last executing test programs: 4m1.412858745s ago: executing program 0 (id=2256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="911d9ddb3d0682", 0x7, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000480)) 3m59.048486473s ago: executing program 0 (id=2259): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00fbff15000000000000005c000000000000"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3m57.912822107s ago: executing program 0 (id=2267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0xa) 3m57.440724374s ago: executing program 0 (id=2271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r4, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) 3m54.587464374s ago: executing program 0 (id=2275): getrlimit(0x3, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) close(0xffffffffffffffff) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m50.255557583s ago: executing program 0 (id=2288): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x10000, 0xfffffffc]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 3m34.477772514s ago: executing program 32 (id=2288): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x10000, 0xfffffffc]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 15.971058696s ago: executing program 3 (id=2968): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff03013780200000000", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) rt_sigpending(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x20000881) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1a) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000060c0), 0x0, 0x4000001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f00000001c0)={0x2, 0xed, &(0x7f0000000040)}) 10.485866087s ago: executing program 5 (id=2980): flock(0xffffffffffffffff, 0x2) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 9.893582622s ago: executing program 3 (id=2982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 9.81098723s ago: executing program 2 (id=2983): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x4000001) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x7, 0x2, 0x6, 0x38, 0xb2b, 0x6}, &(0x7f0000000280)=0x9c) 9.752832111s ago: executing program 5 (id=2984): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x3, @local}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x2, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000003}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffb, 0xfffffffe}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, 0x0) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000440)=0xfff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000063180300440012800b000100697036746e6c00003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000300fe8800000000009790b77754ac00d424a8f100000000000000010114000200fe80000000"], 0x64}, 0x1, 0x0, 0x0, 0x14008005}, 0x20048090) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x0, 0xb5, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000003c0), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000600)={@multicast1, @empty}, &(0x7f0000000640)=0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[], 0x22c}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@initdev, @broadcast}, &(0x7f00000006c0)=0xc) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$netlink(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x8}, 0x0) 9.542671514s ago: executing program 2 (id=2986): sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x60, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.533588449s ago: executing program 5 (id=2987): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) io_setup(0x1, &(0x7f0000000480)=0x0) io_submit(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x100000000000f7) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="2319477b3b872e", 0x7) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 8.636674315s ago: executing program 3 (id=2988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) 8.525658975s ago: executing program 4 (id=2989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8.337153388s ago: executing program 5 (id=2990): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010026bd0100000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6b00330050100f00ffffffffffff0802110000"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 6.745103628s ago: executing program 5 (id=2991): flock(0xffffffffffffffff, 0x2) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.740831964s ago: executing program 4 (id=2993): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff03013780200000000", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) rt_sigpending(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x20000881) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1a) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000060c0), 0x0, 0x4000001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f00000001c0)={0x2, 0xed, &(0x7f0000000040)}) 6.102405354s ago: executing program 3 (id=2994): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="600000000124000008001b00"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.567581627s ago: executing program 5 (id=2995): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 5.506639822s ago: executing program 2 (id=2996): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, 0x0, &(0x7f0000000040)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) 4.911042037s ago: executing program 4 (id=2998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.362911309s ago: executing program 2 (id=3001): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xd8, 0x3, 0x6}) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x5, {[@md5sig={0x13, 0x12, "a6d8f13e69b828a31064920c633974f7"}]}}}}}}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x42051) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x0, 0xfffe, 0x4, 0x0, 0x88, 0x200, 0x2}, &(0x7f00000002c0)=0x9c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x8, 0x8, 0x0, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) 3.702538356s ago: executing program 4 (id=3002): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010026bd0100000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6b00330050100f00ffffffffffff0802110000"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 3.530043752s ago: executing program 1 (id=3003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000080850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) 3.450653056s ago: executing program 1 (id=3004): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x3, @local}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x2, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000003}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffb, 0xfffffffe}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, 0x0) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000440)=0xfff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000063180300440012800b000100697036746e6c00003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000300fe8800000000009790b77754ac00d424a8f100000000000000010114000200fe80000000"], 0x64}, 0x1, 0x0, 0x0, 0x14008005}, 0x20048090) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x0, 0xb5, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000003c0), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000600)={@multicast1, @empty}, &(0x7f0000000640)=0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[], 0x22c}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@initdev, @broadcast}, &(0x7f00000006c0)=0xc) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$netlink(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x8}, 0x0) 3.213733218s ago: executing program 4 (id=3005): sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="37a8b62f119f28619c1036f40d3d4b31a06f363850b6d813c87da76f560b1802881c45e035481b8b6ab3879dc1b08a730aef1942492b93842582ce3294", 0x3d, 0x60, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.147979229s ago: executing program 1 (id=3006): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0}, 0x801) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000680)={0x2, 0x5, 0x7, 0xf8, 0x40, 0x40, 0x81, 0xb, 0x8, 0x4, 0x4, 0x8, 0x4, 0xdc}, 0xe) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 2.390344086s ago: executing program 3 (id=3007): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) 2.149667223s ago: executing program 1 (id=3008): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x84, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = epoll_create(0x7) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x90000009}) ioctl$TCSETS(r2, 0x40045431, 0x0) utime(0x0, &(0x7f0000000040)={0x20002, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x14, 0x30, 0x12f, 0x3c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc9}}}, 0x6) 1.45619124s ago: executing program 3 (id=3009): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff03013780200000000", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) rt_sigpending(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x20000881) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1a) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000060c0), 0x0, 0x4000001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f00000001c0)={0x2, 0xed, &(0x7f0000000040)}) 1.138076221s ago: executing program 1 (id=3010): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa", 0x69}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.023546836s ago: executing program 2 (id=3011): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) 521.729621ms ago: executing program 1 (id=3012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x6) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) timer_create(0xb, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 189.073128ms ago: executing program 2 (id=3013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) io_setup(0x1, &(0x7f0000000480)=0x0) io_submit(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x100000000000f7) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r8, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) 0s ago: executing program 4 (id=3014): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r4 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9L\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd87\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4\x00v&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x8a)\xfa\x93J\xb9\x8d\xf3\xa8\xbe\x83\x12\xb6b\xef^\x1a\x81\xe9\xfa\x11g\nZ \xb7u\xf2\xf2\x06\x04\xb0\xb0Z\xd8\xf5\x13\xb6I', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x31}, 0x20048808) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x11) kernel console output (not intermixed with test programs): T24] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 681.401742][T11586] netlink: 'syz.4.1414': attribute type 3 has an invalid length. [ 681.610161][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 681.808712][T11591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1415'. [ 682.769997][ T29] audit: type=1400 audit(1776707701.158:271): avc: denied { mount } for pid=11595 comm="syz.1.1417" name="/" dev="autofs" ino=41416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 683.898771][ T5944] usb 3-1: USB disconnect, device number 23 [ 684.179038][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 684.559488][T11612] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1421'. [ 685.554195][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.561273][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.741560][ T29] audit: type=1400 audit(1776707704.168:272): avc: denied { write } for pid=11628 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 686.602610][T10081] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 687.004839][T10081] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 687.020968][T10081] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.408555][T10081] usb 1-1: config 0 has no interface number 0 [ 687.949673][T10081] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 687.975333][T10081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.986506][T10081] usb 1-1: Product: syz [ 687.991095][T10081] usb 1-1: Manufacturer: syz [ 687.996823][T10081] usb 1-1: SerialNumber: syz [ 688.035558][T10081] usb 1-1: config 0 descriptor?? [ 688.569144][T10081] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 690.534916][T11669] syzkaller0: entered promiscuous mode [ 690.542818][T11669] syzkaller0: entered allmulticast mode [ 692.035563][ T5833] usb 1-1: USB disconnect, device number 19 [ 692.776413][T11711] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1447'. [ 697.830478][T11755] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1461'. [ 701.233305][T11785] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1469'. [ 701.839896][T11794] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1475'. [ 703.503900][T11805] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1476'. [ 706.921260][T11815] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1482'. [ 708.021081][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 708.157860][T10487] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 708.358526][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 708.473912][T11833] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1485'. [ 709.369725][T10487] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 709.719367][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 709.769637][T10487] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.782146][T10487] usb 2-1: config 0 has no interface number 0 [ 709.795685][T10487] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 709.810133][T10487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.820143][T10487] usb 2-1: Product: syz [ 709.825523][T10487] usb 2-1: Manufacturer: syz [ 709.831198][T10487] usb 2-1: SerialNumber: syz [ 709.882135][T10487] usb 2-1: config 0 descriptor?? [ 710.118482][T11853] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1491'. [ 710.394271][T10487] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 710.673346][ T29] audit: type=1400 audit(1776707729.108:273): avc: denied { create } for pid=11864 comm="syz.0.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 710.782527][ T29] audit: type=1400 audit(1776707729.208:274): avc: denied { setopt } for pid=11864 comm="syz.0.