last executing test programs: 1m28.152902675s ago: executing program 3 (id=193): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xa, 0x6, 0x0, 0xa}]}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000004300)={0x20, 0x0, 0x0, {0x5, 0x0, 0x1, 0x1}}, 0x20) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000021a01080000000000000000000000090900021f58797a3100000000050004000000000083d50300686173683a69702c706f72742c6e6574deff00040cf806800500150023000000050001000700000005000100067de69fa2cdae9c2864a426e40d000000"], 0x5c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 1m6.083866509s ago: executing program 3 (id=193): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xa, 0x6, 0x0, 0xa}]}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000004300)={0x20, 0x0, 0x0, {0x5, 0x0, 0x1, 0x1}}, 0x20) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000021a01080000000000000000000000090900021f58797a3100000000050004000000000083d50300686173683a69702c706f72742c6e6574deff00040cf806800500150023000000050001000700000005000100067de69fa2cdae9c2864a426e40d000000"], 0x5c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 58.843245141s ago: executing program 3 (id=193): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xa, 0x6, 0x0, 0xa}]}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000004300)={0x20, 0x0, 0x0, {0x5, 0x0, 0x1, 0x1}}, 0x20) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000021a01080000000000000000000000090900021f58797a3100000000050004000000000083d50300686173683a69702c706f72742c6e6574deff00040cf806800500150023000000050001000700000005000100067de69fa2cdae9c2864a426e40d000000"], 0x5c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 41.95933474s ago: executing program 3 (id=193): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xa, 0x6, 0x0, 0xa}]}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000004300)={0x20, 0x0, 0x0, {0x5, 0x0, 0x1, 0x1}}, 0x20) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000021a01080000000000000000000000090900021f58797a3100000000050004000000000083d50300686173683a69702c706f72742c6e6574deff00040cf806800500150023000000050001000700000005000100067de69fa2cdae9c2864a426e40d000000"], 0x5c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 23.299665143s ago: executing program 3 (id=193): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xa, 0x6, 0x0, 0xa}]}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000004300)={0x20, 0x0, 0x0, {0x5, 0x0, 0x1, 0x1}}, 0x20) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000021a01080000000000000000000000090900021f58797a3100000000050004000000000083d50300686173683a69702c706f72742c6e6574deff00040cf806800500150023000000050001000700000005000100067de69fa2cdae9c2864a426e40d000000"], 0x5c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 11.934908358s ago: executing program 1 (id=485): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000), 0x1c) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) 10.846842407s ago: executing program 1 (id=490): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560d, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) r4 = dup(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0) (async) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1, 0x0, 0x0) (async) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f00007d4000/0x4000)=nil, 0x4000}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000029036f00000000000000ebd7092854d971dba80000000040bd82cc7887d6e0acad000000000000a96d1b48e2b4731c8ecb92356a6784b2bad038c1dc40679e6a955c6e22c96e0ab69f92281ca50c9630c46305c45b1a261dbeb100629582ced9a9153cbfebde8d5c8c7a8d17af130b29d6ee9dcc4ddfd84309fd53e772a026649aaf234b631035f8589e2b56e020a73b4a6833fb"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000029036f00000000000000ebd7092854d971dba80000000040bd82cc7887d6e0acad000000000000a96d1b48e2b4731c8ecb92356a6784b2bad038c1dc40679e6a955c6e22c96e0ab69f92281ca50c9630c46305c45b1a261dbeb100629582ced9a9153cbfebde8d5c8c7a8d17af130b29d6ee9dcc4ddfd84309fd53e772a026649aaf234b631035f8589e2b56e020a73b4a6833fb"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000001f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a0000000359363ecc0564ab636000000080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a0000000359363ecc0564ab636000000080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000001740)={r7, &(0x7f0000001800)="aafc37a5f0296f0c373202c1d658a5aae9230317ff641f217c70421563424a95ef51ac", &(0x7f0000000040)=""/73}, 0x20) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4a22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000001780)='udp_fail_queue_rcv_skb\x00', r8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000001780)='udp_fail_queue_rcv_skb\x00', r8}, 0x18) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) pwritev(r9, &(0x7f00000005c0)=[{&(0x7f0000000740)="1ece2621930dd03e5c56bd6e625ccd8ed88b8f33d9ae2c44fa6e5b3c2c374255df86af7303a7a668e8f5f064fb67b4138eefe342ed4980c1fd3bf88db13f71f11663af8b04154d49933ba8580c8845219f2f45ecb5ef025dac5ed074597233462b6d6bc5bddbed4e9728c2ca2b78c2ef1f34d9525d4911bb81594140ce0bc77eddccfcd33eb023b42e6c044bbd193ba82f47e2177ad55c0d1ca15de8ecb53d20c2e4b38eaf32f275515e14e79a4390c48646af09bab2e2c5f7e3b5a9dcfd7d4451885f02a4670d08e9e410494f25c70868868f77851bcdb5fb62b61b707925e0b2a8ea35c103779ea83e6106c7dc435f77a6e37a9939bcc50e1d6aed1a164d291373338eacfa067b035dcc238d4ddaea7e64994164d0b81843281cb16aebc6bfa4142589337f68825af7f45ceebcd4c22b2c212ee99975d54741a1e854865a842fca1c7e9fa6266d561f88606b960b85756a1ba95deeca9041a18db29aa2aef5e3e5b5435d3856268c7533bc9e01968b0d616332ed525a2ef90f7591b5abeb09439bab9c7c864d804cd3e329088b8e94f665a3dd7feb093b37c016716706fbef1c4bd6aea9b040c492ce5c2d20ad927e87614f49eb1d54bce45c14b47ac25f35d11d77746dbf773ddf1e00745bdd5f12c71f610917e027f9e776409dc3dc3d761c73b0666522e71b95d3a6c018c3609880d80c84e5e44edaafdd37b9a5f33223801fe12ee2cc34f667acdd0a2d5fa8cc97478a1b3d512f351e1ad1fd355eb9f22c7923785c40bda6287001860f964c297d54b20daa7a78b603015dc6deb587b11bdb8a27efea35fd4b18be5d3044eedf4459104d1f2cdabbb3f8cd10a825ca2a549b8cafb62d2d26e7ff10f00f6831878173198ef18a7c5195e8b160f4e0567511bcd567d994bb4223e97371f869bf7af826de98e6fd474bbb45609568797da4f7a5f0a7f2cc359d77df1823f9ad279b1f62388c9eac0dec226243b5a053f4beebf3270c25d86bebe4a6263f2c3cb27f69ab70d4be7e7bf897215ece7f235b3ddfc3f29fb93a955566ebc2feb7ff846cbeff8a2b3bc23004bcf3bb927656e4237d3467bcb7d859a038c3c4d1fd35b8b96a2f289ce1c4912bd91d56ba08aaa3f954f7492e834a5a191a2f642023fc672178bbf0a8932af6b809df8c72003477fed167897410211820f5640725a22114ff58ff552460abaf431ab606d9737d6d015378e8bc4726a7de187f1c5a5e8210488fedddf07f6f46714e03b07adcd627d69ba6fc4d0d590dd74989449f1cc9a382a232eabe004f690284c5d1c8f753eeef4415a47e3f0c6a9d6a44a5cc2b74fef20f134f4e96bc5c763e0592b3c5a8a20b81d4a595c4f5d29a62561fe1b637de01204f25145f7f0665fb5a37dbeb1845f51a1548ec5b0bffc7cb7a4b665a0eb751a382a0728ac375cc167c5c2904b3eea0b794ad34db7c86c2d21920db4009d46c85cc7e53d90b943efc4d783f935c6a89d6e1a3965b58017149d991b29768bd6a19b500610faa44418f5acd28fc60738495282156cb7b458b8cafa0a53561cdf7d6deec6f585ffcc8fd2c1eac19d544941f3a2d37f094a217eff8c033381b490549dd93250e775bc6f9e97c51b918743cc2b26539313c166fe24f89c01028ffa42a4eb4a7c7851010d8a6502255a47bbe5e2c59daa9354cb41b4222010de53333495562c4aa1ac71d9638554df2f69f538e9bc2067bc4e243754ef5a11cf72f237e9a6397204146678213b613c10dacefbdf5b6ffa91ac12a4e6ecb3045ab923e1cf9ae2ee9a256bb0d2c0fb4e0d7b3aff7942a933ec061edac2fa056d62c4f0e03f0214be1e969a92515cec12f34c7c05facd9a32b45f779e4228da47b45dcd43447b66114d6519993a8a811d5f2a59c2e0c55ba9ba500aa2c5159852780cc318320545d19fc7f027e484216fc1a844a2c3e9aa347b2ff358bc2fd1ce1d18eaec447d60ffb82c07b3446b2c8dddc159dfc930c1670689075f65d099f4e213aedf8b35bf86327f51f4f6ec189f48826d10cb4c2c5c9e0a50575e0ccf3436aa3d3bdb351b9865879666a211c967f7be786ab3112aaea52f8df9db292b3d0033f2e406b8c4175c235304626c9d17743cdcaca7be770f02d188ff1c6b3d2dc658f4f22a8b4b74e121c46ef2037c283349ad754c177ed3a5440c1ffb2f93b28dfc9c2c246e2c04f9b36a0f23ee366fe7937d0e3a886e640b384cbff44f784f80d35e70f85c1382232aaf2d31cfe78bdc13bf7ea7d33116d149e1c13de0f031f8d43491ecf7ee07e11721627897a5e38162184c6315530d99fbe521b9f24821fd0860a17aa9174aedcf0fb83030191784c5b659067dd3268fdf40a55c6f84a319a472e53fdf41cc0b4a920d0c4850500c1a5cf161a092773a9b282cfef14f7eac27ffdb0f8231b25c5a8a231948ce5c888fec30eebeb414e2870685f2b5454b1c88030643e5621224518f1c91a044ccb454001e1a5a4bd7e8b321780d0e6dafa77e8f7187f22aff5003ef03642e908765723ed7c7b825ded9ac63788122145a8b667e32db68521080272d7f95500eb31c832585e844c5e8432dfacefe7dfff5d2d9db56a463fa627871b06deb658b992a5fdf3ddc6846a52e45cf8619e4c44244f0057f098ab1db4c3cfac492392efdad33c3add4862bda0dffe1e46c7df518a87242474e87c36194349e467e96153b6e791e5b6f04dbdb9a555d51e10a87dd7552190ac46c9f209b99687b2fed7ce3cd637763aa9b78fc1c15ed6712949ac86ccf329ef6a782323f3ab31cb120610116f0dac3b4a9b6bcd24fb34652fb06eb75737c30ae5fbe7c40fa4a5af12f43231c7667dc37155c689b3bb0f4fd2ba536e053238b43c9e08e474ab8186425adb622049f5abdb44eb8f9b06b3d003352d721a2be1a1cd3508b666013158a4a8a1c08f3d13143f616f7300e2108a8c08d1ef70f672c3ebc6c221b96226d3b8b957432bf7673151b630d43f170dcd9188351e21f51f9b927dd37c6f2a4c189860cf78be2754196785e672f484cf5f435ebbcea495ff81bf09b159d77ff05c292dddcac15708cdfacebdea9d0e49295f6e5a61ebcfa16a782970f0639728f11d89663e124c0b0de0583607a8d6aa65c101f75c80205545b98936a033d8855fec8781c2a751b95a449a52c2e245c6d1ef9425e1987a2457cdbe4a47be207e3866c028bb13bcc82be81763e5b819f96ba75c25cd79f5ba7ab78d167a33d38cd3d4d8ba1514d44953be6412b297f77b709a3a459ee21ef9edcff669b1383e38475de9feb571dd3acd8d0f843126cf615dadf95a6940bfa1526b6083b58cf2ab2a8ed9d4162f71d71868a8454e53d1e3f7ba92b3cf2c2310e65300ac3112304d4fb699ff8d420f719b1eef6a6e43a6b25e3ade0885e0a2540b9e888ee9e5cc7e245f2f8f8300fcf483ce1e8ee338846ed83c288b0b6877c24e0ca1f54405a4ecff811800005edfad67efe27c544d5cf9c63d61adb53f6a3ca3b9fd0cfad75420cdf7b1dcca98bbfd9ea77629159f521e4d3e3d1209e7ccc5a1d77ab4950cc6adb032434a0c737e3015a48a78f09c933f8fe1e3987ddca4680ef4db201d7c3fccf7437699fc04ef306332474fd7d90944b51c815e86083dc4b4cbe187055dc9c28d76ab4cb5ab8e5944893ac48ead6da367f7cca155ed34e81fc874d394d5cc7e7351e02b21d0bd8313a731ea36719b427de4e247d949682614b6718db9f9d457265296f4d41921ceec2b3f904737c5015185e40c19b923b13ed127a6d16f75ff5706db9e98c2f3b7946c0efc8fcbf5560a2d311e007973c0df4a903f48465f572691946cb602cfa813053d75355b13717e88b73622f57d7b3fe4c25feb7f997591270cda6cdd9383a3299f70017fa6b3632cb27f8160973cbda859cf01958fae477a1c08d460ef99c070956452a356f00c1e8ca436dc14e8a83f157bdc88c4845c184722aacae7b148672be2c8f326a58ef93bd2191c5a34eaec68e883af5f69303d9e4406d7c298084e1ea46a4a239ab2229c8de42fd0e52702d38182ae2ca509282087b411b55fd0362b598cadce3826cf77ada4178a383aa1beac1d09fd6e17569ef75bae92bbe578c92325b07545f2609734d6f2120e9ee294f0c985700d5f3a839a7df7f3f03e4d5559cda0d0d2ad506145df57644522f4efc488817720e5e301474d72518b28888fde92192a5612b9456398d913b6fc14b26f8765a9632818874578316619992f4f30a39232f7b0703092bb0e319e222bb78856cdfdcb1392bc35807e551b0adb363c08850367eb700627704b233ea66165da6af6905571241e8c0315897bd88bbb69c838818bc1bec6fd6115068b6a467325b91d13f49d3fd5066bd41af9dc61167e87d5ceaca86e50a72cd29d64708303b3b131f8d3ccf56ca9006260e58ab27bc31d15edbb86edc09e635879c454ac5749d6cc7ac67c9d6874b29348ed6a81f09585274eb38b98b425ff98724687c600cf80ee7303bc9eac4de0654c5697d8a7229d3628d7042bdbd987b2df12b9b221e92e991f44248d7c82159dda78ed54de263524c4f504c72bdb91b69865429a1548d8667150a9a8ae1a7cb9a8ffe13ba5f9a64d67fae80c24a0fe9ce2a5eac1d521a0189189fe8c0ec955afc5c50a302846544c2408f944b1bcaff33e34659a1b7e8368dd2af97fdcbd2a40f43644e4d69a367d670ede295a40828190c8609aeaa7e861ae12b3ce9932daf499a9b40ab674a460d077204fbe57670311d7a13530171316841627c47724081b6c5dd405e75556072104f2599aa385144b0824a02d574be29a4ad4ce106b684b0ac12b7f8e203cfc7108c0b76f82900cc832d9d3697445e4907ff129ddbafcc2317b95a56b6a1aa4882525582b917cb04b74596b5929d1c9db320024b290ea3c12b049e40cad97fdd245139c3b209aa0d51519ab01fc303393db4ba3bf868923727dde0cbd3af94dac63b040dd850d8fc846e2762c6e7f165ac6356ca6a297f18c21f3401ba2c171eb3fda5fd1ee20baf5e8bafaf5b0c8cb6c09ecfa8bfe2e017f67bdf579ad98adbfefe43fe375973ef7f04bf6535e00e0e18f26656ed372e89a2af7afcb8e391a595e83e46154400c93bbd56c920d42a22ce309dd853ed5bc1e1cb3d872399d177e6f872dece86f2b5a13bf39df524be65d932810e69eb90e902394e009f590cc6e5c089acb71806ed675079ea5483d50f10e4796beda57aa06a493f051f149149138ee41d0098d9a26a1fe99591c9b1278551b92012cf4dc95d626d42e773fbf856220c0c316e96400665ca02de27911c44ee27c10edb4e28d40970a4187237ee61e74ffc8bf1ffc6af944dedb3d296d5068025d8ebdea5ae6601f8999caa4a8ee5ef111452d54770445d31429493ce0b50fcc56e1e78bfb32e23c99212ad58cc071d117d51cb4c666c201d33e511409fd68979259602f3f3ed92cf0f0faab67daca9c4a066c6f558e85eccdd16ba6cba457eb92adb60406d19eecfdb3e65966aa2527ba99353214f184b7ce56f5a27a4277ef64ea172964629ef795d416d0b3f53bbc8351681f4ad7f0be7f87f2563fdf222aa2cca56619178b7fbe134aa80dc7125e05ed25dd6982a7d9c4076507ce2ab8fd6565d825faf7faa7e6eeb024bd176aaeb53587413fe5ba76532c7a59d90a5930302c2b62f3252ce6ebc06adfeb19840552ffa0fa7c156713017e876bb4fed74851bac5815077009faf48f5e2b19276c02def0a6d36ce3fcb78b36b9480daee83a4a1306a67274d", 0x1000}, {&(0x7f00000004c0)="c1470e26c9ab08777c8861114c8e3d95515e68670b14909d5f40274445cebe0e379fc06daea9751767f0f786204f595e6f11052d103642ed9d5efc7681c5077092dc910a7eb6bc80ce71f9ee8c99e1ae7bb2c570971fb3b9c836b17bae79307cefa2616926b7d2d981552055ad954bf3d5f6b1431ba02a57c451ba75cea0890dc10daf9d62068cf70db1f9d5edf712cb56ecd4f1d1efe444c3e1fc85357f4cfea47c853db1e6e94ed503800db63487383a9781503f7b9553ee95d1637a9b8049bd", 0xc1}], 0x2, 0x6a95, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r10, 0x7002) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00562c84adb6bdfe2619b04d167d7b37790465070d786f8125be618cc01b1798ce0c51fe6e6f50547d0fa9ab40cddb7113684a97435106fa03b2a1ebf19930668e627f677992fba9130b1c5d3d00bf09f1ce8e805f62b4b66d31dbf4b537fb6e4e7bc63cb2d90d74a6ee920ec8b451452c86221c5757aff0e15f6109c198acc98bc93b33fbc47295f41b9d5a0539abee746466ca65efce5db9dced94224d67dee4cc1483c88781e0c4923049b44245ca1a423cab4804cbc5f4fb8969f2153b9afa00a5ba5516fc8600b28f9d7fd54d9b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00562c84adb6bdfe2619b04d167d7b37790465070d786f8125be618cc01b1798ce0c51fe6e6f50547d0fa9ab40cddb7113684a97435106fa03b2a1ebf19930668e627f677992fba9130b1c5d3d00bf09f1ce8e805f62b4b66d31dbf4b537fb6e4e7bc63cb2d90d74a6ee920ec8b451452c86221c5757aff0e15f6109c198acc98bc93b33fbc47295f41b9d5a0539abee746466ca65efce5db9dced94224d67dee4cc1483c88781e0c4923049b44245ca1a423cab4804cbc5f4fb8969f2153b9afa00a5ba5516fc8600b28f9d7fd54d9b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.777592667s ago: executing program 3 (id=193): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xa, 0x6, 0x0, 0xa}]}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000004300)={0x20, 0x0, 0x0, {0x5, 0x0, 0x1, 0x1}}, 0x20) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000021a01080000000000000000000000090900021f58797a3100000000050004000000000083d50300686173683a69702c706f72742c6e6574deff00040cf806800500150023000000050001000700000005000100067de69fa2cdae9c2864a426e40d000000"], 0x5c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 7.583985407s ago: executing program 1 (id=502): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x0, 0x8, 0x1c, r4, 0x2, ']\x00'}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace(0x10, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) accept4(r7, 0x0, 0x0, 0x0) tkill(0x0, 0x2e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fanotify_init(0x3f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08000400448000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4c094) 6.613734843s ago: executing program 1 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0xfe, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 6.476104516s ago: executing program 1 (id=505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000140)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="480000001400190c09004beafd0d3602028447000b4e230f00000001a2bc5603ca00000f7f5123ff0000000309ff", 