last executing test programs: 41.547808404s ago: executing program 3 (id=964): r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x6b, 0x40, 0x0, 0x0) 41.426452601s ago: executing program 3 (id=966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r7, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000140)) 11.63027965s ago: executing program 2 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 11.418293552s ago: executing program 2 (id=1062): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x12, 0x3, [{0x1, 0xc, "838962e29795cdaf284e"}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast=0xac1414bb}}}}}}, 0x0) 11.208770253s ago: executing program 2 (id=1065): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002a00), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f00000000c0)='hpfs\x00', 0x1c443, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, 0xffffffffffffffff) getxattr(0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x2, r6, &(0x7f0000000240), 0x2, 0x0) ptrace(0x8, r6) 10.265792647s ago: executing program 2 (id=1069): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 10.1959347s ago: executing program 2 (id=1070): r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)=@chain) add_key$keyring(&(0x7f0000000240), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) 9.894152084s ago: executing program 2 (id=1072): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000800)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002b00b99f000000000000000001"], 0x114}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 8.036898898s ago: executing program 1 (id=1080): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 7.060010001s ago: executing program 1 (id=1081): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) memfd_create(0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x2, [{}, {}]}) 6.086048669s ago: executing program 1 (id=1085): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90724fc601025020006000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000033a80)=""/102395, 0x18ffb}, {&(0x7f0000000740)=""/66, 0x42}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000880)=""/174, 0xae}, {&(0x7f00000005c0)=""/35, 0x23}, {0x0}], 0x6, 0x0, 0x0) close(r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0x20008000) sendmsg$xdp(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r7) add_key$user(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000400)="9e7cfae955d13f9b3f02e9cfba22e2c25912a12c644b31ef5eca1637d9c532d2e730dfb2be6b0c0885669cc3194cc67d0824c8c1d7ec4ffd2050a794ddc64afeec65967d764b660796b734e308d24ce86665ce336b8655f8c76e3bc6b41aeb0127575c5f7a24d0eb9e009b8ec7e295af5240425d727edf33915d942f8c07ba4004f5bf93d5a812083f2ae8838d52a27407f17ccc7fd4c31b0bd8d37b88cfe441f82f0f6a73f76bf0076c182f7ca448b20c543b2f21a49e969a41d409c0a47268413b0943afdeef5b0a907840335c69c70ecf752f3ad8906c378cfb0da3aec8dc37cc772f749760865328e2450aa0e2aa", 0xf0, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000dc0)=ANY=[], 0x0) 5.802070471s ago: executing program 3 (id=985): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 5.125883446s ago: executing program 0 (id=1086): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 4.854413355s ago: executing program 4 (id=1087): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000eb00000f1000000000000061020000000000009500050000000000929b569e5b468b4c53db3f7ac9bc09236ced48406ba73fa5a110a5121c8369c038dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43bec5ef0727bfa5532d5300"/111], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x22) 4.774063585s ago: executing program 0 (id=1088): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002a0001000000000000000000060000000c000a"], 0x20}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="10032000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf2501000000080005000100000014000200776730000000000000000000000000000800070009000000240003000000000000000000000000000000000000000000000000000000000000000000080005000000000064020880cc0100801400040002004e24ffffffff000000000000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b640109801c000080060001000200000008000200ac1414bb05000300000000000c010080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200fc0100000000000000000000000000000500030003000000060001000200000008000200ac1e01010500030002000000060001000200000008000200000000000500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e00000010500030001000000060001000a00000014000200fe80000000000000000000000000000d0500030003000000060001000a000000140002000000000000000000000000000000000105000700030000001c000080060001000200000008000200ac14141205000300020000001c000080060001000200000008000200ffffffff050003000200000008000300000000002000008006000500018000001400040002004e20ffffffff00000000000000007400008008000a00010000000600050009000000200004000a004e21ffffffff200100000000000000000000000000000600000008000300050000002400020050323b6574fe3e3c9a20086a18027141271584832c54d70bc5bf223fbaafcae51400040002004e237f0000010000000000000000240003000000000000000000000000000000000000000000000000000000000000000000060006004e23000014000200776730000000000000000000000000000800050000000000"], 0x310}}, 0x20048800) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000ac0)=""/207, 0x5b, 0xcf, 0x1, 0x7d3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r5], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000", @ANYRES32=r4, @ANYBLOB="0b000080976b640868603000910001809bc805e83f918a5caae8d4d9159fbeff56b5445fd9e2397d70cce66623127bfd3181ae29da4d071576c9bf8ab0a71d7b380fed9efec13d7ada1cc8504b07e87032eda8d60fa3efc56afe6b9df3191c2a20a12a8b348fd65055c56eaab0080bcbec1b9e01682dbc82018e06930ae4a8fb7650048ab78045d761a9f61a6c32040f2bd81d90ef632439094314c505000000"], 0xb8}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="384fd2ff", @ANYRES16=r7, @ANYBLOB="00012bbd7000fcdbdf251f0000000400cc0005009200000000000500920040000000100022800c0000800800030006000000"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x0, 0x802, 0xfffffffc) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) 4.753458072s ago: executing program 1 (id=1089): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}}) 4.719396113s ago: executing program 4 (id=1090): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40000000000000a, 0x0) 4.589945903s ago: executing program 4 (id=1091): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x12, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x7, 0x2}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000200), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r2, 0x0, &(0x7f0000000840)=""/140}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0xc004510e, &(0x7f0000001b80)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r6}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f00000001c0)={0x20, r9, 0x0}) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000001c80)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) 3.310931432s ago: executing program 1 (id=1092): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14, 0x1, 0x5, 0x401}, 0x14}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x39}, "7058abce57033f29eb6dc1f8b128a7537a3409329d374c37fd2f23cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a605e31d"}, 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x5, 0x9}, {0x8, 0x3, 0x8, 0x9, 0x1}}}}, 0x17) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.299077965s ago: executing program 3 (id=1093): r0 = memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x97052, r0, 0x0) ftruncate(r0, 0x0) 3.292205377s ago: executing program 0 (id=1094): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='-'], 0x6f) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x92}], 0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1d2d, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1}, 0x2000c015) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'geneve1\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000140)) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close(r6) ioctl$UI_SET_SWBIT(r10, 0x4004556d, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) 3.161535665s ago: executing program 3 (id=1095): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 2.357810793s ago: executing program 3 (id=1096): socket$inet6(0xa, 0x4, 0x41008) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) r4 = creat(&(0x7f0000000300)='./file1\x00', 0x0) close(r4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000200)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/71, &(0x7f0000000500)=""/73}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000015640)=""/102400, 0x19000) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000b40)={0x3, 0x0, [{0xd000, 0xce, &(0x7f0000000900)=""/206}, {0x10000, 0xa2, &(0x7f0000000a00)=""/162}, {0x6000, 0x44, &(0x7f0000000ac0)=""/68}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010003000000c11422f0c14769754005090400000100000000000001020800070681b49dd108603b6a634b3acbf71c4268e0bc82c9a15734275c4e6536da15675d1451be952e614e50e5c0c0e24836ee39f6db872deaba4e1199dfeb9e78"], &(0x7f0000000840)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x0, 0xf8, 0xff, 0x20}, 0x67, &(0x7f00000005c0)=ANY=[@ANYBLOB="050fc96c060b10010c220070060101fd0a1003120200058a8000071002022b060018100a02830000000fe1050000c00000000000000fc0ff000a100300030003e9fc0a24100a6a268000008ff7b0e6c00000007f010000c0ffff000000ff00c00002000f00ff00"], 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x804}}, {0xb9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b9030690f0fe7c665bf8fc5dde334a58fd27bc68512fb49ca4840211c2edb7c679bd8cc967410f317b8b27779f9c3ed86f68beb85f3ec93825dcfcc10af1ac03c109df49b37cc59181bb419b5e9d3d58c420c72eef87cbf51c5a90f5d152cf371767a3f5e08c0927aba220f418e4fee97bd6bf08e1ea046e2471ccf30a2789f81b4f4a0371f44ce27cf473c923286659ab71b7dc20d8ee0132056aa1b67a7b1ac548ec3d3a49ff2a80a1faa4169da4d9db2dd1286319b9d582ac4c8aab07148b50b5374a716627856e5632c7b6e7403c786fa26d8a60a11a9c6e0575c014d83165cdc349c4cd621fb98bac02162775bfac4ba2d8965a30c8a9bdaab7bdc61551612f9e3ac9efbad5c2b61a707edf84ce5b4dad0655db7131f7a2decc57f2eafe55b282e1392b0805dbf6de5e3c1590051e3923373429bf7de648b654ce8d1d4eca6e2279330af5b55597412efcc70c6e4114a6dbf3f549f3c5c1b312a2735bfd3f92b58b142ff78604096eddf615b3483244ec3104928075dc1f8e9697109e6c016c341432756de3da30c4e9b82d44de1336"]}]}) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0/file0', [{0x20, '/\xf4'}, {0x20, 'Q\x84\xf6ui\xfa\xf5\x16i\x859o\xe5\x13\xd5gV\x04\x00\x98\xb0\bQ+\xe2G\xa1\x1e\x01\xa9\xd6w\xdf\xa6\x9d\xcc<\x86\xfd\x18\x99\x19\xed\xc2\xdc\xf4\xbdV\xfeF)T\xb6\xc6\v`\xbf\xec2\xf5\x12R\xa1\x18\x9a<\x8fx\xf4\xcc\x18\xfc\xdb\x0e\xe7\xde^\x88vN\xe0\xe4P\x1dj\xd6&7\x7f\xe82\x92w\x12\t\xff\x19$\x93\xd5\xa4\xe2}\x9aA9p\xffk0\x8c\xc3\xae[n1\xb4\xd7\xe6\xa4\xc2\x86M\x83\x1d\xd7\x84\xa4\x85n(\xd3\x95\x82\xe0\xff\x89=\xe6\xceM\x12'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x9e\xc8\xb2\x17\xa1;\x85\x1e\xa3'}, {0x20, '+{[{#'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00\xb2%}\x88\xd0\xfd\xa3\xf7i\x00!\x00J\xd1\xa7\xb1\xb1\xae\x1b\xb4\xf2\x985\xe6M5Px\xbe\x00'/47}, {}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x263) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000700)=ANY=[@ANYBLOB="fe00000000ff0021ef1be98a46a6bef642691ac810e3f2b9bb79bd6e10c91b9f071247d229db3f594e8fcf0a9ac195afa42495e3662680f4fb1d4e137f592f941e1be38934e8379be35145f04183729f8c0ab8b240d397376dd9d094107aae5a67431a8c71579659dc5d2cd643082944da09b4a809ea00dc6a37856c7c70da25c8d771a381e3b0ea2d757b6bfcaf95897c6c4dfda3c2b6be1ea43e4beba36663c8f362"]) 2.016782967s ago: executing program 4 (id=1097): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f0000000000)={0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) futex(0xffffffffffffffff, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x400caeaa, &(0x7f0000000140)={0x28dac20a}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.935319432s ago: executing program 0 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 1.703384084s ago: executing program 0 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 1.546040331s ago: executing program 0 (id=1100): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x0, 0x300) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x2, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 1.545870848s ago: executing program 4 (id=1101): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 79.163801ms ago: executing program 1 (id=1102): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x46, 0x2}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) alarm(0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) alarm(0x1) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000080)="1a99cf13dfe49f7aa8e1c5ec86b53b0e0af4e414c996d09aeaacf4240e086f", 0x1f}, {0x0}], 0x2}}], 0x1, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0x44, 0x4, 0x440, 0xffffffff, 0xd0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@private2, @mcast2, [], [], 'hsr0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) setsockopt$packet_int(r2, 0x107, 0x12, 0x0, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000000000000000210073b308000300", @ANYRES32=r8, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000), 0x0) 0s ago: executing program 4 (id=1103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x1) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): ] usb 3-1: USB disconnect, device number 3 [ 125.253558][ T1172] usb 5-1: USB disconnect, device number 5 [ 125.333158][ T29] audit: type=1400 audit(1723494845.091:8): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6140 comm="syz.0.246" [ 125.359183][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.367433][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.391928][ T29] audit: type=1400 audit(1723494845.154:9): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6140 comm="syz.0.246" [ 125.594000][ T6153] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 125.604070][ T29] audit: type=1400 audit(1723494845.374:10): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6151 comm="syz.2.250" daddr=ff01::1 dest=20004 [ 125.634689][ T6153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.251'. [ 125.807304][ T58] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.009548][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 126.025607][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.059768][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.125714][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 126.144757][ T58] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 126.155516][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.749877][ T58] usb 4-1: config 0 descriptor?? [ 127.859165][ T58] pyra 0003:1E7D:2C24.0004: item fetching failed at offset 5/7 [ 127.867518][ T58] pyra 0003:1E7D:2C24.0004: parse failed [ 127.873276][ T58] pyra 0003:1E7D:2C24.0004: probe with driver pyra failed with error -22 [ 127.978644][ T29] audit: type=1400 audit(1723494847.852:11): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6166 comm="syz.0.257" daddr=ff02::1 [ 128.860869][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.869372][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.877081][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.884372][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.894428][ T6147] bridge0: entered promiscuous mode [ 128.956202][ T6147] bridge0: entered allmulticast mode [ 129.004604][ T6144] 9pnet_fd: p9_fd_create_tcp (6144): problem connecting socket to 127.0.0.1 [ 129.154565][ T58] usb 4-1: USB disconnect, device number 9 [ 130.252421][ T29] audit: type=1326 audit(1723494849.594:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 130.326758][ T29] audit: type=1326 audit(1723494849.594:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 130.348153][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.428628][ T29] audit: type=1326 audit(1723494849.605:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 130.569047][ T29] audit: type=1326 audit(1723494849.605:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 130.694939][ T29] audit: type=1326 audit(1723494849.615:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 130.797276][ T29] audit: type=1326 audit(1723494849.615:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 130.889598][ T29] audit: type=1326 audit(1723494849.615:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 130.925684][ T29] audit: type=1326 audit(1723494849.615:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 