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 712.896556][T11877] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1497'. [ 713.686809][T10081] usb 2-1: USB disconnect, device number 14 [ 715.973493][ T29] audit: type=1326 audit(1776707734.408:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11891 comm="syz.1.1503" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fcd99c819 code=0x0 [ 717.378751][T11863] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1494'. [ 717.390790][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 717.715557][ T29] audit: type=1400 audit(1776707736.148:276): avc: denied { write } for pid=11908 comm="syz.0.1507" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 717.775591][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'. [ 717.845745][ T29] audit: type=1400 audit(1776707736.218:277): avc: denied { getopt } for pid=11905 comm="syz.3.1508" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 718.111058][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 718.183009][ T29] audit: type=1326 audit(1776707736.608:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11918 comm="syz.4.1510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa10eb9c819 code=0x0 [ 718.316503][T11927] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 723.141057][T11945] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1516'. [ 723.882619][T10487] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 723.901927][ T29] audit: type=1400 audit(1776707742.328:279): avc: denied { search } for pid=5491 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.957069][T11960] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1523'. [ 723.982600][ T29] audit: type=1400 audit(1776707742.328:280): avc: denied { search } for pid=5491 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.052695][ T29] audit: type=1400 audit(1776707742.328:281): avc: denied { search } for pid=5491 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.124691][ T29] audit: type=1400 audit(1776707742.328:282): avc: denied { read } for pid=5491 comm="dhcpcd" name="n100" dev="tmpfs" ino=7926 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 724.185958][T10487] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 724.207086][T10487] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.264470][ T29] audit: type=1400 audit(1776707742.328:283): avc: denied { open } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=7926 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 724.304793][T10487] usb 4-1: config 0 has no interface number 0 [ 724.354594][T10487] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 724.385367][T10487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.419730][T10487] usb 4-1: Product: syz [ 724.434702][ T29] audit: type=1400 audit(1776707742.358:284): avc: denied { getattr } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=7926 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 724.464259][T10487] usb 4-1: Manufacturer: syz [ 724.821816][T10487] usb 4-1: SerialNumber: syz [ 724.830342][T10487] usb 4-1: config 0 descriptor?? [ 724.837094][ T29] audit: type=1400 audit(1776707742.998:285): avc: denied { read open } for pid=11973 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.867753][ T29] audit: type=1400 audit(1776707742.998:286): avc: denied { getattr } for pid=11973 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.001721][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1530'. [ 726.193425][T10487] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 727.853047][ T29] audit: type=1400 audit(1776707746.278:287): avc: denied { add_name } for pid=11964 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.940049][ T29] audit: type=1400 audit(1776707746.278:288): avc: denied { create } for pid=11964 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 728.076755][T12011] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1538'. [ 728.447495][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 728.756577][ T5829] usb 4-1: USB disconnect, device number 13 [ 729.233766][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 731.821733][T12069] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1549'. [ 732.237533][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 732.237564][ T29] audit: type=1400 audit(1776707750.668:296): avc: denied { ioctl } for pid=12077 comm="syz.3.1552" path="socket:[43083]" dev="sockfs" ino=43083 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 732.700663][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'. [ 733.109314][T12103] netlink: 'syz.1.1561': attribute type 10 has an invalid length. [ 733.204640][T12103] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 733.486405][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1563'. [ 733.501531][ T29] audit: type=1326 audit(1776707751.928:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.1.1563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fcd99c819 code=0x0 [ 733.625368][ T29] audit: type=1400 audit(1776707752.058:298): avc: denied { mounton } for pid=12109 comm="syz.1.1563" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 735.815541][T12130] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1568'. [ 735.953056][T12097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.006421][T12149] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.385133][T12149] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.470472][T12149] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.543566][T12149] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.672904][T12140] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.760369][T12140] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.848592][T12140] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.923364][T12140] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.518505][ T29] audit: type=1400 audit(1776707764.948:299): avc: denied { connect } for pid=12220 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 746.596285][ T29] audit: type=1400 audit(1776707764.978:300): avc: denied { write } for pid=12220 comm="syz.0.1594" laddr=172.20.20.10 lport=40542 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 746.982528][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.989489][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.144202][T12257] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12257 comm=syz.1.1606 [ 748.707632][ T29] audit: type=1326 audit(1776707767.128:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.1601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa10eb9c819 code=0x0 [ 750.200086][ T29] audit: type=1400 audit(1776707768.628:302): avc: denied { shutdown } for pid=12281 comm="syz.0.1612" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 752.702045][T12321] syzkaller0: entered promiscuous mode [ 752.718430][T12321] syzkaller0: entered allmulticast mode [ 752.750010][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 752.782282][ T29] audit: type=1326 audit(1776707771.208:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12323 comm="syz.0.1624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e20f9c819 code=0x0 [ 753.067640][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 753.746589][T12339] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1627'. [ 760.110031][T12365] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1634'. [ 762.364961][T12377] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1638'. [ 763.245864][T12389] syzkaller0: entered promiscuous mode [ 763.252976][T12389] syzkaller0: entered allmulticast mode [ 764.275929][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 764.978322][ T29] audit: type=1326 audit(1776707783.408:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fcd99c819 code=0x0 [ 769.382681][T12417] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1652'. [ 770.250656][T12442] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1659'. [ 771.799183][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 771.837729][T12450] syzkaller0: entered promiscuous mode [ 771.865935][T12450] syzkaller0: entered allmulticast mode [ 772.693235][T12471] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1667'. [ 774.116638][ T29] audit: type=1400 audit(1776707792.548:305): avc: denied { write } for pid=12481 comm="syz.2.1673" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 775.336563][T12511] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1681'. [ 777.134775][T12462] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1665'. [ 777.418639][ T29] audit: type=1400 audit(1776707795.848:306): avc: denied { getopt } for pid=12531 comm="syz.4.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 778.088749][T12551] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 778.179020][T12552] 9p: Bad value for 'rfdno' [ 779.205643][T12560] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1697'. [ 779.586358][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1701'. [ 779.977676][T12574] syzkaller0: entered promiscuous mode [ 780.005562][T12574] syzkaller0: entered allmulticast mode [ 781.241458][T12607] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1709'. [ 783.108221][T12621] nfs: Unknown parameter 'nof' [ 783.231314][ T29] audit: type=1400 audit(1776707801.658:307): avc: denied { create } for pid=12625 comm="syz.2.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 785.062350][T12641] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1720'. [ 787.344730][T12650] syzkaller0: entered promiscuous mode [ 787.776796][T12661] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1723'. [ 787.801997][T12662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12662 comm=syz.0.1728 [ 791.684630][T12698] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1737'. [ 791.719107][T12698] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 791.903665][T12706] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12706 comm=syz.1.1741 [ 792.559474][T12716] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1736'. [ 794.201135][T12742] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12742 comm=syz.1.1754 [ 795.637228][T12758] syzkaller0: entered promiscuous mode [ 795.669966][T12758] syzkaller0: entered allmulticast mode [ 796.122999][T12766] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1756'. [ 796.908043][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 797.189987][T12779] netlink: 'syz.2.1765': attribute type 1 has an invalid length. [ 797.315816][ T29] audit: type=1400 audit(1776707815.708:308): avc: denied { listen } for pid=12777 comm="syz.1.1766" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 797.378446][T12782] 9pnet_fd: Insufficient options for proto=fd [ 800.990439][ T29] audit: type=1400 audit(1776707819.418:309): avc: denied { map } for pid=12824 comm="syz.1.1781" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 801.018157][ T29] audit: type=1400 audit(1776707819.418:310): avc: denied { read write } for pid=12824 comm="syz.1.1781" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 801.937704][T12834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1784'. [ 805.325280][T12875] syzkaller0: entered promiscuous mode [ 805.344385][T12875] syzkaller0: entered allmulticast mode [ 805.910513][T12885] netlink: 'syz.4.1799': attribute type 1 has an invalid length. [ 806.026579][T12886] 9pnet_fd: Insufficient options for proto=fd [ 806.745561][ T29] audit: type=1326 audit(1776707825.178:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12889 comm="syz.2.1801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cdb39c819 code=0x0 [ 808.421651][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.429534][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.189785][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 812.552821][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 812.597124][T12984] syzkaller0: entered promiscuous mode [ 813.945503][T13007] syzkaller0: entered promiscuous mode [ 813.984632][T13007] syzkaller0: entered allmulticast mode [ 814.621949][T13025] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 814.683452][T13027] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1838'. [ 814.708364][T13027] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 814.761574][T13029] netlink: 'syz.1.1839': attribute type 3 has an invalid length. [ 816.716646][T13054] syzkaller0: entered promiscuous mode [ 816.768746][T13054] syzkaller0: entered allmulticast mode [ 828.709439][T13188] nfs: Unknown parameter 'nof' [ 832.550823][ T29] audit: type=1400 audit(1776707850.978:312): avc: denied { bind } for pid=13214 comm="syz.4.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.852900][T13243] syzkaller0: entered promiscuous mode [ 833.882742][T13243] syzkaller0: entered allmulticast mode [ 839.396765][T13287] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1920'. [ 841.021219][T13292] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 841.062564][T13292] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 841.071224][T13292] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1922'. [ 841.081578][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 841.092679][T13292] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 841.101493][T13292] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 841.110380][T13292] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1922'. [ 841.123939][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 843.312030][T13312] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1929'. [ 846.927673][T13321] netlink: 'syz.1.1932': attribute type 3 has an invalid length. [ 847.430171][T13326] syzkaller0: entered promiscuous mode [ 847.454442][T13326] syzkaller0: entered allmulticast mode [ 849.407652][ T29] audit: type=1400 audit(1776707867.838:313): avc: denied { read } for pid=13344 comm="syz.0.