last executing test programs: 14.452296866s ago: executing program 1 (id=3682): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 14.452176782s ago: executing program 0 (id=3692): r0 = syz_io_uring_setup(0x6c1, &(0x7f0000000300)={0x0, 0xa4d8, 0x2, 0x0, 0x1}, &(0x7f0000000540), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x13, 0x2000ac0a, r1) 14.451829721s ago: executing program 2 (id=3693): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x6, 0x13, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) socket(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000011c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305839, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = io_uring_setup(0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x11, 0x20000000, r6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000063090000000000000900000000000000ad01000000000000010000000000000083090000000000000800000000000000257f25b499e3f5c17a4f92cfc9bfc892b3bf626a69b7a8d01db3b8ba15fdbc6078cf5b47bc7c4af0216f66b59f8d"]) 14.428036977s ago: executing program 1 (id=3696): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x4d49799df46587f1) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xfe) (async) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) r0 = socket$kcm(0x2, 0x200000000000006, 0x0) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x18) (async) mkdir(0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x47, 0x0, &(0x7f0000000080)=0x8) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5a0330904000000fb7401004471b66ac3423c1022dcaeaa00000000104f6cff917a8117704f"], 0x0) 9.276060633s ago: executing program 3 (id=3697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000003740)=[{{&(0x7f0000000300)=@tipc=@id, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/119, 0x77}], 0x1, &(0x7f0000000440)=""/190, 0xbe}}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000001780)=""/166, 0xa6}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f0000001840)=""/172, 0xac}, {&(0x7f0000001900)=""/199, 0xc7}, {&(0x7f0000001a00)=""/197, 0xc5}], 0x7}, 0x101}, {{&(0x7f0000001b80)=@nl=@proc, 0x80, &(0x7f0000000700)=[{&(0x7f0000001c00)=""/231, 0xe7}], 0x1, &(0x7f0000001d00)=""/48, 0x30}, 0x2}, {{&(0x7f0000001d40)=@hci, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/144, 0x90}], 0x1, &(0x7f0000001ec0)=""/236, 0xec}, 0x1af}, {{&(0x7f0000001fc0)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000002040)=""/198, 0xc6}], 0x1, &(0x7f0000002180)=""/4096, 0x1000}, 0x200}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003180)=""/131, 0x83}, {&(0x7f0000003240)=""/175, 0xaf}, {&(0x7f0000003300)=""/102, 0x66}], 0x3, &(0x7f00000033c0)=""/99, 0x63}, 0xd}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003440)=""/214, 0xd6}, {&(0x7f0000003540)=""/222, 0xde}, {&(0x7f0000003640)=""/8, 0x8}], 0x3, &(0x7f00000036c0)=""/87, 0x57}, 0x8}], 0x7, 0x12003, 0x0) 9.179809697s ago: executing program 0 (id=3699): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x4e2801, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x4080, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000100)=0x5) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) pipe2$9p(&(0x7f0000000240), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x78, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000540)="fb12dea395b7a7e7c1d3490249fd729ac55fc48463a4e3d1922ea5d6dd829f79be020df690f716e51a022c2c15e9299eb8fa2adfb90bafddb2150861204cec957aeba8f72f2977afbcd39debf7235141008c0c3ee3c72f41895c303a08b3f3d2b70dafcfa1e044b07d547708f793183efa15ed292a76f8f14da060d099442c0e0025dffc2f00221d2d4a4a", 0x8b}, {&(0x7f00000002c0)="26ba716d22a745bd252104b2f9ad5a231ade8bf54429f0cb5d1d1c72003e6340aa50c61cbabf5ce365186bc9b335c037c8bce0117eb1f9db38b4f32e826a544840bb3a4cc18fd0270736a5e720", 0x4d}, {&(0x7f00000012c0)="09bbd8a4d1c65405c179bae24f6b368c37f6886853c826bc6f9d5b2a4703eef95a7ac599abc7f7894bff77a3036f76507f30b4317ccc6d0a661c6e286ee0dc5f4ea69cfa5ed5c5a2dc2b8942d3f70cdc8ebe1a8bb86766af3ceb5ea75c8b560fb7f1965bc10141394039bbceb00fc2ddfd8bcb58d3020ff31aec57934eeb75f2b1999ce1daf571da807ef2ae8ab9377be198872d1cbb0fdfc9b678f639088645334d0b73cee3e977c48cb03c5f87243096a8fa5174cf2161da5223b914f64d90fe79a9ab993b0da588da454b131d911db8283b3e382f21a3ad5e2db8a322aab2e51c7dec3521a8ad4b8966e335928dfa70c9dddd748d8d3f3a7bb80294a043a72c9d4b7f14e1f28e94b2476d062d4965caf56839ccf66a0b2dd41b55606baaac0f7d8f5e76bcd6917f54257466772d345afa9444463193a447048921ff36fbdb3a8eaec8fad45d4335b6afda162bf8c81b1008f98519ae40b3d147d19fa36de181b764b024fc3c3e78b6075fb3ac312fede8681fc1659a59cabdf8f4404462da68f89eaafb69bab7dadbbfa19697e8e78c77f960653d9a55ab12ad9885673cd6f4a09b9524acb226c4e4b9a5234ff2b0e4eb48355388ef995477a1b89d80d310c51194a349a3f998109625c1a40c199ed2ff05b5ea7c023ce6113775861cd184f07035ea0dd90f65532ab2a5c09bb6c3f0e0316b166097a19e992ac7b3cfd6b90871efbcd9a38daf5c68c603f00ced69619e0a6d265a9f18b09865411a6050644355ebac63bdc2c72849461c93c4ab55fdd69a4a1dd3a03caaea1ed9a927aef6f13b0c12f5400ccb593a320c8b537e3c9674da7058cafc657ada9dcffadc480184f3b4dabfda1f70b96db4963dd630a4d70920b8784bb8acdbd4e14e63a2a58ca9b28113e7b9efe6584260fb64b795e20b1c2a1a76697420d449042e8172f6378e287157362ae07681355580909143ca950e2c54fc8a5cef12238b1531795ea9a17a460a3695c230d2104551c8605dd19b916a68a559961384682a73ac1afecb376ee0e0ab5c5783bbd9c0c12fbe97b31d789e52a61db9d91ccc21ecad47e0e911fc54004f00d75c2d4fd68a4ed8ff6d6203c2638cfa0568028021dbf93d9dece30a4aa4a834ff27f3f5e4785fac7e098c7f9423db84606f265602ea3e3e7791717bc3d06bc580ebc511ce546b36211ebfce1880a0827f4647123dc7accffaabdae2f3ef514a599117c248a4fd434112f7ec2d81d029e64c44d5c31501e8834022666896744edc3701014847c591d600873ef7c7447b5d36ebe26360315f92cf70bae525efd4ada9d783241b597a3b12479721f771e56a9347c807f424fd73c482fabf505038c8d5a519823fc263a94b910a9a086fd1ee8dedca0486962a3ac6ca3a3c65d25f1071ee440ac00b94028a4330cf461e45b10296687145286b948c53b80dc2ff59447dbdd572443ba0f7c4d55931a7883e992cd3cf08740b22e8c57ff7a60c07859315fe2741c6e713db70ebe9c03421ab70e6392a6a6b9531306e79c26aa1fdebeab39ad9fbc285f5026872a2e6d93003671e85f0d8822342f0298fae8bf1242d32dcaf0e152dd499385c49e44f1a49f163092a7c0363054ea78568e298903e92f10f968bf156d9ad3d8016bcb08569148a87221fdaf26e7487c73b9351ed075146b6711eeeefb3b09b29434b2a3df0eb39288475531ef7a27bbf06fc71e1d191562401fc5f44cb54a14acea2b2379b09e5a4a98668e6e168f053fe131e82c15fb847cf4dc6683d2b0d45e2f454b2ce4680e4baf3728b3201cb90b3b5880671ffbb3338ebe901d76c352a9b7f0d0a4c5c4856a048eba3be9a49993f1b63673c4b6e6c3c1821d0d469f38457e9604b659d99187e289bede0e6de13deccc96b91782e2cbff9eb9a292ce44ee6171411bfb6c4077fbcc5a90a65df1364c6a235da085f946e5c7a265a22b0522d521218ec2995355cd0e90e6a72861b669389f84e481956ff0ff5620f83573404fd0674159f02176598763095503faffcd98c1c4be9005098f17346298f9246955314f16f86988ec8aee69bbeae5b750b373a7c88497d51eacc19516139b573ac347d420ab7dd9bfac411612d4e94c3b0363927867841e6a5f2ce2d77b7697791f5da62fd1f95a32a33adf7c8d0fa7dffc81943867cf05768df0ecc056e141328d5acfaecdb9303fc3fe00dff4a31b8255acf5d431431ee702387ae0767e6dba3da23d3392bd85b37419fb8fb0f2fbdbe934f32aa760f885d88e8a681e3712244ae12e7b1437bc494313f1406beb93707f3da136a033482dcf2010149012ab46c956d2b737334326476d0854943e82f4ad35f199e803e945c9d97d12146e2720527c8aaa3bf2e52816a7a8a933ff1d1f66e9f0360ff529df1615bfb2597b8b151e2b3bd1fb20886407173978819b922f52145381fa262479cdedbba34f70aa45a5b52846deb53a7ceee2f1e9f09be1d5545c5bcd5fcc67426eb1bea0f6bcfab8061bca33c1000630580e43ca2fe7fa40be3e2e2b444d607c1182361a763fa3ec92a05092fc0a474ccbcfd066e812e1b0f99b67d8b420094ff5c84ab62a195ff5ad7926b6728b9da74d8096816f7bae4eec15ce532f172a7a9fdaadde3085511b213461e792b5bca7bd0141ba84d7424d7cdb584e66c76b3b07d3317803ce855b614fd2670b35ad5cac895bf9b939a69cfd0fdaa76e2e0714b8646a5ee3dc73f19aa1ec4b73799bdbcf88a78b7005ac13ece935922d2ecee4c6d04a3b7788dd8e90b7f5eba2507d25ab70a656104aa1d77f4188dc57f4776e2bb98cdba386ce67408393261b5d7bf1786ec462cbb137137e453a0cc864252b6c3513ea1f73dc21a5bb9da5bd8142b0c9c1bb03b4e1acb840d7e088d3d61985579c70ecc344514f81fd452684cd39fb6a7b4e21003d9067504a68d53ad118e40e50d5f3f23f4da4f8cdbc13469ddfa5911bdb1f9f665463694ff18e4a80e5fcd420681207f6f4cdac9245a05c8949cdb57f572aede8654d9cc56cc9a6982c3a98a9c1a8abc609cfa83c8a15f796f73f3908b3261b1f40db08672403ba1a1caf852779d27816f3e43f3a436d54f3d17b3eb3e41b41efa86d368dcc93bc6bff646a59f0c5b28229e6f51b6449c9d97801f8c810a6170af94cbc31fea62efa7e3c45bb854678bb817b2e51f8c01fab1abedb341e111a268b6b9d321d7b2a049345cae570e8d0e2d1898008ef760fbd9c3bc314ee47e93c93431ba5f1adaae75058d67984148f4006bae38cb9dba95c4a209c8104f2786563b363e58f3f5cb936f7d9262e8da1ba73461c7881379a754e07d7004ad68fd414a1f1449b1bdfbdd04e674fbcd1dc9a1e5a7f3373b29e40c13e0b27fa87f9f247a2fbdabd89fdcd056b5feb89dd6a81c4f7fdfd5868d3ede4f80a6900a9cb8d77035b00053e3600e6fcf773bedd3f6b14fe542f1d968f47c16a302ba8e95e1655effa0d9d62848f7e6155dc8214a0930ad99198656f496913bc65ac1475acf4df96c25d59db0125147fe53a302474ac666a9c9ea8f9ebcc472ac5a1a53e702f588e8b090966ee16cfd313358301ed9e28160d898d80e4b5e052de6260e0ee7d06ce72c59b1c94ce92530c1d4055d0c6bb23fb1181a40e181cfbc97cdfa45f3117860c6c5901c020ca65ea296ca88946dcb436f70b9a9cd8aabf66ad88fa4ed8cdf18b4685599bbfa0ba3ceaea5a4a5c05ca6d9efa489d127eaa10125371b379426f326fbc4788b7d618ca7c04cddc5b41d9a04101424727b86fe69e1c9a0afae9254256d29339fcd1e358d05cf2e909227fc117235bdc15b67808c2935e4393de8e3e45bd68177534959a984db0e042e402724fbdf9fbde4d23e0bcf7600d05e0979f0e621c0775a3ac563754b04ba6c477d34c63517208544d7898605b43b5876ec1b0a25304087bdc424f842d45640397c8ce766e6abf91fe870750c4e195fb5ea3da2d49fce42a4abccf38237318640bd9d70f54f61cd09b2b1cc36760ca137765e9c7a0ae7c5452b74eb3486fe0bc45d8052c68bceaefa599f83a76cf14b279e6446225af202e75a4d78669ed10625dfa7acc950737eb73cf1b32d386dd9f21605f3ca52ffd6b45139436e2b1ca3425ebec4b65a3c2d872a9cf7e8d33300ea5bf2f806e0b7e2f9186152bbe448e40f5adc38e6d1887f4a8f393b6ecd6fdab23b45c32f319ac541dc7c5946fe861ee4db1a1f85ba8e8a33fbd952037a327f5dfdd3fc9bbb6f139ad1f7a8a51e1d20dde94f7773609ec6dbe1566e1103dc2aa1f87e88aa96259054bc13775afc658a3db8def4731aad562bc07fb28d233ab440da56620faedd920e7db091bf167ec6f9ce7193966b300908ff6c134d52852af365933b2107a0a9cb5d55b413803c734a0061ee3a37ce5a72a046c8d3367b87f374ed16c1a7f7cce02db1d0a1804e72abff373d546eb8f82fce805c864e6e3ded52385976163a99af7811f71039a32019a42e2034abd3cf934b1f3389613c940309244fe1b867e38b29c066807c40ff4359cbaca1d36b62d863f1f0f6a97128fcc4c331d2a2cb9323183edfdf148ecb808b2bea4c005884664302b3757d93ac120bd6df981037ef17dbbb262fc92f5019620ee7200e36f51203b2c04855cdaf74035679ab132dbdfc69e7259ca1960327b36ab4456bf18d11e1e5485b93394d6d2114b476ea6df6b0d4445ac092527bdc64d63502cc93b0d0194c269290758840eab492530dc56bce6c74b71808becda8272cc952418de58055e35a684ed9b260650b861f7abf8c1e9799889d2a77b5047f5c54fd6da117b450a3be1ebbe0035de9a10bdc22b05ca3fbc10394b7d4aefb8bc22ea8d7e3444b6145476d1ddada977840a92a1b7119fa083753b9886d01f2835ceadbaf66613d2bac67d371c7679ea89fee0693d552bc26db578fc7af9707a4718d82452183d014cb6b174ded81e1867ff53d4cd70cd69f8670df9220d60bd1cf8c39d53ebf19b4d3a3f963c91aab0b5a14c7d8f1300e74556ea49139dd0a503b3d4a3392784c35a455f30c7c483f6d769ae5e03032698d3b2c47e1b11e288841996f0475a1f28a2748d5f311b079af6171f171e02d81c7c2f245afb053718f6227f2f1d4a14d24da85bbf43360c526afd65f78d2e2a194cd3d57ced9166b3e597ea1ccd1ea4d9d4926acd8dfb88f5be26b02daffaf9465e263d59d81dad1ce7d38760d2cb95b100f0f5519e2c7148fc6e3364980afa1a01558c8aa9024dbf8667ae1f975e4ba41d00a8a350f6075df9a1d92d37b478feffb4ee822e47367d5e6f45dbe8b04213d8262a6fd059de940fde7a3bddfd0fce10cdca5bb6e072510a7b3a1101b6b58f5d30fd21c2624df2f21b045a1b9cae8da1a532039620d7477b7fbe8323bca93ff654c1716b936a1ce820edf15c7b5918a14836982d8fdd46a57c39b3d6496756b41b1aadb8ec429ff67daaaa7f48c7daeb0561105442a12879682802767f33134880a48125f2456c8080d3a20aed00a354a772751f75b1330daf5415105e3c486dd28d0901b463880f3cf690ec281bf91f80ab9fe53bb1d6590e438958ad0c9e18c74f34a26c2c48661d0463c79fb25cfc7271714e68bef40581925c32e010585fb7ea7a25df08ae67f85f4a186947b53c96d3502ea14e0d234978a33ea309732ae1a09c825415c09e1c2170e1b2f00e241171a7aac0029ab6ea5be87022a3141297af97f96058065bad2cf132a167390498d973f1d18a73c19fc60ac02f6f69542eec4e7a000b6", 0x1000}, {&(0x7f0000000600)="8ebd85f7f06f57f414c6adc1db135b0554009897ca5df52cd05703b9845460950f734a3b36fcdc2143cbb19995f88ba1b0e9660e405051a9badb1fef366c9c5e5a7158756787a22d9c82ef6a7592055240cd98fb06ae8b3e83a49a37c88acabfd572836f7000b3240a82ae44cf791a63d4deb0b50ce6dacefecaaecc6a7ed7815619c30c988bd4d123a49e985126ad54c21addc61f0055831b4a74acb19f16b891f7a6cf95d2c2534c80b8c92fe3652052c58bd332c57a764514ba7a6f", 0xbd}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f0000000480)="e5e3955cc9f49d", 0x7}], 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/328], 0x148}}], 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)=[{0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x9}, {0x2, 0x40000000, 0x400000, 0xb}, {0x4, 0x0, 0x0, 0x5}]}, 0x90) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020}, 0x2020) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02cac800"], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0xf53}) close_range(r4, r0, 0x2) ftruncate(0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000007bc0), 0x2, 0x448900) ioctl$EVIOCGLED(r5, 0x80044520, &(0x7f0000000000)=""/85) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 9.135987569s ago: executing program 1 (id=3700): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x42}, 0x10) sendmmsg$inet6(r2, &(0x7f0000007500)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbb00000000001c0000000000bbff02000000000000000000000000000100000000000c907801000000"], 0x0) r5 = getpid() ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000280)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ptrace(0x10, r5) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x1a6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.020305728s ago: executing program 3 (id=3701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000002000000000000000ea04000000000000000895"], &(0x7f0000002400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0xffffffffdf003fff, 0x8) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') mmap(&(0x7f00006ef000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x8032, 0xffffffffffffffff, 0x4f9c8000) 8.912653107s ago: executing program 2 (id=3702): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x61, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x7c38e0f8b8cae94c) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000140)=0xf4240) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000200)=0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000400)={0x0, 0x19, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES64=r6, @ANYRES64=r6, @ANYRESOCT=r5, @ANYBLOB="040013000a000600ffffe3ffffff000006001200000000000600b500c90200000400ac000600ab0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200c0881}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket(0x2a, 0x3, 0x8001) socket$key(0xf, 0x3, 0x2) r11 = accept(r9, 0x0, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x700, 0x0, 0xfff, 0xfff, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x27, 0x2, [{0x6, 0x5, "c0d1bf"}, {0x1, 0xe, "fe0fc3b721848ea44bf06195"}, {0x5, 0x7, "cd310ca900"}, {0x0, 0x7, "b74ef9ffbd"}]}, @generic={0x44, 0x11, "b760c7464d2be1fef3d634958b45da"}, @timestamp={0x44, 0x10, 0x69, 0x0, 0x5, [0x4, 0x3, 0xffffffff]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x8, 0x80000001, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @remote, 0x20, 0x10, 0x80000100, 0x10001}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES16=r0], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) r14 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x5, 0x10001, 0x1000009, 0x11, 0xffffffffffffffff, 0x9, '\x00', r12, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000800000020000050000000058565f1a0393ffab67e57842294a0120000000f404fa3f390f380f9787ac3f266380052277873040027f", @ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xdd) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x200001ee, &(0x7f0000000940)=ANY=[@ANYRESOCT=r11, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESOCT=r13, @ANYRESOCT=r12, @ANYRES64=r2, @ANYRESHEX, @ANYRESDEC=r14], &(0x7f0000000240)='GPL\x00', 0x402, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r15}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb2"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) 8.862683752s ago: executing program 3 (id=3703): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x5}, 0x10) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, 0x0, 0x0, 0x20, &(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000002100000000000000e3ff17110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x2, 0x0, @empty, 0xfff}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8) listen(0xffffffffffffffff, 0xda90) accept4(r2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0xaa, 0x0, 0x43, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) connect$inet(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0xc3a0f000) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.584896506s ago: executing program 2 (id=3704): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x424482, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x20, 0x0) fanotify_mark(r3, 0x102, 0x28, r2, 0x0) 7.798338212s ago: executing program 0 (id=3705): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000100)="f9f49aaf0a241c11013a6162030143d0ca91a2", 0x13}], 0x1}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x5, 0x0, 0x0, {{0x94}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x10000000, r10, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r10}}, 0x48) 4.337843086s ago: executing program 0 (id=3709): r0 = syz_io_uring_setup(0x6c1, &(0x7f0000000300)={0x0, 0xa4d8, 0x2, 0x0, 0x1}, &(0x7f0000000540), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x13, 0x2000ac0a, 0x0) 4.336350806s ago: executing program 4 (id=3710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40000004900d96d28bd7000fedbdf250a003800", @ANYRES32, @ANYBLOB="0100000014000100fcf8000000000000000000000000000014000100fe8000000000000000000000000000aa080002"], 0xb4}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x1, 0x6, 0x5, 0x40, 0x4}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x38, &(0x7f0000000180)=""/56, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1], &(0x7f0000000a80)=[{0x5, 0x4, 0x8, 0x6}], 0x10, 0x4}, 0x90) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000f70000000003000000500001800400028038000400200001000a00000000007da8e2a90000000000000000ffff7f000001000000001400020002000000ffffffff00000000000000000e0001006574683a766c616e30"], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) shutdown(r8, 0x0) connect$unix(r8, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r10 = accept(r9, 0x0, 0x0) sendto$inet6(r10, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00'}) syz_usb_control_io$uac1(r2, &(0x7f0000000240)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00001600000016e5c1d97f55"], 0x0}, 0x0) 4.330742866s ago: executing program 2 (id=3711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003740)=[{{&(0x7f0000000300)=@tipc=@id, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/119, 0x77}], 0x1, &(0x7f0000000440)=""/190, 0xbe}}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000001780)=""/166, 0xa6}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f0000001840)=""/172, 0xac}, {&(0x7f0000001900)=""/199, 0xc7}, {&(0x7f0000001a00)=""/197, 0xc5}], 0x7}, 0x101}, {{&(0x7f0000001b80)=@nl=@proc, 0x80, &(0x7f0000000700)=[{&(0x7f0000001c00)=""/231, 0xe7}], 0x1, &(0x7f0000001d00)=""/48, 0x30}, 0x2}, {{&(0x7f0000001d40)=@hci, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/144, 0x90}], 0x1, &(0x7f0000001ec0)=""/236, 0xec}, 0x1af}, {{&(0x7f0000001fc0)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000002040)=""/198, 0xc6}], 0x1, &(0x7f0000002180)=""/4096, 0x1000}, 0x200}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003180)=""/131, 0x83}, {&(0x7f0000003240)=""/175, 0xaf}, {&(0x7f0000003300)=""/102, 0x66}], 0x3, &(0x7f00000033c0)=""/99, 0x63}, 0xd}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003440)=""/214, 0xd6}, {&(0x7f0000003540)=""/222, 0xde}, {&(0x7f0000003640)=""/8, 0x8}], 0x3, &(0x7f00000036c0)=""/87, 0x57}, 0x8}], 0x7, 0x12003, 0x0) 4.239770794s ago: executing program 2 (id=3712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) write(0xffffffffffffffff, &(0x7f0000000800)="240000001e005f0214f90408faac470002000000010000000000080008000dc00e0000ff", 0x24) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000240)={{0x80, 0x9}, 'port1\x00', 0x6d, 0x2, 0x0, 0xfffffffc, 0x0, 0x20000, 0x0, 0x0, 0x4, 0x40}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) mmap(&(0x7f0000553000/0x4000)=nil, 0x4000, 0x6, 0x20010, 0xffffffffffffffff, 0x45056000) recvmsg$unix(r6, &(0x7f00000007c0)={&(0x7f0000000300), 0x6e, &(0x7f0000000840)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000400)=""/122, 0x7a}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000006c0)=""/182, 0xb6}, {&(0x7f0000000780)=""/51, 0x33}], 0x8, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40010100) ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 4.135806023s ago: executing program 1 (id=3713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000002000000000000000ea04000000000000000895"], &(0x7f0000002400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0xffffffffdf003fff, 0x8) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00006ef000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x8032, 0xffffffffffffffff, 0x4f9c8000) 4.095109237s ago: executing program 3 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x61, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x7c38e0f8b8cae94c) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000140)=0xf4240) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000200)=0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000400)={0x0, 0x19, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES64=r6, @ANYRES64=r6, @ANYRESOCT=r5, @ANYBLOB="040013000a000600ffffe3ffffff000006001200000000000600b500c90200000400ac000600ab0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200c0881}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket(0x2a, 0x3, 0x8001) socket$key(0xf, 0x3, 0x2) r11 = accept(r9, 0x0, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x700, 0x0, 0xfff, 0xfff, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x27, 0x2, [{0x6, 0x5, "c0d1bf"}, {0x1, 0xe, "fe0fc3b721848ea44bf06195"}, {0x5, 0x7, "cd310ca900"}, {0x0, 0x7, "b74ef9ffbd"}]}, @generic={0x44, 0x11, "b760c7464d2be1fef3d634958b45da"}, @timestamp={0x44, 0x10, 0x69, 0x0, 0x5, [0x4, 0x3, 0xffffffff]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x8, 0x80000001, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @remote, 0x20, 0x10, 0x80000100, 0x10001}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES16=r0], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) r14 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x5, 0x10001, 0x1000009, 0x11, 0xffffffffffffffff, 0x9, '\x00', r12, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000800000020000050000000058565f1a0393ffab67e57842294a0120000000f404fa3f390f380f9787ac3f266380052277873040027f", @ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xdd) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x200001ee, &(0x7f0000000940)=ANY=[@ANYRESOCT=r11, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESOCT=r13, @ANYRESOCT=r12, @ANYRES64=r2, @ANYRESHEX, @ANYRESDEC=r14], &(0x7f0000000240)='GPL\x00', 0x402, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) 4.044156203s ago: executing program 0 (id=3715): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff690b00482f0020010000000000000000000000000002ff02000000000000000000000000000124208100000000000009000000000800000086dd080088be00000000"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x3, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8004e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1, 0xaa, 0x6, @broadcast}, 0x14) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="f2192225fdaaab651be082e9df682b001769b3ab7a3ed6a59e5358560e2cf8ed45384a000d832c3aa50d79b994197ee7351b27c3b07dd50c7cd522ba7b1b234575d4e0f04702fae8051995cc87193208ff1d0534061019328846634eb5d2a6d164d25677ea32a717e23b3635c561c46668d70a940c1fced12fd55d3b35a8ea41a0c019d634799174d5bf2dd95f5b1cc00114d2891c693d655efbebd14e14efeaad7817d3cbafe237b73404f578a4caa2d1c4adee6be70b1b3f9d5525a2810f73889ea93449668a480b94291a9abb83ae3507d0b6", @ANYRES32=r1, @ANYBLOB="8eb128587b04190924851489004286fff4ebc3fabd74d216e526eed157e7d1af3ac073e9cc03c0b026df006008c3441b91c66c84139714103a37a25a2c772e0fd9dd38c27cb412f1dc20b9772df7b17f695c9fd028a2ec69b0f488c2d5e3f58f970a8e4e9642d128b31e45a13639a5912f4cd5229cb1756afb848fbe2b7aac48990411638c269deb303460d0faebc1d9ef771b6273a3f824adbc8a015f63002d6a38e65960689deb3cfe34460bc3bf6c71"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000640)=ANY=[@ANYRES8=r3], 0xb0) getresuid(&(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b6b6d610940601008922010203010902120001000000000904000000d0cca7006a089668752434f59237744c"], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.84790743s ago: executing program 3 (id=3716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) socket$kcm(0x10, 0x2, 0x4) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000202505a8a440000102090109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0xffffffffffffff8a, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}) pwritev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x4a, 0x0, 0x0) 2.723543303s ago: executing program 1 (id=3717): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 2.54392394s ago: executing program 4 (id=3718): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000140)={0xffff4393, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000000200)=""/200, 0xc8}], &(0x7f0000000100)=[0x6, 0x4, 0xc, 0x4, 0xfffffffffffffffa], 0x2}, 0x20) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0xf0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r1, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 2.499237535s ago: executing program 1 (id=3719): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000100)="f9f49aaf0a241c11013a6162030143d0ca91a2", 0x13}], 0x1}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x5, 0x0, 0x0, {{0x94}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x10000000, r10, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r10}}, 