 352.896814][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 352.909367][ T7674] chnl_net:caif_netlink_parms(): no params data found [ 352.944662][ T7727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.192108][ T12] hsr_slave_0: left promiscuous mode [ 353.418617][ T12] hsr_slave_1: left promiscuous mode [ 353.436190][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.443651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.357072][ T5099] Bluetooth: hci4: command tx timeout [ 354.425803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.614620][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.905696][ T12] veth1_macvtap: left promiscuous mode [ 354.927261][ T7749] netlink: 36 bytes leftover after parsing attributes in process `syz.4.609'. [ 354.955332][ T12] veth0_macvtap: left promiscuous mode [ 354.961084][ T12] veth1_vlan: left promiscuous mode [ 355.031103][ T12] veth0_vlan: left promiscuous mode [ 356.094559][ T5092] Bluetooth: hci3: command 0x0406 tx timeout [ 356.414579][ T5092] Bluetooth: hci4: command tx timeout [ 356.891116][ T12] team0 (unregistering): Port device team_slave_1 removed [ 356.967565][ T12] team0 (unregistering): Port device team_slave_0 removed [ 357.068154][ T5136] vhci_hcd: vhci_device speed not set [ 358.160360][ T7778] netlink: 'syz.3.614': attribute type 5 has an invalid length. [ 358.191513][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.220451][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.288875][ T7674] bridge_slave_0: entered allmulticast mode [ 358.326984][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 358.385758][ T7674] bridge_slave_0: entered promiscuous mode [ 358.399664][ T7787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.418257][ T7778] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 358.424822][ T7778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 358.463095][ T7780] debugfs: Directory 'C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' with parent 'ieee80211' already present! [ 358.506686][ T7778] vhci_hcd vhci_hcd.0: Device attached [ 358.726562][ T5136] vhci_hcd: vhci_device speed not set [ 358.751977][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.790661][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.815789][ T7791] vhci_hcd: connection closed [ 358.817195][ T1094] vhci_hcd: stop threads [ 358.835161][ T5136] usb 15-1: new full-speed USB device number 5 using vhci_hcd [ 358.848526][ T7674] bridge_slave_1: entered allmulticast mode [ 358.867602][ T1094] vhci_hcd: release socket [ 358.880305][ T7674] bridge_slave_1: entered promiscuous mode [ 358.898531][ T1094] vhci_hcd: disconnect device [ 359.007130][ T5092] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 359.117574][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.175745][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.485383][ T7674] team0: Port device team_slave_0 added [ 359.547036][ T7674] team0: Port device team_slave_1 added [ 359.786064][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.813540][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.888613][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.946268][ T7815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.620'. [ 359.957487][ T7803] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 359.960785][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.974141][ T7803] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 360.004335][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.163736][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.492297][ T7674] hsr_slave_0: entered promiscuous mode [ 360.557372][ T7674] hsr_slave_1: entered promiscuous mode [ 361.144707][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 361.231635][ T7674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.241456][ T7674] Cannot create hsr debugfs directory [ 362.080423][ T7839] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 362.118761][ T7839] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 362.929412][ T7854] netlink: 'syz.2.629': attribute type 5 has an invalid length. [ 364.854698][ T5136] vhci_hcd: vhci_device speed not set [ 364.879124][ T7866] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 364.885681][ T7866] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 364.929602][ T7866] vhci_hcd vhci_hcd.0: Device attached [ 365.134055][ T7867] vhci_hcd: connection closed [ 365.144939][ T2784] vhci_hcd: stop threads [ 365.193993][ T5082] vhci_hcd: vhci_device speed not set [ 365.197829][ T2784] vhci_hcd: release socket [ 365.218096][ T2784] vhci_hcd: disconnect device [ 365.281969][ T7877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.632'. [ 365.328932][ T7674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.383408][ T7674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.408271][ T5082] usb 13-1: new full-speed USB device number 8 using vhci_hcd [ 365.427247][ T5082] usb 13-1: enqueue for inactive port 0 [ 365.462751][ T7674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.525076][ T5082] vhci_hcd: vhci_device speed not set [ 365.534830][ T7674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.585728][ T7876] sysfs: cannot create duplicate filename '/class/ieee80211/C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' [ 365.597419][ T7876] CPU: 0 PID: 7876 Comm: syz.1.631 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 365.607456][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 365.617557][ T7876] Call Trace: [ 365.620853][ T7876] [ 365.623786][ T7876] dump_stack_lvl+0x16c/0x1f0 [ 365.628481][ T7876] sysfs_warn_dup+0x7f/0xa0 [ 365.633041][ T7876] sysfs_do_create_link_sd+0x124/0x140 [ 365.638592][ T7876] sysfs_create_link+0x61/0xc0 [ 365.643420][ T7876] device_add+0x62e/0x1a70 [ 365.647894][ T7876] ? __pfx_device_add+0x10/0x10 [ 365.652807][ T7876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.658832][ T7876] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 365.664873][ T7876] wiphy_register+0x2101/0x2d00 [ 365.669898][ T7876] ? __pfx_wiphy_register+0x10/0x10 [ 365.675143][ T7876] ieee80211_register_hw+0x2683/0x43b0 [ 365.680661][ T7876] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 365.686616][ T7876] ? __asan_memset+0x23/0x50 [ 365.691263][ T7876] ? __hrtimer_init+0x106/0x2c0 [ 365.696162][ T7876] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 365.701946][ T7876] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 365.708073][ T7876] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 365.713415][ T7876] ? __asan_memcpy+0x3c/0x60 [ 365.718066][ T7876] hwsim_new_radio_nl+0xaf9/0x1240 [ 365.723236][ T7876] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 365.728843][ T7876] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 365.736446][ T7876] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 365.743835][ T7876] genl_family_rcv_msg_doit+0x202/0x2f0 [ 365.749402][ T7876] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 365.755517][ T7876] ? ns_capable+0xd7/0x110 [ 365.759941][ T7876] genl_rcv_msg+0x565/0x800 [ 365.764469][ T7876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.769633][ T7876] ? __pfx___lock_acquire+0x10/0x10 [ 365.775146][ T7876] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 365.780744][ T7876] netlink_rcv_skb+0x16b/0x440 [ 365.785538][ T7876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.790569][ T7876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.795963][ T7876] ? down_read+0xc9/0x330 [ 365.800313][ T7876] ? __pfx_down_read+0x10/0x10 [ 365.805083][ T7876] ? rcu_is_watching+0x12/0xc0 [ 365.809858][ T7876] genl_rcv+0x28/0x40 [ 365.813966][ T7876] netlink_unicast+0x542/0x820 [ 365.818754][ T7876] ? __pfx_netlink_unicast+0x10/0x10 [ 365.824069][ T7876] netlink_sendmsg+0x8b8/0xd70 [ 365.828852][ T7876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.834239][ T7876] ? __import_iovec+0x1fd/0x6e0 [ 365.839113][ T7876] ____sys_sendmsg+0xab5/0xc90 [ 365.843910][ T7876] ? copy_msghdr_from_user+0x10b/0x160 [ 365.849469][ T7876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.854774][ T7876] ? __pfx___futex_wait+0x10/0x10 [ 365.859828][ T7876] ? __pfx___lock_acquire+0x10/0x10 [ 365.865092][ T7876] ___sys_sendmsg+0x135/0x1e0 [ 365.869788][ T7876] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.875006][ T7876] ? __fget_light+0x173/0x210 [ 365.879693][ T7876] __sys_sendmsg+0x117/0x1f0 [ 365.884294][ T7876] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.889408][ T7876] ? __x64_sys_futex+0x1e1/0x4c0 [ 365.894350][ T7876] do_syscall_64+0xcd/0x250 [ 365.898854][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.904752][ T7876] RIP: 0033:0x7fd702775bd9 [ 365.909165][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.928861][ T7876] RSP: 002b:00007fd703541048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.937273][ T7876] RAX: ffffffffffffffda RBX: 00007fd702904038 RCX: 00007fd702775bd9 [ 365.945262][ T7876] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 365.953264][ T7876] RBP: 00007fd7027e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 365.961232][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.969196][ T7876] R13: 000000000000006e R14: 00007fd702904038 R15: 00007fff98ca4ed8 [ 365.977182][ T7876] [ 369.858963][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.977940][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.031234][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.038559][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.182849][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.190019][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.585735][ T7919] binder: BINDER_SET_CONTEXT_MGR already set [ 370.591817][ T7919] binder: 7915:7919 ioctl 4018620d 20000040 returned -16 [ 371.977661][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.163635][ T7940] netlink: 'syz.1.644': attribute type 5 has an invalid length. [ 372.368939][ T7674] veth0_vlan: entered promiscuous mode [ 372.405007][ T7948] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 372.411628][ T7948] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 372.430055][ T7674] veth1_vlan: entered promiscuous mode [ 372.473723][ T7948] vhci_hcd vhci_hcd.0: Device attached [ 372.491869][ T7947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.645'. [ 372.684677][ T5136] vhci_hcd: vhci_device speed not set [ 372.945040][ T5136] usb 11-1: new full-speed USB device number 4 using vhci_hcd [ 374.321436][ T7949] vhci_hcd: connection closed [ 374.352967][ T7674] veth0_macvtap: entered promiscuous mode [ 374.382489][ T2784] vhci_hcd: stop threads [ 374.397062][ T2784] vhci_hcd: release socket [ 374.423100][ T2784] vhci_hcd: disconnect device [ 374.466067][ T7674] veth1_macvtap: entered promiscuous mode [ 374.600596][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.643983][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.654178][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.665122][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.720021][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.322507][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.337353][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.429051][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.546590][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.610221][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.704575][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.898026][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.942592][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.382814][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.794536][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.804392][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.884860][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.926617][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.964130][ T7674] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.002422][ T7674] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.055271][ T7674] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.099883][ T7674] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.440686][ T6392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.647399][ T6392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.053651][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.088527][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.208592][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.215020][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.246793][ T8020] netlink: 'syz.1.658': attribute type 5 has an invalid length. [ 379.269851][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.657'. [ 379.496706][ T8027] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 379.503254][ T8027] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 379.524705][ T5136] vhci_hcd: vhci_device speed not set [ 379.547506][ T8027] vhci_hcd vhci_hcd.0: Device attached [ 379.624126][ T8034] binder: 8033:8034 ioctl c0306201 0 returned -14 [ 379.954626][ T5136] vhci_hcd: vhci_device speed not set [ 380.043180][ T8030] vhci_hcd: connection closed [ 380.045958][ T11] vhci_hcd: stop threads [ 380.058280][ T5136] usb 11-1: device descriptor read/64, error -110 [ 380.114184][ T11] vhci_hcd: release socket [ 380.154643][ T11] vhci_hcd: disconnect device [ 380.379412][ T5136] vhci_hcd: vhci_device speed not set [ 384.285288][ T8094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.671'. [ 386.086499][ T8111] binder: 8110:8111 ioctl c0306201 0 returned -14 [ 386.114324][ T8114] netlink: 'syz.4.676': attribute type 5 has an invalid length. [ 386.303808][ T8122] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 386.310383][ T8122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 386.321029][ T8122] vhci_hcd vhci_hcd.0: Device attached [ 386.544857][ T5152] vhci_hcd: vhci_device speed not set [ 386.646265][ T5152] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 386.837813][ T8123] vhci_hcd: connection closed [ 386.841338][ T1094] vhci_hcd: stop threads [ 386.887472][ T8126] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 386.915376][ T1094] vhci_hcd: release socket [ 386.933344][ T8126] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 386.945604][ T1094] vhci_hcd: disconnect device [ 388.324710][ T5092] Bluetooth: hci3: command 0x0406 tx timeout [ 389.134177][ T8160] binder: 8152:8160 ioctl 4018620d 0 returned -22 [ 390.324042][ T8172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.686'. [ 392.783796][ T5152] vhci_hcd: vhci_device speed not set [ 393.283899][ T8204] netlink: 'syz.2.693': attribute type 5 has an invalid length. [ 393.499967][ T8210] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 393.506514][ T8210] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 393.570067][ T8210] vhci_hcd vhci_hcd.0: Device attached [ 393.804706][ T5137] vhci_hcd: vhci_device speed not set [ 393.884605][ T5137] usb 13-1: new full-speed USB device number 9 using vhci_hcd [ 394.161507][ T8211] vhci_hcd: connection closed [ 394.161900][ T6392] vhci_hcd: stop threads [ 394.175902][ T6392] vhci_hcd: release socket [ 394.184927][ T6392] vhci_hcd: disconnect device [ 394.306562][ T8223] binder: 8220:8223 ioctl 4018620d 0 returned -22 [ 396.318808][ T8236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.699'. [ 399.008364][ T8263] binder: 8260:8263 ioctl 4018620d 0 returned -22 [ 399.054698][ T5137] vhci_hcd: vhci_device speed not set [ 400.016037][ T8271] netlink: 'syz.3.709': attribute type 5 has an invalid length. [ 400.256648][ T8275] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 400.263196][ T8275] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 400.300262][ T8275] vhci_hcd vhci_hcd.0: Device attached [ 400.630779][ T45] vhci_hcd: vhci_device speed not set [ 401.374576][ T45] usb 15-1: new full-speed USB device number 6 using vhci_hcd [ 401.393247][ T8276] vhci_hcd: connection closed [ 401.450070][ T1094] vhci_hcd: stop threads [ 401.470643][ T1094] vhci_hcd: release socket [ 401.490949][ T1094] vhci_hcd: disconnect device [ 402.446276][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.712'. [ 402.861213][ T5092] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 403.389601][ T8308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.718'. [ 403.436316][ T8306] sysfs: cannot create duplicate filename '/class/ieee80211/C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' [ 403.451889][ T8306] CPU: 0 PID: 8306 Comm: syz.2.717 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 403.461913][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 403.471979][ T8306] Call Trace: [ 403.475268][ T8306] [ 403.478189][ T8306] dump_stack_lvl+0x16c/0x1f0 [ 403.482870][ T8306] sysfs_warn_dup+0x7f/0xa0 [ 403.487388][ T8306] sysfs_do_create_link_sd+0x124/0x140 [ 403.492888][ T8306] sysfs_create_link+0x61/0xc0 [ 403.497675][ T8306] device_add+0x62e/0x1a70 [ 403.502115][ T8306] ? __pfx_device_add+0x10/0x10 [ 403.506984][ T8306] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.512907][ T8306] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 403.518904][ T8306] wiphy_register+0x2101/0x2d00 [ 403.523776][ T8306] ? __pfx_wiphy_register+0x10/0x10 [ 403.528990][ T8306] ieee80211_register_hw+0x2683/0x43b0 [ 403.534566][ T8306] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 403.540391][ T8306] ? lockdep_init_map_type+0x16d/0x7d0 [ 403.545879][ T8306] ? __asan_memset+0x23/0x50 [ 403.550485][ T8306] ? __hrtimer_init+0x106/0x2c0 [ 403.555356][ T8306] mac80211_hwsim_new_radio+0x22f6/0x4e50 [ 403.561117][ T8306] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 403.567222][ T8306] ? hwsim_new_radio_nl+0x9b6/0x1240 [ 403.572526][ T8306] ? __asan_memcpy+0x3c/0x60 [ 403.577153][ T8306] hwsim_new_radio_nl+0xaf9/0x1240 [ 403.582319][ T8306] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 403.587883][ T8306] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 403.595273][ T8306] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 403.602663][ T8306] genl_family_rcv_msg_doit+0x202/0x2f0 [ 403.608229][ T8306] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 403.614315][ T8306] ? ns_capable+0xd7/0x110 [ 403.618828][ T8306] genl_rcv_msg+0x565/0x800 [ 403.623350][ T8306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 403.628388][ T8306] ? __pfx___lock_acquire+0x10/0x10 [ 403.633633][ T8306] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 403.639197][ T8306] netlink_rcv_skb+0x16b/0x440 [ 403.643978][ T8306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 403.649042][ T8306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.654362][ T8306] ? down_read+0xc9/0x330 [ 403.658712][ T8306] ? __pfx_down_read+0x10/0x10 [ 403.663498][ T8306] ? netlink_deliver_tap+0x1ae/0xd90 [ 403.668808][ T8306] genl_rcv+0x28/0x40 [ 403.672843][ T8306] netlink_unicast+0x542/0x820 [ 403.677648][ T8306] ? __pfx_netlink_unicast+0x10/0x10 [ 403.682971][ T8306] netlink_sendmsg+0x8b8/0xd70 [ 403.687757][ T8306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.693060][ T8306] ? __import_iovec+0x1fd/0x6e0 [ 403.697953][ T8306] ____sys_sendmsg+0xab5/0xc90 [ 403.702725][ T8306] ? copy_msghdr_from_user+0x10b/0x160 [ 403.708211][ T8306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.713506][ T8306] ? __pfx___futex_wait+0x10/0x10 [ 403.718536][ T8306] ? __pfx___lock_acquire+0x10/0x10 [ 403.723750][ T8306] ? try_to_wake_up+0x14b/0x13e0 [ 403.728715][ T8306] ___sys_sendmsg+0x135/0x1e0 [ 403.733408][ T8306] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.738626][ T8306] ? __fget_light+0x173/0x210 [ 403.743318][ T8306] __sys_sendmsg+0x117/0x1f0 [ 403.747946][ T8306] ? __pfx___sys_sendmsg+0x10/0x10 [ 403.753091][ T8306] ? __x64_sys_futex+0x1e1/0x4c0 [ 403.758059][ T8306] do_syscall_64+0xcd/0x250 [ 403.762588][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.768507][ T8306] RIP: 0033:0x7fd5f5775bd9 [ 403.772932][ T8306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.792645][ T8306] RSP: 002b:00007fd5f660c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.801071][ T8306] RAX: ffffffffffffffda RBX: 00007fd5f5904038 RCX: 00007fd5f5775bd9 [ 403.809047][ T8306] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 403.817024][ T8306] RBP: 00007fd5f57e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 403.825000][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.832976][ T8306] R13: 000000000000006e R14: 00007fd5f5904038 R15: 00007ffc346f1dd8 [ 403.841062][ T8306] [ 407.594555][ T45] vhci_hcd: vhci_device speed not set [ 407.760006][ T8338] netlink: 'syz.3.724': attribute type 5 has an invalid length. [ 407.970994][ T8342] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 407.977549][ T8342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 408.015716][ T8342] vhci_hcd vhci_hcd.0: Device attached [ 408.384803][ T45] vhci_hcd: vhci_device speed not set [ 408.496332][ T45] usb 15-1: device descriptor read/64, error -110 [ 408.641689][ T8343] vhci_hcd: connection closed [ 408.646530][ T2827] vhci_hcd: stop threads [ 408.710485][ T2827] vhci_hcd: release socket [ 408.735115][ T2827] vhci_hcd: disconnect device [ 408.775396][ T45] vhci_hcd: vhci_device speed not set [ 409.030015][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.727'. [ 409.880560][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.731'. [ 411.198580][ T8379] xt_hashlimit: overflow, try lower: 0/0 [ 414.619018][ T8401] netlink: 'syz.0.740': attribute type 5 has an invalid length. [ 416.667089][ T8410] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 416.673693][ T8410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 416.691112][ T8410] vhci_hcd vhci_hcd.0: Device attached [ 416.903129][ T8415] vhci_hcd: connection closed [ 416.924557][ T5152] vhci_hcd: vhci_device speed not set [ 416.956847][ T2795] vhci_hcd: stop threads [ 416.966295][ T2795] vhci_hcd: release socket [ 416.992711][ T2795] vhci_hcd: disconnect device [ 417.065872][ T5152] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 417.142456][ T5152] usb 9-1: enqueue for inactive port 0 [ 417.248353][ T5152] vhci_hcd: vhci_device speed not set [ 417.757657][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'. [ 419.334289][ T5092] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 420.155245][ T8458] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 420.171365][ T8458] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 420.668711][ T8465] netlink: 'syz.3.756': attribute type 5 has an invalid length. [ 421.414509][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 421.798322][ T8471] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 421.804917][ T8471] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 421.820147][ T8471] vhci_hcd vhci_hcd.0: Device attached [ 421.881098][ T8474] vhci_hcd: connection closed [ 421.887892][ T61] vhci_hcd: stop threads [ 421.905470][ T61] vhci_hcd: release socket [ 422.200061][ T61] vhci_hcd: disconnect device [ 422.284805][ T45] vhci_hcd: vhci_device speed not set [ 424.355761][ T8501] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 426.865847][ T8504] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 428.331978][ T8527] netlink: 'syz.2.771': attribute type 5 has an invalid length. [ 428.590295][ T8534] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 428.596844][ T8534] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 428.604998][ T8534] vhci_hcd vhci_hcd.0: Device attached [ 428.835017][ T5152] vhci_hcd: vhci_device speed not set [ 428.934501][ T5152] usb 13-1: new full-speed USB device number 10 using vhci_hcd [ 429.167511][ T8536] vhci_hcd: connection closed [ 429.172628][ T1094] vhci_hcd: stop threads [ 431.344655][ T1094] vhci_hcd: release socket [ 431.385302][ T1094] vhci_hcd: disconnect device [ 431.808709][ T8556] netlink: 56 bytes leftover after parsing attributes in process `syz.3.776'. [ 434.094933][ T5152] vhci_hcd: vhci_device speed not set [ 434.354784][ T8579] netlink: 'syz.3.782': attribute type 4 has an invalid length. [ 434.442688][ T8581] netlink: 'syz.3.782': attribute type 4 has an invalid length. [ 437.241408][ T8607] netlink: 'syz.3.789': attribute type 5 has an invalid length. [ 437.453999][ T8614] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 437.460646][ T8614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 437.484681][ T8614] vhci_hcd vhci_hcd.0: Device attached [ 437.674703][ T45] vhci_hcd: vhci_device speed not set [ 437.764945][ T45] usb 15-1: new full-speed USB device number 9 using vhci_hcd [ 437.811984][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 437.831953][ T8625] netlink: 'syz.4.794': attribute type 4 has an invalid length. [ 437.864046][ T8612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.888792][ T8625] netlink: 'syz.4.794': attribute type 4 has an invalid length. [ 438.018322][ T8615] vhci_hcd: connection closed [ 438.019644][ T11] vhci_hcd: stop threads [ 438.064541][ T11] vhci_hcd: release socket [ 438.078498][ T11] vhci_hcd: disconnect device [ 438.753807][ T8635] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 438.771485][ T8635] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 440.652783][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.789823][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.131932][ T5092] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 441.272243][ T5092] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 441.630350][ T8671] netlink: 'syz.0.808': attribute type 4 has an invalid length. [ 441.705732][ T8673] netlink: 'syz.0.808': attribute type 4 has an invalid length. [ 441.927784][ T8665] debugfs: Directory 'C|+È‚!