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 854.993924][T13371] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1948'. [ 856.822489][ T29] audit: type=1400 audit(1776707875.248:314): avc: denied { append } for pid=13391 comm="syz.0.1955" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 857.349271][T13399] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 857.403024][T13399] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 857.440321][T13399] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1958'. [ 857.472472][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 857.497050][T13399] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 857.530101][T13399] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 857.575682][T13399] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1958'. [ 857.641849][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 858.315840][ T29] audit: type=1400 audit(1776707876.748:315): avc: denied { connect } for pid=13418 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 858.383382][ T29] audit: type=1400 audit(1776707876.748:316): avc: denied { write } for pid=13418 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 860.231185][T13438] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1971'. [ 861.630659][T13461] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1979'. [ 861.668803][T13461] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 863.178958][T13476] capability: warning: `syz.4.1983' uses deprecated v2 capabilities in a way that may be insecure [ 864.563947][T13510] syzkaller0: entered promiscuous mode [ 864.592986][T13510] syzkaller0: entered allmulticast mode [ 864.926830][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 865.570497][T13530] syzkaller0: entered promiscuous mode [ 865.602584][T13530] syzkaller0: entered allmulticast mode [ 868.873090][ T29] audit: type=1804 audit(1776707887.298:317): pid=13546 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2006" name="file0" dev="tmpfs" ino=2076 res=1 errno=0 [ 868.982123][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 869.065556][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 869.244532][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 869.865406][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 870.051704][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.059854][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.973351][T13540] hsr0: entered promiscuous mode [ 872.006620][T13548] hsr0: entered promiscuous mode [ 872.063322][T13551] hsr0: entered promiscuous mode [ 872.170636][T13555] hsr0: entered promiscuous mode [ 872.534114][ T29] audit: type=1400 audit(1776707890.968:318): avc: denied { mounton } for pid=13563 comm="syz.0.2013" path="/393/file0" dev="tmpfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 873.091195][ T29] audit: type=1400 audit(1776707891.518:319): avc: denied { unmount } for pid=13576 comm="syz.4.2018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 873.591251][ T29] audit: type=1400 audit(1776707892.018:320): avc: denied { create } for pid=13584 comm="syz.0.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 877.884580][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 879.383215][ T29] audit: type=1400 audit(1776707897.808:321): avc: denied { setopt } for pid=13623 comm="syz.2.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 879.863263][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 881.480409][ T29] audit: type=1804 audit(1776707899.908:322): pid=13661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2043" name="/newroot/399/file0" dev="tmpfs" ino=2045 res=1 errno=0 [ 888.112760][T13713] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2058'. [ 888.813065][T13718] syzkaller0: entered promiscuous mode [ 888.827512][T13718] syzkaller0: entered allmulticast mode [ 890.592135][T13745] xt_hashlimit: size too large, truncated to 1048576 [ 891.464619][T13756] netlink: 5740 bytes leftover after parsing attributes in process `syz.3.2072'. [ 891.499180][T13756] netlink: 5740 bytes leftover after parsing attributes in process `syz.3.2072'. [ 892.380304][T13771] netlink: 5740 bytes leftover after parsing attributes in process `syz.3.2080'. [ 892.392331][T13771] netlink: 5740 bytes leftover after parsing attributes in process `syz.3.2080'. [ 895.134960][T13780] xt_hashlimit: size too large, truncated to 1048576 [ 896.127071][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 898.591926][ T29] audit: type=1400 audit(1776707917.018:323): avc: denied { read write } for pid=13805 comm="syz.2.2092" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 898.703476][ T29] audit: type=1400 audit(1776707917.018:324): avc: denied { open } for pid=13805 comm="syz.2.2092" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 898.893923][ T29] audit: type=1400 audit(1776707917.018:325): avc: denied { ioctl } for pid=13805 comm="syz.2.2092" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 900.199112][T13841] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 902.019933][T13844] syzkaller0: entered promiscuous mode [ 902.042004][T13844] syzkaller0: entered allmulticast mode [ 908.548463][T13901] syz_tun: entered allmulticast mode [ 908.621440][T13901] syz_tun: left allmulticast mode [ 911.802069][T13941] syz_tun: entered allmulticast mode [ 911.940515][T13941] syz_tun: left allmulticast mode [ 912.644230][T13959] 9p: Bad value for 'rfdno' [ 912.660816][ T29] audit: type=1400 audit(1776707931.068:326): avc: denied { read write } for pid=13958 comm="syz.2.2137" name="sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 912.700645][ T29] audit: type=1400 audit(1776707931.068:327): avc: denied { open } for pid=13958 comm="syz.2.2137" path="/dev/sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 916.344150][T13998] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2145'. [ 917.211794][ T29] audit: type=1804 audit(1776707935.638:328): pid=14002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2148" name="/newroot/412/file0" dev="tmpfs" ino=2111 res=1 errno=0 [ 918.807002][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'. [ 921.783987][T14071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2170'. [ 921.908087][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 921.936594][T14064] hsr0: entered promiscuous mode [ 922.247942][ T29] audit: type=1400 audit(1776707940.678:329): avc: denied { ioctl } for pid=14077 comm="syz.2.2173" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 922.479415][T14089] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 922.789342][T14090] syzkaller0: entered promiscuous mode [ 922.818974][T14090] syzkaller0: entered allmulticast mode [ 926.197429][ T9838] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 926.470550][ T9838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 926.490335][ T9838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.358060][ T9838] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 927.395644][ T9838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.494552][ T9838] usb 1-1: config 0 descriptor?? [ 928.160913][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.183196][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.191422][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.201085][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.209329][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.217903][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.226512][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.235124][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.243644][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.251778][ T9838] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 928.439378][ T9838] microsoft 0003:045E:00F9.0001: hidraw0: USB HID v0.01 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 928.508299][ T9838] microsoft 0003:045E:00F9.0001: no inputs found [ 928.562318][ T9838] microsoft 0003:045E:00F9.0001: could not initialize ff, continuing anyway [ 928.601583][ T9838] usb 1-1: USB disconnect, device number 20 [ 929.595704][T14153] fido_id[14153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 929.766227][ T29] audit: type=1400 audit(1776707948.198:330): avc: denied { read } for pid=14158 comm="syz.0.2197" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 930.430887][ T29] audit: type=1326 audit(1776707948.858:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14161 comm="syz.0.2198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e20f9c819 code=0x0 [ 931.313639][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.321257][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.062785][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'. [ 932.604508][ T9838] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 933.662565][ T9838] usb 3-1: Using ep0 maxpacket: 8 [ 933.670972][ T9838] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 933.700021][ T9838] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 933.953297][ T9838] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 933.985165][ T9838] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 933.997656][ T9838] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.012961][ T9838] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 934.023670][ T9838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.254208][ T9838] usb 3-1: GET_CAPABILITIES returned 0 [ 934.268301][ T9838] usbtmc 3-1:16.0: can't read capabilities [ 934.948029][T14222] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 935.019264][T13209] usb 3-1: USB disconnect, device number 24 [ 937.244738][T10487] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 939.795340][T10487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 939.828475][T10487] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 939.845674][T10487] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 939.857825][T10487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.892835][T10487] usb 1-1: config 0 descriptor?? [ 940.213543][T10487] usbhid 1-1:0.0: can't add hid device: -71 [ 940.231273][T10487] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 940.295959][T10487] usb 1-1: USB disconnect, device number 21 [ 942.539493][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 947.687786][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 965.161036][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 971.931282][ T29] audit: type=1400 audit(1776707990.358:332): avc: denied { connect } for pid=14536 comm="syz.2.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 972.426028][T14546] syzkaller0: entered promiscuous mode [ 972.449617][T14546] syzkaller0: entered allmulticast mode [ 977.062415][T14572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 977.079094][T14572] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 977.090256][T14572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 977.107207][T14572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 977.116879][T14572] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 977.610149][T14571] chnl_net:caif_netlink_parms(): no params data found [ 977.881741][T14571] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.901731][T14571] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.916967][T14571] bridge_slave_0: entered allmulticast mode [ 977.926865][T14571] bridge_slave_0: entered promiscuous mode [ 977.937977][T14571] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.947401][T14571] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.955921][T10487] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 977.965453][T14571] bridge_slave_1: entered allmulticast mode [ 977.974755][T14571] bridge_slave_1: entered promiscuous mode [ 977.998782][T14595] syzkaller0: entered promiscuous mode [ 978.019016][T14595] syzkaller0: entered allmulticast mode [ 978.144776][T10487] usb 3-1: Using ep0 maxpacket: 8 [ 978.186756][T10487] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 978.222535][T10487] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 978.272906][T10487] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 978.306652][T14571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.332512][T10487] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 978.378352][T14571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.397950][T10487] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 978.423351][T10487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.669764][T10487] usb 3-1: GET_CAPABILITIES returned 0 [ 978.681052][T10487] usbtmc 3-1:16.0: can't read capabilities [ 978.697321][T14571] team0: Port device team_slave_0 added [ 978.747353][T14571] team0: Port device team_slave_1 added [ 978.965675][ T9838] usb 3-1: USB disconnect, device number 25 [ 978.966623][T14571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.212645][ T5831] Bluetooth: hci5: command tx timeout [ 979.359922][T14571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.391061][T14571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.405642][T14571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.414929][T14571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.457767][T14571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.410418][T14625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14625 comm=syz.4.2340 [ 980.949990][T14571] hsr_slave_0: entered promiscuous mode [ 981.000041][T14571] hsr_slave_1: entered promiscuous mode [ 981.042269][T14571] debugfs: 'hsr0' already exists in 'hsr' [ 981.071546][T14571] Cannot create hsr debugfs directory [ 981.138522][ T1153] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.292857][ T5831] Bluetooth: hci5: command tx timeout [ 983.543828][ T5831] Bluetooth: hci5: command tx timeout [ 983.573431][ T1153] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.245975][ T29] audit: type=1400 audit(1776708002.678:333): avc: denied { connect } for pid=14657 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 984.270414][T14642] syzkaller0: entered promiscuous mode [ 984.300366][T14642] syzkaller0: entered allmulticast mode [ 984.309447][ T29] audit: type=1400 audit(1776708002.738:334): avc: denied { read } for pid=14657 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 984.350202][ T29] audit: type=1400 audit(1776708002.778:335): avc: denied { write } for pid=14657 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 985.565890][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 985.622660][ T5831] Bluetooth: hci5: command tx timeout [ 987.515208][ T1153] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.711424][ T1153] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.788741][ T29] audit: type=1400 audit(1776708007.218:336): avc: denied { read write } for pid=14705 comm="syz.3.2367" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 988.909518][ T29] audit: type=1400 audit(1776708007.218:337): avc: denied { open } for pid=14705 comm="syz.3.2367" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 988.956486][ T29] audit: type=1400 audit(1776708007.268:338): avc: denied { ioctl } for pid=14705 comm="syz.3.2367" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 989.190555][ T1153] erspan0: left allmulticast mode [ 989.198460][ T1153] erspan0: left promiscuous mode [ 989.207735][ T1153] bridge0: port 3(erspan0) entered disabled state [ 989.227631][ T1153] bridge_slave_1: left allmulticast mode [ 989.237101][ T1153] bridge_slave_1: left promiscuous mode [ 989.247713][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.274415][ T1153] bridge_slave_0: left allmulticast mode [ 989.288011][ T1153] bridge_slave_0: left promiscuous mode [ 989.310202][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.093343][T14738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2373'. [ 990.711818][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.734933][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.746936][ T1153] bond0 (unregistering): Released all slaves [ 990.762155][ T1153] bond1 (unregistering): Released all slaves [ 990.782689][ T1153] bond2 (unregistering): Released all slaves [ 990.824942][ T1153] bond3 (unregistering): Released all slaves [ 990.852336][ T1153] bond4 (unregistering): Released all slaves [ 990.889434][ T1153] bond5 (unregistering): Released all slaves [ 990.917568][ T1153] bond6 (unregistering): Released all slaves [ 990.963682][ T1153] bond7 (unregistering): Released all slaves [ 990.988590][ T1153] bond8 (unregistering): Released all slaves [ 991.026541][ T1153] bond9 (unregistering): Released all slaves [ 991.066645][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 991.512102][T14571] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 991.704320][T14571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.736740][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.750254][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.317776][T14571] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 993.671507][T14571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 993.757858][T14571] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 994.017945][T14571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 994.064803][T14571] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 994.150398][T14571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 994.871134][ T1153] hsr_slave_0: left promiscuous mode [ 994.912123][ T1153] hsr_slave_1: left promiscuous mode [ 994.943214][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.969266][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.072950][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.124518][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.327538][ T1153] hsr0: left promiscuous mode [ 995.335637][ T1153] veth1_macvtap: left promiscuous mode [ 995.343571][ T1153] veth0_macvtap: left promiscuous mode [ 996.521152][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 996.546224][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 996.642519][ T9838] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 996.728436][T14808] syzkaller0: entered promiscuous mode [ 996.736631][T14808] syzkaller0: entered allmulticast mode [ 996.747915][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 996.843381][ T9838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.877023][ T9838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.898617][ T9838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 996.917276][ T9838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 996.955375][ T9838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.018961][ T9838] usb 3-1: config 0 descriptor?? [ 997.059167][T14571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.104560][T14571] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.182077][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.189281][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.237492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.244748][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.467898][ T9838] hid_parser_main: 222 callbacks suppressed [ 997.468449][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.504317][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.665339][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.675366][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.683536][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.691972][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.699680][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.707218][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.714664][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.722057][ T9838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 997.925654][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2399'. [ 997.939595][T14862] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 998.151932][ T9838] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 998.251461][ T9838] usb 3-1: USB disconnect, device number 26 [ 999.116005][T14864] fido_id[14864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 999.332236][T14571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.697331][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'. [ 999.804667][T14890] lo speed is unknown, defaulting to 1000 [ 999.812298][T14890] lo speed is unknown, defaulting to 1000 [ 999.834540][T14890] lo speed is unknown, defaulting to 1000 [ 999.852961][T14890] smbdirect: ib_dev[sy0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 999.872191][T14890] smbdirect: ib_dev[sy0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 999.892940][T14890] smbdirect: ib_dev[sy0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 999.930248][T14890] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1000.032412][T14890] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 1000.101892][T14887] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1000.126380][T14890] lo speed is unknown, defaulting to 1000 [ 1000.134228][T14890] lo speed is unknown, defaulting to 1000 [ 1000.142053][T14890] lo speed is unknown, defaulting to 1000 [ 1000.150964][T14890] lo speed is unknown, defaulting to 1000 [ 1000.158572][T14890] lo speed is unknown, defaulting to 1000 [ 1000.359367][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1000.994809][T14571] veth0_vlan: entered promiscuous mode [ 1001.050173][T14571] veth1_vlan: entered promiscuous mode [ 1001.089866][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 1001.140067][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 1001.239886][T14571] veth0_macvtap: entered promiscuous mode [ 1001.302943][T14571] veth1_macvtap: entered promiscuous mode [ 1001.412116][T14571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.484794][T14571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.560813][ T7259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.599820][ T7259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.650219][ T7259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.698095][ T7259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.356315][T14937] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1003.015724][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.055312][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.518614][ T5491] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1003.781644][T14950] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1003.894501][ T8121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.942531][ T8121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.956139][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 1004.321082][ T29] audit: type=1400 audit(1776708022.748:339): avc: denied { mounton } for pid=14571 comm="syz-executor" path="/root/syzkaller.q99KVR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=52391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1004.502350][ T29] audit: type=1400 audit(1776708022.838:340): avc: denied { unmount } for pid=14571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1004.522304][T13209] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1004.702510][T13209] usb 4-1: Using ep0 maxpacket: 8 [ 1004.722158][T13209] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1005.066020][ T9838] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1005.096858][T13209] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1005.160134][T13209] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1005.186350][T13209] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1005.208874][T13209] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.239921][T13209] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1005.286679][ T9838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.303351][T13209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.316433][ T9838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.344966][ T9838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1005.388808][ T9838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1005.409853][ T9838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.438996][ T9838] usb 3-1: config 0 descriptor?? [ 1005.543962][T13209] usb 4-1: usb_control_msg returned -32 [ 1005.559873][T13209] usbtmc 4-1:16.0: can't read capabilities [ 1006.011955][ T9838] hid_parser_main: 5 callbacks suppressed [ 1006.011977][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.272172][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.337276][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.427139][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.511782][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.575321][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.684507][T14995] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 1006.702003][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.748373][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.767901][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.790262][ T9838] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1006.847999][ T9838] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1006.923634][ T9838] usb 3-1: USB disconnect, device number 27 [ 1007.452220][T15003] fido_id[15003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1010.176947][T13209] usb 4-1: USB disconnect, device number 14 [ 1010.652143][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2436'. [ 1010.667803][T15021] hsr0: entered promiscuous mode [ 1010.810075][T15037] siw: device registration error -23 [ 1010.978570][T15037] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1011.123180][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2434'. [ 1011.237350][T15039] nfs: Unknown parameter 'nof' [ 1015.087532][T15089] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1015.229349][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 1015.294164][T15086] syzkaller0: entered promiscuous mode [ 1015.309581][T15086] syzkaller0: entered allmulticast mode [ 1016.106598][T15112] nfs: Unknown parameter 'nof' [ 1016.236454][ T29] audit: type=1800 audit(1776708034.658:341): pid=15114 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2460" name="nullb0" dev="tmpfs" ino=2676 res=0 errno=0 [ 1017.670091][ T29] audit: type=1400 audit(1776708036.098:342): avc: denied { open } for pid=15143 comm="syz.3.2472" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1019.519182][T15146] random: crng reseeded on system resumption [ 1019.567023][ T29] audit: type=1400 audit(1776708037.948:343): avc: denied { write } for pid=15143 comm="syz.3.2472" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1020.188996][ T29] audit: type=1400 audit(1776708037.948:344): avc: denied { open } for pid=15143 comm="syz.3.2472" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1020.485346][T15159] nfs: Unknown parameter 'nof' [ 1020.497240][T15159] fuse: fd is not a fuse device [ 1020.777145][ T29] audit: type=1400 audit(1776708039.208:345): avc: denied { watch watch_reads } for pid=15160 comm="syz.3.2476" path="/479" dev="tmpfs" ino=2468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1024.328103][ T5831] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1024.549286][T15203] bridge0: port 3(erspan0) entered disabled state [ 1024.700344][T15203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.707638][T15203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.028507][T15203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.063922][T15203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.434621][T15203] hsr0: left promiscuous mode [ 1025.494666][ T35] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.527626][ T35] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.587327][ T35] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.616780][ T35] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.075402][T15244] netlink: 'syz.4.2499': attribute type 1 has an invalid length. [ 1027.495537][T13209] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1027.662861][T13209] usb 3-1: Using ep0 maxpacket: 8 [ 1027.687325][T13209] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1027.714128][T13209] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1027.754415][T13209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1027.796892][T13209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1027.834155][T13209] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1027.849745][T13209] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1027.918662][T15296] netlink: 'syz.5.2511': attribute type 1 has an invalid length. [ 1028.839550][T13209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.077709][T13209] usb 3-1: usb_control_msg returned -32 [ 1029.093311][T13209] usbtmc 3-1:16.0: can't read capabilities [ 1029.392846][T15308] siw: device registration error -23 [ 1029.885783][ T29] audit: type=1400 audit(1776708048.318:346): avc: denied { audit_write } for pid=15314 comm="syz.5.2517" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1030.016081][T15318] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 1030.274004][ T5932] IPVS: starting estimator thread 0... [ 1030.372676][T15326] IPVS: using max 42 ests per chain, 100800 per kthread [ 1031.422747][T15341] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2525'. [ 1031.789029][T13209] usb 3-1: USB disconnect, device number 28 [ 1035.432557][ T803] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1035.539098][T15359] siw: device registration error -23 [ 1035.882757][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 1035.898724][ T803] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 1035.926756][ T803] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 1035.950047][ T803] usb 4-1: config 166 has no interface number 0 [ 1035.971497][ T803] usb 4-1: config 166 has no interface number 1 [ 1035.993889][ T803] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1036.041484][ T803] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1036.089828][ T803] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1036.136488][ T803] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1036.201878][ T803] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1036.243872][ T803] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1036.288463][ T803] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1036.323935][ T803] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1036.359346][ T803] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1036.420011][ T803] usb 4-1: config 166 interface 177 has no altsetting 0 [ 1036.453233][ T803] usb 4-1: config 166 interface 34 has no altsetting 0 [ 1036.483461][ T803] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1036.500711][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.519472][ T803] usb 4-1: Product: syz [ 1036.528687][ T803] usb 4-1: Manufacturer: syz [ 1036.542568][ T803] usb 4-1: SerialNumber: syz [ 1036.792370][ T803] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 