0x48) 2.380623086s ago: executing program 2 (id=3720): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x158}}, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="0c78bca32c37898d78318e236899", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = dup(r2) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000002c0)={0xa}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r12 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000600)) sendmsg$AUDIT_LIST_RULES(r12, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3f5, 0x1, 0x70bd2b, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x881) 2.207047284s ago: executing program 4 (id=3721): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYRESOCT=0x0, @ANYBLOB="09477cbcc098aa074ae4410a6485680de7619dc0c03a9af57a8c37656a3364281bc3d7a277dff16d3f2d5365105eece0532b0fba090541"], 0x24}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x101) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000040000000000bfd56a7dba4ed779c14cde0040000000e5209500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 825.324802ms ago: executing program 4 (id=3722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000003740)=[{{&(0x7f0000000300)=@tipc=@id, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/119, 0x77}], 0x1, &(0x7f0000000440)=""/190, 0xbe}}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000001780)=""/166, 0xa6}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f0000001840)=""/172, 0xac}, {&(0x7f0000001900)=""/199, 0xc7}, {&(0x7f0000001a00)=""/197, 0xc5}], 0x7}, 0x101}, {{&(0x7f0000001b80)=@nl=@proc, 0x80, &(0x7f0000000700)=[{&(0x7f0000001c00)=""/231, 0xe7}], 0x1, &(0x7f0000001d00)=""/48, 0x30}, 0x2}, {{&(0x7f0000001d40)=@hci, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/144, 0x90}], 0x1, &(0x7f0000001ec0)=""/236, 0xec}, 0x1af}, {{&(0x7f0000001fc0)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000002040)=""/198, 0xc6}], 0x1, &(0x7f0000002180)=""/4096, 0x1000}, 0x200}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003180)=""/131, 0x83}, {&(0x7f0000003240)=""/175, 0xaf}, {&(0x7f0000003300)=""/102, 0x66}], 0x3, &(0x7f00000033c0)=""/99, 0x63}, 0xd}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003440)=""/214, 0xd6}, {&(0x7f0000003540)=""/222, 0xde}, {&(0x7f0000003640)=""/8, 0x8}], 0x3, &(0x7f00000036c0)=""/87, 0x57}, 0x8}], 0x7, 0x12003, 0x0) 454.793199ms ago: executing program 4 (id=3723): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000I00000,privport']) setresuid(0xee00, 0x0, 0x0) r1 = getuid() setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x9) 256.092652ms ago: executing program 3 (id=3724): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x424482, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x20, 0x0) fanotify_mark(r3, 0x102, 0x28, r2, 0x0) 225.223664ms ago: executing program 4 (id=3725): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/tcp6\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r3, r2, 0x2, 0x0, 0x4000}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x8002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r5}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) close(r2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x4, 0x215a, 0x7, 0x5, 0x3], 0x5, &(0x7f0000000200)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r4, 0xffffffffffffffff, 0x2}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, 0x0, 0x0) read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0xa4b) 0s ago: executing program 0 (id=3726): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x61, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x7c38e0f8b8cae94c) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000140)=0xf4240) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000200)=0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000400)={0x0, 0x19, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES64=r6, @ANYRES64=r6, @ANYRESOCT=r5, @ANYBLOB="040013000a000600ffffe3ffffff000006001200000000000600b500c90200000400ac000600ab0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200c0881}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket(0x2a, 0x3, 0x8001) socket$key(0xf, 0x3, 0x2) r11 = accept(r9, 0x0, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x700, 0x0, 0xfff, 0xfff, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x27, 0x2, [{0x6, 0x5, "c0d1bf"}, {0x1, 0xe, "fe0fc3b721848ea44bf06195"}, {0x5, 0x7, "cd310ca900"}, {0x0, 0x7, "b74ef9ffbd"}]}, @generic={0x44, 0x11, "b760c7464d2be1fef3d634958b45da"}, @timestamp={0x44, 0x10, 0x69, 0x0, 0x5, [0x4, 0x3, 0xffffffff]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x8, 0x80000001, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @remote, 0x20, 0x10, 0x80000100, 0x10001}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES16=r0], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) r14 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x5, 0x10001, 0x1000009, 0x11, 0xffffffffffffffff, 0x9, '\x00', r12, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000800000020000050000000058565f1a0393ffab67e57842294a0120000000f404fa3f390f380f9787ac3f266380052277873040027f", @ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xdd) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x200001ee, &(0x7f0000000940)=ANY=[@ANYRESOCT=r11, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESOCT=r13, @ANYRESOCT=r12, @ANYRES64=r2, @ANYRESHEX, @ANYRESDEC=r14], &(0x7f0000000240)='GPL\x00', 0x402, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb2"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) kernel console output (not intermixed with test programs): 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1144.371696][T11446] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1145.161138][T11446] usb 2-1: Product: syz [ 1145.182833][T11446] usb 2-1: Manufacturer: syz [ 1145.238674][T11446] cdc_wdm 2-1:1.0: skipping garbage [ 1145.507386][T11446] cdc_wdm 2-1:1.0: skipping garbage [ 1145.533865][T11446] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1145.551569][T11446] cdc_wdm 2-1:1.0: Unknown control protocol [ 1145.598139][T11446] usb 2-1: USB disconnect, device number 47 [ 1146.305357][T14825] gspca_stk1135: reg_w 0x200 err -71 [ 1146.322886][T14825] gspca_stk1135: serial bus timeout: status=0x00 [ 1146.329260][T14825] gspca_stk1135: Sensor write failed [ 1146.375769][T14825] gspca_stk1135: serial bus timeout: status=0x00 [ 1146.404434][T14825] gspca_stk1135: Sensor write failed [ 1146.422264][T14825] gspca_stk1135: serial bus timeout: status=0x00 [ 1146.441970][T14825] gspca_stk1135: Sensor read failed [ 1146.448145][T14825] gspca_stk1135: serial bus timeout: status=0x00 [ 1146.473990][T14825] gspca_stk1135: Sensor read failed [ 1146.500469][T14825] gspca_stk1135: Detected sensor type unknown (0x0) [ 1146.523645][T14825] gspca_stk1135: serial bus timeout: status=0x00 [ 1146.546499][T14825] gspca_stk1135: Sensor read failed [ 1146.566017][T14825] gspca_stk1135: serial bus timeout: status=0x00 [ 1146.591820][T14825] gspca_stk1135: Sensor read failed [ 1146.616812][T14825] gspca_stk1135: serial bus timeout: status=0x00 [ 1146.649551][T14825] gspca_stk1135: Sensor write failed [ 1146.696407][T14825] gspca_stk1135: serial bus timeout: status=0x00 [ 1146.757583][T14825] gspca_stk1135: Sensor write failed [ 1146.784641][T14825] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1146.852155][T14825] usb 3-1: USB disconnect, device number 49 [ 1146.946052][ T29] audit: type=1326 audit(2000000123.299:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.0.3086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x0 [ 1147.404972][ T29] audit: type=1326 audit(2000000123.769:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17413 comm="syz.1.3093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe512775f19 code=0x0 [ 1147.801297][ T5147] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1148.013774][ T5147] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1148.039188][ T5147] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.057510][ T5147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1148.070325][ T5147] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.092617][ T5147] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.127351][ T5147] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1148.147263][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1148.180215][ T5147] usb 5-1: Product: syz [ 1148.184673][ T5147] usb 5-1: Manufacturer: syz [ 1148.241411][ T5147] cdc_wdm 5-1:1.0: skipping garbage [ 1148.269964][ T5147] cdc_wdm 5-1:1.0: skipping garbage [ 1148.288370][ T5147] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1148.296318][ T5147] cdc_wdm 5-1:1.0: Unknown control protocol [ 1149.523772][ T5150] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1149.558253][ T5147] usb 5-1: USB disconnect, device number 51 [ 1149.753932][ T5150] usb 3-1: Using ep0 maxpacket: 32 [ 1149.784989][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.820211][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.864833][ T5150] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1149.903260][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.941448][ T5150] usb 3-1: config 0 descriptor?? [ 1150.389784][ T5150] logitech 0003:046D:CA04.0041: item fetching failed at offset 0/2 [ 1150.394804][T10630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1150.413598][T10630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1150.413834][ T5150] logitech 0003:046D:CA04.0041: parse failed [ 1150.556113][T10630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1150.640641][T10630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1150.677558][T10630] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1150.688851][T10630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1151.154269][ T5150] logitech 0003:046D:CA04.0041: probe with driver logitech failed with error -22 [ 1151.196347][ T5150] usb 3-1: USB disconnect, device number 50 [ 1151.350432][ T5146] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1151.550303][ T5146] usb 1-1: Using ep0 maxpacket: 8 [ 1151.557960][ T5146] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1151.611996][ T5146] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1151.625127][T17469] (syz.4.3112,17469,1):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 1151.625604][ T5146] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1151.693499][ T5146] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.713950][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.763278][ T5146] usb 1-1: Product: syz [ 1151.767498][ T5146] usb 1-1: Manufacturer: syz [ 1151.808085][ T8270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.820340][ T5146] usb 1-1: SerialNumber: syz [ 1151.933017][ T5147] IPVS: starting estimator thread 0... [ 1152.128165][ T5146] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1152.142270][T17476] IPVS: using max 17 ests per chain, 40800 per kthread [ 1152.184383][ T5146] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1152.213071][ T5146] usb 1-1: 2:1 : invalid channels 0 [ 1152.358427][ T5146] usb 1-1: USB disconnect, device number 64 [ 1152.434413][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3113'. [ 1152.464434][ T5147] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1152.675651][T15667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1152.698082][T15667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1152.885160][T15667] Bluetooth: hci3: command tx timeout [ 1152.921150][T15667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1152.934897][T15667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1152.943888][T15667] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1152.952384][T15667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1153.002178][ T8270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.250545][ T5147] usb 5-1: Using ep0 maxpacket: 32 [ 1153.299387][ T5147] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1153.313297][ T5147] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1153.329274][ T8270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.357753][ T5147] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1153.373523][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.395241][ T5147] usb 5-1: Product: syz [ 1153.399449][ T5147] usb 5-1: Manufacturer: syz [ 1153.424189][T14767] udevd[14767]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1153.440310][ T5147] usb 5-1: SerialNumber: syz [ 1153.594716][ T8270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.668329][ T5147] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1154.457189][ T5147] usb 5-1: USB disconnect, device number 52 [ 1154.464375][T17490] ptrace attach of "./syz-executor exec"[17491] was attempted by "./syz-executor exec"[17490] [ 1154.477540][ T5147] usblp0: removed [ 1154.950296][T15667] Bluetooth: hci3: command tx timeout [ 1155.030812][T15667] Bluetooth: hci2: command tx timeout [ 1155.339407][T17455] chnl_net:caif_netlink_parms(): no params data found [ 1155.418832][ T8270] bridge_slave_1: left allmulticast mode [ 1155.440597][ T8270] bridge_slave_1: left promiscuous mode [ 1155.446461][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.472834][ T8270] bridge_slave_0: left allmulticast mode [ 1155.479488][ T8270] bridge_slave_0: left promiscuous mode [ 1155.498427][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.032202][T15667] Bluetooth: hci3: command tx timeout [ 1157.110816][T15667] Bluetooth: hci2: command tx timeout [ 1157.284218][ T5146] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1157.425086][ T8270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.447015][ T8270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.459222][ T8270] bond0 (unregistering): Released all slaves [ 1157.480399][ T5146] usb 1-1: Using ep0 maxpacket: 32 [ 1157.504550][ T5146] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1157.551784][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.559835][ T5146] usb 1-1: Product: syz [ 1157.587887][ T5146] usb 1-1: Manufacturer: syz [ 1157.611625][ T5146] usb 1-1: SerialNumber: syz [ 1157.651573][ T5146] usb 1-1: config 0 descriptor?? [ 1157.665365][ T5146] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1158.286672][T17478] chnl_net:caif_netlink_parms(): no params data found [ 1159.087843][T17455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.120520][T15667] Bluetooth: hci3: command tx timeout [ 1159.131691][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.139076][T17455] bridge_slave_0: entered allmulticast mode [ 1159.190948][T15667] Bluetooth: hci2: command tx timeout [ 1159.203735][T17455] bridge_slave_0: entered promiscuous mode [ 1159.242215][T17455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.280440][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.299465][T17455] bridge_slave_1: entered allmulticast mode [ 1159.323318][T17455] bridge_slave_1: entered promiscuous mode [ 1159.377374][ T5146] gspca_stk1135: reg_w 0xd err -71 [ 1159.404953][ T5146] gspca_stk1135: serial bus timeout: status=0x00 [ 1159.424456][ T5146] gspca_stk1135: Sensor write failed [ 1159.429817][ T5146] gspca_stk1135: serial bus timeout: status=0x00 [ 1159.470055][ T5146] gspca_stk1135: Sensor write failed [ 1159.480277][ T5146] gspca_stk1135: serial bus timeout: status=0x00 [ 1159.486654][ T5146] gspca_stk1135: Sensor read failed [ 1159.555109][ T5146] gspca_stk1135: serial bus timeout: status=0x00 [ 1159.617482][ T5146] gspca_stk1135: Sensor read failed [ 1159.635194][ T5146] gspca_stk1135: Detected sensor type unknown (0x0) [ 1159.651237][ T8270] hsr_slave_0: left promiscuous mode [ 1159.662683][ T5146] gspca_stk1135: serial bus timeout: status=0x00 [ 1159.671085][ T8270] hsr_slave_1: left promiscuous mode [ 1159.675681][ T5146] gspca_stk1135: Sensor read failed [ 1159.688757][ T5146] gspca_stk1135: serial bus timeout: status=0x00 [ 1159.695751][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.704543][ T5146] gspca_stk1135: Sensor read failed [ 1159.714605][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.718891][ T5146] gspca_stk1135: serial bus timeout: status=0x00 [ 1159.734099][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.738805][ T5146] gspca_stk1135: Sensor write failed [ 1159.743338][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.748913][ T5146] gspca_stk1135: serial bus timeout: status=0x00 [ 1159.771282][ T5146] gspca_stk1135: Sensor write failed [ 1159.780335][ T5146] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1159.814277][ T8270] veth1_macvtap: left promiscuous mode [ 1159.819312][ T5146] usb 1-1: USB disconnect, device number 65 [ 1159.833734][ T8270] veth0_macvtap: left promiscuous mode [ 1159.854368][ T8270] veth1_vlan: left promiscuous mode [ 1159.871479][ T8270] veth0_vlan: left promiscuous mode [ 1159.954944][ T5148] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1160.174419][ T5148] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1160.203192][ T5148] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1160.220266][ T5148] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1160.275806][ T5148] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1160.295424][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.342719][ T5148] usb 5-1: Product: syz [ 1160.356314][ T5148] usb 5-1: Manufacturer: syz [ 1160.366277][ T5148] usb 5-1: SerialNumber: syz [ 1160.399556][ T5148] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1160.410431][ T5148] cdc_ncm 5-1:1.0: bind() failure [ 1160.668727][ T5147] usb 5-1: USB disconnect, device number 53 [ 1161.270312][T15667] Bluetooth: hci2: command tx timeout [ 1161.461755][ T8270] team0 (unregistering): Port device team_slave_1 removed [ 1161.597705][ T8270] team0 (unregistering): Port device team_slave_0 removed [ 1161.833122][ T5105] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1162.020526][ T5105] usb 1-1: Using ep0 maxpacket: 8 [ 1162.052778][ T5105] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1162.066421][ T5105] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1162.077567][ T5105] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1162.100252][ T5105] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1162.109863][ T5105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.119308][ T5105] usb 1-1: Product: syz [ 1162.124692][ T5105] usb 1-1: Manufacturer: syz [ 1162.129333][ T5105] usb 1-1: SerialNumber: syz [ 1162.443237][ T5105] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1162.460209][ T5105] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1162.468493][ T5105] usb 1-1: 2:1 : invalid channels 0 [ 1162.631441][ T5105] usb 1-1: USB disconnect, device number 66 [ 1162.945503][T14767] udevd[14767]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1162.963850][ T8270] vcan0 (unregistering): left allmulticast mode [ 1163.177672][T17597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1163.201347][T17597] unsupported nlmsg_type 40 [ 1163.528751][T17455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.607758][T17455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.626285][T17478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.653997][T17478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.670026][ T8265] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1163.688188][T17478] bridge_slave_0: entered allmulticast mode [ 1163.721043][T17478] bridge_slave_0: entered promiscuous mode [ 1163.855860][T17478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.878671][T17478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.889790][T17478] bridge_slave_1: entered allmulticast mode [ 1163.919439][T17478] bridge_slave_1: entered promiscuous mode [ 1164.108762][T17617] autofs4:pid:17617:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 1164.112894][T17455] team0: Port device team_slave_0 added [ 1164.133430][T17617] autofs4:pid:17617:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1164.172311][T17478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.194012][T17455] team0: Port device team_slave_1 added [ 1164.329654][T17478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.596746][T17455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.632230][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.825121][T17455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.890034][T17455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.909445][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.962765][T17455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.035128][T17478] team0: Port device team_slave_0 added [ 1165.074757][T17478] team0: Port device team_slave_1 added [ 1165.117318][T17636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3149'. [ 1165.376970][T17455] hsr_slave_0: entered promiscuous mode [ 1165.396344][T17455] hsr_slave_1: entered promiscuous mode [ 1165.412436][T17455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1165.426575][T17455] Cannot create hsr debugfs directory [ 1165.729369][ T8270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.888477][T17478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.915326][T17478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.997622][ T29] audit: type=1326 audit(2000000142.359:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17646 comm="syz.0.3153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x0 [ 1166.024172][T17478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.177232][ T8270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.277366][T17478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.305370][T17478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.345061][T17478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.545619][ T8270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.639629][T17675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1166.689257][T17675] sctp: [Deprecated]: syz.1.3159 (pid 17675) Use of int in maxseg socket option. [ 1166.689257][T17675] Use struct sctp_assoc_value instead [ 1166.710947][ T8270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.731749][T17675] netlink: 184472 bytes leftover after parsing attributes in process `syz.1.3159'. [ 1166.753007][T17676] autofs4:pid:17676:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 1166.793800][T17676] autofs4:pid:17676:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1167.261753][T17478] hsr_slave_0: entered promiscuous mode [ 1167.273840][T17478] hsr_slave_1: entered promiscuous mode [ 1167.280745][T17478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1167.296095][T17478] Cannot create hsr debugfs directory [ 1168.094557][ T8270] bridge_slave_1: left allmulticast mode [ 1168.110379][ T8270] bridge_slave_1: left promiscuous mode [ 1168.122699][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.176069][ T8270] bridge_slave_0: left allmulticast mode [ 1168.200623][ T8270] bridge_slave_0: left promiscuous mode [ 1168.210560][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.762004][ T29] audit: type=1326 audit(2000000145.129:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17711 comm="syz.4.3171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37c4975f19 code=0x0 [ 1168.979173][T17717] Invalid ELF section header overflow [ 1169.172061][ T8270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.185285][ T8270] bond0 (unregistering): Released all slaves [ 1169.198658][ T8270] bond1 (unregistering): Released all slaves [ 1169.633874][ T29] audit: type=1400 audit(2000000145.989:787): avc: denied { read } for pid=17720 comm="syz.4.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1169.737305][ T5105] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1169.911575][ T5146] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1169.933597][ T5105] usb 2-1: Using ep0 maxpacket: 16 [ 1169.943739][ T8270] hsr_slave_0: left promiscuous mode [ 1169.957905][ T5105] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1169.968647][ T8270] hsr_slave_1: left promiscuous mode [ 1169.975038][ T5105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.987062][ T5105] usb 2-1: Product: syz [ 1169.993988][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.997429][ T5105] usb 2-1: Manufacturer: syz [ 1170.010536][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.017798][ T5105] usb 2-1: SerialNumber: syz [ 1170.046393][ T5105] usb 2-1: config 0 descriptor?? [ 1170.046556][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.061225][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.073875][ T5105] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1170.089288][ T5105] usb 2-1: Detected FT232H [ 1170.122007][ T5146] usb 1-1: Using ep0 maxpacket: 32 [ 1170.130716][ T8270] veth0_macvtap: left promiscuous mode [ 1170.137816][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.140904][ T8270] veth1_vlan: left promiscuous mode [ 1170.161817][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.170334][ T8270] veth0_vlan: left promiscuous mode [ 1170.182870][ T5146] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1170.200543][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.226776][ T5146] usb 1-1: config 0 descriptor?? [ 1170.249777][ T5146] hub 1-1:0.0: USB hub found [ 1170.286200][ T5105] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1170.483812][ T5146] hub 1-1:0.0: 1 port detected [ 1170.507314][ T5105] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 1170.538162][ T5105] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1170.748085][T11446] usb 2-1: USB disconnect, device number 48 [ 1170.778488][T11446] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1170.841136][T11446] ftdi_sio 2-1:0.0: device disconnected [ 1171.951688][ T5146] hub 1-1:0.0: activate --> -90 [ 1172.379020][T11446] usb 1-1: USB disconnect, device number 67 [ 1172.610470][ T5146] usb 1-1-port1: config error [ 1172.731727][ T8270] team0 (unregistering): Port device team_slave_1 removed [ 1173.065093][ T8270] team0 (unregistering): Port device team_slave_0 removed [ 1173.434998][ T29] audit: type=1326 audit(2000000149.799:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x7ffc0000 [ 1173.557923][ T29] audit: type=1326 audit(2000000149.799:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x7ffc0000 [ 1173.612718][ T29] audit: type=1326 audit(2000000149.819:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f96f2775f19 code=0x7ffc0000 [ 1173.688558][ T29] audit: type=1326 audit(2000000149.819:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x7ffc0000 [ 1173.714079][ T29] audit: type=1326 audit(2000000149.819:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x7ffc0000 [ 1173.781576][ T29] audit: type=1326 audit(2000000149.819:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f96f2775f19 code=0x7ffc0000 [ 1173.844296][ T29] audit: type=1326 audit(2000000149.819:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x7ffc0000 [ 1173.869756][ T29] audit: type=1326 audit(2000000149.829:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x7ffc0000 [ 1174.549273][ T29] audit: type=1326 audit(2000000150.849:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17769 comm="syz.0.3186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x0 [ 1175.300562][T15667] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1175.520259][ T29] audit: type=1400 audit(2000000151.789:797): avc: denied { create } for pid=17786 comm="syz.0.