130.960321][ T29] audit: type=1326 audit(1723494849.626:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6204 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd2147799f9 code=0x7ffc0000 [ 131.018576][ T46] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 131.218033][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 131.246776][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.255895][ T46] usb 4-1: config 0 has no interface number 0 [ 131.263273][ T46] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 131.273271][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.286098][ T46] usb 4-1: config 0 descriptor?? [ 132.184347][ T46] hso 4-1:0.1: Failed to find BULK IN ep [ 132.491931][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.500348][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.534183][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.585779][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 132.658216][ T6249] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.283'. [ 133.378954][ T6252] program syz.0.285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.503840][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 133.513983][ T46] usb 2-1: config 150 has an invalid interface number: 204 but max is 0 [ 133.524611][ T6257] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 133.537020][ T46] usb 2-1: config 150 has no interface number 0 [ 133.551185][ T46] usb 2-1: config 150 interface 204 has no altsetting 0 [ 133.568037][ T46] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 133.591305][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.604877][ T46] usb 2-1: Product: syz [ 133.610181][ T46] usb 2-1: Manufacturer: syz [ 133.615624][ T46] usb 2-1: SerialNumber: syz [ 133.890332][ T46] usb 2-1: USB disconnect, device number 6 [ 134.298505][ T5221] usb 4-1: USB disconnect, device number 10 [ 136.071842][ T1057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.093243][ T1057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.179253][ T6292] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 137.386227][ T1057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.470514][ T6301] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 137.484846][ T58] IPVS: starting estimator thread 0... [ 137.562313][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.572531][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.581235][ T6302] IPVS: using max 31 ests per chain, 74400 per kthread [ 137.591339][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.616511][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.624237][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.631751][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.828003][ T1057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.101807][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 139.101825][ T29] audit: type=1400 audit(1723494859.536:32): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6321 comm="syz.2.309" daddr=ff01::1 dest=20003 [ 139.591041][ T5235] Bluetooth: hci1: command tx timeout [ 140.967007][ T1057] bridge_slave_1: left allmulticast mode [ 141.001409][ T1057] bridge_slave_1: left promiscuous mode [ 141.025846][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.081238][ T1057] bridge_slave_0: left allmulticast mode [ 141.107781][ T1057] bridge_slave_0: left promiscuous mode [ 141.119862][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.572493][ T5235] Bluetooth: hci1: command tx timeout [ 141.811411][ T5299] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.602843][ T5299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.630573][ T5299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.681764][ T5299] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.697892][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.714122][ T5299] usb 1-1: Product: syz [ 142.724799][ T5299] usb 1-1: Manufacturer: syz [ 142.774105][ T5299] usb 1-1: SerialNumber: syz [ 143.052564][ T5299] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.093042][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.111471][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.124055][ T1057] bond0 (unregistering): Released all slaves [ 143.213159][ T6372] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 143.222228][ T6372] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.322'. [ 143.232385][ T6372] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 143.240166][ T6372] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 143.247909][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 143.554092][ T5235] Bluetooth: hci1: command tx timeout [ 144.025980][ T5299] usb 1-1: USB disconnect, device number 5 [ 144.351847][ T5223] udevd[5223]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.544211][ T5235] Bluetooth: hci1: command tx timeout [ 146.012391][ T6305] chnl_net:caif_netlink_parms(): no params data found [ 146.349456][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 146.384677][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.001801][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.042790][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.091898][ T25] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 147.149319][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.191660][ T25] usb 2-1: config 0 descriptor?? [ 147.244626][ T1057] hsr_slave_0: left promiscuous mode [ 147.258615][ T1057] hsr_slave_1: left promiscuous mode [ 147.281598][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.298530][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.323647][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.338576][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.357380][ T6425] ======================================================= [ 147.357380][ T6425] WARNING: The mand mount option has been deprecated and [ 147.357380][ T6425] and is ignored by this kernel. Remove the mand [ 147.357380][ T6425] option from the mount to silence this warning. [ 147.357380][ T6425] ======================================================= [ 148.012717][ T1057] veth1_macvtap: left promiscuous mode [ 148.319781][ T1057] veth0_macvtap: left promiscuous mode [ 148.327242][ T1057] veth1_vlan: left promiscuous mode [ 148.334474][ T1057] veth0_vlan: left promiscuous mode [ 148.595158][ T25] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 148.604115][ T6435] binder: 6434:6435 ioctl 4018620d 0 returned -22 [ 148.633662][ T29] audit: type=1107 audit(1723494869.541:33): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 148.637622][ T6435] binder: 6434:6435 ioctl c0306201 0 returned -14 [ 148.645355][ T25] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 148.673494][ T25] samsung 0003:0419:0600.0005: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 149.124535][ T6443] fuse: Unknown parameter 'user_i00000000000000000000' [ 153.580693][ T5304] usb 2-1: USB disconnect, device number 7 [ 153.770623][ T6449] vivid-007: disconnect [ 153.824062][ T6448] vivid-007: reconnect [ 156.893065][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 156.956935][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 156.996592][ T29] audit: type=1400 audit(1723494878.338:34): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6474 comm="syz.2.345" daddr=fc01:: dest=20002 [ 157.229644][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 157.615876][ T6476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'. [ 158.035363][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.080540][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.103103][ T6305] bridge_slave_0: entered allmulticast mode [ 158.122049][ T6305] bridge_slave_0: entered promiscuous mode [ 158.138702][ T5269] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.167047][ T5304] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.190266][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.208220][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.226088][ T6305] bridge_slave_1: entered allmulticast mode [ 158.233942][ T6305] bridge_slave_1: entered promiscuous mode [ 158.338405][ T5269] usb 4-1: Using ep0 maxpacket: 16 [ 158.357894][ T5304] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 158.358245][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.401537][ T5304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.417777][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.438766][ T5304] usb 1-1: Product: syz [ 158.443280][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.443328][ T5269] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 158.482394][ T5304] usb 1-1: Manufacturer: syz [ 158.492960][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.515433][ T5304] usb 1-1: SerialNumber: syz [ 158.523904][ T5269] usb 4-1: config 0 descriptor?? [ 158.525611][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.545841][ T5304] usb 1-1: config 0 descriptor?? [ 158.752332][ T6305] team0: Port device team_slave_0 added [ 158.779495][ T6305] team0: Port device team_slave_1 added [ 158.906785][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.924070][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.927628][ T5304] usb 1-1: USB disconnect, device number 6 [ 158.975924][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.033556][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.043504][ T5269] kye 0003:0458:0138.0006: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 159.050855][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.145244][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.245683][ T25] usb 4-1: USB disconnect, device number 11 [ 159.645679][ T6305] hsr_slave_0: entered promiscuous mode [ 159.676779][ T6305] hsr_slave_1: entered promiscuous mode [ 159.693614][ T6305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.708033][ T6305] Cannot create hsr debugfs directory [ 161.026166][ T6531] vim2m vim2m.0: vidioc_s_fmt queue busy [ 163.600567][ C1] sd 0:0:1:0: [sda] tag#460 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 163.611052][ C1] sd 0:0:1:0: [sda] tag#460 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 166.801538][ T29] audit: type=1400 audit(1723494888.616:35): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6592 comm="syz.0.374" daddr=fc01:: [ 166.884156][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.482439][ T29] audit: type=1400 audit(1723494888.616:36): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6592 comm="syz.0.374" daddr=fc02:: [ 167.664821][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 167.706375][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.752052][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.828336][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 167.870484][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.935365][ T46] usb 2-1: config 0 descriptor?? [ 168.758847][ T6305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.905634][ T6305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.976074][ T6305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.018257][ T6305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.278799][ T6620] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.381'. [ 169.572234][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 171.795007][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.847333][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 171.853590][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.879408][ T46] usb 2-1: USB disconnect, device number 8 [ 172.067280][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.397161][ T5269] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 172.960958][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.968385][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.012776][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.019943][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.187904][ T29] audit: type=1400 audit(1723494895.313:37): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6639 comm="syz.1.387" daddr=::ffff:172.20.20.187 [ 173.252814][ T6305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.264002][ T5269] usb 3-1: device not accepting address 4, error -71 [ 173.329370][ T6305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.436874][ T29] audit: type=1400 audit(1723494895.597:38): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=6650 comm="syz.1.391" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 173.621580][ T6661] syz.1.394 uses obsolete (PF_INET,SOCK_PACKET) [ 173.628828][ T5269] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.636646][ T1172] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 173.774407][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.826298][ T1172] usb 1-1: Using ep0 maxpacket: 16 [ 173.831603][ T5269] usb 3-1: Using ep0 maxpacket: 32 [ 173.876104][ T1172] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 173.886090][ T5269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.918360][ T1172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.939009][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.955029][ T1172] usb 1-1: Product: syz [ 173.959254][ T1172] usb 1-1: Manufacturer: syz [ 173.997554][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.013005][ T1172] usb 1-1: SerialNumber: syz [ 174.023833][ T1172] usb 1-1: config 0 descriptor?? [ 174.046114][ T5269] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.210095][ T1172] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 174.257089][ T5269] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 174.270244][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.082543][ T58] usb 1-1: USB disconnect, device number 7 [ 175.231161][ T5269] usb 3-1: config 0 descriptor?? [ 175.538557][ T6305] veth0_vlan: entered promiscuous mode [ 175.580687][ T6305] veth1_vlan: entered promiscuous mode [ 175.670342][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 175.691471][ T5269] hid-generic 0003:1B96:9F0A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.2-1/input0 [ 175.771434][ T6706] random: crng reseeded on system resumption [ 175.913279][ T6305] veth0_macvtap: entered promiscuous mode [ 175.954692][ T6305] veth1_macvtap: entered promiscuous mode [ 176.060426][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.079076][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.140566][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.158529][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.179745][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.201579][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.227364][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.257419][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.275038][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.371036][ T46] usb 3-1: USB disconnect, device number 5 [ 176.371433][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.457945][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.480406][ T29] audit: type=1326 audit(1723494898.788:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6715 comm="syz.0.403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f871799f9 code=0x0 [ 176.511153][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.531992][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.546457][ T29] audit: type=1326 audit(1723494898.809:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6719 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 176.568961][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.588139][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.606344][ T29] audit: type=1326 audit(1723494898.809:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6719 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 176.633429][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.648911][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.663151][ T29] audit: type=1326 audit(1723494898.809:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6719 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 176.704170][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.748228][ T6722] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 176.853639][ T6722] team0: Failed to send options change via netlink (err -105) [ 176.881358][ T6722] team0: Port device netdevsim0 added [ 176.907728][ T6305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.928557][ T6305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.983671][ T6305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.997459][ T6305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.676797][ T6734] warning: `syz.2.405' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 178.174049][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.200254][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.208135][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.225842][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.240450][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 178.352989][ T6740] bridge0: entered allmulticast mode [ 178.476103][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 178.533126][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 178.583486][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 178.645286][ T52] Bluetooth: hci5: Frame reassembly failed (-84) [ 178.664098][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.679952][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 178.694448][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.701595][ T6750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.709127][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.716335][ T6750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.732670][ T6750] bridge0: entered promiscuous mode [ 178.759790][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.139171][ T6767] netlink: 56 bytes leftover after parsing attributes in process `syz.3.413'. [ 179.184397][ T6767] mmap: syz.3.413 (6767) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 179.455838][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.619483][ T6783] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 179.655670][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 179.670515][ T25] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d7.4d [ 179.700359][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.725937][ T25] usb 4-1: config 0 descriptor?? [ 179.745246][ T25] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 179.948557][ T25] gspca_vc032x: reg_w err -71 [ 179.953495][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 179.960331][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 179.967019][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 179.973396][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 179.979049][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 179.989087][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 179.998636][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.553685][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.583454][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.588796][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.597167][ T5235] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 180.615032][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.620680][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.625988][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.643265][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.650658][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.676912][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.737043][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.744505][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.749825][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.755332][ T25] gspca_vc032x: Unknown sensor... [ 180.760402][ T25] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 180.821851][ T25] usb 4-1: USB disconnect, device number 12 [ 180.994093][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 181.053298][ T6803] netlink: 36 bytes leftover after parsing attributes in process `syz.4.422'. [ 181.713718][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.918358][ T6834] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 181.931992][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 181.942531][ T46] usb 2-1: config 0 has no interfaces? [ 181.955515][ T46] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 181.970783][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 181.980026][ T46] usb 2-1: Product: syz [ 181.987258][ T46] usb 2-1: Manufacturer: syz [ 182.003752][ T46] usb 2-1: SerialNumber: syz [ 182.045593][ T46] usb 2-1: config 0 descriptor?? [ 182.366734][ T25] usb 2-1: USB disconnect, device number 9 [ 184.007602][ T6853] input: syz0 as /devices/virtual/input/input9 [ 184.423203][ T6862] syz.4.437: attempt to access beyond end of device [ 184.423203][ T6862] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 184.433453][ T6861] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 184.450163][ T6862] SQUASHFS error: Failed to read block 0x0: -5 [ 184.456418][ T6862] unable to read squashfs_super_block [ 186.260086][ T6882] netlink: 116 bytes leftover after parsing attributes in process `syz.4.448'. [ 186.269309][ T6882] bridge_slave_1: left allmulticast mode [ 186.274986][ T6882] bridge_slave_1: left promiscuous mode [ 186.282196][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.325100][ T6882] bridge_slave_0: left allmulticast mode [ 186.343077][ T6882] bridge_slave_0: left promiscuous mode [ 186.358905][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.216444][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 189.328710][ T6913] x_tables: ip_tables: udp match: only valid for protocol 17 [ 189.412999][ T6913] netlink: 'syz.4.454': attribute type 7 has an invalid length. [ 189.421805][ T58] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.444170][ T6913] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.454'. [ 189.481964][ T6917] netlink: 'syz.4.454': attribute type 3 has an invalid length. [ 189.507001][ T6917] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.454'. [ 189.623849][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 189.664155][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 189.698538][ T58] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.756349][ T58] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 189.797478][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.813976][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.853119][ T58] usb 3-1: New USB device found, idVendor=1266, idProduct=1002, bcdDevice=ef.1e [ 189.877806][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.887811][ T58] usb 3-1: Product: syz [ 189.902230][ T58] usb 3-1: Manufacturer: syz [ 189.914880][ T58] usb 3-1: SerialNumber: syz [ 189.956514][ T58] usb 3-1: config 0 descriptor?? [ 189.963647][ T6904] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.998833][ T58] option 3-1:0.0: GSM modem (1-port) converter detected [ 190.017609][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.056463][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.075120][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 190.085003][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.106269][ T25] usb 1-1: config 0 descriptor?? [ 190.147987][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 190.177346][ T25] usb 3-1: USB disconnect, device number 6 [ 190.185516][ T25] option 3-1:0.0: device disconnected [ 191.556300][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.582944][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.633636][ T8] usb 1-1: USB disconnect, device number 8 [ 193.062384][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 194.298390][ T1172] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 195.036617][ T6976] overlayfs: missing 'lowerdir' [ 196.351100][ T1172] usb 1-1: Using ep0 maxpacket: 16 [ 196.432965][ T1172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.446497][ T1172] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 196.478138][ T1172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.549812][ T1172] usb 1-1: Product: syz [ 196.580237][ T1172] usb 1-1: Manufacturer: syz [ 196.601337][ T1172] usb 1-1: SerialNumber: syz [ 196.635974][ T1172] usb 1-1: config 0 descriptor?? [ 196.915908][ T1172] usb 1-1: USB disconnect, device number 9 [ 197.050168][ T6985] fuse: Bad value for 'fd' [ 197.305141][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.479'. [ 198.693462][ T29] audit: type=1400 audit(1723494922.010:43): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7002 comm="syz.0.484" daddr=fe88::101 dest=20004 [ 199.109101][ T7005] Bluetooth: MGMT ver 1.23 [ 199.170131][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 199.643885][ T29] audit: type=1400 audit(1723494923.101:44): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7024 comm="syz.4.492" daddr=ff02::1 [ 201.433202][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.680920][ T46] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 201.695743][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.708508][ T46] usb 2-1: config 0 descriptor?? [ 201.719852][ T46] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 201.719908][ T46] usb 2-1: bad CDC descriptors [ 201.720402][ T46] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 202.156709][ T7041] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 203.180349][ T7135] syz.0.504[7135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.181245][ T7135] syz.0.504[7135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.976341][ T8] usb 2-1: USB disconnect, device number 10 [ 204.907913][ T29] audit: type=1400 audit(1723494928.634:45): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7143 comm="syz.1.509" [ 206.000974][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 206.060847][ T29] audit: type=1400 audit(1723494929.831:46): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7155 comm="syz.0.512" daddr=fc00:: [ 206.527854][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 206.535534][ T29] audit: type=1400 audit(1723494930.335:47): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7160 comm="syz.3.515" daddr=ff01::1 [ 206.784990][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.852212][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.870148][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.871410][ T7162] sctp: failed to load transform for md5: -2 [ 206.890102][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.920239][ T7166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.995066][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.214830][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.238376][ T1172] usb 3-1: USB disconnect, device number 7 [ 207.400900][ T29] audit: type=1326 audit(1723494931.248:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7174 comm="syz.4.518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f9799f9 code=0x0 [ 207.422005][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 209.577863][ T8] usb 2-1: device descriptor read/all, error -71 [ 210.276331][ T7195] syz.1.523 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 210.457145][ T29] audit: type=1400 audit(1723494934.450:49): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7211 comm="syz.4.528" [ 211.186522][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 212.316149][ T29] audit: type=1326 audit(1723494936.402:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c87799f9 code=0x7ffc0000 [ 212.346794][ T29] audit: type=1326 audit(1723494936.434:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f14c87799f9 code=0x7ffc0000 [ 212.366947][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 212.479390][ T29] audit: type=1326 audit(1723494936.434:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c87799f9 code=0x7ffc0000 [ 212.526091][ T29] audit: type=1326 audit(1723494936.434:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7233 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c87799f9 code=0x7ffc0000 [ 213.428942][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 213.433788][ T5235] Bluetooth: Wrong link type (-22) [ 214.627823][ T7274] ALSA: seq fatal error: cannot create timer (-22) [ 214.642125][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.549'. [ 214.674611][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 214.929054][ T7282] netlink: 892 bytes leftover after parsing attributes in process `syz.3.553'. [ 215.062288][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 215.120174][ T5304] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 215.341135][ T5304] usb 2-1: Using ep0 maxpacket: 16 [ 215.439493][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 215.506611][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 215.581240][ T5304] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 215.599100][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.611177][ T5304] usb 2-1: Product: syz [ 215.619376][ T5304] usb 2-1: Manufacturer: syz [ 215.790208][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 215.870001][ T5304] usb 2-1: SerialNumber: syz [ 215.884235][ T5304] usb 2-1: config 0 descriptor?? [ 215.896845][ T5304] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 215.918961][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.944672][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 215.965429][ T8] usb 5-1: can't read configurations, error -71 [ 216.001992][ T7294] VFS: could not find a valid V7 on nullb0. [ 216.171066][ T5304] usb 2-1: USB disconnect, device number 13 [ 216.332225][ T29] audit: type=1400 audit(1723494940.623:54): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7302 comm="syz.2.560" daddr=fe80:: [ 216.428819][ T5235] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 216.456515][ T5235] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 216.618103][ T7305] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 216.649168][ T7313] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.563'. [ 216.669937][ T7305] input: syz0 as /devices/virtual/input/input10 [ 216.676396][ T5235] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 218.986966][ T5304] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 219.221808][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 219.253427][ T5304] usb 1-1: Using ep0 maxpacket: 32 [ 219.264451][ T5304] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 220.477241][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.501748][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 220.508760][ T7377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.600565][ T5304] usb 1-1: config 0 descriptor?? [ 220.654475][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.775793][ T5304] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 220.792039][ T25] usb 2-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43 [ 220.801731][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.811841][ T25] usb 2-1: Product: syz [ 220.816769][ T25] usb 2-1: Manufacturer: syz [ 220.821419][ T25] usb 2-1: SerialNumber: syz [ 220.827306][ T7382] block nbd2: NBD_DISCONNECT [ 220.835781][ T25] usb 2-1: config 0 descriptor?? [ 220.836338][ T7382] block nbd2: Send disconnect failed -107 [ 221.077227][ T7382] block nbd2: Disconnected due to user request. [ 221.079618][ T25] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 221.085264][ T7382] block nbd2: shutting down sockets [ 221.096939][ T5304] gspca_nw80x: reg_r err -71 [ 221.106938][ T5304] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 222.070782][ T7394] input: syz0 as /devices/virtual/input/input11 [ 223.728147][ T5304] usb 1-1: USB disconnect, device number 10 [ 223.775675][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 223.790667][ T25] dib0700: firmware download failed at 7 with -8 [ 223.828437][ T25] usb 2-1: USB disconnect, device number 14 [ 224.393752][ T29] audit: type=1400 audit(1723494949.084:55): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7390 comm="syz.2.593" daddr=ff01::1 [ 224.455337][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 224.557639][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 224.635563][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 224.683686][ T7404] geneve2: entered promiscuous mode [ 226.073846][ T7433] capability: warning: `syz.1.608' uses 32-bit capabilities (legacy support in use) [ 226.567573][ T5304] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 226.623802][ T7441] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.616'. [ 227.305483][ T7441] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 227.317787][ T7441] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.327865][ T5304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 227.347077][ T5304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 227.449710][ T5304] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.461575][ T5304] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 227.473021][ T5304] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.492217][ T5304] usb 5-1: New USB device found, idVendor=1266, idProduct=1002, bcdDevice=ef.1e [ 227.504086][ T5304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.566431][ T5304] usb 5-1: Product: syz [ 227.571217][ T29] audit: type=1400 audit(1723494952.422:56): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7453 comm="syz.1.613" daddr=ff01::1 [ 227.579187][ T5304] usb 5-1: Manufacturer: syz [ 227.654680][ T5304] usb 5-1: SerialNumber: syz [ 228.018318][ T5304] usb 5-1: config 0 descriptor?? [ 228.025144][ T7436] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.037249][ T5304] option 5-1:0.0: GSM modem (1-port) converter detected [ 228.393562][ T7468] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 229.585849][ T5216] usb 5-1: USB disconnect, device number 8 [ 229.611796][ T5216] option 5-1:0.0: device disconnected [ 229.799913][ T7489] x_tables: duplicate underflow at hook 2 [ 229.806715][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 229.912709][ T29] audit: type=1400 audit(1723494954.868:57): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7488 comm="syz.4.625" daddr=fe80:: [ 230.695471][ T7502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.628'. [ 230.843403][ T7512] bpf: Bad value for 'gid' [ 231.096663][ T5216] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.338443][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.358300][ T5216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.369526][ T5216] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 231.380315][ T5216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.390988][ T5216] usb 3-1: config 0 descriptor?? [ 231.446137][ T58] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 231.547667][ T7529] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.631903][ T7529] kvm: pic: non byte read [ 231.645345][ T7529] kvm: pic: level sensitive irq not supported [ 231.646684][ T7529] kvm: pic: non byte read [ 231.667955][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 231.691056][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 231.734331][ T58] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.780992][ T58] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 231.812189][ T5216] hid-generic 0003:05AC:4262.0008: unbalanced delimiter at end of report description [ 231.823703][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.848081][ T5216] hid-generic 0003:05AC:4262.0008: probe with driver hid-generic failed with error -22 [ 231.877184][ T58] usb 4-1: New USB device found, idVendor=1266, idProduct=1002, bcdDevice=ef.1e [ 231.900495][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.926813][ T58] usb 4-1: Product: syz [ 231.937629][ T58] usb 4-1: Manufacturer: syz [ 231.944820][ T58] usb 4-1: SerialNumber: syz [ 231.965702][ T58] usb 4-1: config 0 descriptor?? [ 231.996801][ T7524] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 232.157184][ T58] option 4-1:0.0: GSM modem (1-port) converter detected [ 232.186169][ T58] usb 3-1: USB disconnect, device number 8 [ 234.259272][ T29] audit: type=1400 audit(1723494958.627:58): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7552 comm="syz.0.646" daddr=fe80::aa dest=20259 [ 234.318089][ T5221] usb 4-1: USB disconnect, device number 13 [ 234.327981][ T5221] option 4-1:0.0: device disconnected [ 235.368937][ T7575] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 235.399802][ T7575] netlink: 224 bytes leftover after parsing attributes in process `syz.0.653'. [ 236.352298][ T7591] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 236.733861][ T5235] Bluetooth: hci1: link tx timeout [ 236.739336][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.760094][ T5235] Bluetooth: hci1: link tx timeout [ 236.765468][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.779948][ T5235] Bluetooth: hci1: link tx timeout [ 236.785422][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.795704][ T5235] Bluetooth: hci1: link tx timeout [ 236.802552][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.810632][ T5235] Bluetooth: hci1: link tx timeout [ 236.815764][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.825011][ T5235] Bluetooth: hci1: link tx timeout [ 236.830744][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.838778][ T5235] Bluetooth: hci1: link tx timeout [ 236.843906][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.866774][ T5235] Bluetooth: hci1: link tx timeout [ 236.871930][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.884747][ T5235] Bluetooth: hci1: link tx timeout [ 236.890352][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.898498][ T5235] Bluetooth: hci1: link tx timeout [ 236.903667][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.913091][ T5235] Bluetooth: hci1: link tx timeout [ 236.918490][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.926717][ T5235] Bluetooth: hci1: link tx timeout [ 236.931828][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.940161][ T5235] Bluetooth: hci1: link tx timeout [ 236.945524][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.956033][ T5235] Bluetooth: hci1: link tx timeout [ 236.961603][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.971187][ T5235] Bluetooth: hci1: link tx timeout [ 236.976345][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.984510][ T5235] Bluetooth: hci1: link tx timeout [ 236.989646][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.000008][ T5216] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 237.224280][ T5216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 237.254732][ T5216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 237.266549][ T5216] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.278596][ T5216] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 237.289947][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 237.303148][ T5216] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.330786][ T5216] usb 2-1: New USB device found, idVendor=1266, idProduct=1002, bcdDevice=ef.1e [ 237.343228][ T5216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.351985][ T5216] usb 2-1: Product: syz [ 237.356329][ T5216] usb 2-1: Manufacturer: syz [ 237.361053][ T5216] usb 2-1: SerialNumber: syz [ 237.378452][ T5216] usb 2-1: config 0 descriptor?? [ 237.396769][ T7605] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.412061][ T5216] option 2-1:0.0: GSM modem (1-port) converter detected [ 237.504878][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 237.514201][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.533585][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.550259][ T46] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 237.561182][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.575159][ T7623] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 237.592853][ T46] usb 3-1: config 0 descriptor?? [ 237.667930][ T7623] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 238.089758][ T46] aquacomputer_d5next 0003:0C70:F0B6.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 238.733443][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 238.793982][ T46] usb 3-1: USB disconnect, device number 9 [ 238.818631][ T54] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 239.960671][ T8] usb 2-1: USB disconnect, device number 15 [ 239.975683][ T8] option 2-1:0.0: device disconnected [ 240.030475][ T7646] input: syz1 as /devices/virtual/input/input12 [ 241.448975][ T7659] 9pnet_virtio: no channels available for device [ 241.770090][ T7676] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 241.858064][ T46] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 241.874386][ T7679] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 242.074035][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.108217][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 242.143631][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 242.172488][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.229235][ T5216] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 242.238444][ T46] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 242.266519][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.281556][ T46] usb 4-1: Product: syz [ 242.291700][ T46] usb 4-1: Manufacturer: syz [ 242.305875][ T46] usb 4-1: SerialNumber: syz [ 242.322280][ T46] usb 4-1: config 0 descriptor?? [ 242.353557][ T7675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.441584][ T5216] usb 5-1: Using ep0 maxpacket: 16 [ 242.471578][ T5216] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 242.491172][ T5216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.515179][ T5216] usb 5-1: Product: syz [ 242.519391][ T5216] usb 5-1: Manufacturer: syz [ 242.532583][ T5216] usb 5-1: SerialNumber: syz [ 242.539454][ T46] rc_core: IR keymap rc-imon-rsc not found [ 242.547548][ T46] Registered IR keymap rc-empty [ 242.567949][ T5216] usb 5-1: config 0 descriptor?? [ 242.576163][ T46] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 242.594557][ T5216] gspca_main: conex-2.14.0 probing 0572:0041 [ 242.604639][ T46] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 242.655662][ T46] usb 4-1: USB disconnect, device number 14 [ 242.701955][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 242.712220][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 242.721800][ T5235] Bluetooth: hci1: hardware error 0x00 [ 242.905563][ T58] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 242.943292][ T5216] usb 5-1: USB disconnect, device number 9 [ 243.096251][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 243.108762][ T58] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 243.124653][ T58] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 243.144057][ T58] usb 2-1: config 135 has no interface number 0 [ 243.173466][ T58] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.214378][ T58] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 243.243251][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.286622][ T58] usb 2-1: Product: syz [ 243.299367][ T58] usb 2-1: Manufacturer: syz [ 243.305941][ T58] usb 2-1: SerialNumber: syz [ 243.319696][ T58] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 243.338361][ T58] usb 2-1: No valid video chain found. [ 243.554027][ T1172] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 243.693213][ T5221] usb 2-1: USB disconnect, device number 16 [ 243.778292][ T1172] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 243.802230][ T1172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.823255][ T1172] usb 4-1: Product: syz [ 243.834696][ T1172] usb 4-1: Manufacturer: syz [ 243.859747][ T7757] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 243.867561][ T1172] usb 4-1: SerialNumber: syz [ 243.878230][ T7757] netlink: 88156 bytes leftover after parsing attributes in process `syz.4.702'. [ 243.889631][ T1172] usb 4-1: config 0 descriptor?? [ 244.105747][ T1172] hso 4-1:0.0: Can't find BULK IN endpoint [ 244.122608][ T1172] usb-storage 4-1:0.0: USB Mass Storage device detected [ 244.165291][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 244.197741][ T7766] ipvlan2: entered allmulticast mode [ 244.236879][ T7766] veth0_vlan: entered allmulticast mode [ 244.302570][ T1172] usb 4-1: USB disconnect, device number 15 [ 244.393382][ T7773] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 245.237790][ T5235] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 245.514595][ T7790] vlan2: entered allmulticast mode [ 245.532473][ T7790] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 245.547301][ T7790] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 246.163598][ T29] audit: type=1400 audit(1723494971.686:59): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7791 comm="syz.3.712" daddr=fe80:: [ 246.934400][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 247.455175][ T7815] overlayfs: missing 'lowerdir' [ 248.460754][ T7821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.440748][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.449749][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.051811][ T7856] netlink: 'syz.1.734': attribute type 16 has an invalid length. [ 250.060619][ T7856] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.734'. [ 251.378467][ T7858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.734'. [ 252.877110][ T7092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.225068][ T7092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.407768][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.420116][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.441590][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.460908][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.468673][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 253.489037][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.583336][ T7092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.754075][ T29] audit: type=1400 audit(1723494979.906:60): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7896 comm="syz.0.751" dest=20004 [ 254.049096][ T7092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.308690][ T7092] bridge_slave_1: left allmulticast mode [ 255.314387][ T7092] bridge_slave_1: left promiscuous mode [ 255.454042][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.578000][ T5235] Bluetooth: hci4: command tx timeout [ 255.620750][ T7092] bridge_slave_0: left allmulticast mode [ 255.633216][ T7092] bridge_slave_0: left promiscuous mode [ 255.660055][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.362201][ T29] audit: type=1400 audit(1723494982.898:61): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7919 comm="syz.3.760" daddr=fe80::aa [ 257.556312][ T5235] Bluetooth: hci4: command tx timeout [ 258.796887][ T7092] dvmrp1 (unregistering): left allmulticast mode [ 259.121949][ T7092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.144492][ T7092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.164764][ T7092] bond0 (unregistering): Released all slaves [ 259.537959][ T5235] Bluetooth: hci4: command tx timeout [ 259.588640][ T7883] chnl_net:caif_netlink_parms(): no params data found [ 259.632780][ T7964] netlink: 'syz.3.772': attribute type 4 has an invalid length. [ 259.714148][ T7968] kernel read not supported for file /eth0 (pid: 7968 comm: syz.4.773) [ 259.726948][ T29] audit: type=1800 audit(1723494986.173:62): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.773" name="eth0" dev="mqueue" ino=18942 res=0 errno=0 [ 259.750968][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.772'. [ 259.867043][ T7965] netlink: 'syz.3.772': attribute type 17 has an invalid length. [ 260.328570][ T5216] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 260.520695][ T5216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.535551][ T7092] hsr_slave_0: left promiscuous mode [ 260.544371][ T7092] hsr_slave_1: left promiscuous mode [ 260.547655][ T5216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.565266][ T5216] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.579365][ T7092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.591437][ T7092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.601275][ T5216] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 260.611077][ T5216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.611352][ T7092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.627686][ T7092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.638290][ T5216] usb 5-1: config 0 descriptor?? [ 260.662623][ T7092] veth1_macvtap: left promiscuous mode [ 260.668275][ T7092] veth0_macvtap: left promiscuous mode [ 260.675624][ T7092] veth1_vlan: left promiscuous mode [ 260.688507][ T7092] veth0_vlan: left promiscuous mode [ 261.592281][ T5235] Bluetooth: hci4: command tx timeout [ 261.806422][ T5216] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 261.813348][ T5216] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 261.827584][ T5216] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 261.834982][ T5216] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 261.842020][ T5216] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 261.857208][ T5216] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 261.870993][ T5216] wacom 0003:056A:0094.000A: unknown main item tag 0x0 [ 261.924991][ T5216] wacom 