1037.443702][ T803] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 1037.529227][ T803] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 1037.552107][ T803] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1037.568809][ T803] uvcvideo 4-1:166.34: No valid video chain found. [ 1037.600516][ T803] usb 4-1: USB disconnect, device number 15 [ 1038.522548][T13209] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1038.712732][T13209] usb 4-1: Using ep0 maxpacket: 8 [ 1038.761656][T13209] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1038.818891][T13209] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.880008][T13209] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1038.956763][T13209] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1039.049312][T13209] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.122565][T13209] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1039.147696][T13209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.160729][T15395] ======================================================= [ 1039.160729][T15395] WARNING: The mand mount option has been deprecated and [ 1039.160729][T15395] and is ignored by this kernel. Remove the mand [ 1039.160729][T15395] option from the mount to silence this warning. [ 1039.160729][T15395] ======================================================= [ 1039.407869][T13209] usb 4-1: usb_control_msg returned -32 [ 1039.415086][T13209] usbtmc 4-1:16.0: can't read capabilities [ 1039.494093][ T24] IPVS: starting estimator thread 0... [ 1039.612670][T15400] IPVS: using max 33 ests per chain, 79200 per kthread [ 1039.888877][T15408] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1039.919129][T13209] usb 4-1: USB disconnect, device number 16 [ 1040.166034][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2546'. [ 1042.455065][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2553'. [ 1043.687176][ T5831] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 1043.712948][ T29] audit: type=1400 audit(1776708062.138:347): avc: denied { write } for pid=15464 comm="syz.3.2565" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1043.762569][ T29] audit: type=1400 audit(1776708062.138:348): avc: denied { open } for pid=15464 comm="syz.3.2565" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1043.817714][ T29] audit: type=1400 audit(1776708062.248:349): avc: denied { ioctl } for pid=15464 comm="syz.3.2565" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1044.315641][T15469] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1044.431811][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'. [ 1045.844871][T15495] nfs: Unknown parameter 'nof' [ 1047.617550][T15506] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2575'. [ 1048.958222][ T24] IPVS: starting estimator thread 0... [ 1049.214444][T15520] IPVS: using max 42 ests per chain, 100800 per kthread [ 1049.442183][T15527] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2580'. [ 1051.395485][ T29] audit: type=1400 audit(1776708069.828:350): avc: denied { map } for pid=15543 comm="syz.5.2587" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1051.946660][ T24] IPVS: starting estimator thread 0... [ 1052.082648][T15554] IPVS: using max 37 ests per chain, 88800 per kthread [ 1052.100869][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 1052.731648][T15565] overlayfs: failed to clone upperpath [ 1053.273841][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'. [ 1053.911009][T15585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2598'. [ 1054.055071][T15586] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1054.176722][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.202710][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.251700][T15619] fuse: Bad value for 'fd' [ 1058.256724][ T29] audit: type=1400 audit(1776708076.678:351): avc: denied { create } for pid=15618 comm="syz.1.2612" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1058.290909][ T5944] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1058.320956][ T29] audit: type=1400 audit(1776708076.678:352): avc: denied { mounton } for pid=15618 comm="syz.1.2612" path="/585/file0" dev="tmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1058.417206][ T29] audit: type=1400 audit(1776708076.828:353): avc: denied { unlink } for pid=5827 comm="syz-executor" name="file0" dev="tmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1058.492857][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 1058.519986][ T5944] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 1058.536957][ T5944] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 1058.574339][ T5944] usb 3-1: config 166 has no interface number 0 [ 1058.597724][ T5944] usb 3-1: config 166 has no interface number 1 [ 1058.620951][ T5944] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1058.649671][ T5944] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1058.716454][ T5944] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1058.756316][ T5944] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1058.795425][ T5944] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1058.816119][ T5944] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1058.840741][ T5944] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1058.906852][ T5944] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1058.919065][ T5944] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1058.940060][ T5944] usb 3-1: config 166 interface 177 has no altsetting 0 [ 1058.951091][ T5944] usb 3-1: config 166 interface 34 has no altsetting 0 [ 1058.964981][ T5944] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1058.974801][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.983407][ T5944] usb 3-1: Product: syz [ 1058.987892][ T5944] usb 3-1: Manufacturer: syz [ 1058.995665][ T5944] usb 3-1: SerialNumber: syz [ 1059.235146][ T5944] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 1059.437286][ T5944] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 1059.922202][ T5944] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 1059.956346][ T5944] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1059.975754][ T5944] uvcvideo 3-1:166.34: No valid video chain found. [ 1060.085188][ T5944] usb 3-1: USB disconnect, device number 29 [ 1060.684403][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1060.707740][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1060.717249][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1062.616411][T15687] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2632'. [ 1062.627059][T15676] bridge0: port 3(erspan0) entered disabled state [ 1062.887186][T15676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.895140][T15676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.100518][T15676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.154518][T15676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.131171][T15676] hsr0: left promiscuous mode [ 1065.152151][ T1153] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.183884][ T1153] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.203654][ T1153] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.222188][ T1153] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.055567][T15729] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 1066.091390][T15730] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1066.101304][T15730] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1066.456701][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 1068.194677][T15742] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1068.716238][T15757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2657'. [ 1068.780097][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.131235][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.182319][T15758] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1069.213280][T15754] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1073.928693][T14572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1073.945807][T14572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1073.963660][T14572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1073.977818][T14572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1073.985854][T14572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1074.429530][T15800] lo speed is unknown, defaulting to 1000 [ 1074.546175][T15806] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1074.553250][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1074.578981][T15806] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1074.586094][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1074.949091][ T29] audit: type=1400 audit(1776708093.368:354): avc: denied { read append } for pid=15813 comm="syz.5.2671" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1076.008831][T15800] chnl_net:caif_netlink_parms(): no params data found [ 1076.042618][T14572] Bluetooth: hci0: command tx timeout [ 1076.070710][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2673'. [ 1076.195332][T15819] Bluetooth: MGMT ver 1.23 [ 1076.203073][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'. [ 1076.252178][T14572] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1076.387213][T15800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.387355][T15800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.387496][T15800] bridge_slave_0: entered allmulticast mode [ 1076.397676][T15800] bridge_slave_0: entered promiscuous mode [ 1076.454153][T15800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.462735][T15800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.470909][T15800] bridge_slave_1: entered allmulticast mode [ 1076.745265][T15800] bridge_slave_1: entered promiscuous mode [ 1076.945832][T15842] futex_wake_op: syz.4.2678 tries to shift op by 144; fix this program [ 1076.998287][T15800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.041210][T15800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.174222][T15849] random: crng reseeded on system resumption [ 1077.248851][ T29] audit: type=1400 audit(1776708095.678:355): avc: denied { connect } for pid=15844 comm="syz.5.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1077.918228][T15800] team0: Port device team_slave_0 added [ 1078.087851][T15800] team0: Port device team_slave_1 added [ 1078.092526][T14572] Bluetooth: hci0: command tx timeout [ 1078.264892][T15800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.298614][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.319139][T15865] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1079.326320][T15800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.342897][T15800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.355498][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1079.362476][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.362575][T15800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.924622][T15800] hsr_slave_0: entered promiscuous mode [ 1079.943397][T15800] hsr_slave_1: entered promiscuous mode [ 1080.334659][T14572] Bluetooth: hci0: command tx timeout [ 1080.362844][T15703] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1080.522889][T15703] usb 6-1: Using ep0 maxpacket: 16 [ 1080.572306][T15703] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1080.606915][T15703] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1080.646698][T15703] usb 6-1: config 166 has no interface number 0 [ 1080.689773][T15703] usb 6-1: config 166 has no interface number 1 [ 1080.727135][T15703] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1080.751907][T15703] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1080.786177][T15703] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1080.810977][T15703] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1080.837470][T15703] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1080.853883][T15703] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1080.864618][T15703] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1080.877404][T15703] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1080.902203][T15703] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1080.944518][T15703] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1080.971876][T15703] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1080.996750][T15703] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1081.016282][T15703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.031527][T15703] usb 6-1: Product: syz [ 1081.186687][T15703] usb 6-1: Manufacturer: syz [ 1081.191432][T15703] usb 6-1: SerialNumber: syz [ 1082.912694][T14572] Bluetooth: hci0: command tx timeout [ 1083.333111][T15703] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 1084.038418][T15703] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 1085.058311][ T29] audit: type=1400 audit(1776708103.488:356): avc: denied { create } for pid=15918 comm="syz.2.