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1176.016946][T17478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1176.067688][T17478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1176.152593][T17478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1176.341420][T17806] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1176.360225][T17478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1176.605870][T17455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1176.673905][T17455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1176.801489][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.807925][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.904896][T17455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1176.960957][T17455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1177.259817][T17478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.357054][T17842] atomic_op ffff88801f3f4998 conn xmit_atomic 0000000000000000 [ 1177.382141][T17843] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3201'. [ 1177.398513][T17840] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3201'. [ 1177.463194][T17478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.519065][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.635665][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.642901][T14825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.667932][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.675108][T14825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.778243][T17455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.819857][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.827034][T14825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.905895][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.913181][T14825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.255605][T17455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1179.079615][T17478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.102578][T17478] veth0_vlan: entered promiscuous mode [ 1180.233521][T17455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.322546][T17478] veth1_vlan: entered promiscuous mode [ 1180.546278][T17478] veth0_macvtap: entered promiscuous mode [ 1180.592383][T17478] veth1_macvtap: entered promiscuous mode [ 1180.619179][T17455] veth0_vlan: entered promiscuous mode [ 1180.734393][T17455] veth1_vlan: entered promiscuous mode [ 1180.816451][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.838261][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.854392][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.883874][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.898116][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.909437][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.922234][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.936403][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.966781][T17478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.987698][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.019243][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.050237][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.110142][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.151397][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.176446][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.203996][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.231544][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.254997][T17478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.555657][T17478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.566188][T17478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.575293][T17478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.589472][T17478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.799436][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1181.799482][ T29] audit: type=1326 audit(2000000158.159:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17912 comm="syz.1.3219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe512775f19 code=0x0 [ 1182.467061][T17455] veth0_macvtap: entered promiscuous mode [ 1182.523526][T17455] veth1_macvtap: entered promiscuous mode [ 1182.804945][ T8148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.033023][ T8148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.623826][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.687221][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.727069][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.817047][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.837528][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.860153][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.511369][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.550244][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.587343][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.631566][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.735948][T17455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.912260][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1185.982234][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.012700][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.050799][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.071883][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.147445][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.178041][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.219488][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.267076][T17455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.301412][T17455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.351884][T17455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.404018][ T8163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.419233][ T8163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.497742][T17455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.540396][T17455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.578526][T17455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.603436][T17455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.976814][ T29] audit: type=1400 audit(2000000163.339:800): avc: denied { create } for pid=17984 comm="syz.2.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1187.104334][ T29] audit: type=1400 audit(2000000163.399:801): avc: denied { getopt } for pid=17984 comm="syz.2.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1187.183375][ T8270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.183402][ T8270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.429067][ T8265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.429094][ T8265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.393925][ T29] audit: type=1400 audit(2000000164.749:802): avc: denied { setattr } for pid=18002 comm="syz.2.3235" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1189.130375][ T928] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1189.460218][ T928] usb 5-1: Using ep0 maxpacket: 32 [ 1189.474728][ T928] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1190.190188][ T928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.198222][ T928] usb 5-1: Product: syz [ 1190.212287][ T928] usb 5-1: Manufacturer: syz [ 1190.217369][ T928] usb 5-1: SerialNumber: syz [ 1190.261856][ T928] usb 5-1: config 0 descriptor?? [ 1190.390508][ T29] audit: type=1400 audit(2000000166.749:803): avc: denied { setopt } for pid=18039 comm="syz.2.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1190.519784][ T928] snd-usb-6fire 5-1:0.0: unable to receive device firmware state. [ 1190.548502][ T928] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 1190.581937][ T928] usb 5-1: USB disconnect, device number 54 [ 1190.850385][ T29] audit: type=1326 audit(2000000167.209:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18043 comm="syz.1.3245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe512775f19 code=0x0 [ 1193.151216][T18105] netlink: 'syz.2.3258': attribute type 20 has an invalid length. [ 1193.360765][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1193.562991][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1193.590030][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1193.602893][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.637693][ T9] usb 5-1: Product: syz [ 1193.650331][ T9] usb 5-1: Manufacturer: syz [ 1193.673012][ T9] usb 5-1: SerialNumber: syz [ 1193.700060][ T9] usb 5-1: config 0 descriptor?? [ 1193.980597][ T9] snd-usb-6fire 5-1:0.0: unable to receive device firmware state. [ 1193.988482][ T9] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 1194.065548][ T9] usb 5-1: USB disconnect, device number 55 [ 1194.399283][T18129] veth1_macvtap: left promiscuous mode [ 1195.540965][T14825] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1195.740479][ T929] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1195.773154][T14825] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1195.831486][T14825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1195.888863][T14825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1195.919578][T14825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1195.969759][T14825] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1195.977789][ T929] usb 3-1: Using ep0 maxpacket: 16 [ 1195.999278][T14825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.004978][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.033866][T14825] usb 5-1: config 0 descriptor?? [ 1196.039758][T18140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1196.049136][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.099712][ T929] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1196.290245][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.399960][ T29] audit: type=1400 audit(2000000172.729:805): avc: denied { ioctl } for pid=18151 comm="syz.3.3280" path="socket:[73721]" dev="sockfs" ino=73721 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1196.922976][ T929] usb 3-1: config 0 descriptor?? [ 1197.117472][T17483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1197.127356][T17483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1197.140064][T17483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1197.148722][T17483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1197.161809][T17483] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1197.169417][T17483] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1197.238989][T14825] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 1197.256996][T14825] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1197.457276][ T929] holtek_kbd 0003:04D9:A055.0043: item fetching failed at offset 3/4 [ 1197.473513][ T929] holtek_kbd 0003:04D9:A055.0043: probe with driver holtek_kbd failed with error -22 [ 1197.678245][T11446] usb 3-1: USB disconnect, device number 51 [ 1197.737790][ T8265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.784107][T18164] veth1_macvtap: left promiscuous mode [ 1197.900750][ T8265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.233048][ T8265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.172755][ T8265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.261234][T18178] block nbd3: shutting down sockets [ 1199.270441][T15667] Bluetooth: hci4: command tx timeout [ 1199.632554][T18155] chnl_net:caif_netlink_parms(): no params data found [ 1199.812266][T11446] usb 5-1: USB disconnect, device number 56 [ 1199.999272][ T8265] bridge_slave_1: left allmulticast mode [ 1200.027733][ T8265] bridge_slave_1: left promiscuous mode [ 1200.035283][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.076491][ T8265] bridge_slave_0: left allmulticast mode [ 1200.086228][ T8265] bridge_slave_0: left promiscuous mode [ 1200.097795][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.290408][T14825] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1200.530470][T14825] usb 3-1: Using ep0 maxpacket: 16 [ 