0003:056A:0094.000A: Using device in hidraw-only mode [ 261.945819][ T5216] wacom 0003:056A:0094.000A: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 261.991063][ T5216] usb 5-1: USB disconnect, device number 10 [ 262.247670][ T7092] team0 (unregistering): Port device team_slave_1 removed [ 262.952506][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.986178][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.012684][ T7883] bridge_slave_0: entered allmulticast mode [ 263.142279][ T7883] bridge_slave_0: entered promiscuous mode [ 263.153292][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.160626][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.183308][ T7883] bridge_slave_1: entered allmulticast mode [ 263.972190][ T7883] bridge_slave_1: entered promiscuous mode [ 264.189486][ T7883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.529667][ T7883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.928970][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 264.954050][ T7883] team0: Port device team_slave_0 added [ 265.009005][ T7883] team0: Port device team_slave_1 added [ 265.128945][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 265.790029][ T7883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.802263][ T9] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 265.805400][ T7883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.810527][ T9] usb 4-1: config 0 has no interface number 0 [ 265.837289][ T7883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.864063][ T7883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.871066][ T7883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.884740][ T9] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 265.918818][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.930045][ T9] usb 4-1: Product: syz [ 265.934244][ T9] usb 4-1: Manufacturer: syz [ 265.980569][ T9] usb 4-1: SerialNumber: syz [ 265.993665][ T7883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.023191][ T9] usb 4-1: config 0 descriptor?? [ 266.038540][ T7092] IPVS: stop unused estimator thread 0... [ 266.057978][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 266.094142][ T7883] hsr_slave_0: entered promiscuous mode [ 266.101804][ T7883] hsr_slave_1: entered promiscuous mode [ 266.108165][ T7883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.116201][ T7883] Cannot create hsr debugfs directory [ 266.119939][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 266.310710][ T5216] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.319015][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 266.329193][ T25] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 266.339839][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.348390][ T25] usb 1-1: Product: syz [ 266.352582][ T25] usb 1-1: Manufacturer: syz [ 266.357192][ T25] usb 1-1: SerialNumber: syz [ 266.365231][ T25] usb 1-1: config 0 descriptor?? [ 266.373511][ T25] gspca_main: conex-2.14.0 probing 0572:0041 [ 266.492153][ T5216] usb 5-1: Using ep0 maxpacket: 16 [ 266.518264][ T5216] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 266.538766][ T5216] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 266.576690][ T5216] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.589246][ T5216] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.615414][ T5216] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.634311][ T5216] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.643390][ T5216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.645121][ T7883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.652151][ T5216] usb 5-1: Product: syz [ 266.662694][ T5216] usb 5-1: Manufacturer: syz [ 266.667541][ T5216] usb 5-1: SerialNumber: syz [ 266.676413][ T7883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.688920][ T7883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.704993][ T7883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.785127][ T25] usb 1-1: USB disconnect, device number 11 [ 266.888351][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.946797][ T5216] usb 5-1: USB disconnect, device number 11 [ 266.964802][ T7883] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.986483][ T29] audit: type=1400 audit(1723494993.795:63): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8042 comm="syz.1.794" daddr=::ffff:172.20.20.187 [ 267.012254][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.019486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.057912][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.065155][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.409521][ T9] gspca_topro: reg_r err -71 [ 267.414173][ T9] gspca_topro: Sensor soi763a [ 267.422862][ T7883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.454069][ T9] usb 4-1: USB disconnect, device number 16 [ 267.504021][ T7883] veth0_vlan: entered promiscuous mode [ 267.519040][ T7883] veth1_vlan: entered promiscuous mode [ 267.566632][ T7883] veth0_macvtap: entered promiscuous mode [ 267.590476][ T7883] veth1_macvtap: entered promiscuous mode [ 267.598157][ T8058] program syz.0.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.631926][ T7883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.668964][ T7883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.791465][ T7883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.828151][ T8065] netlink: 209676 bytes leftover after parsing attributes in process `syz.0.802'. [ 267.845696][ T7883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.893924][ T7883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.904506][ T7883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.914864][ T7883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.925783][ T7883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.978291][ T7883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.262361][ T7883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.593273][ T7883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.637414][ T7883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.700398][ T7883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.729855][ T7883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.745550][ T7883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.761163][ T7883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.772251][ T7883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.785299][ T7883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.822801][ T7883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.831836][ T7883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.845304][ T7883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.856296][ T7883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.893988][ T29] audit: type=1400 audit(1723494995.800:64): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=8079 comm="syz.3.809" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 269.088720][ T7092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.101642][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 269.113150][ T7092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.681847][ T1295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.737546][ T1295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.005534][ T8097] 9pnet_fd: p9_fd_create_tcp (8097): problem connecting socket to 127.0.0.1 [ 270.090247][ T8095] syzkaller0: entered promiscuous mode [ 270.105939][ T8095] syzkaller0: entered allmulticast mode [ 270.244645][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 270.330978][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 270.340251][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 270.350317][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.358347][ T9] usb 2-1: Product: syz [ 270.362682][ T9] usb 2-1: Manufacturer: syz [ 270.367296][ T9] usb 2-1: SerialNumber: syz [ 270.374272][ T9] usb 2-1: config 0 descriptor?? [ 270.386500][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 270.439545][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.452908][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.478465][ T29] audit: type=1326 audit(1723494997.438:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 270.500193][ T25] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 270.509923][ T29] audit: type=1326 audit(1723494997.438:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 270.509998][ T29] audit: type=1326 audit(1723494997.438:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 270.510036][ T29] audit: type=1326 audit(1723494997.438:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 270.510075][ T29] audit: type=1326 audit(1723494997.438:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 270.510133][ T29] audit: type=1326 audit(1723494997.438:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 270.510173][ T29] audit: type=1326 audit(1723494997.438:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 270.510216][ T29] audit: type=1326 audit(1723494997.438:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 270.669254][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.693115][ T25] usb 1-1: config 0 descriptor?? [ 270.791646][ T9] usb 2-1: USB disconnect, device number 17 [ 270.802519][ T8105] input: syz0 as /devices/virtual/input/input14 [ 270.808145][ T58] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 270.991896][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 271.033148][ T58] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=98.5e [ 271.042558][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.050743][ T58] usb 4-1: Product: syz [ 271.055613][ T58] usb 4-1: Manufacturer: syz [ 271.060416][ T58] usb 4-1: SerialNumber: syz [ 271.079224][ T58] usb 4-1: config 0 descriptor?? [ 271.116652][ T25] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x1 [ 271.124879][ T25] hid-retrode 0003:0403:97C1.000B: unknown main item tag 0x0 [ 271.133768][ T25] hid-retrode 0003:0403:97C1.000B: unbalanced collection at end of report description [ 271.144399][ T25] hid-retrode 0003:0403:97C1.000B: probe with driver hid-retrode failed with error -22 [ 271.292180][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 271.340698][ T5299] usb 4-1: USB disconnect, device number 17 [ 271.367690][ T25] usb 1-1: USB disconnect, device number 12 [ 271.519672][ T9] usb 3-1: config 0 has no interfaces? [ 271.529063][ T9] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 271.545478][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.560386][ T9] usb 3-1: Product: syz [ 271.564803][ T9] usb 3-1: Manufacturer: syz [ 271.576853][ T9] usb 3-1: SerialNumber: syz [ 271.594326][ T9] usb 3-1: config 0 descriptor?? [ 271.665532][ T8111] kvm: apic: phys broadcast and lowest prio [ 271.820617][ T5299] usb 3-1: USB disconnect, device number 10 [ 272.033277][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 272.914178][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 272.915144][ T29] audit: type=1400 audit(1723495000.020:108): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8125 comm="syz.2.826" daddr=ff02::1 dest=20004 [ 272.960200][ T1172] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 273.234650][ T1172] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 273.243971][ T1172] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 273.252582][ T1172] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 273.266222][ T1172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 273.636305][ T1172] usb 1-1: string descriptor 0 read error: -22 [ 273.642645][ T1172] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 273.653729][ T1172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.664439][ T1172] usb 1-1: config 0 descriptor?? [ 273.666157][ T8131] syz.3.828[8131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.670226][ T8120] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 273.690118][ T1172] hub 1-1:0.0: bad descriptor, ignoring hub [ 273.721610][ T1172] hub 1-1:0.0: probe with driver hub failed with error -5 [ 273.736649][ T8131] syz.3.828[8131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.782665][ T1172] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 274.420204][ T5304] usb 1-1: USB disconnect, device number 13 [ 274.599382][ T8139] binder: 8136:8139 ioctl c018620c 20000100 returned -1 [ 275.011366][ T8158] random: crng reseeded on system resumption [ 275.092240][ T8159] loop0: detected capacity change from 0 to 7 [ 275.139869][ T8159] Dev loop0: unable to read RDB block 7 [ 275.287952][ T8159] loop0: unable to read partition table [ 275.294753][ T8159] loop0: partition table beyond EOD, truncated [ 275.301008][ T8159] loop_reread_partitions: partition scan of loop0 (x熝鵂诂Ыd皮脆杻荨夥 [ 275.301008][ T8159] ) failed (rc=-5) [ 276.640750][ T8177] input: syz0 as /devices/virtual/input/input16 [ 276.993424][ T8188] netlink: 'syz.3.846': attribute type 3 has an invalid length. [ 277.645558][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 277.829342][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 277.858435][ T25] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 277.912412][ T25] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 277.943896][ T25] usb 2-1: config 135 has no interface number 0 [ 278.049644][ T25] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.626568][ T29] audit: type=1400 audit(1723495005.595:109): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8223 comm="syz.4.861" daddr=fc02:: [ 278.777153][ T25] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 278.788168][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.798913][ T25] usb 2-1: Product: syz [ 278.803124][ T25] usb 2-1: Manufacturer: syz [ 278.817488][ T25] usb 2-1: SerialNumber: syz [ 278.847678][ T25] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 278.854085][ T25] usb 2-1: No valid video chain found. [ 279.033756][ T29] audit: type=1326 audit(1723495006.319:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8234 comm="syz.4.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d2f9799f9 code=0x0 [ 279.147691][ T8241] fuseblk: Unknown parameter 'fK' [ 280.192299][ T25] usb 2-1: USB disconnect, device number 18 [ 281.203566][ T8269] tipc: Started in network mode [ 281.293961][ T8269] tipc: Node identity 7f000001, cluster identity 4711 [ 281.341017][ T8272] syz.2.873 (8272): attempted to duplicate a private mapping with mremap. This is not supported. [ 281.388106][ T8269] tipc: Enabling of bearer rejected, failed to enable media [ 287.501269][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 287.532727][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 287.555754][ T8302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.881'. [ 287.571864][ T8307] tmpfs: Bad value for 'nr_inodes' [ 288.091499][ T8323] netlink: 'syz.3.888': attribute type 2 has an invalid length. [ 290.429773][ T8343] binder: 8342:8343 ioctl 4018620d 0 returned -22 [ 291.340734][ T8348] sctp: failed to load transform for md5: -2 [ 291.348391][ T29] audit: type=1326 audit(1723495019.221:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 291.424724][ T8355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.486331][ T29] audit: type=1326 audit(1723495019.232:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 291.549511][ T29] audit: type=1326 audit(1723495019.232:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 291.593507][ T29] audit: type=1326 audit(1723495019.232:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 291.634145][ T29] audit: type=1326 audit(1723495019.232:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 291.683155][ T29] audit: type=1326 audit(1723495019.253:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 291.772312][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 291.798714][ T29] audit: type=1326 audit(1723495019.274:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 291.876931][ T8375] input: syz1 as /devices/virtual/input/input18 [ 291.959050][ T25] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 292.072467][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.087745][ T58] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 292.182313][ T29] audit: type=1326 audit(1723495019.274:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafab799f9 code=0x7ffc0000 [ 292.420406][ T25] usb 1-1: config 0 descriptor?? [ 292.495952][ T29] audit: type=1326 audit(1723495019.274:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafab795fb code=0x7ffc0000 [ 292.532884][ T29] audit: type=1326 