‡3§rU&6 bÎOo¸ ' 1©|y' with parent 'ieee80211' already present! [ 442.109933][ T8669] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 442.174505][ T8669] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 442.496042][ T8678] netlink: 'syz.4.810': attribute type 5 has an invalid length. [ 442.964785][ T45] vhci_hcd: vhci_device speed not set [ 442.999255][ T8687] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 443.005839][ T8687] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 443.061403][ T8687] vhci_hcd vhci_hcd.0: Device attached [ 443.074313][ T5092] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 443.084574][ T5092] CPU: 1 PID: 5092 Comm: kworker/u9:5 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 443.094824][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 443.104986][ T5092] Workqueue: hci4 hci_rx_work [ 443.109666][ T5092] Call Trace: [ 443.112935][ T5092] [ 443.115873][ T5092] dump_stack_lvl+0x16c/0x1f0 [ 443.120547][ T5092] sysfs_warn_dup+0x7f/0xa0 [ 443.125048][ T5092] sysfs_create_dir_ns+0x24d/0x2b0 [ 443.130161][ T5092] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 443.135813][ T5092] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 443.141210][ T5092] ? do_raw_spin_unlock+0x172/0x230 [ 443.146416][ T5092] kobject_add_internal+0x2c8/0x990 [ 443.151715][ T5092] kobject_add+0x16f/0x240 [ 443.156139][ T5092] ? __pfx_kobject_add+0x10/0x10 [ 443.161092][ T5092] ? do_raw_spin_unlock+0x172/0x230 [ 443.166296][ T5092] ? kobject_put+0xbe/0x5b0 [ 443.170811][ T5092] device_add+0x289/0x1a70 [ 443.175249][ T5092] ? __pfx_dev_set_name+0x10/0x10 [ 443.180278][ T5092] ? __pfx_device_add+0x10/0x10 [ 443.185146][ T5092] hci_conn_add_sysfs+0x17e/0x230 [ 443.190271][ T5092] hci_sync_conn_complete_evt+0x900/0xa10 [ 443.196012][ T5092] hci_event_packet+0x9e3/0x1170 [ 443.200962][ T5092] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 443.207228][ T5092] ? __pfx_hci_event_packet+0x10/0x10 [ 443.212703][ T5092] ? mark_held_locks+0x9f/0xe0 [ 443.217490][ T5092] ? kcov_remote_start+0x3d1/0x6e0 [ 443.222605][ T5092] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.227815][ T5092] hci_rx_work+0x2c4/0x1610 [ 443.232335][ T5092] process_one_work+0x9c5/0x1b40 [ 443.237283][ T5092] ? __pfx_lock_acquire+0x10/0x10 [ 443.242330][ T5092] ? __pfx_process_one_work+0x10/0x10 [ 443.247707][ T5092] ? assign_work+0x1a0/0x250 [ 443.252314][ T5092] worker_thread+0x6c8/0xf30 [ 443.256955][ T5092] ? __kthread_parkme+0x148/0x220 [ 443.261995][ T5092] ? __pfx_worker_thread+0x10/0x10 [ 443.267197][ T5092] kthread+0x2c1/0x3a0 [ 443.271276][ T5092] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.276480][ T5092] ? __pfx_kthread+0x10/0x10 [ 443.281077][ T5092] ret_from_fork+0x45/0x80 [ 443.285508][ T5092] ? __pfx_kthread+0x10/0x10 [ 443.290113][ T5092] ret_from_fork_asm+0x1a/0x30 [ 443.294901][ T5092] [ 443.300062][ T5092] kobject: kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 443.315926][ T5092] Bluetooth: hci4: failed to register connection device [ 443.324601][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 443.524919][ T784] vhci_hcd: vhci_device speed not set [ 443.532173][ T29] audit: type=1400 audit(1720213170.576:620): avc: denied { write } for pid=4516 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.583811][ T8688] vhci_hcd: connection closed [ 443.598993][ T35] vhci_hcd: stop threads [ 443.644508][ T784] usb 17-1: new full-speed USB device number 4 using vhci_hcd [ 443.675174][ T35] vhci_hcd: release socket [ 443.699596][ T29] audit: type=1400 audit(1720213170.576:621): avc: denied { remove_name } for pid=4516 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.734901][ T35] vhci_hcd: disconnect device [ 443.850819][ T29] audit: type=1400 audit(1720213170.576:622): avc: denied { add_name } for pid=4516 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.159929][ T8695] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 444.171051][ T8695] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 444.718392][ T5099] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 445.125467][ T5099] Bluetooth: hci4: command tx timeout [ 445.444206][ T8713] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 445.503979][ T8713] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 446.321368][ T8721] netlink: 'syz.3.822': attribute type 4 has an invalid length. [ 446.627830][ T8725] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 447.205169][ T5099] Bluetooth: hci4: command tx timeout [ 447.702562][ T8721] netlink: 'syz.3.822': attribute type 4 has an invalid length. [ 448.355031][ T8735] netlink: 'syz.4.826': attribute type 5 has an invalid length. [ 448.603740][ T8741] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 448.610345][ T8741] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 448.627755][ T8741] vhci_hcd vhci_hcd.0: Device attached [ 449.179292][ T8743] vhci_hcd: connection reset by peer [ 449.200900][ T6392] vhci_hcd: stop threads [ 449.224644][ T6392] vhci_hcd: release socket [ 449.234219][ T6392] vhci_hcd: disconnect device [ 449.346106][ T784] vhci_hcd: vhci_device speed not set [ 453.633907][ T8789] netlink: 'syz.4.839': attribute type 4 has an invalid length. [ 453.694059][ T8791] netlink: 'syz.4.839': attribute type 4 has an invalid length. [ 453.805015][ T8792] netlink: 'syz.0.840': attribute type 5 has an invalid length. [ 454.015905][ T8797] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 454.022437][ T8797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 454.069588][ T8797] vhci_hcd vhci_hcd.0: Device attached [ 454.276332][ T8806] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 454.301975][ T8806] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 454.318116][ T5082] vhci_hcd: vhci_device speed not set [ 454.414881][ T5082] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 454.561425][ T8798] vhci_hcd: connection closed [ 454.561726][ T6392] vhci_hcd: stop threads [ 454.598505][ T6392] vhci_hcd: release socket [ 454.643337][ T6392] vhci_hcd: disconnect device [ 456.876091][ T8827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.935676][ T8843] netlink: 'syz.1.853': attribute type 4 has an invalid length. [ 458.006040][ T8844] netlink: 'syz.1.853': attribute type 4 has an invalid length. [ 459.585083][ T8856] netlink: 'syz.0.857': attribute type 5 has an invalid length. [ 459.615534][ T5082] vhci_hcd: vhci_device speed not set [ 459.711217][ T8859] netlink: 56 bytes leftover after parsing attributes in process `syz.1.858'. [ 459.819871][ T8865] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 459.826436][ T8865] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 459.852931][ T8865] vhci_hcd vhci_hcd.0: Device attached [ 460.194686][ T5082] vhci_hcd: vhci_device speed not set [ 460.304571][ T5082] usb 9-1: device descriptor read/64, error -110 [ 460.397039][ T8866] vhci_hcd: connection closed [ 460.418707][ T994] vhci_hcd: stop threads [ 460.464490][ T994] vhci_hcd: release socket [ 460.493135][ T994] vhci_hcd: disconnect device [ 460.534895][ T5082] vhci_hcd: vhci_device speed not set [ 463.840163][ T8902] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 463.916104][ T8903] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 466.111138][ T8929] netlink: 'syz.3.876': attribute type 5 has an invalid length. [ 466.359065][ T8932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 466.365627][ T8932] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 466.383929][ T8932] vhci_hcd vhci_hcd.0: Device attached [ 466.624876][ T5152] vhci_hcd: vhci_device speed not set [ 466.673820][ T5099] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 466.725217][ T5152] usb 15-1: new full-speed USB device number 10 using vhci_hcd [ 466.770904][ T5099] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 466.777813][ T5099] Bluetooth: Wrong link type (-22) [ 466.783025][ T5099] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 466.789828][ T5099] Bluetooth: Wrong link type (-22) [ 466.796128][ T5099] Bluetooth: hci4: link tx timeout [ 466.801531][ T5099] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 466.909825][ T8942] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 466.946459][ T8934] vhci_hcd: connection closed [ 466.952512][ T8771] vhci_hcd: stop threads [ 466.974535][ T8771] vhci_hcd: release socket [ 466.989255][ T8942] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 467.014586][ T8771] vhci_hcd: disconnect device [ 467.842263][ T8954] netlink: 'syz.0.882': attribute type 4 has an invalid length. [ 467.944691][ T8954] netlink: 'syz.0.882': attribute type 4 has an invalid length. [ 468.724584][ T5092] Bluetooth: hci4: command tx timeout [ 469.131968][ T8971] netlink: 'syz.1.889': attribute type 4 has an invalid length. [ 469.320408][ T8971] netlink: 'syz.1.889': attribute type 4 has an invalid length. [ 470.337914][ T5099] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 470.755877][ T8985] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 470.768693][ T8985] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 470.804523][ T5099] Bluetooth: hci4: command 0x0406 tx timeout [ 472.645381][ T5099] Bluetooth: hci3: command 0x0406 tx timeout [ 472.814860][ T5152] vhci_hcd: vhci_device speed not set [ 473.005815][ T9001] netlink: 'syz.4.896': attribute type 4 has an invalid length. [ 473.203992][ T9002] netlink: 'syz.4.896': attribute type 4 has an invalid length. [ 473.350477][ T5083] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 473.725557][ T9015] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 473.764954][ T9015] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 474.656127][ T9026] netlink: 56 bytes leftover after parsing attributes in process `syz.3.903'. [ 474.732904][ T5083] Bluetooth: hci4: command 0x0406 tx timeout [ 476.425554][ T5092] Bluetooth: hci3: command 0x0406 tx timeout [ 479.973269][ T5083] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 480.131447][ T9053] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 480.158763][ T9053] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 480.596336][ T9060] netlink: 'syz.1.911': attribute type 4 has an invalid length. [ 480.674538][ T9060] netlink: 'syz.1.911': attribute type 4 has an invalid length. [ 481.043445][ T9064] netlink: 'syz.3.913': attribute type 4 has an invalid length. [ 481.125711][ T9065] netlink: 'syz.3.913': attribute type 4 has an invalid length. [ 481.657240][ T9071] netlink: 56 bytes leftover after parsing attributes in process `syz.1.915'. [ 482.005714][ T5083] Bluetooth: hci3: command 0x0406 tx timeout [ 487.493045][ T9093] binder: BINDER_SET_CONTEXT_MGR already set [ 487.499115][ T9093] binder: 9086:9093 ioctl 4018620d 20000040 returned -16 [ 488.885151][ T784] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 489.152665][ T784] usb 3-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.193428][ T784] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 489.232030][ T784] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 489.255910][ T784] usb 3-1: Manufacturer: syz [ 489.262469][ T784] usb 3-1: SerialNumber: syz [ 489.528546][ T29] audit: type=1400 audit(1720213216.596:623): avc: denied { create } for pid=9097 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 489.551056][ T9114] netlink: 'syz.1.925': attribute type 4 has an invalid length. [ 489.572030][ T784] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 489.601461][ T784] usb 3-1: USB disconnect, device number 3 [ 489.654567][ T29] audit: type=1400 audit(1720213216.616:624): avc: denied { getopt } for pid=9097 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 489.673882][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.724469][ T9115] netlink: 'syz.1.925': attribute type 4 has an invalid length. [ 497.120220][ T9155] netlink: 56 bytes leftover after parsing attributes in process `syz.1.935'. [ 500.391295][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 500.401754][ T9197] FAULT_INJECTION: forcing a failure. [ 500.401754][ T9197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.496441][ T9197] CPU: 0 PID: 9197 Comm: syz.3.945 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 500.506465][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 500.516520][ T9197] Call Trace: [ 500.519803][ T9197] [ 500.522720][ T9197] dump_stack_lvl+0x16c/0x1f0 [ 500.527417][ T9197] should_fail_ex+0x497/0x5b0 [ 500.532088][ T9197] _copy_to_user+0x30/0xc0 [ 500.536501][ T9197] simple_read_from_buffer+0xd0/0x160 [ 500.541959][ T9197] proc_fail_nth_read+0x1b0/0x290 [ 500.547073][ T9197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.552612][ T9197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.558158][ T9197] vfs_read+0x1d4/0xbd0 [ 500.562306][ T9197] ? __fdget_pos+0xeb/0x180 [ 500.566804][ T9197] ? __pfx_vfs_read+0x10/0x10 [ 500.571494][ T9197] ? __pfx___mutex_lock+0x10/0x10 [ 500.576512][ T9197] ? __fget_files+0x256/0x400 [ 500.581182][ T9197] ksys_read+0x12f/0x260 [ 500.585423][ T9197] ? __pfx_ksys_read+0x10/0x10 [ 500.590186][ T9197] do_syscall_64+0xcd/0x250 [ 500.594694][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.600614][ T9197] RIP: 0033:0x7f9310b746bc [ 500.605058][ T9197] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 500.624671][ T9197] RSP: 002b:00007f9311926040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.633091][ T9197] RAX: ffffffffffffffda RBX: 00007f9310d04038 RCX: 00007f9310b746bc [ 500.641062][ T9197] RDX: 000000000000000f RSI: 00007f93119260b0 RDI: 0000000000000003 [ 500.649048][ T9197] RBP: 00007f93119260a0 R08: 0000000000000000 R09: 0000000000000000 [ 500.657017][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.664983][ T9197] R13: 000000000000006e R14: 00007f9310d04038 R15: 00007ffe155b1228 [ 500.672950][ T9197] [ 500.675970][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.789150][ T29] audit: type=1400 audit(1720213227.856:625): avc: denied { bind } for pid=9195 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 501.517791][ T29] audit: type=1326 audit(1720213228.586:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 501.611718][ T29] audit: type=1326 audit(1720213228.586:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 501.635091][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.720996][ T29] audit: type=1326 audit(1720213228.596:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 501.834667][ T29] audit: type=1326 audit(1720213228.666:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 501.939049][ T9210] FAULT_INJECTION: forcing a failure. [ 501.939049][ T9210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.956934][ T29] audit: type=1326 audit(1720213228.726:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 502.032088][ T9210] CPU: 0 PID: 9210 Comm: syz.3.950 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 502.042121][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 502.052193][ T9210] Call Trace: [ 502.055483][ T9210] [ 502.058410][ T9210] dump_stack_lvl+0x16c/0x1f0 [ 502.063091][ T9210] should_fail_ex+0x497/0x5b0 [ 502.067766][ T9210] _copy_from_user+0x30/0xf0 [ 502.072348][ T9210] copy_msghdr_from_user+0x99/0x160 [ 502.077579][ T9210] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 502.083390][ T9210] ? find_held_lock+0x2d/0x110 [ 502.088168][ T9210] ? __pfx___lock_acquire+0x10/0x10 [ 502.093397][ T9210] ___sys_sendmsg+0xff/0x1e0 [ 502.098034][ T9210] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.103246][ T9210] ? ksys_write+0x21c/0x260 [ 502.107755][ T9210] ? __fget_light+0x173/0x210 [ 502.112462][ T9210] __sys_sendmsg+0x117/0x1f0 [ 502.117148][ T9210] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.122295][ T9210] do_syscall_64+0xcd/0x250 [ 502.126805][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.132715][ T9210] RIP: 0033:0x7f9310b75bd9 [ 502.137130][ T9210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.156747][ T9210] RSP: 002b:00007f9311947048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.165165][ T9210] RAX: ffffffffffffffda RBX: 00007f9310d03f60 RCX: 00007f9310b75bd9 [ 502.173132][ T9210] RDX: 0000000000000000 RSI: 0000000020002a80 RDI: 0000000000000003 [ 502.181103][ T9210] RBP: 00007f93119470a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.189081][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.197060][ T9210] R13: 000000000000000b R14: 00007f9310d03f60 R15: 00007ffe155b1228 [ 502.205039][ T9210] [ 502.208165][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.209985][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.220889][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.278658][ T29] audit: type=1326 audit(1720213228.726:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 502.395721][ T29] audit: type=1326 audit(1720213228.746:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 502.418923][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.570459][ T29] audit: type=1326 audit(1720213228.746:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 503.320053][ T29] audit: type=1326 audit(1720213228.746:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.2.