1200.561921][T14825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1200.582450][T14825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1200.623129][T14825] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffd0, bcdDevice=e0.c1 [ 1200.653082][T14825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.676372][T14825] usb 3-1: Product: syz [ 1200.688614][T14825] usb 3-1: Manufacturer: syz [ 1200.696676][T14825] usb 3-1: SerialNumber: syz [ 1200.738383][T14825] usb 3-1: config 0 descriptor?? [ 1200.759031][T14825] option 3-1:0.0: GSM modem (1-port) converter detected [ 1200.810263][ T5105] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1200.990584][T11446] usb 3-1: USB disconnect, device number 52 [ 1200.999058][T11446] option 3-1:0.0: device disconnected [ 1201.012588][ T5105] usb 4-1: Using ep0 maxpacket: 16 [ 1201.041484][ T5105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.097752][ T5105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.111483][ T5105] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1201.121668][ T5105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.142508][ T5105] usb 4-1: config 0 descriptor?? [ 1201.340068][ T29] audit: type=1400 audit(2000000177.699:806): avc: denied { name_bind } for pid=18215 comm="syz.0.3296" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1201.388144][T15667] Bluetooth: hci4: command tx timeout [ 1201.632572][ T5105] holtek_kbd 0003:04D9:A055.0044: item fetching failed at offset 3/4 [ 1201.653075][ T5105] holtek_kbd 0003:04D9:A055.0044: probe with driver holtek_kbd failed with error -22 [ 1201.838858][ T8265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.857957][T18222] block nbd0: shutting down sockets [ 1201.908933][ T8265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.970803][ T8265] bond0 (unregistering): Released all slaves [ 1202.609179][ T5149] usb 4-1: USB disconnect, device number 41 [ 1202.768659][T18203] veth1_macvtap: left promiscuous mode [ 1202.992410][T18155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.999607][T18155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.039911][T18155] bridge_slave_0: entered allmulticast mode [ 1203.060971][T18155] bridge_slave_0: entered promiscuous mode [ 1203.121048][ T5147] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1203.206089][T18155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.223278][T18155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.251072][T18155] bridge_slave_1: entered allmulticast mode [ 1203.258838][T18155] bridge_slave_1: entered promiscuous mode [ 1203.320976][ T5147] usb 1-1: Using ep0 maxpacket: 32 [ 1203.369186][ T5147] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1203.430843][T15667] Bluetooth: hci4: command tx timeout [ 1203.438035][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.746440][T18155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.144594][ T5147] usb 1-1: Product: syz [ 1204.150662][ T5147] usb 1-1: Manufacturer: syz [ 1204.156543][ T5147] usb 1-1: SerialNumber: syz [ 1204.171015][ T5147] usb 1-1: config 0 descriptor?? [ 1204.182234][ T8265] hsr_slave_0: left promiscuous mode [ 1204.212581][ T8265] hsr_slave_1: left promiscuous mode [ 1204.229754][ T8265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.247077][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.264224][ T8265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.272416][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.312198][ T8265] veth1_macvtap: left promiscuous mode [ 1204.318858][ T8265] veth0_macvtap: left promiscuous mode [ 1204.329356][ T8265] veth1_vlan: left promiscuous mode [ 1204.335079][ T8265] veth0_vlan: left promiscuous mode [ 1204.419788][ T5147] snd-usb-6fire 1-1:0.0: unable to receive device firmware state. [ 1204.438930][ T5147] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 1204.479924][ T5147] usb 1-1: USB disconnect, device number 68 [ 1204.532925][T18254] block nbd2: shutting down sockets [ 1204.733833][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1205.467601][ T8265] team0 (unregistering): Port device team_slave_1 removed [ 1205.520519][T15667] Bluetooth: hci4: command tx timeout [ 1205.560071][ T8265] team0 (unregistering): Port device team_slave_0 removed [ 1206.316919][T18155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.634945][T18155] team0: Port device team_slave_0 added [ 1206.683504][T18155] team0: Port device team_slave_1 added [ 1206.713056][ T5105] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1206.852543][T18155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.892574][T18155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.940744][ T5105] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.956431][T18155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.998049][ T5105] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1207.020148][T18155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.029163][T18155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.055563][T18155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.084683][ T5105] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1207.123835][ T5105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1207.193399][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1207.208622][ T5105] usb 1-1: SerialNumber: syz [ 1207.413059][T18155] hsr_slave_0: entered promiscuous mode [ 1207.468813][T18155] hsr_slave_1: entered promiscuous mode [ 1207.487704][ T5105] usb 1-1: 0:2 : does not exist [ 1207.522106][ T5105] usb 1-1: unit 5 not found! [ 1207.530265][T18155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1207.552679][T18155] Cannot create hsr debugfs directory [ 1207.562359][T18289] block nbd2: shutting down sockets [ 1207.591326][ T5105] usb 1-1: USB disconnect, device number 69 [ 1207.714534][ T8265] IPVS: stop unused estimator thread 0... [ 1207.873039][T18049] udevd[18049]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1211.140454][T11446] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1211.377106][T11446] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.870282][T11446] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.922880][T11446] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1211.959953][T11446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1211.989754][T11446] usb 1-1: SerialNumber: syz [ 1212.131205][T14825] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1212.298716][T11446] usb 1-1: 0:2 : does not exist [ 1212.310344][T11446] usb 1-1: unit 5 not found! [ 1212.355497][T14825] usb 4-1: Using ep0 maxpacket: 16 [ 1212.380035][T11446] usb 1-1: USB disconnect, device number 70 [ 1212.389432][T14825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1212.411913][T18155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1212.432556][T14825] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1212.451924][T14825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.476048][T18155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1212.493143][T14825] usb 4-1: Product: syz [ 1212.497543][T14825] usb 4-1: Manufacturer: syz [ 1212.517006][T14825] usb 4-1: SerialNumber: syz [ 1212.561565][T14825] usb 4-1: config 0 descriptor?? [ 1212.600642][T14825] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 1212.649169][T18155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1212.692715][T14825] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1212.695586][T18155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1212.741814][T18364] syz_tun: entered promiscuous mode [ 1212.763465][T18049] udevd[18049]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.787141][T18364] syz_tun: left promiscuous mode [ 1212.899753][ T5146] usb 4-1: USB disconnect, device number 42 [ 1212.942494][ T5146] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1212.993375][ T5146] kobil_sct 4-1:0.0: device disconnected [ 1213.256169][T18155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.322214][T18155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.363893][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.371048][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.466045][T18378] input input74: cannot allocate more than FF_MAX_EFFECTS effects [ 1213.488108][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.495335][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.619452][T18155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1216.267211][T18155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.584697][T18155] veth0_vlan: entered promiscuous mode [ 1216.645872][T18155] veth1_vlan: entered promiscuous mode [ 1216.658217][T18416] fuse: Unknown parameter '0x0000000000000008' [ 1216.713073][ C0] eth0: bad gso: type: 1, size: 1408 [ 1216.824495][T18155] veth0_macvtap: entered promiscuous mode [ 1216.854792][T18155] veth1_macvtap: entered promiscuous mode [ 1216.929728][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.970968][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.994668][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.021554][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.060021][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.083513][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.143190][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.215366][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.249543][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.280191][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.306825][T18155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.358203][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.669146][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.690053][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.701279][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.711479][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.723095][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.733674][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.744458][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.757842][T18155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.776021][T18155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.788354][T18155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.825977][T18155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.836841][T18155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.846373][T18155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.855812][T18155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.129829][ T8157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.185948][ T8157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.400999][ T8270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.459547][ T8270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.308512][ C0] eth0: bad gso: type: 1, size: 1408 [ 1219.423531][T15667] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1219.970430][ T5105] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1221.275849][ T5105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.387625][ T5105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.458755][ T5105] usb 2-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 1221.506333][ T29] audit: type=1326 audit(2000000197.869:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1221.520059][ T5105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.574592][ T5105] usb 2-1: config 0 descriptor?? [ 1221.584230][T18525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1221.633031][ T29] audit: type=1326 audit(2000000197.889:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1221.800929][ T29] audit: type=1326 audit(2000000197.889:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1221.824311][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.985271][ T29] audit: type=1326 audit(2000000197.909:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1222.008685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.035342][ T5105] logitech 0003:046D:C101.0045: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.1-1/input0 [ 1222.175265][ T29] audit: type=1326 audit(2000000197.909:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1222.228116][T18501] trusted_key: encrypted_key: master key parameter is missing [ 1222.346048][ T29] audit: type=1326 audit(2000000197.909:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1222.347546][ T5147] usb 2-1: USB disconnect, device number 49 [ 1222.401080][ T5105] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1222.522611][ T29] audit: type=1326 audit(2000000197.909:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1222.609617][ T29] audit: type=1326 audit(2000000197.909:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1222.642617][ T5105] usb 5-1: Using ep0 maxpacket: 8 [ 1222.652182][ T5105] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 1222.671390][ T29] audit: type=1326 audit(2000000197.939:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1222.680373][ T5105] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 1222.731811][ T5105] usb 5-1: config 0 has an invalid interface number: 49 but max is 2 [ 1222.736974][ T29] audit: type=1326 audit(2000000197.939:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.2.