0xfe82}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f000010d000/0x4000)=nil, 0x4000) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1c09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xfe, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x400, 0x0, 0x1, {0x22, 0xc1a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x1, 0x9}}]}}}]}}]}}, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x10) 5.040483251s ago: executing program 2 (id=508): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0xa1ffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 5.039940635s ago: executing program 4 (id=509): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 4.919390082s ago: executing program 2 (id=510): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) getrandom(0x0, 0x0, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000140), 0x0, 0x4) read$msr(r3, &(0x7f0000000280)=""/108, 0x6c) ioctl$UFFDIO_CONTINUE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3000000}) 4.918482372s ago: executing program 4 (id=511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8000085}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x28200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) 4.216006571s ago: executing program 2 (id=512): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x3, 0x3, 0x0, &(0x7f00000013c0)=""/239, 0x0, 0x3000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0xfc0ec000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000008780)) write$UHID_INPUT(r3, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r4 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x85, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280)) signalfd4(r7, 0x0, 0x0, 0x100800) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1}}}}]}]}, 0x78}}, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 3.947506916s ago: executing program 4 (id=513): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd25, 0xffffffa6, {{}, {}, {0x14, 0x19, {0x7fffffff, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x4080) 3.931108614s ago: executing program 0 (id=514): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000a00006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.712173198s ago: executing program 0 (id=515): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x6) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 3.202147495s ago: executing program 1 (id=516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.150518909s ago: executing program 4 (id=517): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) write$P9_RGETLOCK(r8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace(0x10, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) accept4(r9, 0x0, 0x0, 0x0) tkill(0x0, 0x2e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fanotify_init(0x3f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08000400448000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4c094) 2.542687468s ago: executing program 0 (id=518): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000340)='sys_enter\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000000), &(0x7f0000000380)=r4}, 0x20) pipe(&(0x7f0000000080)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 1.715683149s ago: executing program 2 (id=519): r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000007000601"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) (rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async, rerun: 64) io_setup(0xff, &(0x7f0000000380)=0x0) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, 0x0) (async) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0x41}]) (async, rerun: 32) r9 = eventfd2(0x6, 0x1) (async, rerun: 32) r10 = getpgrp(0x0) r11 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r11, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) (async) io_submit(r7, 0x4, &(0x7f0000000580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f0000000200)="437f4ac3339fc3211e28afb0b6dc2feba7b13bd26998df2d2f1dd54fab5680445dc50c96a38207b730f2c076f408a8557db0402c5f9eece9acdfd9a261acb0c61fa02aa700589a51bf2cdb0a476e66f42a989b7f17683b8646cbbb915d5155ae89a8d33e9de8d198d9ee7de6ebf214a4cd0b0f29214203cad16ff0347a74d259f7aaed0f42ffe8", 0x87, 0x7, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xff18, r0, &(0x7f00000002c0)="1c163232eee11fd47fc49dea80ff680f60ec3abb6a6b407d795d8ac2320df42001e9269c01cdbd5bd37d95983d7babae18db8a40b80f29383cdc2de5593f5009571311211c8225a592a6a9c7d7880a08a8680dae20ac4863e132f01210dfbdc567b70c021e6381bb1d91ae64c26622a944d81b465f90a6310429d5c9169b863e7f", 0x81, 0x5, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000440)="b70924cdf687753c828f324f73fc0447f2903a8bcee91b73aa6f7c474bd88c42442c39435f052d390130472252f122a6bb884b9a4de5bc40185b1aa71732a7f7005fe10f9806082107c797698ee0c0b0e776ad53573b7df25d5f6faa6177bbc98e492ac816dd1517badf24e089bb04855f2cce86e3c0e547c4da13795594a68e427f2ec96434d1fe2c5e9a50f24c80e7", 0x90, 0x9, 0x0, 0x0, r9}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x7, r11, &(0x7f0000000500)="d09d2b8e5b23391cbf76bfb6149dc802e43e046f9e50f0659ac6b936f76bc9c7fac6d10caeb1e4161635c78f7753f13512e389b44557fefb4d84bf908ffbe520c63dc0381b44c7", 0x47, 0x1, 0x0, 0x1, r3}]) (async) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c000240000000000000ffff0b00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) 1.713507649s ago: executing program 4 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = mq_open(&(0x7f00000001c0)='syzkaller\x00', 0x40, 0x102, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x1, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=r5], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r7, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062bebeff2374151183", 0x88}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/120, 0x78}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x5}], 0x3fffe7d, 0x0, 0x0) 1.397246244s ago: executing program 0 (id=521): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 1.078410576s ago: executing program 2 (id=522): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0xaf, &(0x7f0000000740)=""/175, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) pipe(&(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x5, {}, {}, @note={0x4, 0x0, 0x0, 0x0, 0xf5}}], 0x38) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfa, 0xbfff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000340)=0x50) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x210040, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) 1.07767098s ago: executing program 0 (id=523): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) unshare(0x8040480) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) r1 = dup2(r0, r0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) (rerun: 64) dup(r2) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) read$FUSE(r1, &(0x7f0000000f80)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) (async) unshare(0x2a020780) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200200, 0x110) 756.107844ms ago: executing program 4 (id=524): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x1, 0x84) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket(0x10, 0x803, 0x0) eventfd2(0xff, 0x80001) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x80000, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) 68.116323ms ago: executing program 0 (id=525): syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e040000810000", 0x13}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x29, 0x0, &(0x7f0000000040)) shutdown(r4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000000000000000008000000001b00000000", @ANYRES32=0x0, @ANYBLOB="4000000000000400"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 0s ago: executing program 2 (id=526): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) kernel console output (not intermixed with test programs): { ioctl } for pid=6913 comm="syz.1.245" path="socket:[12524]" dev="sockfs" ino=12524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.162847][ T5820] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 151.196199][ T5820] cdc_ncm 5-1:1.1: bind() failure [ 151.245514][ T5820] usb 5-1: USB disconnect, device number 10 [ 151.624496][ T6927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61 sclass=netlink_tcpdiag_socket pid=6927 comm=syz.1.248 [ 151.986085][ T30] audit: type=1400 audit(1744797589.485:397): avc: denied { ioctl } for pid=6921 comm="syz.1.248" path="socket:[11653]" dev="sockfs" ino=11653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 152.151353][ T1141] bridge_slave_1: left allmulticast mode [ 152.202691][ T1141] bridge_slave_1: left promiscuous mode [ 152.241055][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.332731][ T1141] bridge_slave_0: left allmulticast mode [ 152.338423][ T1141] bridge_slave_0: left promiscuous mode [ 152.350696][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.886796][ T30] audit: type=1400 audit(1744797590.745:398): avc: denied { sqpoll } for pid=6948 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 152.898921][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.253'. [ 152.934195][ T30] audit: type=1400 audit(1744797590.795:399): avc: denied { read } for pid=6948 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.083635][ T5829] Bluetooth: hci4: command tx timeout [ 153.083800][ T30] audit: type=1400 audit(1744797590.865:400): avc: denied { ioctl } for pid=6949 comm="syz.2.252" path="socket:[11803]" dev="sockfs" ino=11803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.113912][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.523530][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.535448][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.546748][ T1141] bond0 (unregistering): Released all slaves [ 153.648851][ T6909] chnl_net:caif_netlink_parms(): no params data found [ 154.871148][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.882189][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.889392][ T6909] bridge_slave_0: entered allmulticast mode [ 154.955259][ T6992] SELinux: syz.4.260 (6992) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.162017][ T5829] Bluetooth: hci4: command tx timeout [ 155.339992][ T6909] bridge_slave_0: entered promiscuous mode [ 156.755806][ T30] audit: type=1400 audit(1744797594.605:401): avc: denied { write } for pid=6999 comm="syz.4.264" name="file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.050209][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.071864][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.079090][ T6909] bridge_slave_1: entered allmulticast mode [ 157.115063][ T6909] bridge_slave_1: entered promiscuous mode [ 157.174213][ T1141] hsr_slave_0: left promiscuous mode [ 157.243846][ T5829] Bluetooth: hci4: command tx timeout [ 157.404342][ T5914] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 157.626638][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 157.700176][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 157.797141][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.894416][ T5914] usb 2-1: Product: syz [ 157.938726][ T5914] usb 2-1: Manufacturer: syz [ 157.988204][ T5914] usb 2-1: SerialNumber: syz [ 158.041651][ T5914] usb 2-1: config 0 descriptor?? [ 158.211016][ T1141] hsr_slave_1: left promiscuous mode [ 158.258634][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.290807][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.300891][ T5914] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 158.311673][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.328833][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.487520][ T1141] veth1_macvtap: left promiscuous mode [ 158.500882][ T1141] veth0_macvtap: left promiscuous mode [ 158.524821][ T1141] veth1_vlan: left promiscuous mode [ 158.531359][ T1141] veth0_vlan: left promiscuous mode [ 159.083148][ T973] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.262121][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 159.270067][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.307825][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 159.322057][ T5829] Bluetooth: hci4: command tx timeout [ 159.325177][ T973] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 159.353384][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.385518][ T973] usb 5-1: config 0 descriptor?? [ 159.692635][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 159.737751][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 159.836530][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x6 [ 159.856434][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 159.887744][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 159.903405][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 159.935952][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 159.951067][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 159.986921][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.001284][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.025621][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.058186][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.077091][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.084837][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.092530][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.099448][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.106910][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.119300][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.131830][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.144756][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.153039][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.159941][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.169506][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.177610][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.185785][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.193070][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.200349][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.207856][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.215142][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.222530][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.229503][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.236754][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.244210][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.251167][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.258291][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.265454][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.272708][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.279938][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.287158][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.294399][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.304091][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.306109][ T5914] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 160.311057][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.334153][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.340158][ T5914] usb 2-1: USB disconnect, device number 12 [ 160.341156][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.358381][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.366825][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.464334][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.471551][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.480507][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.487887][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.495070][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.502390][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.509282][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.516795][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.524123][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.531193][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.538479][ T973] ortek 0003:1223:3F07.0009: unknown main item tag 0x0 [ 160.578386][ T973] ortek 0003:1223:3F07.0009: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.4-1/input0 [ 160.681894][ T973] usb 5-1: USB disconnect, device number 11 [ 161.072354][ T30] audit: type=1400 audit(1744797598.725:402): avc: denied { setopt } for pid=7037 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.437535][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.456910][ T30] audit: type=1400 audit(1744797599.305:403): avc: denied { name_bind } for pid=7046 comm="syz.1.275" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 161.527369][ T30] audit: type=1400 audit(1744797599.315:404): avc: denied { read } for pid=7046 comm="syz.1.275" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.568526][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'. [ 161.728738][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.928572][ T6909] team0: Port device team_slave_0 added [ 162.937736][ T6909] team0: Port device team_slave_1 added [ 163.176739][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.243606][ T30] audit: type=1400 audit(1744797601.105:405): avc: denied { read } for pid=7073 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 163.336910][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.363034][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.375446][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.387955][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.466570][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.568169][ T6909] hsr_slave_0: entered promiscuous mode [ 163.586469][ T6909] hsr_slave_1: entered promiscuous mode [ 163.604787][ T6909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.613528][ T6909] Cannot create hsr debugfs directory [ 164.111835][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.332029][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 164.510873][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.532104][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.602011][ T5873] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 164.630649][ T30] audit: type=1400 audit(1744797602.475:406): avc: denied { connect } for pid=7082 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.690715][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.798533][ T5873] usb 3-1: config 0 descriptor?? [ 164.854424][ T6909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.911889][ T973] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 164.931798][ T6909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.946871][ T6909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.999613][ T6909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.092446][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 165.275302][ T5873] ortek 0003:1223:3F07.000A: unknown main item tag 0x6 [ 165.301253][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.306175][ T5873] ortek 0003:1223:3F07.000A: report_id 0 is invalid [ 165.698636][ T30] audit: type=1400 audit(1744797603.255:407): avc: denied { create } for pid=7099 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 165.897108][ T5873] ortek 0003:1223:3F07.000A: item 0 2 1 8 parsing failed [ 165.907488][ T5873] ortek 0003:1223:3F07.000A: probe with driver ortek failed with error -22 [ 165.927794][ T5873] usb 3-1: USB disconnect, device number 7 [ 166.022749][ T30] audit: type=1400 audit(1744797603.875:408): avc: denied { read write } for pid=7103 comm="syz.4.291" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.052290][ T30] audit: type=1400 audit(1744797603.885:409): avc: denied { open } for pid=7103 comm="syz.4.291" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.084965][ T6909] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.102549][ T30] audit: type=1400 audit(1744797603.915:410): avc: denied { mount } for pid=7103 comm="syz.4.291" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 166.129935][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.137186][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.188749][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.195874][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.204890][ T30] audit: type=1400 audit(1744797603.945:411): avc: denied { allowed } for pid=7103 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 166.491850][ T5910] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 167.281848][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.301038][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.367448][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.371804][ T973] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.387034][ T5910] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.403510][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.421545][ T973] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 167.430448][ T5910] usb 1-1: config 0 descriptor?? [ 167.440308][ T973] usb 2-1: can't read configurations, error -71 [ 167.829557][ T30] audit: type=1400 audit(1744797605.685:412): avc: denied { mount } for pid=7120 comm="syz.1.296" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 167.915300][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.027584][ T6909] veth0_vlan: entered promiscuous mode [ 168.060074][ T6909] veth1_vlan: entered promiscuous mode [ 168.203931][ T5910] usbhid 1-1:0.0: can't add hid device: -71 [ 168.227181][ T6909] veth0_macvtap: entered promiscuous mode [ 168.236562][ T6909] veth1_macvtap: entered promiscuous mode [ 168.245015][ T5910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 168.251416][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.272104][ T30] audit: type=1400 audit(1744797606.135:413): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 168.292436][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.756491][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.780212][ T5910] usb 1-1: USB disconnect, device number 14 [ 168.790105][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.800054][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.822650][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.833847][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.848117][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.858448][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.868999][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.988522][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.007095][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.018469][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.031856][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.054857][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.085609][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.096406][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.106423][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.116916][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.170018][ T6909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.182063][ T6909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.254376][ T30] audit: type=1400 audit(1744797607.025:414): avc: denied { map } for pid=7143 comm="syz.4.300" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.326427][ T30] audit: type=1400 audit(1744797607.025:415): avc: denied { execute } for pid=7143 comm="syz.4.300" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.372913][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.416810][ T6909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.432128][ T6909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.453985][ T6909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.487117][ T6909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.456592][ T7164] netlink: 72 bytes leftover after parsing attributes in process `syz.4.307'. [ 171.115220][ T30] audit: type=1400 audit(1744797608.965:416): avc: denied { setopt } for pid=7163 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.219967][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.258522][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.490467][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.521497][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.682722][ T973] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 171.762232][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.841784][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 171.858080][ T973] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 171.876060][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.884987][ T973] usb 2-1: Product: syz [ 171.889192][ T973] usb 2-1: Manufacturer: syz [ 171.893908][ T973] usb 2-1: SerialNumber: syz [ 171.910731][ T973] usb 2-1: config 0 descriptor?? [ 171.911790][ T5873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.941894][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 172.094275][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.116652][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.144035][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.180711][ T5873] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.200245][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.209392][ T24] usb 5-1: config 0 has an invalid interface number: 241 but max is 0 [ 172.217819][ T24] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 172.224363][ T5873] usb 3-1: config 0 descriptor?? [ 172.228572][ T24] usb 5-1: config 0 has no interface number 0 [ 172.243966][ T24] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=cc.94 [ 172.255854][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.264838][ T24] usb 5-1: Product: syz [ 172.269052][ T24] usb 5-1: Manufacturer: syz [ 172.273796][ T24] usb 5-1: SerialNumber: syz [ 172.282802][ T24] usb 5-1: config 0 descriptor?? [ 172.398522][ T973] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 172.409902][ T973] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 172.420725][ T5137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.429802][ T973] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 172.436783][ T5137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.445533][ T5137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.455564][ T5137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.463161][ T5137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.543380][ T973] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 172.610137][ T7172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.641378][ T973] usb 2-1: USB disconnect, device number 15 [ 172.688972][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 172.695861][ T5873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.716455][ T5873] usb 3-1: USB disconnect, device number 8 [ 172.864637][ T30] audit: type=1400 audit(1744797610.725:417): avc: denied { setopt } for pid=7173 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.889452][ T7191] chnl_net:caif_netlink_parms(): no params data found [ 172.981472][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.988780][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.996087][ T7191] bridge_slave_0: entered allmulticast mode [ 173.007544][ T7191] bridge_slave_0: entered promiscuous mode [ 173.016062][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.023926][ T5914] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 173.031574][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.039688][ T7191] bridge_slave_1: entered allmulticast mode [ 173.046710][ T7191] bridge_slave_1: entered promiscuous mode [ 173.072922][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.084864][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.119338][ T7191] team0: Port device team_slave_0 added [ 173.128017][ T7191] team0: Port device team_slave_1 added [ 173.184044][ T5914] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.198270][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.205647][ T5914] usb 1-1: config 0 has no interface number 0 [ 173.215472][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.243056][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.260994][ T5914] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 173.275548][ T7191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.286313][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 173.303227][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.310244][ T5914] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 173.321680][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.349118][ T5914] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 173.360045][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.373216][ T7191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.383827][ T5914] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 173.393035][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.403996][ T5914] usb 1-1: config 0 descriptor?? [ 173.409873][ T7195] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.417304][ T7195] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.436800][ T5914] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 173.437462][ T7205] : entered promiscuous mode [ 173.454527][ T5871] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 173.496934][ T7191] hsr_slave_0: entered promiscuous mode [ 173.506726][ T7191] hsr_slave_1: entered promiscuous mode [ 173.522727][ T7191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.543228][ T7191] Cannot create hsr debugfs directory [ 173.566698][ T30] audit: type=1400 audit(1744797611.425:418): avc: denied { read } for pid=7206 comm="syz.2.317" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 173.593960][ T30] audit: type=1400 audit(1744797611.445:419): avc: denied { open } for pid=7206 comm="syz.2.317" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 173.643578][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 173.652022][ T5871] usb 2-1: config 0 has no interface number 0 [ 173.682255][ T5871] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.701609][ T5914] usb 1-1: USB disconnect, device number 15 [ 173.706333][ T5871] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.718342][ T30] audit: type=1400 audit(1744797611.565:420): avc: denied { setattr } for pid=7206 comm="syz.2.317" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.783523][ T5871] usb 2-1: config 0 interface 2 has no altsetting 0 [ 173.785345][ T5914] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 173.795079][ T5871] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 173.854937][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.900640][ T5871] usb 2-1: config 0 descriptor?? [ 174.145087][ T7191] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.210987][ T7191] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.293584][ T7191] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.389717][ T7214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.523042][ T5137] Bluetooth: hci4: command tx timeout [ 174.694645][ T24] usb 5-1: USB disconnect, device number 12 [ 174.700872][ T5871] usb 2-1: USB disconnect, device number 16 [ 174.767201][ T7191] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.353281][ T7191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.414659][ T7191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.474625][ T7191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.516868][ T7191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.638559][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.659733][ T7191] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.674117][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.681325][ T4903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.713138][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.720325][ T4903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.786299][ T7191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.809244][ T7191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.254370][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.308279][ T7191] veth0_vlan: entered promiscuous mode [ 176.345453][ T7191] veth1_vlan: entered promiscuous mode [ 176.555022][ T5914] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 176.601885][ T5137] Bluetooth: hci4: command tx timeout [ 176.699066][ T7191] veth0_macvtap: entered promiscuous mode [ 176.851705][ T7191] veth1_macvtap: entered promiscuous mode [ 177.201160][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.252496][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.287109][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.314646][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.331365][ T5914] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.349080][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.358263][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.374816][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.388801][ T5914] usb 2-1: config 0 descriptor?? [ 177.397520][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.419455][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.436797][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.449543][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.474426][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.486830][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.498348][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.512720][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.523534][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.536027][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.554635][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.565702][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.575547][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.586023][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.596001][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.607281][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.618192][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.628813][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.641238][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.652852][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.663320][ T30] audit: type=1400 audit(1744797615.525:421): avc: denied { read write } for pid=7246 comm="syz.4.329" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 177.663973][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.698966][ T5910] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 177.723476][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.723855][ T7247] 9pnet_fd: Insufficient options for proto=fd [ 177.734615][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.761964][ T30] audit: type=1400 audit(1744797615.525:422): avc: denied { open } for pid=7246 comm="syz.4.329" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 177.813367][ T7191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.823175][ T7191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.833554][ T7191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.842968][ T7191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.862337][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 177.869679][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 177.905325][ T5914] usb 2-1: USB disconnect, device number 17 [ 177.917568][ T5910] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 177.926834][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.961158][ T5910] usb 3-1: config 0 descriptor?? [ 177.998885][ T5910] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 178.006655][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.018540][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.040249][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.049608][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.051880][ T973] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 178.191648][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.200422][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.223531][ T973] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.231645][ T973] usb 1-1: config 0 has no interface number 0 [ 178.238299][ T5871] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 178.246071][ T973] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.257219][ T973] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.267071][ T973] usb 1-1: config 0 interface 2 has no altsetting 0 [ 178.273967][ T973] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 178.283555][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.294784][ T973] usb 1-1: config 0 descriptor?? [ 178.421875][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 178.434386][ T5871] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 178.442980][ T5871] usb 5-1: config 0 has no interface number 0 [ 178.450815][ T5871] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 178.460177][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.468848][ T5871] usb 5-1: Product: syz [ 178.473334][ T5871] usb 5-1: Manufacturer: syz [ 178.477986][ T5871] usb 5-1: SerialNumber: syz [ 178.484592][ T5871] usb 5-1: config 0 descriptor?? [ 178.525991][ T5910] gspca_sonixj: reg_w1 err -110 [ 178.530992][ T5910] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 178.661809][ T5914] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 178.696173][ T5871] usb 5-1: USB disconnect, device number 13 [ 178.841952][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 178.894181][ T7256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.923047][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.951575][ T5914] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 178.960924][ T5914] usb 2-1: config 0 has no interface number 0 [ 178.968399][ T5914] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 179.077657][ T5914] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 179.089489][ T5914] usb 2-1: config 0 interface 88 has no altsetting 0 [ 179.100929][ T5914] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 179.110193][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 179.132873][ T5914] usb 2-1: Product: syz [ 179.137071][ T5914] usb 2-1: Manufacturer: ᠌ [ 179.141696][ T5914] usb 2-1: SerialNumber: 垫∍ު姏ጮﴦ炵马簮൞䐶⑉ค툸맕죬墐㍰畀풆퐙្얏ᢋ㚾⪲ᰳ胦艂⅜毹䲈둀ㅪ繚ഃॐ鎰ୃ䂁勞셿シ큣Ṯゼ흧๜弨菘繡䇐ਿ쉴뇣꿆豢怵厔禽ɚ뗜ऋ㝰 [ 179.245833][ T5914] usb 2-1: config 0 descriptor?? [ 179.289599][ T24] usb 1-1: USB disconnect, device number 16 [ 179.461691][ T5914] input: ᠌ syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input10 [ 179.481562][ T5914] usb 2-1: USB disconnect, device number 18 [ 179.782228][ T24] usb 3-1: USB disconnect, device number 9 [ 180.051803][ T5914] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.686042][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 180.688281][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 180.692169][ T5137] Bluetooth: hci0: command 0x0406 tx timeout [ 180.704186][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 180.827282][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.848522][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.857604][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.867184][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.876075][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.882143][ T30] audit: type=1400 audit(1744797618.735:423): avc: denied { bind } for pid=7267 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.918203][ T7271] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 180.928343][ T30] audit: type=1400 audit(1744797618.765:424): avc: denied { setopt } for pid=7267 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.983042][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 181.001832][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.322378][ T5910] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 181.331129][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 181.893697][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.911394][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.923101][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.928476][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.961813][ T5914] usb 5-1: config 0 descriptor?? [ 181.975769][ T5914] hub 5-1:0.0: USB hub found [ 181.979570][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.042486][ T5910] usb 2-1: device descriptor read/64, error -32 [ 182.061017][ T7287] FAULT_INJECTION: forcing a failure. [ 182.061017][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 182.086108][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.0.340 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 182.086138][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.086147][ T7287] Call Trace: [ 182.086153][ T7287] [ 182.086159][ T7287] dump_stack_lvl+0x16c/0x1f0 [ 182.086187][ T7287] should_fail_ex+0x512/0x640 [ 182.086209][ T7287] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 182.086230][ T7287] should_failslab+0xc2/0x120 [ 182.086248][ T7287] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 182.086265][ T7287] ? __alloc_skb+0x2b2/0x380 [ 182.086289][ T7287] __alloc_skb+0x2b2/0x380 [ 182.086307][ T7287] ? __pfx___alloc_skb+0x10/0x10 [ 182.086329][ T7287] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 182.086356][ T7287] netlink_alloc_large_skb+0x69/0x130 [ 182.086380][ T7287] netlink_sendmsg+0x6a1/0xdd0 [ 182.086406][ T7287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.086438][ T7287] ____sys_sendmsg+0xa95/0xc70 [ 182.086463][ T7287] ? copy_msghdr_from_user+0x10a/0x160 [ 182.086483][ T7287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.086519][ T7287] ___sys_sendmsg+0x134/0x1d0 [ 182.086540][ T7287] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.086590][ T7287] __sys_sendmsg+0x16d/0x220 [ 182.086611][ T7287] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.086638][ T7287] ? rcu_is_watching+0x12/0xc0 [ 182.086666][ T7287] do_syscall_64+0xcd/0x260 [ 182.086691][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.086707][ T7287] RIP: 0033:0x7fe18ff8e169 [ 182.086721][ T7287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.086736][ T7287] RSP: 002b:00007fe190e65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.086752][ T7287] RAX: ffffffffffffffda RBX: 00007fe1901b5fa0 RCX: 00007fe18ff8e169 [ 182.086763][ T7287] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 182.086772][ T7287] RBP: 00007fe190e65090 R08: 0000000000000000 R09: 0000000000000000 [ 182.086782][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.086792][ T7287] R13: 0000000000000000 R14: 00007fe1901b5fa0 R15: 00007ffcfdc0b548 [ 182.086814][ T7287] [ 182.402252][ T5914] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 182.556811][ T5910] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 182.584409][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 182.660016][ T7297] SELinux: syz.2.341 (7297) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 182.922760][ T5830] Bluetooth: hci4: command tx timeout [ 183.133968][ T5873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 183.171344][ T5914] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 183.224558][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.232103][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.239379][ T7266] bridge_slave_0: entered allmulticast mode [ 183.246818][ T7266] bridge_slave_0: entered promiscuous mode [ 183.263192][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.270538][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.279360][ T7266] bridge_slave_1: entered allmulticast mode [ 183.290156][ T7266] bridge_slave_1: entered promiscuous mode [ 183.297261][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.312323][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.351560][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.415672][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.632268][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.661405][ T5873] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.687861][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.702549][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.718391][ T5873] usb 1-1: config 0 descriptor?? [ 183.745160][ T5871] usb 5-1: USB disconnect, device number 14 [ 183.769641][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.832425][ T7266] team0: Port device team_slave_0 added [ 183.856987][ T7266] team0: Port device team_slave_1 added [ 183.905391][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.914206][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.942826][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.955780][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.970387][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.005140][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.085068][ T7266] hsr_slave_0: entered promiscuous mode [ 184.094630][ T7266] hsr_slave_1: entered promiscuous mode [ 184.171872][ T7315] SELinux: syz.1.345 (7315) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 184.536318][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 184.544420][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 184.565673][ T7266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.575130][ T5873] usb 1-1: USB disconnect, device number 17 [ 184.595609][ T7266] Cannot create hsr debugfs directory [ 184.932502][ T30] audit: type=1400 audit(1744797622.785:425): avc: denied { write } for pid=7322 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 185.040747][ T7329] SELinux: syz.4.347 (7329) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 185.081854][ T5830] Bluetooth: hci4: command tx timeout [ 186.155225][ T30] audit: type=1400 audit(1744797624.015:426): avc: denied { shutdown } for pid=7373 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.209226][ T7266] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.500167][ T7266] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.571762][ T7386] SELinux: syz.4.354 (7386) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 187.133618][ T7266] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.161803][ T5830] Bluetooth: hci4: command tx timeout [ 188.070850][ T7266] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.109103][ T7397] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.152937][ T7397] IPv6: NLM_F_REPLACE set, but no existing node found! [ 188.177753][ T7399] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 188.219140][ T7399] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 188.266830][ T7399] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 188.306906][ T7399] overlayfs: conflicting options: userxattr,redirect_dir=on [ 188.341956][ T5871] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 188.355877][ T30] audit: type=1326 audit(1744797626.195:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe18ff8e169 code=0x0 [ 188.383835][ T7266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.392328][ T30] audit: type=1400 audit(1744797626.245:428): avc: denied { append } for pid=7400 comm="syz.2.361" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 188.547108][ T7266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.568435][ T30] audit: type=1400 audit(1744797626.415:429): avc: denied { accept } for pid=7398 comm="syz.0.360" path="/69/bus/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 188.615498][ T7266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.634935][ T30] audit: type=1400 audit(1744797626.475:430): avc: denied { bind } for pid=7398 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.792446][ T7266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.810061][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 188.821238][ T5871] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.854627][ T5871] usb 5-1: config 0 has no interface number 0 [ 188.860840][ T5871] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 188.871549][ T5871] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 188.886773][ T5871] usb 5-1: config 0 interface 41 has no altsetting 0 [ 188.906011][ T7408] SELinux: syz.2.362 (7408) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.947496][ T7266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.970522][ T5871] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.995483][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.116732][ T5871] usb 5-1: Product: syz [ 189.127326][ T5871] usb 5-1: Manufacturer: syz [ 189.137225][ T5871] usb 5-1: SerialNumber: syz [ 189.145494][ T7266] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.158146][ T5871] usb 5-1: config 0 descriptor?? [ 189.169933][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.174441][ T7395] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.177071][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.187176][ T5871] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 189.208398][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.215856][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.241976][ T5830] Bluetooth: hci4: command tx timeout [ 189.461923][ T5910] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 189.743012][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.747171][ T7266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.754269][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.781778][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.863560][ T5910] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.883869][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.898991][ T5910] usb 1-1: config 0 descriptor?? [ 190.226725][ T7266] veth0_vlan: entered promiscuous mode [ 190.645195][ T7266] veth1_vlan: entered promiscuous mode [ 190.785796][ T5910] usbhid 1-1:0.0: can't add hid device: -71 [ 190.808805][ T5910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 190.834052][ T5910] usb 1-1: USB disconnect, device number 18 [ 190.968287][ T7266] veth0_macvtap: entered promiscuous mode [ 191.003107][ T7266] veth1_macvtap: entered promiscuous mode [ 191.038567][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.049417][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.060368][ T5910] usb 5-1: USB disconnect, device number 15 [ 191.077739][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.139504][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.161179][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.183274][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.243416][ T9] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 191.361537][ T7440] SELinux: syz.2.368 (7440) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 192.118843][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.129458][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.139432][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.149912][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.160892][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.178527][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.206978][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.217952][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.229485][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.339052][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 192.347501][ T9] usb 2-1: config 0 has no interface number 0 [ 192.464609][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.538531][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.554212][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.374'. [ 192.572394][ T30] audit: type=1400 audit(1744797630.415:431): avc: denied { create } for pid=7451 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 192.603803][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 192.701581][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.711750][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 192.723685][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.736565][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.746624][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 192.770574][ T30] audit: type=1400 audit(1744797630.625:432): avc: denied { create } for pid=7447 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 192.803476][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.813994][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 192.825028][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.835032][ T30] audit: type=1400 audit(1744797630.685:433): avc: denied { create } for pid=7447 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 192.855547][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.868876][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.879435][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 192.888737][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.899649][ T30] audit: type=1400 audit(1744797630.685:434): avc: denied { write } for pid=7447 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 192.919567][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.927755][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.940719][ T9] usb 2-1: config 0 descriptor?? [ 192.946028][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.956606][ T7432] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.964080][ T7432] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.971436][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.982511][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.995374][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 193.004933][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.018418][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.029940][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.202583][ T7266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.211333][ T7266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.448198][ T7266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.475621][ T7266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.818171][ T5879] usb 2-1: USB disconnect, device number 21 [ 193.834525][ T5879] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 193.980600][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.983186][ T30] audit: type=1400 audit(1744797631.835:435): avc: denied { create } for pid=7469 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 193.987025][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.049008][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.068094][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.100593][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.130356][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.159929][ T7474] program syz.2.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.691959][ T5879] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 194.972230][ T973] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 194.993306][ T5879] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 195.001547][ T5879] usb 2-1: config 0 has no interface number 0 [ 195.014668][ T5879] usb 2-1: config 0 interface 113 has no altsetting 0 [ 195.026601][ T5879] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 195.145589][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.159720][ T5879] usb 2-1: Product: syz [ 195.166548][ T5879] usb 2-1: Manufacturer: syz [ 195.171171][ T5879] usb 2-1: SerialNumber: syz [ 195.178481][ T5879] usb 2-1: config 0 descriptor?? [ 195.471926][ T5914] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 195.699068][ T973] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 195.708817][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.719980][ T973] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 195.733080][ T973] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 195.741124][ T973] usb 1-1: Manufacturer: syz [ 195.747797][ T973] usb 1-1: config 0 descriptor?? [ 195.755679][ T973] igorplugusb 1-1:0.0: endpoint incorrect [ 195.923083][ T5914] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 195.932938][ T5914] usb 3-1: config 0 has no interface number 0 [ 195.939071][ T5914] usb 3-1: config 0 interface 113 has no altsetting 0 [ 195.975988][ T9] usb 1-1: USB disconnect, device number 19 [ 196.016172][ T5914] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 196.031061][ T7495] xt_hashlimit: size too large, truncated to 1048576 [ 196.042075][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.051821][ T30] audit: type=1400 audit(1744797633.885:436): avc: denied { create } for pid=7493 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.060727][ T5914] usb 3-1: Product: syz [ 196.414435][ T5914] usb 3-1: Manufacturer: syz [ 196.481059][ T5914] usb 3-1: SerialNumber: syz [ 196.498003][ T7495] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.525489][ T5914] usb 3-1: config 0 descriptor?? [ 198.747952][ C1] usb 2-1: NFC: Urb failure (status -71) [ 198.766475][ C1] usb 2-1: NFC: Urb failure (status -71) [ 198.789675][ T5879] usb 2-1: NFC: Unable to get FW version [ 198.805814][ C0] usb 3-1: NFC: Urb failure (status -71) [ 198.814053][ C0] usb 3-1: NFC: Urb failure (status -71) [ 198.823442][ T5914] usb 3-1: NFC: Unable to get FW version [ 198.847482][ T5914] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -71 [ 198.856060][ T5879] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -71 [ 198.887965][ T5879] usb 2-1: USB disconnect, device number 22 [ 198.913938][ T5914] usb 3-1: USB disconnect, device number 10 [ 199.025508][ T30] audit: type=1400 audit(1744797636.885:437): avc: denied { write } for pid=7509 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 199.172205][ T30] audit: type=1400 audit(1744797636.885:438): avc: denied { nlmsg_read } for pid=7509 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 199.294302][ T30] audit: type=1400 audit(1744797637.155:439): avc: denied { ioctl } for pid=7520 comm="syz.4.390" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 199.401435][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.411116][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.754969][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.769307][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.783872][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.918343][ T7529] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 199.984860][ T7530] kernel profiling enabled (shift: 63) [ 200.021948][ T7530] profiling shift: 63 too large [ 200.701310][ T7544] netlink: 72 bytes leftover after parsing attributes in process `syz.1.395'. [ 200.802046][ T7524] chnl_net:caif_netlink_parms(): no params data found [ 201.171839][ T5914] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 201.393773][ T7553] FAULT_INJECTION: forcing a failure. [ 201.393773][ T7553] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.408096][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.4.398 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 201.408123][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.408135][ T7553] Call Trace: [ 201.408141][ T7553] [ 201.408149][ T7553] dump_stack_lvl+0x16c/0x1f0 [ 201.408181][ T7553] should_fail_ex+0x512/0x640 [ 201.408207][ T7553] _copy_from_user+0x2e/0xd0 [ 201.408229][ T7553] memdup_user+0x6b/0xe0 [ 201.408254][ T7553] strndup_user+0x78/0xe0 [ 201.408276][ T7553] __x64_sys_mount+0x137/0x310 [ 201.408300][ T7553] ? __pfx___x64_sys_mount+0x10/0x10 [ 201.408330][ T7553] do_syscall_64+0xcd/0x260 [ 201.408359][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.408379][ T7553] RIP: 0033:0x7f969a58e169 [ 201.408395][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.408414][ T7553] RSP: 002b:00007f969b46e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.408434][ T7553] RAX: ffffffffffffffda RBX: 00007f969a7b5fa0 RCX: 00007f969a58e169 [ 201.408446][ T7553] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 201.408458][ T7553] RBP: 00007f969b46e090 R08: 0000200000000400 R09: 0000000000000000 [ 201.408469][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.408480][ T7553] R13: 0000000000000000 R14: 00007f969a7b5fa0 R15: 00007ffe40ffd768 [ 201.408506][ T7553] [ 201.668803][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.699050][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.725496][ T7524] bridge_slave_0: entered allmulticast mode [ 201.733421][ T7524] bridge_slave_0: entered promiscuous mode [ 201.741415][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.749140][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.757469][ T5914] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 201.765743][ T5914] usb 2-1: config 0 has no interface number 0 [ 201.772291][ T7524] bridge_slave_1: entered allmulticast mode [ 201.779619][ T7524] bridge_slave_1: entered promiscuous mode [ 201.785712][ T5914] usb 2-1: config 0 interface 113 has no altsetting 0 [ 201.883012][ T7562] overlayfs: missing 'workdir' [ 201.972999][ T5829] Bluetooth: hci4: command tx timeout [ 202.563974][ T5914] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 202.600318][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.656746][ T30] audit: type=1400 audit(1744797640.515:440): avc: denied { execute } for pid=7556 comm="syz.2.400" path="/86/file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.671860][ T5914] usb 2-1: Product: syz [ 202.700779][ T7524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.709939][ T5914] usb 2-1: Manufacturer: syz [ 202.716357][ T5914] usb 2-1: SerialNumber: syz [ 202.718531][ T30] audit: type=1804 audit(1744797640.515:441): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.400" name="/newroot/86/file0" dev="tmpfs" ino=465 res=1 errno=0 [ 202.734395][ T5914] usb 2-1: config 0 descriptor?? [ 202.771560][ T7524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.974025][ T7524] team0: Port device team_slave_0 added [ 203.037155][ T7568] SELinux: syz.4.401 (7568) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 203.473528][ T7524] team0: Port device team_slave_1 added [ 203.607622][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.617582][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.671855][ T7524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.783984][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.790951][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.866474][ T7524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.033039][ T7524] hsr_slave_0: entered promiscuous mode [ 204.042093][ T5829] Bluetooth: hci4: command tx timeout [ 204.055368][ T7524] hsr_slave_1: entered promiscuous mode [ 204.072970][ T7524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.080927][ T7524] Cannot create hsr debugfs directory [ 204.503974][ T30] audit: type=1400 audit(1744797642.365:442): avc: denied { connect } for pid=7593 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.794301][ C0] usb 2-1: NFC: Urb failure (status -71) [ 204.835053][ C0] usb 2-1: NFC: Urb failure (status -71) [ 204.853661][ T5914] usb 2-1: NFC: Unable to get FW version [ 204.868813][ T5914] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -71 [ 204.897774][ T7524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.925704][ T5914] usb 2-1: USB disconnect, device number 23 [ 204.944652][ T5820] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 205.224709][ T6438] udevd[6438]: failed to send result of seq 14757 to main daemon: Connection refused [ 205.366419][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 205.390482][ T7524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.390554][ T5820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.066839][ T5820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.076846][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.084106][ T5820] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 206.087471][ T7612] overlayfs: missing 'workdir' [ 206.093232][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.105414][ T5820] usb 1-1: config 0 descriptor?? [ 206.125506][ T5829] Bluetooth: hci4: command tx timeout [ 206.165504][ T7524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.297815][ T7524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.650314][ T5820] cougar 0003:060B:500A.000E: unexpected long global item [ 206.673096][ T5820] cougar 0003:060B:500A.000E: parse failed [ 206.679025][ T5820] cougar 0003:060B:500A.000E: probe with driver cougar failed with error -22 [ 206.871967][ T7524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.985620][ T5872] usb 1-1: USB disconnect, device number 20 [ 207.078322][ T7524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.188805][ T7524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.218689][ T7524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.396429][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.842477][ T5914] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 207.859020][ T7524] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.877257][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.884372][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.918146][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.925317][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.989641][ T7524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.023076][ T5914] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 208.040381][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.074315][ T5914] usb 2-1: config 0 descriptor?? [ 208.086231][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 208.103803][ T5914] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 208.182042][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 208.202858][ T5829] Bluetooth: hci4: command tx timeout [ 208.343946][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.376936][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.482220][ T5879] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 208.507736][ T5914] gspca_sonixj: reg_w1 err -71 [ 208.516028][ T5914] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 208.519673][ T7524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.560039][ T5914] usb 2-1: USB disconnect, device number 24 [ 208.605769][ T7524] veth0_vlan: entered promiscuous mode [ 208.625320][ T7524] veth1_vlan: entered promiscuous mode [ 208.661816][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 208.671279][ T5879] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 208.693847][ T5879] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 208.698111][ T7524] veth0_macvtap: entered promiscuous mode [ 208.724363][ T5879] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.729298][ T7524] veth1_macvtap: entered promiscuous mode [ 208.739371][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 208.758729][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.769296][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 208.769324][ T5879] usb 5-1: Product: syz [ 208.769337][ T5879] usb 5-1: Manufacturer: syz [ 208.769350][ T5879] usb 5-1: SerialNumber: syz [ 208.792208][ T5879] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 208.793062][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.937665][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.988789][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.006616][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.017671][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.027857][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.043889][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.056253][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.067765][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.078777][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.092406][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.102571][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.113063][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.122982][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.135453][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.193737][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.210880][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.229802][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.241308][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.253375][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.268905][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.279587][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.299092][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.310363][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.352063][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.372005][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.391880][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.433222][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.443514][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.454109][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.464932][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.475531][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.489501][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.506552][ T5910] usb 5-1: USB disconnect, device number 16 [ 209.514175][ T7524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.534903][ T7524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.563830][ T7524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.584316][ T30] audit: type=1400 audit(1744797647.445:443): avc: denied { bind } for pid=7673 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.644526][ T30] audit: type=1400 audit(1744797647.475:444): avc: denied { write } for pid=7673 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.793280][ T7679] overlayfs: missing 'workdir' [ 209.927804][ T7524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.592192][ T7684] overlayfs: missing 'lowerdir' [ 211.083302][ T5910] appletouch 5-1:1.0: input: appletouch disconnected [ 211.389384][ T7362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.408205][ T7362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.450450][ T7347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.470493][ T7347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.231001][ T30] audit: type=1400 audit(1744797650.085:445): avc: denied { mounton } for pid=7524 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 212.280204][ T7703] SELinux: syz.1.429 (7703) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 212.611801][ T5872] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.851828][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 212.932982][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.977341][ T5872] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 213.059824][ T5872] usb 3-1: config 1 interface 0 altsetting 158 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.151937][ T5872] usb 3-1: config 1 interface 0 altsetting 158 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 213.175166][ T5872] usb 3-1: config 1 interface 0 altsetting 158 bulk endpoint 0x8F has invalid maxpacket 1024 [ 213.202580][ T5872] usb 3-1: config 1 interface 0 altsetting 158 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.237945][ T5872] usb 3-1: config 1 interface 0 has no altsetting 0 [ 213.273876][ T5872] usb 3-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.40 [ 213.300515][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.315926][ T5872] usb 3-1: Product: syz [ 213.325845][ T5872] usb 3-1: Manufacturer: syz [ 213.330628][ T5872] usb 3-1: SerialNumber: syz [ 213.338787][ T7706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.511227][ T30] audit: type=1400 audit(1744797652.365:446): avc: denied { relabelfrom } for pid=7712 comm="syz.0.433" name="" dev="pipefs" ino=17438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 214.533504][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.912000][ T973] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 215.073012][ T973] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 215.081269][ T973] usb 2-1: config 0 has no interface number 0 [ 215.091015][ T973] usb 2-1: config 0 interface 113 has no altsetting 0 [ 215.101341][ T973] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 215.110643][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.118719][ T973] usb 2-1: Product: syz [ 215.123575][ T973] usb 2-1: Manufacturer: syz [ 215.128165][ T973] usb 2-1: SerialNumber: syz [ 215.136680][ T973] usb 2-1: config 0 descriptor?? [ 215.389911][ T5872] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 215.636150][ T5872] usb 3-1: USB disconnect, device number 11 [ 215.739185][ T7745] netlink: 80 bytes leftover after parsing attributes in process `syz.2.442'. [ 215.894952][ T7750] FAULT_INJECTION: forcing a failure. [ 215.894952][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.908271][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.2.444 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 215.908294][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.908302][ T7750] Call Trace: [ 215.908308][ T7750] [ 215.908314][ T7750] dump_stack_lvl+0x16c/0x1f0 [ 215.908346][ T7750] should_fail_ex+0x512/0x640 [ 215.908368][ T7750] _copy_from_user+0x2e/0xd0 [ 215.908389][ T7750] memdup_user+0x6b/0xe0 [ 215.908409][ T7750] strndup_user+0x78/0xe0 [ 215.908429][ T7750] __x64_sys_mount+0x137/0x310 [ 215.908449][ T7750] ? __pfx___x64_sys_mount+0x10/0x10 [ 215.908476][ T7750] do_syscall_64+0xcd/0x260 [ 215.908502][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.908519][ T7750] RIP: 0033:0x7f1e4bd8e169 [ 215.908533][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.908548][ T7750] RSP: 002b:00007f1e4cb72038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.908571][ T7750] RAX: ffffffffffffffda RBX: 00007f1e4bfb6080 RCX: 00007f1e4bd8e169 [ 215.908582][ T7750] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 215.908592][ T7750] RBP: 00007f1e4cb72090 R08: 0000200000000400 R09: 0000000000000000 [ 215.908602][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.908612][ T7750] R13: 0000000000000000 R14: 00007f1e4bfb6080 R15: 00007ffe04d212c8 [ 215.908635][ T7750] [ 216.061745][ T5829] Bluetooth: hci1: hardware error 0x00 [ 216.132112][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 216.303024][ T24] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 216.328844][ T24] usb 1-1: config 0 has no interface number 0 [ 216.350312][ T24] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 216.386279][ T24] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 216.428427][ T24] usb 1-1: config 0 interface 48 has no altsetting 0 [ 216.455597][ T24] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=31.44 [ 216.475159][ T24] usb 1-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 216.498335][ T24] usb 1-1: Product: syz [ 216.575520][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.588997][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.598227][ T24] usb 1-1: config 0 descriptor?? [ 216.603479][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.613051][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.621482][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.696436][ T7754] capability: warning: `syz.4.446' uses deprecated v2 capabilities in a way that may be insecure [ 216.869526][ T24] usb 1-1: USB disconnect, device number 21 [ 216.981578][ T53] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 217.006009][ T7751] chnl_net:caif_netlink_parms(): no params data found [ 217.886472][ C1] usb 2-1: NFC: Urb failure (status -71) [ 217.897857][ C1] usb 2-1: NFC: Urb failure (status -71) [ 217.907896][ T973] usb 2-1: NFC: Unable to get FW version [ 217.921214][ T973] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -71 [ 217.974445][ T5914] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 217.975452][ T973] usb 2-1: USB disconnect, device number 25 [ 218.309440][ T5914] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 218.331409][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.362493][ T5829] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 218.441597][ T5914] usb 5-1: config 0 descriptor?? [ 218.450762][ T5914] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 218.461257][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.590339][ T5820] Process accounting resumed [ 218.642251][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.660063][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.732642][ T5829] Bluetooth: hci4: command tx timeout [ 218.745965][ T7751] bridge_slave_0: entered allmulticast mode [ 218.755266][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.851293][ T7751] bridge_slave_0: entered promiscuous mode [ 218.884487][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.928769][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.945644][ T7751] bridge_slave_1: entered allmulticast mode [ 218.962165][ T5914] gspca_sonixj: reg_w1 err -110 [ 218.967752][ T7751] bridge_slave_1: entered promiscuous mode [ 218.975217][ T5914] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 219.029317][ T5914] usb 5-1: USB disconnect, device number 17 [ 219.064972][ T7751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.085915][ T7751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.151154][ T7751] team0: Port device team_slave_0 added [ 219.170059][ T7751] team0: Port device team_slave_1 added [ 219.281613][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.281633][ T7788] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 219.307026][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.346125][ T7793] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 219.356054][ T7793] netlink: 2 bytes leftover after parsing attributes in process `syz.0.454'. [ 219.368327][ T7751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.386368][ T7788] batman_adv: batadv0: Adding interface: team0 [ 219.412064][ T7788] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.437240][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.450939][ T7788] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 219.453234][ T30] audit: type=1400 audit(1744797657.305:447): avc: denied { append } for pid=7787 comm="syz.0.454" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.484918][ T7793] team0: entered promiscuous mode [ 219.492065][ T7793] team_slave_0: entered promiscuous mode [ 219.498237][ T7793] team_slave_1: entered promiscuous mode [ 219.509078][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.516770][ T7793] batman_adv: batadv0: Interface activated: team0 [ 219.531784][ T7793] batman_adv: batadv0: Interface deactivated: team0 [ 219.606934][ T7793] batman_adv: batadv0: Removing interface: team0 [ 219.637659][ T7793] bridge0: port 3(team0) entered blocking state [ 219.666049][ T7793] bridge0: port 3(team0) entered disabled state [ 219.677576][ T7793] team0: entered allmulticast mode [ 219.684616][ T7793] team_slave_0: entered allmulticast mode [ 219.690827][ T7793] team_slave_1: entered allmulticast mode [ 219.775819][ T7793] bridge0: port 3(team0) entered blocking state [ 219.782295][ T7793] bridge0: port 3(team0) entered forwarding state [ 219.907569][ T30] audit: type=1400 audit(1744797657.735:448): avc: denied { accept } for pid=7795 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.104804][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 220.159496][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.178785][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.218865][ T7751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.383869][ T7751] hsr_slave_0: entered promiscuous mode [ 220.410518][ T7751] hsr_slave_1: entered promiscuous mode [ 220.428050][ T7751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.438926][ T7751] Cannot create hsr debugfs directory [ 220.757764][ T7814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.459'. [ 220.833051][ T5829] Bluetooth: hci4: command tx timeout [ 221.144912][ T30] audit: type=1400 audit(1744797659.005:449): avc: denied { read } for pid=7812 comm="syz.1.460" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 221.206998][ T30] audit: type=1400 audit(1744797659.025:450): avc: denied { open } for pid=7812 comm="syz.1.460" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 221.235451][ T30] audit: type=1400 audit(1744797659.035:451): avc: denied { ioctl } for pid=7812 comm="syz.1.460" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 221.448332][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 221.459516][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 221.620928][ T30] audit: type=1400 audit(1744797659.035:452): avc: denied { open } for pid=7812 comm="syz.1.460" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 221.968079][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 222.082782][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 222.094423][ T7751] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.178242][ T7828] SELinux: syz.1.462 (7828) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 222.656142][ T7831] FAULT_INJECTION: forcing a failure. [ 222.656142][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 222.686354][ T7751] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.703780][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.1.464 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 222.703808][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.703818][ T7831] Call Trace: [ 222.703824][ T7831] [ 222.703830][ T7831] dump_stack_lvl+0x16c/0x1f0 [ 222.703857][ T7831] should_fail_ex+0x512/0x640 [ 222.703874][ T7831] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 222.703895][ T7831] should_failslab+0xc2/0x120 [ 222.703912][ T7831] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 222.703930][ T7831] ? vfs_parse_fs_string+0xc3/0x150 [ 222.703951][ T7831] kmemdup_nul+0x49/0xf0 [ 222.703971][ T7831] vfs_parse_fs_string+0xc3/0x150 [ 222.703989][ T7831] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 222.704006][ T7831] ? lockdep_init_map_type+0x5c/0x280 [ 222.704025][ T7831] ? cramfs_init_fs_context+0xd/0x40 [ 222.704045][ T7831] ? alloc_fs_context+0x59b/0x9c0 [ 222.704066][ T7831] path_mount+0x675/0x1f30 [ 222.704087][ T7831] ? kmem_cache_free+0x2d4/0x4d0 [ 222.704102][ T7831] ? __pfx_path_mount+0x10/0x10 [ 222.704123][ T7831] ? putname+0x154/0x1a0 [ 222.704145][ T7831] __x64_sys_mount+0x28d/0x310 [ 222.704164][ T7831] ? __pfx___x64_sys_mount+0x10/0x10 [ 222.704179][ T7831] ? rcu_is_watching+0x12/0xc0 [ 222.704204][ T7831] do_syscall_64+0xcd/0x260 [ 222.704227][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.704242][ T7831] RIP: 0033:0x7f619718e169 [ 222.704254][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.704269][ T7831] RSP: 002b:00007f6194ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 222.704284][ T7831] RAX: ffffffffffffffda RBX: 00007f61973b5fa0 RCX: 00007f619718e169 [ 222.704295][ T7831] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000040 [ 222.704303][ T7831] RBP: 00007f6194ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.704313][ T7831] R10: 0000000002a00000 R11: 0000000000000246 R12: 0000000000000002 [ 222.704322][ T7831] R13: 0000000000000000 R14: 00007f61973b5fa0 R15: 00007fff013469a8 [ 222.704343][ T7831] [ 222.933470][ T5829] Bluetooth: hci4: command tx timeout [ 222.976334][ T7751] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.064216][ T7751] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.147410][ T7837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.394916][ T7839] overlayfs: failed to resolve './file0': -2 [ 223.493869][ T7840] FAULT_INJECTION: forcing a failure. [ 223.493869][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 223.516284][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.1.468 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 223.516312][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.516321][ T7840] Call Trace: [ 223.516326][ T7840] [ 223.516332][ T7840] dump_stack_lvl+0x16c/0x1f0 [ 223.516360][ T7840] should_fail_ex+0x512/0x640 [ 223.516378][ T7840] ? fs_reclaim_acquire+0xae/0x150 [ 223.516403][ T7840] ? tomoyo_encode2+0x100/0x3e0 [ 223.516436][ T7840] should_failslab+0xc2/0x120 [ 223.516456][ T7840] __kmalloc_noprof+0xd2/0x510 [ 223.516479][ T7840] tomoyo_encode2+0x100/0x3e0 [ 223.516505][ T7840] tomoyo_encode+0x29/0x50 [ 223.516526][ T7840] tomoyo_realpath_from_path+0x18f/0x6e0 [ 223.516552][ T7840] ? tomoyo_profile+0x47/0x60 [ 223.516570][ T7840] tomoyo_path_number_perm+0x245/0x580 [ 223.516590][ T7840] ? tomoyo_path_number_perm+0x237/0x580 [ 223.516612][ T7840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.516634][ T7840] ? find_held_lock+0x2b/0x80 [ 223.516676][ T7840] ? find_held_lock+0x2b/0x80 [ 223.516696][ T7840] ? hook_file_ioctl_common+0x145/0x410 [ 223.516718][ T7840] ? __fget_files+0x20e/0x3c0 [ 223.516739][ T7840] security_file_ioctl+0x9b/0x240 [ 223.516764][ T7840] __x64_sys_ioctl+0xb7/0x200 [ 223.516785][ T7840] do_syscall_64+0xcd/0x260 [ 223.516807][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.516821][ T7840] RIP: 0033:0x7f619718e169 [ 223.516834][ T7840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.516850][ T7840] RSP: 002b:00007f6194ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.516867][ T7840] RAX: ffffffffffffffda RBX: 00007f61973b5fa0 RCX: 00007f619718e169 [ 223.516878][ T7840] RDX: 0000200000000180 RSI: 000000004048aecb RDI: 0000000000000007 [ 223.516888][ T7840] RBP: 00007f6194ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.516898][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.516907][ T7840] R13: 0000000000000000 R14: 00007f61973b5fa0 R15: 00007fff013469a8 [ 223.516930][ T7840] [ 223.520080][ T7840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.749853][ T7751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.776990][ T7751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.780453][ T7851] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.800910][ T7751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.811863][ T7751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.247302][ T5910] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 224.355386][ T7751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.376521][ T7751] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.388485][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.395688][ T7359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.408520][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.415746][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.504633][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.531881][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.543030][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.556467][ T5910] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.581880][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.595745][ T5910] usb 1-1: config 0 descriptor?? [ 224.634951][ T7751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.768483][ T7751] veth0_vlan: entered promiscuous mode [ 224.804306][ T7751] veth1_vlan: entered promiscuous mode [ 225.018766][ T5829] Bluetooth: hci4: command tx timeout [ 225.164699][ T5910] usbhid 1-1:0.0: can't add hid device: -71 [ 225.170788][ T5910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 225.183517][ T7751] veth0_macvtap: entered promiscuous mode [ 225.193923][ T5910] usb 1-1: USB disconnect, device number 22 [ 225.204558][ T7751] veth1_macvtap: entered promiscuous mode [ 225.239705][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.266530][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.291763][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.311778][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.321642][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.361907][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.371812][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.382811][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.392773][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.404741][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.414893][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.425529][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.435470][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.446348][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.456321][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.468036][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.477982][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.488869][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.499856][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.539806][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.554094][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.567451][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.578086][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.588138][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.611650][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.621629][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.638367][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.657093][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.670249][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.682718][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.693498][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.759203][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.771516][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.781943][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.792635][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.802833][ T7751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.813495][ T7751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.824576][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.889431][ T7751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.898518][ T7751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.937066][ T7751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.956020][ T7886] overlayfs: conflicting lowerdir path [ 225.956790][ T7751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.992321][ T5820] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 226.101026][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.119581][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.163343][ T5820] usb 5-1: Using ep0 maxpacket: 16 [ 226.276549][ T5820] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 226.371891][ T5820] usb 5-1: config 0 has no interface number 0 [ 226.501784][ T5820] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.511671][ T5820] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 226.520328][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.540377][ T5820] usb 5-1: config 0 interface 41 has no altsetting 0 [ 226.548272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.570115][ T5820] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 226.591091][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.610317][ T5820] usb 5-1: Product: syz [ 226.620257][ T5820] usb 5-1: Manufacturer: syz [ 226.631800][ T5820] usb 5-1: SerialNumber: syz [ 226.644133][ T5820] usb 5-1: config 0 descriptor?? [ 226.659879][ T7883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.672012][ T5820] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 226.864384][ T7902] 9pnet_fd: Insufficient options for proto=fd [ 226.874650][ T30] audit: type=1400 audit(1744797664.735:453): avc: denied { listen } for pid=7900 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 227.381954][ T5910] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 227.552052][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 227.566868][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 227.581663][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.599117][ T5910] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.608892][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.624800][ T5910] usb 2-1: Product: syz [ 227.629104][ T5910] usb 2-1: Manufacturer: syz [ 227.636177][ T5910] usb 2-1: SerialNumber: syz [ 227.644019][ T5910] usb 2-1: config 0 descriptor?? [ 227.651958][ T5910] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.661510][ T5910] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 227.701806][ T5820] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 227.853720][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.868246][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.879827][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.897837][ T5820] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.907123][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.917541][ T5820] usb 1-1: config 0 descriptor?? [ 228.317970][ T5910] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 228.324695][ T30] audit: type=1400 audit(1744797666.185:454): avc: denied { read } for pid=7906 comm="syz.1.490" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.331313][ T5910] em28xx 2-1:0.0: Config register raw data: 0x41 [ 228.362496][ T30] audit: type=1400 audit(1744797666.185:455): avc: denied { open } for pid=7906 comm="syz.1.490" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.366937][ T5820] usbhid 1-1:0.0: can't add hid device: -71 [ 228.393360][ T5820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 228.406381][ T5820] usb 1-1: USB disconnect, device number 23 [ 228.770427][ T5820] usb 5-1: USB disconnect, device number 18 [ 229.265044][ T7926] tipc: Started in network mode [ 229.270444][ T7926] tipc: Node identity 7, cluster identity 4711 [ 229.277169][ T7926] tipc: Node number set to 7 [ 229.484156][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.499103][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.510125][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.520558][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.528338][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.370578][ T5820] usb 2-1: USB disconnect, device number 26 [ 230.388457][ T5820] em28xx 2-1:0.0: Disconnecting em28xx [ 230.424351][ T5820] em28xx 2-1:0.0: Freeing device [ 230.635934][ T30] audit: type=1400 audit(1744797668.485:456): avc: denied { connect } for pid=7945 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.682976][ T7950] netlink: 'syz.0.501': attribute type 39 has an invalid length. [ 231.376526][ T7934] chnl_net:caif_netlink_parms(): no params data found [ 231.396760][ T30] audit: type=1400 audit(1744797668.485:457): avc: denied { setopt } for pid=7945 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.415945][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.562291][ T5829] Bluetooth: hci4: command tx timeout [ 231.632163][ T5910] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 