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f5775bd9 code=0x7ffc0000 [ 503.853410][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.954'. [ 505.114834][ T9239] FAULT_INJECTION: forcing a failure. [ 505.114834][ T9239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.153681][ T9239] CPU: 1 PID: 9239 Comm: syz.0.961 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 505.163708][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 505.173766][ T9239] Call Trace: [ 505.177039][ T9239] [ 505.179964][ T9239] dump_stack_lvl+0x16c/0x1f0 [ 505.184656][ T9239] should_fail_ex+0x497/0x5b0 [ 505.189328][ T9239] _copy_from_user+0x30/0xf0 [ 505.193910][ T9239] copy_msghdr_from_user+0x99/0x160 [ 505.199106][ T9239] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 505.204924][ T9239] ? find_held_lock+0x2d/0x110 [ 505.209717][ T9239] ? __pfx___lock_acquire+0x10/0x10 [ 505.214981][ T9239] ___sys_sendmsg+0xff/0x1e0 [ 505.219609][ T9239] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.224846][ T9239] ? ksys_write+0x21c/0x260 [ 505.229391][ T9239] ? __fget_light+0x173/0x210 [ 505.234099][ T9239] __sys_sendmsg+0x117/0x1f0 [ 505.238724][ T9239] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.243879][ T9239] do_syscall_64+0xcd/0x250 [ 505.248423][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.254358][ T9239] RIP: 0033:0x7fb057975bd9 [ 505.258795][ T9239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.278448][ T9239] RSP: 002b:00007fb058836048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.286906][ T9239] RAX: ffffffffffffffda RBX: 00007fb057b03f60 RCX: 00007fb057975bd9 [ 505.294908][ T9239] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 505.302902][ T9239] RBP: 00007fb0588360a0 R08: 0000000000000000 R09: 0000000000000000 [ 505.310907][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.318903][ T9239] R13: 000000000000000b R14: 00007fb057b03f60 R15: 00007ffdafe28708 [ 505.326877][ T9239] [ 505.406318][ T9241] FAULT_INJECTION: forcing a failure. [ 505.406318][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 505.467035][ T9241] CPU: 1 PID: 9241 Comm: syz.2.959 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 505.477135][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 505.487476][ T9241] Call Trace: [ 505.490752][ T9241] [ 505.493685][ T9241] dump_stack_lvl+0x16c/0x1f0 [ 505.498367][ T9241] should_fail_ex+0x497/0x5b0 [ 505.503055][ T9241] should_failslab+0x9/0x20 [ 505.507565][ T9241] __kmalloc_noprof+0xcf/0x410 [ 505.512328][ T9241] ? __pfx_lock_acquire+0x10/0x10 [ 505.517379][ T9241] tomoyo_realpath_from_path+0xb9/0x720 [ 505.522935][ T9241] ? tomoyo_profile+0x47/0x60 [ 505.527633][ T9241] tomoyo_path_number_perm+0x245/0x590 [ 505.533294][ T9241] ? tomoyo_path_number_perm+0x232/0x590 [ 505.538942][ T9241] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.544950][ T9241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 505.550939][ T9241] ? __fget_files+0x256/0x400 [ 505.555622][ T9241] security_file_ioctl+0x75/0xc0 [ 505.560566][ T9241] __x64_sys_ioctl+0xbb/0x220 [ 505.565264][ T9241] do_syscall_64+0xcd/0x250 [ 505.569949][ T9241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.575857][ T9241] RIP: 0033:0x7fd5f5775bd9 [ 505.580348][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.599966][ T9241] RSP: 002b:00007fd5f660c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.608468][ T9241] RAX: ffffffffffffffda RBX: 00007fd5f5904038 RCX: 00007fd5f5775bd9 [ 505.616452][ T9241] RDX: 0000000020000580 RSI: 00000000c0306201 RDI: 0000000000000003 [ 505.624520][ T9241] RBP: 00007fd5f660c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 505.632495][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.640460][ T9241] R13: 000000000000006e R14: 00007fd5f5904038 R15: 00007ffc346f1dd8 [ 505.648447][ T9241] [ 505.695325][ T9241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.941175][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 506.941194][ T29] audit: type=1400 audit(1720213234.006:660): avc: denied { read } for pid=9243 comm="syz.1.962" path="socket:[23548]" dev="sockfs" ino=23548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 507.785288][ T5092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.816178][ T5092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.827865][ T5092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.837928][ T5092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.855531][ T5092] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 507.863029][ T5092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.022820][ T9260] chnl_net:caif_netlink_parms(): no params data found [ 509.249433][ T29] audit: type=1400 audit(1720213236.306:661): avc: denied { read } for pid=9278 comm="syz.2.972" path="socket:[24632]" dev="sockfs" ino=24632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 509.314501][ T29] audit: type=1400 audit(1720213236.306:662): avc: denied { create } for pid=9278 comm="syz.2.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 509.430624][ T29] audit: type=1400 audit(1720213236.316:663): avc: denied { ioctl } for pid=9278 comm="syz.2.972" path="socket:[24633]" dev="sockfs" ino=24633 ioctlcmd=0x4948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 509.913973][ T9260] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.924685][ T5092] Bluetooth: hci5: command tx timeout [ 509.924839][ T5136] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 509.966549][ T9260] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.973873][ T9260] bridge_slave_0: entered allmulticast mode [ 510.078747][ T9260] bridge_slave_0: entered promiscuous mode [ 510.135620][ T9260] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.193747][ T9260] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.234794][ T9260] bridge_slave_1: entered allmulticast mode [ 510.242733][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 510.242763][ T9260] bridge_slave_1: entered promiscuous mode [ 510.258271][ T5136] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.307230][ T5136] usb 3-1: config 0 has no interface number 0 [ 510.313396][ T5136] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.405989][ T5136] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 510.450806][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.497143][ T5136] usb 3-1: config 0 descriptor?? [ 510.602020][ T9260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.607307][ T5136] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 510.710897][ T9260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.761355][ T5136] usb 3-1: USB disconnect, device number 4 [ 510.835575][ T5136] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 511.076969][ T9260] team0: Port device team_slave_0 added [ 511.122459][ T9260] team0: Port device team_slave_1 added [ 511.594280][ T29] audit: type=1400 audit(1720213238.646:664): avc: denied { lock } for pid=9298 comm="syz.3.976" path="socket:[23839]" dev="sockfs" ino=23839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 511.617972][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.653355][ T9260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.660534][ T9260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.686444][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.704145][ T9260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.775115][ T9260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.813205][ T9260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.929935][ T9260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.004488][ T5092] Bluetooth: hci5: command tx timeout [ 512.172454][ T6392] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.212293][ T9320] FAULT_INJECTION: forcing a failure. [ 512.212293][ T9320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.365198][ T9320] CPU: 1 PID: 9320 Comm: syz.0.982 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 512.375234][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 512.385314][ T9320] Call Trace: [ 512.388611][ T9320] [ 512.391558][ T9320] dump_stack_lvl+0x16c/0x1f0 [ 512.396273][ T9320] should_fail_ex+0x497/0x5b0 [ 512.400987][ T9320] _copy_from_user+0x30/0xf0 [ 512.405614][ T9320] get_timespec64+0x8c/0x240 [ 512.410242][ T9320] ? __pfx_get_timespec64+0x10/0x10 [ 512.415466][ T9320] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 512.421230][ T9320] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 512.427498][ T9320] do_syscall_64+0xcd/0x250 [ 512.432010][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.437915][ T9320] RIP: 0033:0x7fb057975bd9 [ 512.442324][ T9320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.462019][ T9320] RSP: 002b:00007fb058815048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 512.470625][ T9320] RAX: ffffffffffffffda RBX: 00007fb057b04038 RCX: 00007fb057975bd9 [ 512.478698][ T9320] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.486673][ T9320] RBP: 00007fb0588150a0 R08: 0000000000000000 R09: 0000000000000000 [ 512.494653][ T9320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.502625][ T9320] R13: 000000000000006e R14: 00007fb057b04038 R15: 00007ffdafe28708 [ 512.510602][ T9320] [ 512.681902][ T29] audit: type=1400 audit(1720213239.746:665): avc: denied { connect } for pid=9322 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 512.718294][ T6392] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.114952][ T29] audit: type=1400 audit(1720213240.176:666): avc: denied { bind } for pid=9330 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.160722][ T29] audit: type=1400 audit(1720213240.176:667): avc: denied { name_bind } for pid=9330 comm="syz.2.986" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 513.186027][ T6392] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.268461][ T29] audit: type=1400 audit(1720213240.176:668): avc: denied { node_bind } for pid=9330 comm="syz.2.986" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 513.372621][ T9260] hsr_slave_0: entered promiscuous mode [ 513.413143][ T29] audit: type=1400 audit(1720213240.476:669): avc: denied { append } for pid=9334 comm="syz.1.988" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 513.452335][ T9260] hsr_slave_1: entered promiscuous mode [ 513.491136][ T9260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.514883][ T9260] Cannot create hsr debugfs directory [ 513.596396][ T6392] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.084803][ T5092] Bluetooth: hci5: command tx timeout [ 514.217540][ T29] audit: type=1400 audit(1720213241.276:670): avc: denied { ioctl } for pid=9342 comm="syz.1.990" path="/newroot/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 514.359860][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 514.782997][ T6392] bridge_slave_1: left allmulticast mode [ 514.806286][ T6392] bridge_slave_1: left promiscuous mode [ 514.808190][ T29] audit: type=1400 audit(1720213241.876:671): avc: denied { append } for pid=9353 comm="syz.3.994" name="event3" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 514.812188][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.884740][ T6392] bridge_slave_0: left allmulticast mode [ 514.902853][ T6392] bridge_slave_0: left promiscuous mode [ 514.930291][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.054343][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 620.061458][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6392/1:b..l P4534/1:b..l [ 620.071209][ C0] rcu: (detected by 0, t=10502 jiffies, g=43449, q=226 ncpus=2) [ 620.079039][ C0] task:udevd state:R running task stack:25152 pid:4534 tgid:4534 ppid:1 flags:0x00000002 [ 620.092030][ C0] Call Trace: [ 620.095417][ C0] [ 620.098446][ C0] __schedule+0xf15/0x5d00 [ 620.102952][ C0] ? __pfx___schedule+0x10/0x10 [ 620.107824][ C0] ? lock_acquire+0x1f2/0x560 [ 620.112561][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 620.117960][ C0] preempt_schedule_common+0x44/0xc0 [ 620.123274][ C0] preempt_schedule_thunk+0x1a/0x30 [ 620.128492][ C0] _raw_spin_unlock+0x3e/0x50 [ 620.133188][ C0] __d_lookup+0x246/0x4c0 [ 620.137544][ C0] lookup_fast+0x17b/0x540 [ 620.141984][ C0] walk_component+0x5b/0x5b0 [ 620.146598][ C0] link_path_walk.part.0.constprop.0+0x77f/0xcd0 [ 620.152954][ C0] ? __pfx_link_path_walk.part.0.constprop.0+0x10/0x10 [ 620.159827][ C0] ? __lock_acquire+0xc5d/0x3b30 [ 620.164792][ C0] path_lookupat+0x93/0x770 [ 620.169481][ C0] filename_lookup+0x1e5/0x5b0 [ 620.174815][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 620.180145][ C0] ? __virt_addr_valid+0x5e/0x580 [ 620.185196][ C0] ? __phys_addr_symbol+0x30/0x80 [ 620.190234][ C0] ? __check_object_size+0x48e/0x720 [ 620.195626][ C0] vfs_statx+0x13e/0x550 [ 620.199985][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 620.204772][ C0] vfs_fstatat+0xb3/0x150 [ 620.209118][ C0] __do_sys_newfstatat+0xa6/0x130 [ 620.214182][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 620.219924][ C0] do_syscall_64+0xcd/0x250 [ 620.224455][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.230384][ C0] RIP: 0033:0x7f767ff165f4 [ 620.234807][ C0] RSP: 002b:00007ffe66404f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 620.243238][ C0] RAX: ffffffffffffffda RBX: 000055bbeb2de2c0 RCX: 00007f767ff165f4 [ 620.251228][ C0] RDX: 00007ffe66404f88 RSI: 00007ffe66405418 RDI: 00000000ffffff9c [ 620.259299][ C0] RBP: 00007ffe66405018 R08: 0000000000000000 R09: 0000000000000000 [ 620.267371][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe66405418 [ 620.275444][ C0] R13: 00007ffe66404f88 R14: 000055bbeb2a22c0 R15: 0000000000000000 [ 620.283433][ C0] [ 620.286460][ C0] task:kworker/u8:10 state:R running task stack:24304 pid:6392 tgid:6392 ppid:2 flags:0x00004000 [ 620.298310][ C0] Workqueue: netns cleanup_net [ 620.303193][ C0] Call Trace: [ 620.306481][ C0] [ 620.309419][ C0] __schedule+0xf15/0x5d00 [ 620.313869][ C0] ? __pfx___schedule+0x10/0x10 [ 620.318745][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.324931][ C0] ? mark_held_locks+0x9f/0xe0 [ 620.329720][ C0] preempt_schedule_irq+0x51/0x90 [ 620.334770][ C0] irqentry_exit+0x36/0x90 [ 620.339210][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 620.345224][ C0] RIP: 0010:get_stack_info+0x63/0x150 [ 620.350621][ C0] Code: 5d 00 4c 89 e7 4c 89 ea 48 89 de e8 27 92 b6 09 31 ff 41 89 c4 89 c6 e8 2b 4c 5d 00 45 84 e4 0f 84 cd 00 00 00 e8 7d 51 5d 00 <48> 85 ed 74 52 e8 73 51 5d 00 45 8b 75 00 bf 3f 00 00 00 44 89 f6 [ 620.370339][ C0] RSP: 0018:ffffc90003367268 EFLAGS: 00000293 [ 620.376437][ C0] RAX: 0000000000000000 RBX: ffff88807e635a00 RCX: ffffffff81309305 [ 620.384433][ C0] RDX: ffff88807e635a00 RSI: ffffffff81309313 RDI: 0000000000000001 [ 620.392418][ C0] RBP: ffffc90003367320 R08: 0000000000000001 R09: 0000000000000000 [ 620.400403][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: 0000000000000001 [ 620.408386][ C0] R13: ffffc90003367300 R14: ffffc90003367328 R15: ffffc90003367320 [ 620.416412][ C0] ? get_stack_info+0x55/0x150 [ 620.421208][ C0] ? get_stack_info+0x63/0x150 [ 620.426001][ C0] ? get_stack_info+0x63/0x150 [ 620.430787][ C0] __unwind_start+0x49c/0x880 [ 620.435496][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 620.440460][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.446723][ C0] arch_stack_walk+0xb2/0x170 [ 620.451426][ C0] ? __unwind_start+0x6ba/0x880 [ 620.456311][ C0] stack_trace_save+0x95/0xd0 [ 620.461014][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 620.466408][ C0] kasan_save_stack+0x33/0x60 [ 620.471137][ C0] __kasan_record_aux_stack+0xba/0xd0 [ 620.476528][ C0] kvfree_call_rcu+0x74/0xbe0 [ 620.481230][ C0] ? sctp_inet6addr_event+0x413/0x900 [ 620.486622][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 620.491939][ C0] sctp_inet6addr_event+0x429/0x900 [ 620.497169][ C0] notifier_call_chain+0xb9/0x410 [ 620.502223][ C0] ? __pfx_sctp_inet6addr_event+0x10/0x10 [ 620.507972][ C0] atomic_notifier_call_chain+0x71/0x1c0 [ 620.513625][ C0] addrconf_ifdown.isra.0+0xf03/0x1b40 [ 620.519147][ C0] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 620.525076][ C0] addrconf_notify+0x223/0x19e0 [ 620.530028][ C0] ? ip6mr_device_event+0x1bc/0x230 [ 620.535247][ C0] notifier_call_chain+0xb9/0x410 [ 620.540292][ C0] ? __pfx_addrconf_notify+0x10/0x10 [ 620.545591][ C0] call_netdevice_notifiers_info+0xbe/0x140 [ 620.551505][ C0] dev_close_many+0x333/0x6a0 [ 620.556206][ C0] ? mark_held_locks+0x9f/0xe0 [ 620.560997][ C0] ? __pfx_dev_close_many+0x10/0x10 [ 620.566234][ C0] unregister_netdevice_many_notify+0x46d/0x19f0 [ 620.572588][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 620.578960][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 620.585223][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 620.592009][ C0] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 620.598356][ C0] ? mutex_is_locked+0x12/0x50 [ 620.603144][ C0] ? nexthop_net_exit_batch_rtnl+0x1df/0x2b0 [ 620.609231][ C0] cleanup_net+0x58c/0xbf0 [ 620.613668][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 620.618633][ C0] process_one_work+0x9c5/0x1b40 [ 620.623589][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 620.628637][ C0] ? __pfx_process_one_work+0x10/0x10 [ 620.634023][ C0] ? assign_work+0x1a0/0x250 [ 620.638737][ C0] worker_thread+0x6c8/0xf30 [ 620.643441][ C0] ? __kthread_parkme+0x148/0x220 [ 620.648489][ C0] ? __pfx_worker_thread+0x10/0x10 [ 620.653614][ C0] kthread+0x2c1/0x3a0 [ 620.657787][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.663003][ C0] ? __pfx_kthread+0x10/0x10 [ 620.667627][ C0] ret_from_fork+0x45/0x80 [ 620.672157][ C0] ? __pfx_kthread+0x10/0x10 [ 620.676774][ C0] ret_from_fork_asm+0x1a/0x30 [ 620.681582][ C0] [ 620.684619][ C0] rcu: rcu_preempt kthread starved for 10244 jiffies! g43449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 620.695839][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 620.705844][ C0] rcu: RCU grace-period kthread stack dump: [ 620.711743][ C0] task:rcu_preempt state:R running task stack:28464 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 620.723508][ C0] Call Trace: [ 620.726799][ C0] [ 620.729742][ C0] __schedule+0xf15/0x5d00 [ 620.734184][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 620.739411][ C0] ? __pfx___schedule+0x10/0x10 [ 620.744278][ C0] ? schedule+0x298/0x350 [ 620.748707][ C0] ? __pfx_lock_release+0x10/0x10 [ 620.753756][ C0] ? __pfx___mod_timer+0x10/0x10 [ 620.758741][ C0] ? lock_acquire+0x1b1/0x560 [ 620.763472][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 620.768973][ C0] schedule+0xe7/0x350 [ 620.773066][ C0] schedule_timeout+0x136/0x2a0 [ 620.777947][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 620.783349][ C0] ? __pfx_process_timeout+0x10/0x10 [ 620.788658][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 620.794481][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 620.800057][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 620.804852][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 620.810157][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 620.815382][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 620.821209][ C0] rcu_gp_kthread+0x271/0x380 [ 620.825920][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 620.831141][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 620.836368][ C0] ? __kthread_parkme+0x148/0x220 [ 620.841417][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 620.846639][ C0] kthread+0x2c1/0x3a0 [ 620.850725][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.855941][ C0] ? __pfx_kthread+0x10/0x10 [ 620.860551][ C0] ret_from_fork+0x45/0x80 [ 620.864997][ C0] ? __pfx_kthread+0x10/0x10 [ 620.869609][ C0] ret_from_fork_asm+0x1a/0x30 [ 620.874400][ C0] [ 620.877429][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 620.883771][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 620.893502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 620.903743][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 620.909059][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 68 54 1c 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 38 af b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 620.928694][ C0] RSP: 0018:ffffffff8d807d70 EFLAGS: 00000246 [ 620.934778][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae767b9 [ 620.942764][ C0] RDX: 0000000000000001 RSI: ffff88801a2b9800 RDI: ffff88801a2b9864 [ 620.950751][ C0] RBP: ffff88801a2b9864 R08: 0000000000000001 R09: ffffed1017246fdd [ 620.958735][ C0] R10: ffff8880b9237eeb R11: 0000000000000000 R12: ffff88801af54000 [ 620.966722][ C0] R13: ffffffff8e742280 R14: 0000000000000000 R15: 0000000000000000 [ 620.974708][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 620.983655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.990252][ C0] CR2: 0000000020048000 CR3: 00000000660a0000 CR4: 00000000003506f0 [ 620.998240][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 621.006225][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 621.014295][ C0] Call Trace: [ 621.017580][ C0] [ 621.020431][ C0] ? show_regs+0x8c/0xa0 [ 621.024699][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 621.031056][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 621.036280][ C0] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 621.041730][ C0] ? __pfx_lock_release+0x10/0x10 [ 621.046746][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 621.052365][ C0] ? __asan_memcpy+0x3c/0x60 [ 621.056942][ C0] ? update_process_times+0x175/0x220 [ 621.062299][ C0] ? __pfx_update_process_times+0x10/0x10 [ 621.068012][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 621.073477][ C0] ? update_wall_time+0x1c/0x40 [ 621.078404][ C0] ? tick_nohz_handler+0x376/0x530 [ 621.083499][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 621.088941][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 621.094302][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 621.100025][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 621.106090][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 621.111193][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 621.117343][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 621.123139][ C0] [ 621.126053][ C0] [ 621.128965][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.135108][ C0] ? ct_kernel_exit+0x139/0x190 [ 621.139961][ C0] ? acpi_safe_halt+0x1a/0x20 [ 621.144714][ C0] acpi_idle_enter+0xc5/0x160 [ 621.149380][ C0] cpuidle_enter_state+0x85/0x500 [ 621.154391][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 621.160184][ C0] cpuidle_enter+0x4e/0xa0 [ 621.164592][ C0] do_idle+0x313/0x3f0 [ 621.168655][ C0] ? __pfx_do_idle+0x10/0x10 [ 621.173232][ C0] cpu_startup_entry+0x4f/0x60 [ 621.177997][ C0] rest_init+0x16b/0x2b0 [ 621.182231][ C0] ? acpi_subsystem_init+0x133/0x180 [ 621.187510][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 621.193059][ C0] start_kernel+0x3df/0x4c0 [ 621.197550][ C0] x86_64_start_reservations+0x18/0x30 [ 621.203035][ C0] x86_64_start_kernel+0xb2/0xc0 [ 621.207977][ C0] common_startup_64+0x13e/0x148 [ 621.212918][ C0] [ 621.251394][ T5092] Bluetooth: hci5: command tx timeout [ 621.261535][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.274500][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=192 sent=0 n=-1 (errno 32: Broken pipe) [ 624.227906][ T6392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.240196][ T6392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.252653][ T6392] bond0 (unregistering): Released all slaves [ 624.978629][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.985097][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.198996][ T6392] hsr_slave_0: left promiscuous mode [ 625.212340][ T6392] hsr_slave_1: left promiscuous mode [ 625.221373][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.239197][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.256399][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.276113][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.313577][ T6392] veth1_macvtap: left promiscuous mode [ 625.319348][ T6392] veth0_macvtap: left promiscuous mode [ 625.331127][ T6392] veth1_vlan: left promiscuous mode [ 625.337335][ T6392] veth0_vlan: left promiscuous mode [ 626.051138][ T6392] team0 (unregistering): Port device team_slave_1 removed [ 626.101869][ T6392] team0 (unregistering): Port device team_slave_0 removed [ 627.000347][ T6392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.097835][ T6392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.162857][ T6392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.228296][ T6392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.406490][ T6392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.510728][ T6392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.581896][ T6392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.679797][ T6392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.953853][ T6392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.073221][ T6392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.166917][ T6392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.275891][ T6392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.539448][ T6392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.628798][ T6392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.707522][ T6392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.807291][ T6392] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.002595][ T6392] bridge_slave_1: left allmulticast mode [ 629.011069][ T6392] bridge_slave_1: left promiscuous mode [ 629.018064][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.032180][ T6392] bridge_slave_0: left allmulticast mode [ 629.038799][ T6392] bridge_slave_0: left promiscuous mode [ 629.058416][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.070428][ T6392] bridge_slave_1: left allmulticast mode [ 629.077463][ T6392] bridge_slave_1: left promiscuous mode [ 629.083288][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.094774][ T6392] bridge_slave_0: left allmulticast mode [ 629.100603][ T6392] bridge_slave_0: left promiscuous mode [ 629.109046][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.121715][ T6392] bridge_slave_1: left allmulticast mode [ 629.128866][ T6392] bridge_slave_1: left promiscuous mode [ 629.136456][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.146695][ T6392] bridge_slave_0: left allmulticast mode [ 629.152425][ T6392] bridge_slave_0: left promiscuous mode [ 629.162477][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.172725][ T6392] bridge_slave_1: left allmulticast mode [ 629.178507][ T6392] bridge_slave_1: left promiscuous mode [ 629.184215][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.193607][ T6392] bridge_slave_0: left allmulticast mode [ 629.199489][ T6392] bridge_slave_0: left promiscuous mode [ 629.208495][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.218758][ T6392] bridge_slave_1: left allmulticast mode [ 629.225346][ T6392] bridge_slave_1: left promiscuous mode [ 629.231050][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.240452][ T6392] bridge_slave_0: left allmulticast mode [ 629.246242][ T6392] bridge_slave_0: left promiscuous mode [ 629.251927][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state