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1085.099626][T15703] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 1085.144893][T15703] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1085.169027][T15703] uvcvideo 6-1:166.34: No valid video chain found. [ 1085.331860][T15703] usb 6-1: USB disconnect, device number 2 [ 1087.058122][T15800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1087.218935][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1087.238013][T15800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1087.249800][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1088.217406][T15800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1088.258161][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1088.270282][T15800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1088.280716][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1088.557417][T15800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.991613][T15800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.371219][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.378330][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.471120][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.478238][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.650473][T15800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.703052][T15800] veth0_vlan: entered promiscuous mode [ 1090.737569][T15800] veth1_vlan: entered promiscuous mode [ 1090.809603][T15800] veth0_macvtap: entered promiscuous mode [ 1090.837111][T15800] veth1_macvtap: entered promiscuous mode [ 1090.855869][T15800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.866822][T15800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.031419][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.055935][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.116204][T15974] siw: device registration error -23 [ 1091.502684][ T5833] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1091.662520][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 1091.679069][ T5833] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.691653][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1091.705265][ T5833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1091.715093][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.688457][ T5833] usbtmc 6-1:16.0: bulk endpoints not found [ 1092.701109][ T7259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.724959][ T7259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.024243][ T7259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.035833][ T7259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.080651][ T7259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.089844][T15980] fuse: fd is not a fuse device [ 1093.094744][ T7259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.114677][ T29] audit: type=1400 audit(1776708111.548:357): avc: denied { mounton } for pid=15800 comm="syz-executor" path="/root/syzkaller.WHeyIY/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1093.297113][ T29] audit: type=1400 audit(1776708111.608:358): avc: denied { mounton } for pid=15800 comm="syz-executor" path="/root/syzkaller.WHeyIY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1094.338395][ T29] audit: type=1400 audit(1776708111.628:359): avc: denied { mounton } for pid=15800 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1094.384155][ T9838] usb 6-1: USB disconnect, device number 3 [ 1094.552534][T13209] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1094.724348][T13209] usb 2-1: Using ep0 maxpacket: 16 [ 1094.757299][T13209] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1094.807119][T13209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.856363][T13209] usb 2-1: Product: syz [ 1094.882681][T13209] usb 2-1: Manufacturer: syz [ 1094.909016][T13209] usb 2-1: SerialNumber: syz [ 1094.949765][T13209] usb 2-1: config 0 descriptor?? [ 1095.809159][T13209] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1095.916026][T16004] futex_wake_op: syz.3.2725 tries to shift op by 144; fix this program [ 1096.032944][T13209] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 1096.326720][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1097.879683][T13209] usb 2-1: USB disconnect, device number 15 [ 1099.097862][T16031] futex_wake_op: syz.5.2734 tries to shift op by 144; fix this program [ 1100.008721][T16039] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2736'. [ 1100.333884][T16046] futex_wake_op: syz.4.2739 tries to shift op by 144; fix this program [ 1102.366539][T16044] Bluetooth: hci3: command 0x0406 tx timeout [ 1102.387458][T16044] Bluetooth: hci5: command 0x0406 tx timeout [ 1103.498542][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 1103.562190][T16084] random: crng reseeded on system resumption [ 1104.586926][T16092] syzkaller0: entered promiscuous mode [ 1104.615040][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1104.633618][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1104.646478][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1104.652019][T16092] syzkaller0: entered allmulticast mode [ 1104.679247][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1104.715398][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1104.725447][T16095] random: crng reseeded on system resumption [ 1105.600745][ T29] audit: type=1400 audit(1776708124.028:360): avc: denied { create } for pid=16098 comm="syz.5.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1105.775608][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 1106.322053][T16089] lo speed is unknown, defaulting to 1000 [ 1106.813183][ T5831] Bluetooth: hci2: command tx timeout [ 1107.144187][T16089] chnl_net:caif_netlink_parms(): no params data found [ 1107.353274][T10081] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1107.688749][T10081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1107.705278][T10081] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1107.733428][T10081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.797961][T10081] usb 4-1: config 0 descriptor?? [ 1107.809755][T16118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1108.305885][ T29] audit: type=1400 audit(1776708126.738:361): avc: denied { create } for pid=16130 comm="syz.2.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1108.456179][ T29] audit: type=1400 audit(1776708126.828:362): avc: denied { setopt } for pid=16130 comm="syz.2.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1108.711860][T10081] usbhid 4-1:0.0: can't add hid device: -71 [ 1108.746066][T10081] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1108.769408][T10081] usb 4-1: USB disconnect, device number 17 [ 1108.892776][ T5831] Bluetooth: hci2: command tx timeout [ 1108.892832][T16089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.946598][T16089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.965573][T16089] bridge_slave_0: entered allmulticast mode [ 1108.985380][T16089] bridge_slave_0: entered promiscuous mode [ 1108.994732][T16089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.006908][T16089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.014837][T16089] bridge_slave_1: entered allmulticast mode [ 1109.025195][T16089] bridge_slave_1: entered promiscuous mode [ 1109.033102][ T9021] batadv1: left allmulticast mode [ 1109.042041][ T9021] batadv1: left promiscuous mode [ 1109.053229][ T9021] bridge0: port 4(batadv1) entered disabled state [ 1109.089568][ T9021] erspan0: left allmulticast mode [ 1109.102497][ T9021] erspan0: left promiscuous mode [ 1109.107688][ T9021] bridge0: port 3(erspan0) entered disabled state [ 1109.124371][ T9021] bridge_slave_1: left allmulticast mode [ 1109.131326][ T9021] bridge_slave_1: left promiscuous mode [ 1109.138954][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.154497][ T9021] bridge_slave_0: left allmulticast mode [ 1109.163244][ T29] audit: type=1400 audit(1776708127.588:363): avc: denied { name_bind } for pid=16140 comm="syz.5.2768" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1109.184266][ T9021] bridge_slave_0: left promiscuous mode [ 1109.238623][ T29] audit: type=1400 audit(1776708127.668:364): avc: denied { getopt } for pid=16140 comm="syz.5.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1109.352649][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.898471][ T5831] Bluetooth: hci2: command tx timeout [ 1112.526451][ T9021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.594050][T16166] siw: device registration error -23 [ 1112.611983][T16166] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1113.013945][ T9021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.028781][ T9021] bond0 (unregistering): Released all slaves [ 1113.108825][T16169] futex_wake_op: syz.1.2772 tries to shift op by 144; fix this program [ 1113.444868][ T9021] bond1 (unregistering): Released all slaves [ 1113.475806][ T9021] bond2 (unregistering): Released all slaves [ 1113.531121][ T29] audit: type=1400 audit(1776708131.958:365): avc: denied { map } for pid=16171 comm="syz.3.2773" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1113.557722][ T9021] bond3 (unregistering): Released all slaves [ 1113.605807][ T9021] bond4 (unregistering): Released all slaves [ 1113.638647][ T29] audit: type=1400 audit(1776708131.958:366): avc: denied { execute } for pid=16171 comm="syz.3.2773" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1113.671276][ T9021] bond5 (unregistering): Released all slaves [ 1113.694407][ T9021] bond6 (unregistering): Released all slaves [ 1113.919036][T16089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.934239][ T5831] Bluetooth: hci2: command tx timeout [ 1114.098384][T16089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.253520][T16089] team0: Port device team_slave_0 added [ 1114.290492][T16089] team0: Port device team_slave_1 added [ 1114.552125][T16089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.592367][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.673846][T16089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.780858][T16089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.804840][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.907627][T16089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.592815][T16209] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2778'. [ 1115.686124][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.697294][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.742713][T16089] hsr_slave_0: entered promiscuous mode [ 1115.749308][T16089] hsr_slave_1: entered promiscuous mode [ 1115.756516][T16089] debugfs: 'hsr0' already exists in 'hsr' [ 1115.762357][T16089] Cannot create hsr debugfs directory [ 1116.122998][T15703] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1116.211384][ T9021] hsr_slave_0: left promiscuous mode [ 1116.223710][ T9021] hsr_slave_1: left promiscuous mode [ 1116.238590][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.258455][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.292602][T15703] usb 2-1: Using ep0 maxpacket: 8 [ 1116.312316][T15703] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.344750][T15703] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.364719][T15703] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1116.377050][T15703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.412066][T15703] usbtmc 2-1:16.0: bulk endpoints not found [ 1116.822908][T16227] capability: warning: `syz.5.2786' uses 32-bit capabilities (legacy support in use) [ 1117.840132][ T9021] team0 (unregistering): Port device team_slave_1 removed [ 1117.892801][ T9021] team0 (unregistering): Port device team_slave_0 removed [ 1118.232179][T16240] siw: device registration error -23 [ 1118.250247][T16240] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1118.623759][ T5491] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1118.982907][ T1220] usb 2-1: USB disconnect, device number 16 [ 1119.456304][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 1120.543951][T15699] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1120.862537][T15699] usb 3-1: Using ep0 maxpacket: 8 [ 1120.879465][T15699] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1120.897780][T15699] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1120.915354][T15699] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1121.132081][ T9021] IPVS: stop unused estimator thread 0... [ 1121.198663][T15699] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1121.285209][T15699] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.390641][T15699] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1121.441908][T15699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.727293][T15699] usb 3-1: usb_control_msg returned -32 [ 1121.752083][T15699] usbtmc 3-1:16.0: can't read capabilities [ 1122.004677][T16089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1122.025310][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1122.041902][T16089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1122.055352][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1122.070597][T16089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1122.081405][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.091409][T16089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1122.101523][T16089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1122.236534][T16089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.262392][T16089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.318561][T11606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.325851][T11606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.367719][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.374953][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.684462][T16089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.219634][T15699] usb 3-1: USB disconnect, device number 30 [ 1123.327442][T16089] veth0_vlan: entered promiscuous mode [ 1123.344096][T16089] veth1_vlan: entered promiscuous mode [ 1123.376240][T16089] veth0_macvtap: entered promiscuous mode [ 1123.390731][T16089] veth1_macvtap: entered promiscuous mode [ 1123.993508][T16089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.037970][T15699] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1124.810987][T16089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.858621][ T1120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.879494][ T1120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.958350][ T1120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.968189][ T1120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.985886][T15699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1124.997841][T15699] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1125.053732][T15699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.103349][T15699] usb 3-1: config 0 descriptor?? [ 1125.125619][T16344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1125.153003][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.167662][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.202579][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.211138][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.160086][T15699] usbhid 3-1:0.0: can't add hid device: -71 [ 1126.195765][T15699] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1126.249924][T15699] usb 3-1: USB disconnect, device number 31 [ 1126.783445][T10081] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1126.995957][T10081] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1127.026080][T10081] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1127.048395][T10081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.079779][T16379] futex_wake_op: syz.2.2818 tries to shift op by 144; fix this program [ 1127.089662][T10081] usb 2-1: Product: syz [ 1127.114579][T10081] usb 2-1: Manufacturer: syz [ 1127.137716][T10081] usb 2-1: SerialNumber: syz [ 1127.781247][T16387] futex_wake_op: syz.5.2821 tries to shift op by 144; fix this program [ 1128.096760][T10081] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1128.539043][T10081] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1129.004713][T10081] usb 2-1: USB disconnect, device number 17 [ 1129.258164][T13895] udevd[13895]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1130.541393][T16422] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1131.062878][ T141] batadv1: left allmulticast mode [ 1131.070937][ T141] batadv1: left promiscuous mode [ 1131.078811][ T141] bridge0: port 4(batadv1) entered disabled state [ 1132.381130][ T141] erspan0: left allmulticast mode [ 1132.452609][ T141] erspan0: left promiscuous mode [ 1132.479660][ T141] bridge0: port 3(erspan0) entered disabled state [ 1132.633783][ T141] bridge_slave_1: left allmulticast mode [ 1132.654506][ T141] bridge_slave_1: left promiscuous mode [ 1132.666014][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.426813][ T141] bridge_slave_0: left allmulticast mode [ 1133.608442][ T141] bridge_slave_0: left promiscuous mode [ 1133.627542][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.046471][T15699] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1134.335275][T15699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.355151][T15699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.381419][T15699] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1134.410296][T15699] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1134.421027][T15699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.234039][T15699] usb 3-1: config 0 descriptor?? [ 1136.285239][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.382644][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.404278][T16460] netlink: zone id is out of range [ 1136.459868][T15699] hid_parser_main: 5 callbacks suppressed [ 1136.459892][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1136.464286][T16460] netlink: zone id is out of range [ 1136.478183][T16460] netlink: zone id is out of range [ 1136.484944][T16460] netlink: zone id is out of range [ 1136.497759][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1136.515278][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1136.527562][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1136.535431][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1136.544946][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1136.553140][T16460] netlink: zone id is out of range [ 1136.562224][ T141] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1136.576796][T16460] netlink: zone id is out of range [ 1136.582102][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1136.602789][T16460] netlink: zone id is out of range [ 1136.617431][ T141] bond0 (unregistering): Released all slaves [ 1136.623970][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1136.638209][T16460] netlink: zone id is out of range [ 1136.656170][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1136.671328][T16460] netlink: del zone limit has 4 unknown bytes [ 1136.865679][ T141] bond1 (unregistering): Released all slaves [ 1136.875557][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1136.884357][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1137.234793][T16468] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2843'. [ 1137.336763][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1137.351476][T15699] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1137.363059][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1137.381932][ T141] bond2 (unregistering): Released all slaves [ 1137.426558][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1137.466046][T15699] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1137.510932][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1137.532291][ T141] bond3 (unregistering): Released all slaves [ 1137.551875][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.578608][T15699] usb 3-1: USB disconnect, device number 32 [ 1137.643771][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1137.664274][T16469] fido_id[16469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1137.664484][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.702692][ T141] bond4 (unregistering): Released all slaves [ 1137.719297][T16475] netlink: 'syz.5.2846': attribute type 4 has an invalid length. [ 1137.747816][T16475] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2846'. [ 1137.781451][ T141] bond5 (unregistering): Released all slaves [ 1138.032266][ T24] usb 4-1: usb_control_msg returned -32 [ 1138.038866][ T141] bond6 (unregistering): Released all slaves [ 1138.042063][ T24] usbtmc 4-1:16.0: can't read capabilities [ 1138.088355][ T141] bond7 (unregistering): Released all slaves [ 1138.116408][ T141] bond8 (unregistering): Released all slaves [ 1138.131336][ T141] bond9 (unregistering): Released all slaves [ 1138.151949][ T141] bond10 (unregistering): Released all slaves [ 1138.164877][ T141] bond11 (unregistering): Released all slaves [ 1138.177932][ T141] bond12 (unregistering): Released all slaves [ 1138.197868][ T141] bond13 (unregistering): Released all slaves [ 1138.228820][T16441] bridge0: port 3(erspan0) entered disabled state [ 1138.309041][T16441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.316390][T16441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.517271][T16441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.546429][T16441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.791970][T16441] hsr0: left promiscuous mode [ 1138.882417][T16473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.890747][T16473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.046419][T16473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1139.069472][T16473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1139.268778][T16475] .`: renamed from bond0 (while UP) [ 1139.303469][ T9838] lo speed is unknown, defaulting to 1000 [ 1139.349372][ T9838] sy0: Port: 1 Link DOWN [ 1139.368134][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.397493][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.406348][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.430888][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.594157][T16501] futex_wake_op: syz.1.2852 tries to shift op by 144; fix this program [ 1139.647587][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.809027][ T803] usb 4-1: USB disconnect, device number 18 [ 1139.824424][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.846900][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.942556][T15701] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1139.954493][ T29] audit: type=1400 audit(1776708158.388:367): avc: denied { create } for pid=16504 comm="syz.2.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1140.162532][T15701] usb 5-1: device descriptor read/64, error -71 [ 1140.452824][T15701] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1140.700232][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.836875][T15701] usb 5-1: device descriptor read/64, error -71 [ 1141.497887][T15701] usb usb5-port1: attempt power cycle [ 1141.509605][T16520] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2857'. [ 1141.600217][ T141] hsr_slave_0: left promiscuous mode [ 1141.618402][ T141] hsr_slave_1: left promiscuous mode [ 1141.630293][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.659181][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.883009][T15701] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1141.923224][T15701] usb 5-1: device descriptor read/8, error -71 [ 1141.973521][ T141] team0 (unregistering): Port device team_slave_1 removed [ 1141.987156][ T141] team0 (unregistering): Port device team_slave_0 removed [ 1142.163133][T15701] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1142.193194][T15701] usb 5-1: device descriptor read/8, error -71 [ 1142.308440][T15701] usb usb5-port1: unable to enumerate USB device [ 1142.326554][T16484] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 1142.448346][ T141] IPVS: stop unused estimator thread 0... [ 1142.505353][T16484] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1142.529001][T16484] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1142.561799][T16484] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1142.587266][T16484] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1142.596560][T16484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.002523][T15701] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1143.068972][T16484] usb 2-1: string descriptor 0 read error: -71 [ 1143.122900][T16484] usb 2-1: USB disconnect, device number 18 [ 1143.155315][T15701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.169558][T15701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.190832][T15701] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1143.215275][T15701] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1143.225000][T15701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.235466][T15701] usb 6-1: config 0 descriptor?? [ 1143.896787][T15701] usbhid 6-1:0.0: can't add hid device: -71 [ 1143.927176][T15701] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1144.406190][T15701] usb 6-1: USB disconnect, device number 4 [ 1144.664795][T16553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.672260][T16553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.966031][T16553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.018175][T16553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.082634][T15698] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1145.222708][T15698] usb 2-1: device descriptor read/64, error -71 [ 1145.403376][T16553] hsr0: left promiscuous mode [ 1145.439531][ T92] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.472640][T15698] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1145.478266][ T92] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.516690][ T92] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.544579][ T92] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.632594][T15698] usb 2-1: device descriptor read/64, error -71 [ 1145.753145][T15698] usb usb2-port1: attempt power cycle [ 1146.112651][T15698] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1146.163078][T15698] usb 2-1: device descriptor read/8, error -71 [ 1146.368483][T16604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1146.402679][T15698] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1146.427112][T15698] usb 2-1: device descriptor read/8, error -71 [ 1146.560002][T15703] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1146.568330][T15698] usb usb2-port1: unable to enumerate USB device [ 1146.872598][T15703] usb 6-1: Using ep0 maxpacket: 8 [ 1146.904128][T15703] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1146.926386][T15703] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.940196][T15703] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1146.952409][T15703] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1146.968665][T15703] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1146.994880][T15703] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1147.006357][T15703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.399214][T15703] usb 6-1: usb_control_msg returned -32 [ 1147.404989][T15703] usbtmc 6-1:16.0: can't read capabilities [ 1147.480280][T16619] futex_wake_op: syz.4.2891 tries to shift op by 144; fix this program [ 1149.261958][ T5833] usb 6-1: USB disconnect, device number 5 [ 1149.375114][T16642] random: crng reseeded on system resumption [ 1150.823722][T13209] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1151.072565][T13209] usb 2-1: device descriptor read/64, error -71 [ 1151.753326][T13209] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1151.902747][T13209] usb 2-1: device descriptor read/64, error -71 [ 1152.033542][T13209] usb usb2-port1: attempt power cycle [ 1152.792540][T13209] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1152.825647][T13209] usb 2-1: device descriptor read/8, error -71 [ 1152.904595][ T5833] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1153.092567][T13209] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1153.352406][T13209] usb 2-1: device descriptor read/8, error -71 [ 1153.359813][ T5833] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1153.372778][ T5833] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1153.389594][ T5833] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1153.416658][ T5833] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1153.441983][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.463034][T13209] usb usb2-port1: unable to enumerate USB device [ 1153.832524][T15706] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1153.863360][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 1154.008126][T16708] futex_wake_op: syz.1.2923 tries to shift op by 144; fix this program [ 1154.013382][T15706] usb 3-1: Using ep0 maxpacket: 16 [ 1154.065455][T15706] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 1154.100395][T15706] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 1154.137738][T15706] usb 3-1: config 166 has no interface number 0 [ 1154.152664][T15706] usb 3-1: config 166 has no interface number 1 [ 1154.161868][T15706] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1154.177164][T15706] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1154.191208][T15706] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1154.191463][ T5833] usb 6-1: string descriptor 0 read error: -71 [ 1154.213669][T15706] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1154.231949][T15706] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1154.291542][T15706] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1154.308274][T15706] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1154.322258][T15706] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1154.335820][T15706] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1154.353022][T15706] usb 3-1: config 166 interface 177 has no altsetting 0 [ 1154.374985][T15706] usb 3-1: config 166 interface 34 has no altsetting 0 [ 1154.439893][T15706] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1154.494072][T15706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.525034][T15706] usb 3-1: Product: syz [ 1154.533787][T15706] usb 3-1: Manufacturer: syz [ 1154.539555][T15706] usb 3-1: SerialNumber: syz [ 1154.784665][T15706] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 1155.797657][ T5833] usb 6-1: USB disconnect, device number 6 [ 1156.143860][T15706] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 1156.226807][T16729] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2925'. [ 1156.432125][T15706] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 1156.451276][T15706] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1156.462282][T15706] uvcvideo 3-1:166.34: No valid video chain found. [ 1156.497732][T15706] usb 3-1: USB disconnect, device number 33 [ 1156.742528][ T5833] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1157.062750][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 1157.128111][ T5833] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1157.231181][ T5833] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1157.327480][ T5833] usb 6-1: config 166 has no interface number 0 [ 1157.362540][ T5833] usb 6-1: config 166 has no interface number 1 [ 1157.391925][ T5833] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1157.431977][ T5833] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1157.458968][ T5833] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1157.490163][ T5833] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1157.506232][ T5833] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1157.519382][ T5833] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1157.531414][ T5833] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1157.665121][ T5833] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1157.680518][ T5833] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1158.301959][ T5833] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1158.312766][T16749] futex_wake_op: syz.2.2932 tries to shift op by 144; fix this program [ 1158.324492][ T5833] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1158.369813][ T5833] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1158.382490][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.136522][ T5833] usb 6-1: Product: syz [ 1159.173435][ T5833] usb 6-1: Manufacturer: syz [ 1159.197623][ T5833] usb 6-1: SerialNumber: syz [ 1159.676255][ T5833] usb 6-1: can't set config #166, error -71 [ 1160.164443][ T5833] usb 6-1: USB disconnect, device number 7 [ 1160.497715][T16764] futex_wake_op: syz.5.2938 tries to shift op by 144; fix this program [ 1162.232555][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 1164.531879][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 1164.773157][ T5831] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 1165.679613][T16808] futex_wake_op: syz.2.2950 tries to shift op by 144; fix this program [ 1166.581625][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 1168.569793][T16830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'. [ 1169.515396][T16843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2958'. [ 1175.953642][T16888] random: crng reseeded on system resumption [ 1177.217233][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.225561][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.702708][T15706] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1177.729120][T16901] IPVS: Error connecting to the multicast addr [ 1177.740532][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1178.260585][T16904] futex_wake_op: syz.2.2977 tries to shift op by 144; fix this program [ 1178.573218][T15706] usb 5-1: Using ep0 maxpacket: 8 [ 1178.595135][T15706] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1178.602177][T16906] loop2: detected capacity change from 0 to 7 [ 1178.630172][T15706] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1178.646750][T16906] Dev loop2: unable to read RDB block 7 [ 1178.675240][T16906] loop2: unable to read partition table [ 1178.675497][T15706] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1178.681131][T16906] loop2: partition table beyond EOD, truncated [ 1178.697985][T16906] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1178.749232][T15706] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.794536][T15706] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1178.828908][T15706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.355410][T15706] usb 5-1: usb_control_msg returned -32 [ 1179.375024][T15706] usbtmc 5-1:16.0: can't read capabilities [ 1179.457165][T15706] usb 5-1: USB disconnect, device number 19 [ 1179.755023][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 1179.820001][T16923] IPVS: Error connecting to the multicast addr [ 1180.792546][T15703] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1180.976336][T15703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1180.994991][T15703] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1181.072974][T15703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.192844][T15703] usb 3-1: config 0 descriptor?? [ 1181.198523][T16927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1182.718303][T15703] hid_parser_main: 5 callbacks suppressed [ 1182.718322][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1182.737134][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1182.755548][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1182.773962][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1182.792295][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1182.810466][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1183.177713][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1183.276160][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1183.419351][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1183.559094][T15703] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 1183.853876][T15703] usb 3-1: USB disconnect, device number 34 [ 1184.382642][T15704] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1184.556151][T15704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.587590][T15704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.755437][T15704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1184.768460][T15704] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1184.778041][T15704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.790009][T15704] usb 4-1: config 0 descriptor?? [ 1185.086227][T16954] bridge0: port 3(erspan0) entered disabled state [ 1185.146138][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.153425][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.908828][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.946373][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1186.003109][T15706] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1186.062099][T16954] hsr0: left promiscuous mode [ 1186.081532][T11606] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.090713][T16989] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1186.101901][T15704] usbhid 4-1:0.0: can't add hid device: -71 [ 1186.108366][T15704] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1186.116673][T11606] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.126713][T11606] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.137376][T15704] usb 4-1: USB disconnect, device number 19 [ 1186.145702][T11606] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.163578][T15706] usb 3-1: Using ep0 maxpacket: 16 [ 1186.167676][T16987] IPVS: stopping master sync thread 16989 ... [ 1186.172083][T15706] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 1186.193377][T15706] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 1186.208666][T15706] usb 3-1: config 166 has no interface number 0 [ 1186.222499][T15706] usb 3-1: config 166 has no interface number 1 [ 1186.236251][T15706] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1186.259178][T15706] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1186.282054][T15706] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1186.304453][T15706] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1186.317418][T15706] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1186.329313][T15706] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1186.339968][T15706] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1186.351515][T15706] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1186.382078][T15706] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1186.402857][T15706] usb 3-1: config 166 interface 177 has no altsetting 0 [ 1186.420666][T15706] usb 3-1: config 166 interface 34 has no altsetting 0 [ 1186.435397][T15706] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1186.452502][T15706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.461353][T15706] usb 3-1: Product: syz [ 1186.487123][T15706] usb 3-1: Manufacturer: syz [ 1186.491779][T15706] usb 3-1: SerialNumber: syz [ 1186.960853][T13209] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1186.994742][T15706] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 1187.127843][T13209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1187.282677][T15706] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 1187.443259][T13209] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1187.545439][T13209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.588272][T13209] usb 5-1: config 0 descriptor?? [ 1187.597314][T16991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1187.626237][T15706] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 1187.720084][T17005] futex_wake_op: syz.1.3008 tries to shift op by 144; fix this program [ 1187.725686][T15706] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1187.902590][T15706] uvcvideo 3-1:166.34: No valid video chain found. [ 1187.940164][T15706] usb 3-1: USB disconnect, device number 35 [ 1188.140218][T13209] hid_parser_main: 470 callbacks suppressed [ 1188.140234][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.208508][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.234874][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.259665][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.282611][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.315909][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.348522][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.379013][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.414793][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.440043][T13209] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 1188.665711][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 1188.720195][T13209] usb 5-1: USB disconnect, device number 20 [ 1190.453416][ T5831] ------------[ cut here ]------------ [ 1190.460433][ T5831] refcnt < 0 [ 1190.460457][ T5831] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#1: kworker/u9:4/5831 [ 1190.474352][ T5831] Modules linked in: [ 1190.478492][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1190.488027][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1190.498219][ T5831] Workqueue: hci0 hci_conn_timeout [ 1190.503428][ T5831] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 1190.509302][ T5831] Code: 44 0f b6 2d cb aa 48 06 31 ff 41 83 e5 40 44 89 ee e8 ca ae 7a f7 45 84 ed 0f 84 02 ff ff ff e9 96 3b e3 f6 e8 67 b4 7a f7 90 <0f> 0b 90 e8 5e b4 7a f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 1190.529155][ T5831] RSP: 0018:ffffc9000430fc10 EFLAGS: 00010293 [ 1190.535272][ T5831] RAX: 0000000000000000 RBX: ffff8880748c0a40 RCX: ffffffff8a8ec41f [ 1190.543294][ T5831] RDX: ffff8880740c8000 RSI: ffffffff8a8ec519 RDI: ffff8880740c8000 [ 1190.551264][ T5831] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1190.559398][ T5831] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8880748c0000 [ 1190.567453][ T5831] R13: 0000000000000000 R14: ffff8880740c84c4 R15: ffff888044a12800 [ 1190.575521][ T5831] FS: 0000000000000000(0000) GS:ffff8881243e7000(0000) knlGS:0000000000000000 [ 1190.584512][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1190.591157][ T5831] CR2: 00007fc78815f5e4 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1190.599166][ T5831] Call Trace: [ 1190.602486][ T5831] [ 1190.605450][ T5831] process_one_work+0xa0e/0x1980 [ 1190.610588][ T5831] ? __pfx_process_one_work+0x10/0x10 [ 1190.616154][ T5831] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1190.621578][ T5831] worker_thread+0x5ef/0xe50 [ 1190.626241][ T5831] ? kthread+0x13a/0x450 [ 1190.630492][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1190.635655][ T5831] kthread+0x370/0x450 [ 1190.639757][ T5831] ? __pfx_kthread+0x10/0x10 [ 1190.644360][ T5831] ret_from_fork+0x72b/0xd50 [ 1190.648939][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 1190.654060][ T5831] ? __switch_to+0x800/0x1100 [ 1190.658741][ T5831] ? __pfx_kthread+0x10/0x10 [ 1190.663344][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1190.668103][ T5831] [ 1190.671103][ T5831] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1190.678359][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1190.687795][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1190.697849][ T5831] Workqueue: hci0 hci_conn_timeout [ 1190.702947][ T5831] Call Trace: [ 1190.706232][ T5831] [ 1190.709139][ T5831] dump_stack_lvl+0x100/0x190 [ 1190.713822][ T5831] vpanic+0x552/0x970 [ 1190.717788][ T5831] ? __pfx_vpanic+0x10/0x10 [ 1190.722271][ T5831] panic+0xd1/0xe0 [ 1190.725969][ T5831] ? __pfx_panic+0x10/0x10 [ 1190.730364][ T5831] ? check_panic_on_warn+0x1f/0x90 [ 1190.735473][ T5831] check_panic_on_warn.cold+0x19/0x34 [ 1190.740820][ T5831] ? hci_conn_timeout+0x16a/0x230 [ 1190.745823][ T5831] __warn.cold+0x191/0x328 [ 1190.750219][ T5831] __report_bug+0x296/0x3d0 [ 1190.754709][ T5831] ? hci_conn_timeout+0x16a/0x230 [ 1190.759714][ T5831] ? __pfx___report_bug+0x10/0x10 [ 1190.764721][ T5831] ? __pfx_debug_object_activate+0x10/0x10 [ 1190.770504][ T5831] ? look_up_lock_class+0x64/0x120 [ 1190.775599][ T5831] ? register_lock_class+0x40/0x560 [ 1190.780779][ T5831] ? do_raw_spin_lock+0x128/0x260 [ 1190.785792][ T5831] ? hci_conn_timeout+0x16a/0x230 [ 1190.790805][ T5831] report_bug+0xb2/0x220 [ 1190.795033][ T5831] ? hci_conn_timeout+0x16a/0x230 [ 1190.800038][ T5831] handle_bug+0x16a/0x2a0 [ 1190.804344][ T5831] exc_invalid_op+0x17/0x50 [ 1190.808829][ T5831] asm_exc_invalid_op+0x1a/0x20 [ 1190.813655][ T5831] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 1190.819266][ T5831] Code: 44 0f b6 2d cb aa 48 06 31 ff 41 83 e5 40 44 89 ee e8 ca ae 7a f7 45 84 ed 0f 84 02 ff ff ff e9 96 3b e3 f6 e8 67 b4 7a f7 90 <0f> 0b 90 e8 5e b4 7a f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 1190.838868][ T5831] RSP: 0018:ffffc9000430fc10 EFLAGS: 00010293 [ 1190.844913][ T5831] RAX: 0000000000000000 RBX: ffff8880748c0a40 RCX: ffffffff8a8ec41f [ 1190.852946][ T5831] RDX: ffff8880740c8000 RSI: ffffffff8a8ec519 RDI: ffff8880740c8000 [ 1190.860892][ T5831] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1190.868835][ T5831] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8880748c0000 [ 1190.876779][ T5831] R13: 0000000000000000 R14: ffff8880740c84c4 R15: ffff888044a12800 [ 1190.884729][ T5831] ? hci_conn_timeout+0x6f/0x230 [ 1190.889648][ T5831] ? hci_conn_timeout+0x169/0x230 [ 1190.894744][ T5831] process_one_work+0xa0e/0x1980 [ 1190.899665][ T5831] ? __pfx_process_one_work+0x10/0x10 [ 1190.905104][ T5831] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1190.910456][ T5831] worker_thread+0x5ef/0xe50 [ 1190.915034][ T5831] ? kthread+0x13a/0x450 [ 1190.919255][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 1190.924346][ T5831] kthread+0x370/0x450 [ 1190.928392][ T5831] ? __pfx_kthread+0x10/0x10 [ 1190.932962][ T5831] ret_from_fork+0x72b/0xd50 [ 1190.937546][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 1190.942648][ T5831] ? __switch_to+0x800/0x1100 [ 1190.947323][ T5831] ? __pfx_kthread+0x10/0x10 [ 1190.951890][ T5831] ret_from_fork_asm+0x1a/0x30 [ 1190.956642][ T5831] [ 1190.960076][ T5831] Kernel Offset: disabled [ 1190.964388][ T5831] Rebooting in 86400 seconds..