231.663347][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.671929][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.695172][ T7934] bridge_slave_0: entered allmulticast mode [ 231.703161][ T7934] bridge_slave_0: entered promiscuous mode [ 231.730234][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.747195][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.769418][ T7934] bridge_slave_1: entered allmulticast mode [ 231.782908][ T7934] bridge_slave_1: entered promiscuous mode [ 231.814269][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.831756][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.851800][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.872055][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.881309][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.892793][ T5910] usb 5-1: config 0 descriptor?? [ 231.897194][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.974465][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.992100][ T971] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 232.009830][ T30] audit: type=1400 audit(1744797669.865:458): avc: denied { setopt } for pid=7958 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.058928][ T7968] process 'syz.2.507' launched './file1' with NULL argv: empty string added [ 232.070288][ T30] audit: type=1400 audit(1744797669.925:459): avc: denied { execute_no_trans } for pid=7967 comm="syz.2.507" path="/114/file1" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.099116][ T7934] team0: Port device team_slave_0 added [ 232.111499][ T7934] team0: Port device team_slave_1 added [ 232.157441][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.166188][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.199035][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.224100][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.231179][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.257097][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.269646][ T7971] fuse: Bad value for 'rootmode' [ 232.275299][ T5872] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 232.283224][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.311791][ T971] usb 1-1: Using ep0 maxpacket: 16 [ 232.330023][ T971] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 232.339223][ T971] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 232.347498][ T971] usb 1-1: Manufacturer: syz [ 232.366577][ T971] usb 1-1: config 0 descriptor?? [ 232.380385][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 232.395799][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 232.408479][ T7934] hsr_slave_0: entered promiscuous mode [ 232.431383][ T5910] usb 5-1: USB disconnect, device number 19 [ 232.441827][ T7934] hsr_slave_1: entered promiscuous mode [ 232.460598][ T7934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.485365][ T7934] Cannot create hsr debugfs directory [ 232.488878][ T30] audit: type=1400 audit(1744797670.135:460): avc: denied { mounton } for pid=7967 comm="syz.2.507" path="/114/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 232.618870][ T7934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.636051][ T971] usb 1-1: Cannot retrieve CPort count: 0 [ 232.641859][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 232.649549][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.653732][ T971] usb 1-1: Cannot retrieve CPort count: -5 [ 232.665616][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.673071][ T971] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -5 [ 232.678882][ T5872] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 232.697557][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.707223][ T5872] usb 2-1: config 0 descriptor?? [ 232.739514][ T7934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.799469][ T7934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.846250][ T30] audit: type=1400 audit(1744797670.695:461): avc: denied { append } for pid=7963 comm="syz.0.506" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 232.855888][ T7964] 9pnet_fd: Insufficient options for proto=fd [ 232.887156][ T7934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.913001][ T971] usb 1-1: USB disconnect, device number 24 [ 232.967630][ T30] audit: type=1400 audit(1744797670.825:462): avc: denied { mount } for pid=7972 comm="syz.2.508" name="/" dev="ramfs" ino=18132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 233.108111][ T7934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.652978][ T5829] Bluetooth: hci4: command tx timeout [ 234.025002][ T7934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.076914][ T7934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.102260][ T7934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.294000][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.327254][ T7934] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.339733][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.346970][ T7359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.445018][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.452198][ T7347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.529728][ T5872] usb 2-1: string descriptor 0 read error: -71 [ 234.556704][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 234.571489][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 234.596512][ T5872] usb 2-1: USB disconnect, device number 27 [ 234.930969][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.459663][ T7934] veth0_vlan: entered promiscuous mode [ 235.484833][ T7934] veth1_vlan: entered promiscuous mode [ 235.575723][ T7934] veth0_macvtap: entered promiscuous mode [ 235.613974][ T7934] veth1_macvtap: entered promiscuous mode [ 235.692986][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.778472][ T8011] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 236.206466][ T5829] Bluetooth: hci4: command tx timeout [ 236.267832][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.296479][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.307233][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.342034][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.352656][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.362962][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.820785][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.831183][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.841641][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.859531][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.884846][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.897052][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.909401][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.926016][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.941806][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.951898][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.962473][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.972678][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.983325][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.009970][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.057041][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.072483][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.082777][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.094232][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.112113][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.122660][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.139137][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.150970][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.607018][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.618977][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.629195][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.640531][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.665828][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.676603][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.686713][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.697388][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.707401][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.725262][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.735407][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.746879][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.783471][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.899074][ T7934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.023000][ T7934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.109151][ T7934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.227285][ T7934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.396845][ T8041] [ 238.399206][ T8041] ====================================================== [ 238.406220][ T8041] WARNING: possible circular locking dependency detected [ 238.413215][ T8041] 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 Not tainted [ 238.420291][ T8041] ------------------------------------------------------ [ 238.427278][ T8041] syz.0.525/8041 is trying to acquire lock: [ 238.433215][ T8041] ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 238.442249][ T8041] [ 238.442249][ T8041] but task is already holding lock: [ 238.449586][ T8041] ffff88804a738aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 238.454542][ T5829] Bluetooth: hci4: command tx timeout [ 238.459554][ T8041] [ 238.459554][ T8041] which lock already depends on the new lock. [ 238.459554][ T8041] [ 238.459563][ T8041] [ 238.459563][ T8041] the existing dependency chain (in reverse order) is: [ 238.459569][ T8041] [ 238.459569][ T8041] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 238.493113][ T8041] __mutex_lock+0x199/0xb90 [ 238.498150][ T8041] smc_switch_to_fallback+0x2d/0x9f0 [ 238.503950][ T8041] smc_sendmsg+0x13d/0x520 [ 238.508877][ T8041] __sys_sendto+0x495/0x510 [ 238.513890][ T8041] __x64_sys_sendto+0xe0/0x1c0 [ 238.519632][ T8041] do_syscall_64+0xcd/0x260 [ 238.524664][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.531061][ T8041] [ 238.531061][ T8041] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 238.538677][ T8041] lock_sock_nested+0x41/0xf0 [ 238.543852][ T8041] sockopt_lock_sock+0x54/0x70 [ 238.549147][ T8041] do_ip_setsockopt+0xfe/0x3240 [ 238.554512][ T8041] ip_setsockopt+0x59/0xf0 [ 238.559438][ T8041] raw_setsockopt+0xb7/0x2a0 [ 238.564531][ T8041] do_sock_setsockopt+0x221/0x470 [ 238.570054][ T8041] __sys_setsockopt+0x1a0/0x230 [ 238.575400][ T8041] __x64_sys_setsockopt+0xbd/0x160 [ 238.581032][ T8041] do_syscall_64+0xcd/0x260 [ 238.586033][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.592427][ T8041] [ 238.592427][ T8041] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 238.599617][ T8041] __lock_acquire+0x1173/0x1ba0 [ 238.604982][ T8041] lock_acquire+0x179/0x350 [ 238.610106][ T8041] __mutex_lock+0x199/0xb90 [ 238.615149][ T8041] do_ip_getsockopt+0x1843/0x2220 [ 238.620710][ T8041] ip_getsockopt+0x9b/0x1e0 [ 238.625733][ T8041] tcp_getsockopt+0x9e/0x100 [ 238.630854][ T8041] smc_getsockopt+0x162/0x370 [ 238.636034][ T8041] do_sock_getsockopt+0x3fc/0x800 [ 238.641567][ T8041] __sys_getsockopt+0x12f/0x260 [ 238.646923][ T8041] __x64_sys_getsockopt+0xbd/0x160 [ 238.652539][ T8041] do_syscall_64+0xcd/0x260 [ 238.657575][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.664083][ T8041] [ 238.664083][ T8041] other info that might help us debug this: [ 238.664083][ T8041] [ 238.674370][ T8041] Chain exists of: [ 238.674370][ T8041] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 238.674370][ T8041] [ 238.688120][ T8041] Possible unsafe locking scenario: [ 238.688120][ T8041] [ 238.695578][ T8041] CPU0 CPU1 [ 238.700928][ T8041] ---- ---- [ 238.706277][ T8041] lock(&smc->clcsock_release_lock); [ 238.711633][ T8041] lock(sk_lock-AF_INET); [ 238.718554][ T8041] lock(&smc->clcsock_release_lock); [ 238.726437][ T8041] lock(rtnl_mutex); [ 238.730403][ T8041] [ 238.730403][ T8041] *** DEADLOCK *** [ 238.730403][ T8041] [ 238.738531][ T8041] 1 lock held by syz.0.525/8041: [ 238.743458][ T8041] #0: ffff88804a738aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 238.753900][ T8041] [ 238.753900][ T8041] stack backtrace: [ 238.759769][ T8041] CPU: 0 UID: 0 PID: 8041 Comm: syz.0.525 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 238.759787][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.759795][ T8041] Call Trace: [ 238.759800][ T8041] [ 238.759806][ T8041] dump_stack_lvl+0x116/0x1f0 [ 238.759826][ T8041] print_circular_bug+0x275/0x350 [ 238.759849][ T8041] check_noncircular+0x14c/0x170 [ 238.759871][ T8041] __lock_acquire+0x1173/0x1ba0 [ 238.759886][ T8041] lock_acquire+0x179/0x350 [ 238.759898][ T8041] ? do_ip_getsockopt+0x1843/0x2220 [ 238.759911][ T8041] ? __pfx___might_resched+0x10/0x10 [ 238.759932][ T8041] __mutex_lock+0x199/0xb90 [ 238.759951][ T8041] ? do_ip_getsockopt+0x1843/0x2220 [ 238.759962][ T8041] ? __might_fault+0xe3/0x190 [ 238.759975][ T8041] ? __might_fault+0xe3/0x190 [ 238.759988][ T8041] ? __might_fault+0x13b/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 238.760000][ T8041] ? do_ip_getsockopt+0x1843/0x2220 [ 238.760013][ T8041] ? __pfx___mutex_lock+0x10/0x10 [ 238.760031][ T8041] ? _copy_from_user+0x59/0xd0 [ 238.760047][ T8041] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 238.760071][ T8041] ? do_ip_getsockopt+0x1843/0x2220 [ 238.760082][ T8041] ? rtnl_lock+0x9/0x20 [ 238.760092][ T8041] do_ip_getsockopt+0x1843/0x2220 [ 238.760105][ T8041] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 238.760118][ T8041] ? register_lock_class+0x41/0x4c0 [ 238.760133][ T8041] ? __lock_acquire+0xaa4/0x1ba0 [ 238.760146][ T8041] ? __pfx_slow_avc_audit+0x10/0x10 [ 238.760161][ T8041] ? __mutex_trylock_common+0xe9/0x250 [ 238.760174][ T8041] ? __pfx___mutex_trylock_common+0x10/0x10 [ 238.760187][ T8041] ? __pfx___might_resched+0x10/0x10 [ 238.760205][ T8041] ? rcu_is_watching+0x12/0xc0 [ 238.760222][ T8041] ? trace_contention_end+0xdd/0x130 [ 238.760234][ T8041] ? __mutex_lock+0x1ca/0xb90 [ 238.760253][ T8041] ip_getsockopt+0x9b/0x1e0 [ 238.760264][ T8041] ? __pfx___mutex_lock+0x10/0x10 [ 238.760282][ T8041] ? __pfx_ip_getsockopt+0x10/0x10 [ 238.760296][ T8041] tcp_getsockopt+0x9e/0x100 [ 238.760311][ T8041] smc_getsockopt+0x162/0x370 [ 238.760323][ T8041] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 238.760343][ T8041] ? __pfx_smc_getsockopt+0x10/0x10 [ 238.760357][ T8041] ? __pfx_smc_getsockopt+0x10/0x10 [ 238.760369][ T8041] do_sock_getsockopt+0x3fc/0x800 [ 238.760390][ T8041] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 238.760408][ T8041] ? __fget_files+0x204/0x3c0 [ 238.760429][ T8041] __sys_getsockopt+0x12f/0x260 [ 238.760446][ T8041] __x64_sys_getsockopt+0xbd/0x160 [ 238.760461][ T8041] ? do_syscall_64+0x9a/0x260 [ 238.760479][ T8041] do_syscall_64+0xcd/0x260 [ 238.760498][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.760511][ T8041] RIP: 0033:0x7fe18ff8e169 [ 238.760523][ T8041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.760537][ T8041] RSP: 002b:00007fe190e44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 238.760550][ T8041] RAX: ffffffffffffffda RBX: 00007fe1901b6080 RCX: 00007fe18ff8e169 [ 238.760558][ T8041] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000008 [ 238.760566][ T8041] RBP: 00007fe190010a68 R08: 0000200000000040 R09: 0000000000000000 [ 238.760574][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.760582][ T8041] R13: 0000000000000000 R14: 00007fe1901b6080 R15: 00007ffcfdc0b548 [ 238.760594][ T8041] [ 238.760642][ T30] audit: type=1400 audit(1744797676.235:463): avc: denied { getopt } for pid=8039 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.772508][ C0] vkms_vblank_simulate: vblank timer overrun