audit(1723495019.274:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8342 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafab795fb code=0x7ffc0000 [ 292.558244][ T58] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 292.568836][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.603629][ T58] usb 5-1: config 0 descriptor?? [ 292.726846][ T58] cp210x 5-1:0.0: cp210x converter detected [ 293.925950][ T58] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 294.009041][ T58] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 294.092342][ T58] usb 5-1: cp210x converter now attached to ttyUSB0 [ 294.278016][ T58] usb 5-1: USB disconnect, device number 12 [ 294.301044][ T58] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 294.321528][ T58] cp210x 5-1:0.0: device disconnected [ 294.380486][ T8393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 295.113605][ T8403] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 295.153737][ T8403] netlink: 616 bytes leftover after parsing attributes in process `syz.1.909'. [ 295.333266][ T58] kernel write not supported for file /585/projid_map (pid: 58 comm: kworker/1:2) [ 295.414326][ T25] usb 1-1: Cannot set autoneg [ 295.437475][ T25] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 295.463715][ T25] usb 1-1: USB disconnect, device number 14 [ 295.583719][ T8424] netlink: 288 bytes leftover after parsing attributes in process `syz.3.916'. [ 295.721043][ T8429] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 296.830215][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 297.020987][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 297.061636][ T25] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 297.088521][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.128150][ T25] usb 4-1: config 0 descriptor?? [ 298.247725][ T8470] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 298.255914][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 298.278514][ T1172] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 301.722353][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 301.722374][ T29] audit: type=1400 audit(1723495028.585:156): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8465 comm="syz.1.933" daddr=::ffff:127.0.0.1 dest=20003 [ 301.899634][ T25] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 301.970808][ T25] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 302.018247][ T25] asix 4-1:0.0: probe with driver asix failed with error -71 [ 302.039941][ T25] usb 4-1: USB disconnect, device number 18 [ 302.235482][ T29] audit: type=1400 audit(1723495030.800:157): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8491 comm="syz.4.941" daddr=fe80:: [ 302.485957][ T8508] netlink: 'syz.4.947': attribute type 11 has an invalid length. [ 302.897906][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 303.195943][ T25] usb 4-1: config index 0 descriptor too short (expected 63506, got 18) [ 303.215089][ T25] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 303.225215][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.235609][ T25] usb 4-1: Product: syz [ 303.239821][ T25] usb 4-1: Manufacturer: syz [ 303.246457][ T25] usb 4-1: SerialNumber: syz [ 304.333871][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 304.413685][ T8513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.949'. [ 304.442420][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 304.470394][ T25] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 304.500548][ T25] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 304.569610][ T25] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 304.665500][ T25] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 304.757775][ T25] usb 4-1: USB disconnect, device number 19 [ 304.767542][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 304.779808][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 304.790913][ T25] visor 4-1:1.0: device disconnected [ 305.098468][ T58] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 305.138863][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 305.395659][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 305.441555][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 305.516808][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 305.592853][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.632343][ T58] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 305.642654][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.653092][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.670909][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.672213][ T29] audit: type=1400 audit(1723495034.391:158): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8546 comm="syz.1.962" [ 305.685257][ T58] usb 3-1: config 0 descriptor?? [ 305.710089][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.727368][ T46] usb 5-1: Product: syz [ 305.735700][ T46] usb 5-1: Manufacturer: syz [ 305.751692][ T46] usb 5-1: SerialNumber: syz [ 305.969744][ T46] usb 5-1: cannot find UAC_HEADER [ 305.994412][ T46] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 306.036102][ T46] usb 5-1: USB disconnect, device number 13 [ 306.111853][ T8565] bridge0: port 3(team0) entered blocking state [ 306.125846][ T8565] bridge0: port 3(team0) entered disabled state [ 306.144440][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'. [ 306.146458][ T8565] team0: entered allmulticast mode [ 306.159181][ T8565] team_slave_0: entered allmulticast mode [ 306.170628][ T8565] team_slave_1: entered allmulticast mode [ 306.181117][ T8565] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 306.205783][ T8565] team0: entered promiscuous mode [ 306.212278][ T8565] team_slave_0: entered promiscuous mode [ 306.222411][ T8565] team_slave_1: entered promiscuous mode [ 306.237829][ T8565] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 306.264871][ T8565] bridge0: port 3(team0) entered blocking state [ 306.271785][ T8565] bridge0: port 3(team0) entered forwarding state [ 306.293387][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.334666][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.428653][ T58] hid (null): invalid report_size 812540268 [ 306.488053][ T58] hid (null): unknown global tag 0x83 [ 306.530089][ T58] hid (null): unknown global tag 0xc [ 306.553052][ T58] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 306.586049][ T58] hid-generic 0003:0158:0100.000C: unexpected long global item [ 306.625318][ T58] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 306.720073][ T58] usb 3-1: USB disconnect, device number 11 [ 307.934957][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.941499][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.223604][ T8598] netlink: 144 bytes leftover after parsing attributes in process `syz.0.978'. [ 309.375639][ T5216] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 314.405220][ T5216] usb 2-1: Using ep0 maxpacket: 8 [ 314.697573][ T5216] usb 2-1: device descriptor read/all, error -71 [ 314.755582][ T8608] program syz.1.982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.519907][ T5269] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 315.790176][ T5269] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.071526][ T5269] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.100853][ T5269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 316.722956][ T5269] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 316.786986][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.823552][ T8606] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.832157][ T5269] hub 5-1:1.0: bad descriptor, ignoring hub [ 316.850564][ T5269] hub 5-1:1.0: probe with driver hub failed with error -5 [ 316.859950][ T5269] cdc_wdm 5-1:1.0: skipping garbage [ 316.867362][ T5269] cdc_wdm 5-1:1.0: skipping garbage [ 316.883961][ T5269] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 316.903697][ T5269] cdc_wdm 5-1:1.0: Unknown control protocol [ 317.399140][ T5269] usb 5-1: USB disconnect, device number 14 [ 317.997286][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.026145][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.043519][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.065421][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.073744][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 318.081186][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.876715][ T8650] nfs: Unknown parameter '0xffffffffffffffff䦛藪妘󃀑 [ 318.876715][ T8650] 葆' [ 319.603072][ T7102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.179786][ T5235] Bluetooth: hci5: command tx timeout [ 320.299114][ T29] audit: type=1326 audit(1723495049.760:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.400139][ T29] audit: type=1326 audit(1723495049.875:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.484058][ T29] audit: type=1326 audit(1723495049.896:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.517690][ T29] audit: type=1326 audit(1723495049.896:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.563680][ T29] audit: type=1326 audit(1723495049.896:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.606417][ T29] audit: type=1326 audit(1723495049.896:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.631223][ T29] audit: type=1326 audit(1723495049.896:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.673690][ T29] audit: type=1326 audit(1723495049.896:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.737562][ T29] audit: type=1326 audit(1723495049.896:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.783758][ T29] audit: type=1326 audit(1723495049.896:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb847799f9 code=0x7ffc0000 [ 320.816407][ T7102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.624813][ T8630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.657189][ T8630] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 321.689471][ T7102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.855386][ T8545] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 321.891259][ T7102] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 321.904818][ T7102] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 321.931221][ T58] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 321.941880][ T7102] team0: Port device netdevsim0 removed [ 321.951994][ T7102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.054507][ T8545] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 322.054616][ T8630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.081457][ T8630] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 322.088701][ T8545] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.109847][ T54] Bluetooth: hci5: command tx timeout [ 322.113227][ T8545] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.137433][ T58] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 322.160276][ T8545] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.178022][ T58] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 322.189020][ T58] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 322.198961][ T8545] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.210643][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.220086][ T8545] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.235072][ T8545] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.252208][ T8545] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.273304][ T8545] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.289799][ T8545] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 322.299840][ T8545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.308611][ T8630] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 322.324876][ T8630] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 322.328595][ T8545] pwc: Logitech QuickCam detected (reserved ID). [ 322.350483][ T8545] pwc: Warning: more than 1 configuration available. [ 322.473385][ T7102] team0: left allmulticast mode [ 322.478310][ T7102] team_slave_0: left allmulticast mode [ 322.501653][ T58] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 322.511599][ T7102] team_slave_1: left allmulticast mode [ 322.520415][ T7102] team0: left promiscuous mode [ 322.526949][ T7102] team_slave_0: left promiscuous mode [ 322.539349][ T58] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input19 [ 322.545959][ T7102] team_slave_1: left promiscuous mode [ 322.578518][ T7102] bridge0: port 3(team0) entered disabled state [ 322.592113][ T58] input: failed to attach handler kbd to device input19, error: -5 [ 322.605673][ T7102] bridge_slave_1: left allmulticast mode [ 322.617373][ T7102] bridge_slave_1: left promiscuous mode [ 322.633150][ T58] usb 3-1: USB disconnect, device number 12 [ 322.683335][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.712837][ T7102] bridge_slave_0: left allmulticast mode [ 322.718545][ T7102] bridge_slave_0: left promiscuous mode [ 322.780656][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.940968][ T8545] pwc: send_video_command error -71 [ 322.948684][ T8545] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 322.974379][ T8545] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71 [ 323.004643][ T8545] usb 2-1: USB disconnect, device number 21 [ 323.549886][ T58] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 323.621653][ T8545] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 323.746674][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 323.769990][ T58] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=e1.fc [ 323.796050][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.821121][ T58] usb 3-1: config 0 descriptor?? [ 323.826785][ T8545] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.837967][ T8545] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.849941][ T58] ljca 3-1:0.0: bulk endpoints not found [ 323.857805][ T8545] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.875264][ T8545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.887095][ T8545] usb 5-1: SerialNumber: syz [ 323.902459][ T7102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.915913][ T7102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.928697][ T7102] bond0 (unregistering): Released all slaves [ 323.953038][ T8719] netlink: 'syz.0.1008': attribute type 12 has an invalid length. [ 323.967962][ T8635] chnl_net:caif_netlink_parms(): no params data found [ 324.058038][ T58] usb 3-1: USB disconnect, device number 13 [ 324.065682][ T8748] Illegal XDP return value 70 on prog (id 187) dev N/A, expect packet loss! [ 324.094162][ T7102] tipc: Left network mode [ 324.104362][ T8545] usb 5-1: 0:2 : does not exist [ 324.159293][ T8545] usb 5-1: USB disconnect, device number 15 [ 324.232121][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.240196][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.253833][ T8635] bridge_slave_0: entered allmulticast mode [ 324.262701][ T8635] bridge_slave_0: entered promiscuous mode [ 324.279728][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.294747][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.310067][ T8635] bridge_slave_1: entered allmulticast mode [ 324.325276][ T8635] bridge_slave_1: entered promiscuous mode [ 324.407054][ T8635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.458046][ T7102] hsr_slave_0: left promiscuous mode [ 324.473726][ T7102] hsr_slave_1: left promiscuous mode [ 324.480401][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.492710][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.511683][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.522638][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.574958][ T7102] veth1_macvtap: left promiscuous mode [ 324.581725][ T7102] veth0_macvtap: left promiscuous mode [ 324.604426][ T7102] veth1_vlan: left promiscuous mode [ 324.617762][ T7102] veth0_vlan: left promiscuous mode [ 324.829522][ T8765] input: syz1 as /devices/virtual/input/input20 [ 325.064678][ T8545] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 325.333056][ T8545] usb 3-1: config 0 has no interfaces? [ 325.406060][ T8545] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.427001][ T8545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.435814][ T8545] usb 3-1: Product: syz [ 325.441221][ T8545] usb 3-1: Manufacturer: syz [ 325.451205][ T8545] usb 3-1: SerialNumber: syz [ 325.491574][ T8545] usb 3-1: config 0 descriptor?? [ 325.701082][ T8772] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262207 (only 8 groups) [ 325.963677][ T8545] usb 