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b6775f19 code=0x7ffc0000 [ 1222.747686][ T5105] usb 5-1: config 0 has no interface number 0 [ 1222.784882][ T5105] usb 5-1: config 0 has no interface number 1 [ 1222.806313][ T5105] usb 5-1: config 0 has no interface number 2 [ 1222.821361][ T5105] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1222.863872][ T5105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.906806][ T5105] usb 5-1: config 0 descriptor?? [ 1223.209727][ T5105] qcserial 5-1:0.6: Qualcomm USB modem converter detected [ 1223.408606][T18536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.434983][T18536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.474340][T18536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3377'. [ 1223.651220][T18582] netlink: 'syz.3.3384': attribute type 10 has an invalid length. [ 1223.667121][ T5105] usb 5-1: Could not set interface, error -71 [ 1223.692442][T18582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.731332][ T5150] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1223.769637][ T5105] usb 5-1: USB disconnect, device number 57 [ 1223.788617][ T5105] qcserial 5-1:0.6: device disconnected [ 1223.823745][T18582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.880931][T18582] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1223.945717][T18592] sctp: [Deprecated]: syz.4.3387 (pid 18592) Use of int in max_burst socket option deprecated. [ 1223.945717][T18592] Use struct sctp_assoc_value instead [ 1223.970573][ T5150] usb 2-1: Using ep0 maxpacket: 16 [ 1223.999781][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.027924][ T5218] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1224.027988][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.072455][T18592] batadv_slave_0: entered promiscuous mode [ 1224.090568][ T5150] usb 2-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 1224.111078][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.133113][ T5150] usb 2-1: config 0 descriptor?? [ 1224.169900][T18589] batadv_slave_0: left promiscuous mode [ 1224.265410][ T5218] usb 3-1: Using ep0 maxpacket: 16 [ 1224.291327][ T5218] usb 3-1: config index 0 descriptor too short (expected 64742, got 92) [ 1224.315013][ T5218] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 1224.345546][ T5218] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.380306][ T5218] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1224.389300][ T5218] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1224.541750][T18607] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3389'. [ 1224.610596][T18607] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3389'. [ 1224.621234][ T5150] smartjoyplus 0003:6666:8802.0046: hidraw0: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.1-1/input0 [ 1224.673813][T18614] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1224.703692][ T5150] smartjoyplus 0003:6666:8802.0046: no output reports found [ 1224.864922][ T5218] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1224.874889][ T5218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.883858][ T5218] usb 3-1: Product: syz [ 1224.888160][ T5218] usb 3-1: Manufacturer: syz [ 1224.893435][ T5218] usb 3-1: SerialNumber: syz [ 1224.907197][ T5218] cdc_ncm 3-1:1.0: skipping garbage [ 1224.912565][ T5218] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1224.921234][ T5218] cdc_ncm 3-1:1.0: bind() failure [ 1224.946661][ T5218] usb 2-1: USB disconnect, device number 50 [ 1225.872904][T18637] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3394'. [ 1225.951110][ T5105] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1226.145791][ T5105] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 1226.175885][ T5105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.194373][ T5105] usb 1-1: Product: syz [ 1226.204539][ T5105] usb 1-1: Manufacturer: syz [ 1226.217457][ T5105] usb 1-1: SerialNumber: syz [ 1226.231753][ T5105] usb 1-1: config 0 descriptor?? [ 1226.255293][ T5105] smsc75xx v1.0.0 [ 1226.270283][ T5105] smsc75xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1226.292694][ T5105] smsc75xx 1-1:0.0: probe with driver smsc75xx failed with error -22 [ 1226.484351][T14825] usb 1-1: USB disconnect, device number 71 [ 1226.715227][ T5149] usb 3-1: USB disconnect, device number 53 [ 1227.052193][T18655] sctp: [Deprecated]: syz.3.3400 (pid 18655) Use of int in max_burst socket option deprecated. [ 1227.052193][T18655] Use struct sctp_assoc_value instead [ 1227.114940][T18655] batadv_slave_0: entered promiscuous mode [ 1227.227999][T18654] batadv_slave_0: left promiscuous mode [ 1227.631689][T14825] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1227.851635][T14825] usb 1-1: Using ep0 maxpacket: 16 [ 1227.867176][T14825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.899264][T14825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.939617][T14825] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1227.965646][T14825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.003431][T17483] Bluetooth: hci4: command 0x0405 tx timeout [ 1228.039532][T14825] usb 1-1: config 0 descriptor?? [ 1228.583809][T18682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.766499][T14825] usbhid 1-1:0.0: can't add hid device: -71 [ 1228.773008][T14825] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1228.792881][T14825] usb 1-1: USB disconnect, device number 72 [ 1229.490320][T15667] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 1231.370633][T15667] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1231.383460][T15667] Bluetooth: hci2: Injecting HCI hardware error event [ 1231.396087][T15667] Bluetooth: hci2: hardware error 0x00 [ 1231.734699][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 1231.734719][ T29] audit: type=1400 audit(2000000208.099:848): avc: denied { map } for pid=18727 comm="syz.1.3420" path="/proc/26/net/rt_acct" dev="proc" ino=4026533219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1232.587739][ T29] audit: type=1400 audit(2000000208.869:849): avc: denied { recv } for pid=18717 comm="syz.3.3419" saddr=10.128.0.169 src=30006 daddr=10.128.0.24 dest=42350 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1232.606226][T18742] ptrace attach of "./syz-executor exec"[18155] was attempted by "./syz-executor exec"[18742] [ 1232.834560][T18747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1233.433562][T17483] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1233.444666][T17483] Bluetooth: hci1: Injecting HCI hardware error event [ 1233.464326][T17483] Bluetooth: hci1: hardware error 0x00 [ 1233.592187][T15667] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1233.830937][T18760] 9pnet_fd: Insufficient options for proto=fd [ 1233.897661][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3433'. [ 1233.920483][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1234.130304][ T5149] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1234.322401][ T5149] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.388296][ T5149] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1234.418101][ T5149] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1234.436499][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1234.456280][ T5149] usb 4-1: SerialNumber: syz [ 1235.513212][ T5149] usb 4-1: 0:2 : does not exist [ 1235.518175][ T5149] usb 4-1: unit 5 not found! [ 1235.596672][T17483] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1235.736347][ T5149] usb 4-1: USB disconnect, device number 43 [ 1236.075455][T18049] udevd[18049]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1237.515545][T18809] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3448'. [ 1237.578749][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3447'. [ 1237.601790][ T29] audit: type=1400 audit(2000000213.959:850): avc: denied { egress } for pid=18806 comm="syz.3.3448" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1237.625183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.705287][ T29] audit: type=1400 audit(2000000213.959:851): avc: denied { sendto } for pid=18806 comm="syz.3.3448" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1238.491019][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.497559][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.557238][T18809] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1238.994433][ T5150] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1239.401028][ T5150] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1239.420485][ T5150] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1239.431512][ T5150] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1239.458667][ T5150] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1239.472575][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.495026][ T5150] usb 5-1: Product: syz [ 1239.502999][ T5150] usb 5-1: Manufacturer: syz [ 1239.523821][ T5150] usb 5-1: SerialNumber: syz [ 1239.616073][ T29] audit: type=1400 audit(2000000215.979:852): avc: denied { unmount } for pid=17455 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1240.834198][ T5150] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1241.073205][T18841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3456'. [ 1241.092844][T18841] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3456'. [ 1241.119739][T18841] vlan0: entered allmulticast mode [ 1241.151676][T18841] veth0_vlan: entered allmulticast mode [ 1246.456531][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 1246.598513][ T5149] usb 5-1: USB disconnect, device number 58 [ 1246.607952][ T5149] usblp0: removed [ 1246.736482][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3463'. [ 1246.760243][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3463'. [ 1246.826420][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3464'. [ 1247.049594][T18875] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1248.158955][T18875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1248.847038][ T29] audit: type=1400 audit(2000000225.209:853): avc: denied { create } for pid=18912 comm="syz.1.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1250.568604][T18926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1250.601006][T18926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1250.742249][ T29] audit: type=1400 audit(2000000227.109:854): avc: denied { watch } for pid=18927 comm="syz.2.3478" path="/70/net_prio.prioidx" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1250.794523][T18932] overlayfs: missing 'workdir' [ 1250.863169][ T29] audit: type=1400 audit(2000000227.109:855): avc: denied { watch_sb } for pid=18927 comm="syz.2.3478" path="/70/net_prio.prioidx" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1251.710291][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1251.777020][T18942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.951760][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1251.962276][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1251.986402][ T9] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=75.7c [ 1252.007573][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.022400][ T9] usb 2-1: Product: syz [ 1252.026600][ T9] usb 2-1: Manufacturer: syz [ 1252.043850][ T9] usb 2-1: SerialNumber: syz [ 1252.084286][ T9] usb 2-1: config 0 descriptor?? [ 1252.327069][ T5147] usb 2-1: USB disconnect, device number 51 [ 1253.549049][ T29] audit: type=1400 audit(2000000229.909:856): avc: denied { write } for pid=18953 comm="syz.2.3486" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1253.641154][ T29] audit: type=1400 audit(2000000229.909:857): avc: denied { open } for pid=18953 comm="syz.2.3486" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1255.036055][T14825] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1255.070586][ T29] audit: type=1400 audit(2000000231.439:858): avc: denied { setattr } for pid=18971 comm="syz.1.3490" path="socket:[78763]" dev="sockfs" ino=78763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1255.260144][T14825] usb 3-1: Using ep0 maxpacket: 16 [ 1255.279054][ T29] audit: type=1400 audit(2000000231.639:859): avc: denied { link } for pid=18971 comm="syz.1.3490" name="#2a" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1255.301518][T14825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1255.301559][T14825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1255.301609][T14825] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1255.301639][T14825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.311700][T14825] usb 3-1: config 0 descriptor?? [ 1255.414821][ T29] audit: type=1400 audit(2000000231.639:860): avc: denied { rename } for pid=18971 comm="syz.1.3490" name="#2b" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1255.678659][ T29] audit: type=1400 audit(2000000232.039:861): avc: denied { setattr } for pid=18962 comm="syz.2.3487" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1255.749005][T14825] usbhid 3-1:0.0: can't add hid device: -71 [ 1255.776647][T14825] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1255.830653][T14825] usb 3-1: USB disconnect, device number 54 [ 1256.538678][T17483] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 1256.610957][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'. [ 