3-1: USB disconnect, device number 14 [ 326.003682][ T8] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 326.053326][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 326.211134][ T8] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 326.221365][ T8] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 326.232846][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 326.269699][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 326.281918][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 326.286948][ T7102] team0 (unregistering): Port device team_slave_1 removed [ 326.423839][ T7102] team0 (unregistering): Port device team_slave_0 removed [ 326.425189][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 326.425204][ T29] audit: type=1400 audit(1723495056.195:190): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8782 comm="syz.0.1023" [ 326.974006][ T5269] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 327.127145][ T8796] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1029'. [ 327.356889][ T5269] usb 3-1: config 0 has no interfaces? [ 327.362874][ T5269] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 327.378772][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.427804][ T5269] usb 3-1: config 0 descriptor?? [ 327.892070][ T8635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.955289][ T8787] batadv0: entered promiscuous mode [ 327.962481][ T8787] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 327.971492][ T8787] batadv0: left promiscuous mode [ 328.107620][ T8635] team0: Port device team_slave_0 added [ 328.141927][ T8635] team0: Port device team_slave_1 added [ 328.227919][ T1172] usb 3-1: USB disconnect, device number 15 [ 328.261950][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.276856][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.347720][ T8635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.413865][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.422839][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.464544][ T8635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.583920][ T8] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 328.597591][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.610370][ T8] usb 5-1: config 0 descriptor?? [ 328.626049][ T8] usb 5-1: can't set config #0, error -71 [ 328.647729][ T8] usb 5-1: USB disconnect, device number 16 [ 328.710595][ T8635] hsr_slave_0: entered promiscuous mode [ 328.733424][ T8635] hsr_slave_1: entered promiscuous mode [ 331.017919][ T58] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 331.231377][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 331.249082][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 331.261045][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 331.270987][ T58] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 331.280117][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.298602][ T58] usb 1-1: config 0 descriptor?? [ 331.545640][ T58] usb 1-1: USB disconnect, device number 16 [ 332.342121][ T29] audit: type=1400 audit(1723495062.389:191): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8845 comm="syz.2.1042" daddr=fe80::1b dest=16385 [ 332.634222][ T29] audit: type=1400 audit(1723495062.588:192): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8843 comm="syz.0.1043" daddr=::ffff:172.20.20.187 dest=20000 [ 333.877598][ T29] audit: type=1326 audit(1723495064.027:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f871799f9 code=0x7ffc0000 [ 333.900037][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.906696][ T29] audit: type=1326 audit(1723495064.048:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f871799f9 code=0x7ffc0000 [ 333.977866][ T29] audit: type=1326 audit(1723495064.079:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f871799f9 code=0x7ffc0000 [ 334.055823][ T8865] syzkaller1: entered promiscuous mode [ 334.062242][ T29] audit: type=1326 audit(1723495064.079:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f871799f9 code=0x7ffc0000 [ 334.097906][ T29] audit: type=1326 audit(1723495064.079:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0f871799f9 code=0x7ffc0000 [ 334.119369][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.133622][ T8865] syzkaller1: entered allmulticast mode [ 334.244873][ T29] audit: type=1326 audit(1723495064.079:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f871799f9 code=0x7ffc0000 [ 334.266412][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.323054][ T29] audit: type=1326 audit(1723495064.079:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0f871799f9 code=0x7ffc0000 [ 334.344588][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.367833][ T29] audit: type=1326 audit(1723495064.079:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f871799f9 code=0x7ffc0000 [ 334.389359][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.540525][ T8635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.568515][ T8635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.640342][ T8635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.680739][ T8635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.931123][ T8635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.987490][ T8635] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.026804][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.034052][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.083772][ T2587] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.091006][ T2587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.886026][ T8545] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 337.089891][ T8545] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 337.099475][ T8545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.111246][ T8545] usb 1-1: config 0 descriptor?? [ 337.121300][ T8545] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 337.156771][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.214576][ T8924] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1071'. [ 337.229697][ T8635] veth0_vlan: entered promiscuous mode [ 337.254411][ T8635] veth1_vlan: entered promiscuous mode [ 337.348350][ T7095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.393804][ T8635] veth0_macvtap: entered promiscuous mode [ 337.413454][ T8635] veth1_macvtap: entered promiscuous mode [ 337.490018][ T7095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.520175][ T8545] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 337.603952][ T7095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.650239][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.671370][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.697098][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.713928][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.737812][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.760275][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.772241][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.789714][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.807922][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.823472][ T8545] gspca_cpia1: usb_control_msg 01, error -71 [ 337.834393][ T8545] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 337.852313][ T8545] usb 1-1: USB disconnect, device number 17 [ 337.889442][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.895392][ T7095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.910735][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.926546][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.943652][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.951600][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.961053][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.980737][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.993047][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.003671][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.006557][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.022403][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.022610][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.036917][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.041984][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.052894][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.063254][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.065585][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.074675][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.082062][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.099601][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.117258][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.131202][ T8635] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.148157][ T8635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.159191][ T8635] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.167985][ T8635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.498750][ T7102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.553635][ T7102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.683340][ T7095] bridge_slave_1: left allmulticast mode [ 338.699384][ T7095] bridge_slave_1: left promiscuous mode [ 338.713419][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.733352][ T1172] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 338.782721][ T7095] bridge_slave_0: left allmulticast mode [ 338.788585][ T7095] bridge_slave_0: left promiscuous mode [ 338.825512][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.937658][ T1172] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 338.955861][ T1172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.991470][ T1172] usb 1-1: config 0 descriptor?? [ 339.007263][ T1172] cp210x 1-1:0.0: cp210x converter detected [ 340.049794][ T1172] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 340.086123][ T54] Bluetooth: hci2: command tx timeout [ 340.105996][ T1172] usb 1-1: cp210x converter now attached to ttyUSB0 [ 340.411260][ T5216] usb 1-1: USB disconnect, device number 18 [ 340.462923][ T5216] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 340.934369][ T7095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.945560][ T5216] cp210x 1-1:0.0: device disconnected [ 340.951595][ T7095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.963876][ T7095] bond0 (unregistering): Released all slaves [ 341.005958][ T2587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.048932][ T2587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.226806][ T8965] netlink: 203452 bytes leftover after parsing attributes in process `syz.1.1085'. [ 341.243906][ T8965] netlink: 'syz.1.1085': attribute type 2 has an invalid length. [ 342.076472][ T54] Bluetooth: hci2: command tx timeout [ 342.278860][ T7095] hsr_slave_0: left promiscuous mode [ 342.307227][ T7095] hsr_slave_1: left promiscuous mode [ 342.324025][ T7095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.344604][ T7095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.364174][ T7095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.371633][ T7095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.426384][ T8982] netlink: 'syz.0.1088': attribute type 10 has an invalid length. [ 342.456106][ T7095] veth1_macvtap: left promiscuous mode [ 342.462340][ T7095] veth0_macvtap: left promiscuous mode [ 342.475071][ T7095] veth1_vlan: left promiscuous mode [ 342.481619][ T7095] veth0_vlan: left promiscuous mode [ 342.898657][ T8993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.912369][ T8993] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 343.172398][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 343.252318][ T7095] team0 (unregistering): Port device team_slave_1 removed [ 343.305814][ T7095] team0 (unregistering): Port device team_slave_0 removed [ 343.362958][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 343.379898][ T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 343.388219][ T8] usb 5-1: config 0 has no interface number 0 [ 343.394593][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 343.408645][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 343.420310][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 343.428436][ T8] usb 5-1: Product: syz [ 343.437438][ T8] usb 5-1: SerialNumber: syz [ 343.447596][ T8] usb 5-1: config 0 descriptor?? [ 343.456616][ T8] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 343.848019][ T46] usb 5-1: USB disconnect, device number 17 [ 343.853577][ T8926] chnl_net:caif_netlink_parms(): no params data found [ 344.049386][ T54] Bluetooth: hci2: command tx timeout [ 344.476662][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.484548][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.853039][ T8926] bridge_slave_0: entered allmulticast mode [ 344.895681][ T8926] bridge_slave_0: entered promiscuous mode [ 344.998213][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.018614][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.029831][ T8926] bridge_slave_1: entered allmulticast mode [ 345.063087][ T8926] bridge_slave_1: entered promiscuous mode [ 345.113814][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 345.113832][ T29] audit: type=1400 audit(1723495075.816:234): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=8999 comm="syz.1.1092" daddr=fe80::1b dest=20000 [ 345.304665][ T8926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.413490][ T8926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.624223][ T8926] team0: Port device team_slave_0 added [ 345.680879][ T8926] team0: Port device team_slave_1 added [ 345.853494][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.860618][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.039496][ T54] Bluetooth: hci2: command tx timeout [ 346.055976][ T8926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.191915][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.244556][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.328011][ T8926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.512458][ T8926] hsr_slave_0: entered promiscuous mode [ 346.567114][ T8926] hsr_slave_1: entered promiscuous mode [ 346.590426][ T8926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.600861][ T8926] Cannot create hsr debugfs directory [ 347.454037][ T29] audit: type=1326 audit(1723495078.272:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9032 comm="syz.1.1102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2147799f9 code=0x0 [ 447.478126][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 447.485174][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7102/1:b..l P8926/1:b..l [ 447.494880][ C1] rcu: (detected by 1, t=10502 jiffies, g=32325, q=369 ncpus=2) [ 447.502604][ C1] task:syz-executor state:R running task stack:21728 pid:8926 tgid:8926 ppid:8925 flags:0x00004002 [ 447.515767][ C1] Call Trace: [ 447.519066][ C1] [ 447.522013][ C1] __schedule+0x17ae/0x4a10 [ 447.526563][ C1] ? __pfx___schedule+0x10/0x10 [ 447.531516][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.537525][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 447.542824][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 447.547959][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 447.553697][ C1] ? mark_lock+0x9a/0x350 [ 447.558041][ C1] ? __pfx_lock_release+0x10/0x10 [ 447.563090][ C1] irqentry_exit+0x5e/0x90 [ 447.567521][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.573522][ C1] RIP: 0010:lock_release+0x658/0xa30 [ 447.578827][ C1] Code: 3c 3b 00 74 08 4c 89 f7 e8 85 af 87 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 447.598454][ C1] RSP: 0000:ffffc9000d2ef140 EFLAGS: 00000206 [ 447.604550][ C1] RAX: 0000000000000001 RBX: 1ffff92001a5de3a RCX: ffffc9000d2ef103 [ 447.612545][ C1] RDX: 0000000000000007 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f9040 [ 447.620556][ C1] RBP: ffffc9000d2ef270 R08: ffffffff8ff6a22f R09: 1ffffffff1fed445 [ 447.628535][ C1] R10: dffffc0000000000 R11: fffffbfff1fed446 R12: 1ffff92001a5de34 [ 447.636516][ C1] R13: 0000000000000246 R14: ffffc9000d2ef1d0 R15: dffffc0000000000 [ 447.644532][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 447.649578][ C1] ? xa_get_mark+0x177/0xa50 [ 447.654179][ C1] ? __pfx_lock_release+0x10/0x10 [ 447.659231][ C1] xa_get_mark+0x997/0xa50 [ 447.663664][ C1] ? xa_get_mark+0x177/0xa50 [ 447.668262][ C1] ? __pfx_xa_get_mark+0x10/0x10 [ 447.673214][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.679214][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.685569][ C1] devlink_port_notify+0xca/0x5c0 [ 447.690602][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 447.695985][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 447.701198][ C1] ? __pfx_devlink_port_notify+0x10/0x10 [ 447.706844][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 447.712228][ C1] ? devlink_port_netdevice_event+0x3bd/0x4d0 [ 447.718301][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 447.724033][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 447.729244][ C1] ? devlink_port_netdevice_event+0x326/0x4d0 [ 447.735327][ C1] devlink_port_netdevice_event+0x3ca/0x4d0 [ 447.741232][ C1] notifier_call_chain+0x19f/0x3e0 [ 447.746371][ C1] unregister_netdevice_many_notify+0x1593/0x1c40 [ 447.752817][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 447.759600][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 447.764646][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 447.769863][ C1] ? __mutex_lock+0x9a5/0xd70 [ 447.774554][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 447.779766][ C1] ? __mutex_lock+0x527/0xd70 [ 447.784465][ C1] unregister_netdevice_queue+0x303/0x370 [ 447.790199][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 447.796460][ C1] nsim_destroy+0x180/0x5c0 [ 447.800985][ C1] __nsim_dev_port_del+0x14b/0x1b0 [ 447.806107][ C1] nsim_dev_reload_destroy+0x28a/0x490 [ 447.811587][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 447.816912][ C1] nsim_drv_remove+0x58/0x160 [ 447.821637][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 447.827741][ C1] bus_remove_device+0x34f/0x420 [ 447.832723][ C1] device_del+0x57a/0x9b0 [ 447.837076][ C1] ? __pfx_device_del+0x10/0x10 [ 447.841958][ C1] device_unregister+0x20/0xc0 [ 447.846741][ C1] del_device_store+0x363/0x480 [ 447.851613][ C1] ? __pfx_del_device_store+0x10/0x10 [ 447.857001][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 447.861869][ C1] ? bus_attr_store+0x4f/0xa0 [ 447.866557][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 447.871766][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 447.877074][ C1] vfs_write+0xa72/0xc90 [ 447.881336][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 447.887156][ C1] ? __pfx_vfs_write+0x10/0x10 [ 447.891952][ C1] ksys_write+0x1a0/0x2c0 [ 447.896299][ C1] ? __pfx_ksys_write+0x10/0x10 [ 447.901167][ C1] ? do_syscall_64+0x100/0x230 [ 447.905946][ C1] ? do_syscall_64+0xb6/0x230 [ 447.910636][ C1] do_syscall_64+0xf3/0x230 [ 447.915155][ C1] ? clear_bhb_loop+0x35/0x90 [ 447.919849][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.925757][ C1] RIP: 0033:0x7f28689784df [ 447.930190][ C1] RSP: 002b:00007ffe116af7e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 447.938626][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f28689784df [ 447.946618][ C1] RDX: 0000000000000001 RSI: 00007ffe116af830 RDI: 0000000000000005 [ 447.954597][ C1] RBP: 00007f28689e895f R08: 0000000000000000 R09: 00007ffe116af637 [ 447.962575][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 447.970556][ C1] R13: 00007ffe116af830 R14: 00007f2869644620 R15: 0000000000000003 [ 447.978558][ C1] [ 447.981585][ C1] task:kworker/u8:21 state:R running task stack:23280 pid:7102 tgid:7102 ppid:2 flags:0x00004000 [ 447.993338][ C1] Workqueue: bat_events batadv_nc_worker [ 447.999010][ C1] Call Trace: [ 448.002296][ C1] [ 448.005238][ C1] __schedule+0x17ae/0x4a10 [ 448.009887][ C1] ? __pfx___schedule+0x10/0x10 [ 448.014785][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.020795][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.027157][ C1] preempt_schedule_notrace+0x100/0x140 [ 448.032724][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 448.038836][ C1] preempt_schedule_notrace_thunk+0x1a/0x30 [ 448.044751][ C1] ? batadv_nc_process_nc_paths+0xea/0x3a0 [ 448.050575][ C1] rcu_is_watching+0x7e/0xb0 [ 448.055184][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 448.060826][ C1] batadv_nc_process_nc_paths+0xf3/0x3a0 [ 448.066475][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 448.072558][ C1] batadv_nc_worker+0x42a/0x610 [ 448.077430][ C1] ? process_scheduled_works+0x945/0x1830 [ 448.083159][ C1] process_scheduled_works+0xa2c/0x1830 [ 448.088749][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.094752][ C1] ? assign_work+0x364/0x3d0 [ 448.099360][ C1] worker_thread+0x86d/0xd40 [ 448.103981][ C1] ? __kthread_parkme+0x169/0x1d0 [ 448.109022][ C1] ? __pfx_worker_thread+0x10/0x10 [ 448.114144][ C1] kthread+0x2f0/0x390 [ 448.118227][ C1] ? __pfx_worker_thread+0x10/0x10 [ 448.123346][ C1] ? __pfx_kthread+0x10/0x10 [ 448.127945][ C1] ret_from_fork+0x4b/0x80 [ 448.132377][ C1] ? __pfx_kthread+0x10/0x10 [ 448.136980][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.141861][ C1] [ 448.144897][ C1] rcu: rcu_preempt kthread starved for 10568 jiffies! g32325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 448.156098][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 448.166075][ C1] rcu: RCU grace-period kthread stack dump: [ 448.171964][ C1] task:rcu_preempt state:R running task stack:24464 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 448.183718][ C1] Call Trace: [ 448.187001][ C1] [ 448.189941][ C1] __schedule+0x17ae/0x4a10 [ 448.194483][ C1] ? __pfx___schedule+0x10/0x10 [ 448.199350][ C1] ? __pfx_lock_release+0x10/0x10 [ 448.204386][ C1] ? __asan_memset+0x23/0x50 [ 448.208990][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 448.214808][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.221151][ C1] ? schedule+0x90/0x320 [ 448.225402][ C1] schedule+0x14b/0x320 [ 448.229576][ C1] schedule_timeout+0x1be/0x310 [ 448.234532][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 448.239914][ C1] ? __pfx_process_timeout+0x10/0x10 [ 448.245214][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 448.250781][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 448.255641][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 448.260861][ C1] ? rcu_gp_init+0x1256/0x1630 [ 448.265639][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 448.268722][ C0] sched: RT throttling activated [ 448.275498][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 448.280781][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 448.286660][ C1] ? finish_swait+0xd4/0x1e0 [ 448.291258][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 448.295851][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.301061][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 448.306980][ C1] ? __kthread_parkme+0x169/0x1d0 [ 448.307389][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.312012][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.323467][ C1] kthread+0x2f0/0x390 [ 448.325907][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.327545][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.338983][ C1] ? __pfx_kthread+0x10/0x10 [ 448.343596][ C1] ret_from_fork+0x4b/0x80 [ 448.348006][ C1] ? __pfx_kthread+0x10/0x10 [ 448.352581][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.357336][ C1] [ 448.360336][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 448.366649][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 448.376950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 448.386985][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 448.392251][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d e5 92 9b 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 448.411839][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 448.417885][ C1] RAX: ffff888017af0000 RBX: ffff88801d6a8064 RCX: 000000000190c131 [ 448.425844][ C1] RDX: 0000000000000001 RSI: ffff88801d6a8000 RDI: ffff88801d6a8064 [ 448.433798][ C1] RBP: 000000000003a678 R08: ffff8880b9337c7b R09: 1ffff11017266f8f [ 448.441756][ C1] R10: dffffc0000000000 R11: ffffffff8badac90 R12: ffff88801b79a800 [ 448.449721][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eecaa20 [ 448.457683][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 448.466589][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.473153][ C1] CR2: 00007f1d30693f98 CR3: 000000002d912000 CR4: 00000000003506f0 [ 448.481123][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.489092][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.497058][ C1] Call Trace: [ 448.500330][ C1] [ 448.503156][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 448.509474][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 448.515118][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 448.520907][ C1] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 448.527146][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 448.533373][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 448.538740][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 448.544360][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 448.549544][ C1] ? update_process_times+0x1ce/0x230 [ 448.554993][ C1] ? tick_nohz_handler+0x37c/0x500 [ 448.560085][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 448.565533][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 448.570887][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 448.576945][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 448.582647][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 448.588722][ C1] ? hrtimer_interrupt+0x396/0x990 [ 448.593844][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 448.599991][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 448.605790][ C1] [ 448.608723][ C1] [ 448.611640][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.617790][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 448.623071][ C1] ? acpi_safe_halt+0x21/0x30 [ 448.627733][ C1] acpi_idle_enter+0xe4/0x140 [ 448.632398][ C1] cpuidle_enter_state+0x112/0x480 [ 448.637495][ C1] ? __pfx_menu_select+0x10/0x10 [ 448.642420][ C1] cpuidle_enter+0x5d/0xa0 [ 448.646819][ C1] do_idle+0x375/0x5d0 [ 448.650874][ C1] ? __pfx_do_idle+0x10/0x10 [ 448.655454][ C1] cpu_startup_entry+0x42/0x60 [ 448.660199][ C1] start_secondary+0x100/0x100 [ 448.664942][ C1] common_startup_64+0x13e/0x147 [ 448.669866][ C1] [ 449.167534][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.369639][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=17624 sent=0 n=-1 (errno 32: Broken pipe) [ 449.795092][ T9047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 449.806338][ T9047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 449.816980][ T9047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 449.833192][ T9047] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 449.846704][ T9047] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 449.863540][ T9047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 450.705082][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.783199][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.883323][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.972779][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.460225][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.471400][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.482687][ T12] bond0 (unregistering): Released all slaves [ 451.716552][ T12] hsr_slave_0: left promiscuous mode [ 451.722492][ T12] hsr_slave_1: left promiscuous mode [ 451.730667][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.741281][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.749728][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.759205][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.781178][ T12] veth1_macvtap: left promiscuous mode [ 451.786831][ T12] veth0_macvtap: left promiscuous mode [ 451.792592][ T12] veth1_vlan: left promiscuous mode [ 451.798161][ T12] veth0_vlan: left promiscuous mode [ 452.341982][ T12] team0 (unregistering): Port device team_slave_1 removed [ 452.389380][ T12] team0 (unregistering): Port device team_slave_0 removed [ 453.297720][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.360909][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.436894][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.508846][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.635779][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.709125][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.803205][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.869186][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.973479][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.063808][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.114221][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.190992][ T12] team0: Port device netdevsim0 removed [ 454.198576][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.304970][ T12] bridge_slave_1: left allmulticast mode [ 454.310753][ T12] bridge_slave_1: left promiscuous mode [ 454.317631][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.329083][ T12] bridge_slave_0: left allmulticast mode [ 454.334767][ T12] bridge_slave_0: left promiscuous mode [ 454.340730][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.349903][ T12] bridge_slave_1: left allmulticast mode [ 454.355854][ T12] bridge_slave_1: left promiscuous mode [ 454.361523][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.370560][ T12] bridge_slave_0: left allmulticast mode [ 454.378379][ T12] bridge_slave_0: left promiscuous mode [ 454.384041][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.400990][ T12] bridge_slave_1: left allmulticast mode [ 454.406866][ T12] bridge_slave_1: left promiscuous mode [ 454.412512][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.421374][ T12] bridge_slave_0: left allmulticast mode [ 454.427139][ T12] bridge_slave_0: left promiscuous mode [ 454.434093][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.247440][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.258801][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.269543][ T12] bond0 (unregistering): Released all slaves [ 455.397408][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.408175][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.419657][ T12] bond0 (unregistering): Released all slaves [ 455.549797][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.561531][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.572312][ T12] bond0 (unregistering): Released all slaves [ 455.691177][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.705100][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.715532][ T12] bond0 (unregistering): Released all slaves [ 456.411638][ T12] hsr_slave_0: left promiscuous mode [ 456.417728][ T12] hsr_slave_1: left promiscuous mode [ 456.424140][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.431751][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.449013][ T12] hsr_slave_0: left promiscuous mode [ 456.457482][ T12] hsr_slave_1: left promiscuous mode [ 456.463803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.471323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.484175][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.491651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.506832][ T12] hsr_slave_0: left promiscuous mode [ 456.512865][ T12] hsr_slave_1: left promiscuous mode [ 456.519025][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.526417][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.534851][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.542929][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.553720][ T12] hsr_slave_0: left promiscuous mode [ 456.559679][ T12] hsr_slave_1: left promiscuous mode [ 456.568320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.575806][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.583504][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.591924][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.636501][ T12] veth1_macvtap: left promiscuous mode [ 456.642218][ T12] veth0_macvtap: left promiscuous mode [ 456.647761][ T12] veth1_vlan: left promiscuous mode [ 456.653159][ T12] veth0_vlan: left promiscuous mode [ 456.661127][ T12] veth1_macvtap: left promiscuous mode [ 456.666739][ T12] veth0_macvtap: left promiscuous mode [ 456.672535][ T12] veth1_vlan: left promiscuous mode [ 456.679269][ T12] veth0_vlan: left promiscuous mode [ 456.686088][ T12] veth1_macvtap: left promiscuous mode [ 456.691820][ T12] veth0_macvtap: left promiscuous mode [ 456.697360][ T12] veth1_vlan: left promiscuous mode [ 456.702715][ T12] veth0_vlan: left promiscuous mode [ 457.077675][ T12] team0 (unregistering): Port device team_slave_1 removed [ 457.107647][ T12] team0 (unregistering): Port device team_slave_0 removed