1256.660409][T17483] Bluetooth: hci4: unexpected event 0x32 length: 17 > 9 [ 1258.240617][T11446] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1258.490237][T11446] usb 5-1: Using ep0 maxpacket: 8 [ 1258.515230][T11446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1258.549590][T11446] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1258.574876][T11446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1258.636195][T11446] usb 5-1: New USB device found, idVendor=04b3, idProduct=454c, bcdDevice=9f.bf [ 1258.667647][T11446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.696489][T11446] usb 5-1: Product: syz [ 1258.714634][T11446] usb 5-1: Manufacturer: syz [ 1258.728770][T11446] usb 5-1: SerialNumber: syz [ 1258.758968][T11446] usb 5-1: config 0 descriptor?? [ 1258.792852][T11446] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 1258.857563][T11446] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 1258.900728][T14825] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1258.985666][T11446] usb 5-1: USB disconnect, device number 59 [ 1259.091882][T14825] usb 2-1: device descriptor read/64, error -71 [ 1259.250396][ T9] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 1259.420311][T14825] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1259.450738][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 1259.600188][T14825] usb 2-1: device descriptor read/64, error -71 [ 1259.613453][ T29] audit: type=1400 audit(2000000235.979:862): avc: denied { mount } for pid=19027 comm="syz.4.3505" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1259.620541][T11446] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1259.636124][ T9] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 1259.734603][T14825] usb usb2-port1: attempt power cycle [ 1259.850198][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 1259.851146][T11446] usb 4-1: Using ep0 maxpacket: 32 [ 1259.860379][ T9] usb usb3-port1: attempt power cycle [ 1259.892428][T11446] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1259.910195][T11446] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1259.930448][ T5218] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1259.952814][T11446] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1259.971035][T11446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 1259.991013][T11446] usb 4-1: Product: syz [ 1259.995214][T11446] usb 4-1: Manufacturer: syz [ 1260.000625][T11446] usb 4-1: SerialNumber: syz [ 1260.131143][ T5218] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1260.140749][ T5218] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1260.161748][T14825] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1260.192041][ T5218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1260.240584][T14825] usb 2-1: device descriptor read/8, error -71 [ 1260.260625][ T5218] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1260.273364][ T5218] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1260.290805][ T9] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1260.290914][T11446] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1260.319606][ T5218] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1260.331379][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 1260.363170][ T5218] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1260.390264][ T5218] usb 5-1: Product: syz [ 1260.394469][ T5218] usb 5-1: Manufacturer: syz [ 1260.431642][ T5218] cdc_wdm 5-1:1.0: skipping garbage [ 1260.436875][ T5218] cdc_wdm 5-1:1.0: skipping garbage [ 1260.460637][ T5218] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1260.480113][ T5218] cdc_wdm 5-1:1.0: Unknown control protocol [ 1260.510285][ T9] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1260.560506][T14825] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1260.565557][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 1260.592803][ T9] usb usb3-port1: unable to enumerate USB device [ 1260.605821][T14825] usb 2-1: device descriptor read/8, error -71 [ 1260.735165][ T9] usb 4-1: USB disconnect, device number 44 [ 1260.751131][T14825] usb usb2-port1: unable to enumerate USB device [ 1260.764396][ T9] usblp0: removed [ 1260.855991][T14825] usb 5-1: USB disconnect, device number 60 [ 1262.107299][ C0] eth0: bad gso: type: 1, size: 1408 [ 1262.304380][T19045] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1263.780223][ T5148] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1264.460194][ T5148] usb 2-1: device descriptor read/64, error -71 [ 1264.730171][ T5148] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1264.891380][ T5148] usb 2-1: device descriptor read/64, error -71 [ 1265.027526][ T5148] usb usb2-port1: attempt power cycle [ 1265.292385][ T29] audit: type=1400 audit(2000000241.609:863): avc: denied { ioctl } for pid=19073 comm="syz.0.3518" path="socket:[77676]" dev="sockfs" ino=77676 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1265.662298][ T5148] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1265.751395][ T5148] usb 2-1: device descriptor read/8, error -71 [ 1266.290271][ T5148] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1266.419908][ T5148] usb 2-1: device descriptor read/8, error -71 [ 1266.560820][ T5148] usb usb2-port1: unable to enumerate USB device [ 1266.654246][T19087] Bluetooth: MGMT ver 1.23 [ 1266.661730][ T928] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1266.679797][ T29] audit: type=1400 audit(2000000243.039:864): avc: denied { map } for pid=19084 comm="syz.0.3521" path="socket:[77702]" dev="sockfs" ino=77702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1266.804166][T19091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1266.859345][T19091] sctp: [Deprecated]: syz.0.3523 (pid 19091) Use of int in maxseg socket option. [ 1266.859345][T19091] Use struct sctp_assoc_value instead [ 1266.886180][T19091] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.3523'. [ 1266.900222][ T928] usb 4-1: Using ep0 maxpacket: 32 [ 1266.908894][ T928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1266.930365][ T928] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1266.962111][ T928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1266.972090][ T5148] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1266.987831][ T928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 1266.996742][ T928] usb 4-1: Product: syz [ 1267.001206][ T928] usb 4-1: Manufacturer: syz [ 1267.005818][ T928] usb 4-1: SerialNumber: syz [ 1267.188347][ T5148] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1267.236501][ T5148] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1267.273060][ T5148] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1268.020475][ T928] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1268.040605][ T5148] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1268.075541][ T5148] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1268.087107][ T928] usb 4-1: USB disconnect, device number 45 [ 1268.111570][ T928] usblp0: removed [ 1268.127804][T19100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3525'. [ 1268.127965][ T5148] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1268.156619][ T5148] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1268.171910][ T5148] usb 2-1: Product: syz [ 1268.176122][ T5148] usb 2-1: Manufacturer: syz [ 1268.200991][ T5148] cdc_wdm 2-1:1.0: skipping garbage [ 1268.218060][ T5148] cdc_wdm 2-1:1.0: skipping garbage [ 1268.265548][ T5148] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1268.288149][ T5148] cdc_wdm 2-1:1.0: Unknown control protocol [ 1269.073353][ C1] wdm_int_callback: 134 callbacks suppressed [ 1269.073382][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1269.075441][ T929] usb 2-1: USB disconnect, device number 60 [ 1269.079389][ C1] wdm_int_callback: 134 callbacks suppressed [ 1269.079408][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1269.079429][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1269.090368][T19086] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 1269.665934][ T29] audit: type=1400 audit(2000000246.029:865): avc: denied { recv } for pid=19117 comm="syz.2.3531" saddr=10.128.0.169 src=49002 daddr=10.128.0.24 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1270.232112][ T29] audit: type=1326 audit(2000000246.599:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19112 comm="syz.3.3529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ee8175f19 code=0x0 [ 1270.281967][T19131] ptrace attach of "./syz-executor exec"[18155] was attempted by "./syz-executor exec"[19131] [ 1271.794624][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3538'. [ 1271.870518][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3538'. [ 1272.321683][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1272.671310][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1272.994248][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.005872][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.030274][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1273.039362][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.147169][ T9] usb 1-1: config 0 descriptor?? [ 1273.698179][ T9] hid-led 0003:04D8:F372.0047: unknown main item tag 0x0 [ 1273.754439][ T9] hid-led 0003:04D8:F372.0047: unknown main item tag 0x0 [ 1273.782804][ T9] hid-led 0003:04D8:F372.0047: unknown main item tag 0x0 [ 1273.824747][ T9] hid-led 0003:04D8:F372.0047: unknown main item tag 0x0 [ 1273.845708][ T9] hid-led 0003:04D8:F372.0047: unknown main item tag 0x0 [ 1274.442267][ T9] hid-led 0003:04D8:F372.0047: unknown main item tag 0x0 [ 1274.502009][ T9] hid-led 0003:04D8:F372.0047: unknown main item tag 0x0 [ 1274.604356][ T9] hid-led 0003:04D8:F372.0047: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 1274.754538][ T9] hid-led 0003:04D8:F372.0047: Greynut Luxafor initialized [ 1274.861499][ T9] usb 1-1: USB disconnect, device number 73 [ 1274.932103][ T929] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1274.964842][ T929] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1274.984613][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1274.995124][ T929] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1275.013129][ T929] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1275.034288][ T929] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1275.041280][T19182] 9pnet_fd: Insufficient options for proto=fd [ 1275.044924][ T929] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1275.088903][T19182] overlayfs: failed to resolve './file1': -2 [ 1275.106055][ T929] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1275.149457][ T5150] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1275.167574][ T5150] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1275.210229][ T5150] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1275.246208][ T5150] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1275.276927][ T929] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1275.315210][ T929] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1275.342480][ T929] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1275.375372][ T929] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1275.416883][ T929] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1275.522970][T19199] netlink: 'syz.1.3550': attribute type 9 has an invalid length. [ 1275.535105][ T929] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1275.575465][ T5150] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1275.707215][T19198] netlink: 141 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1275.727667][ T29] audit: type=1400 audit(2000000252.069:867): avc: denied { nlmsg_read } for pid=19197 comm="syz.3.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1275.791110][T19199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.799140][T19199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.736175][T17483] Bluetooth: hci3: command 0x0406 tx timeout [ 1277.228408][T19228] mkiss: ax0: crc mode is auto. [ 1278.545270][ T5150] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1278.559349][ T29] audit: type=1326 audit(2000000254.919:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19238 comm="syz.2.3560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3b6775f19 code=0x0 [ 1278.824099][ T5150] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 1278.833018][ T5150] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.850352][ T5150] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1278.861075][ T929] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1278.869183][ T5150] usb 2-1: config 0 has no interface number 0 [ 1278.897021][ T5150] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1278.934057][ T5150] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 1278.950314][ T5150] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1278.962994][ T5150] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1278.981632][ T5150] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1278.998423][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.018039][ T5150] usb 2-1: Product: syz [ 1279.026233][ T5150] usb 2-1: Manufacturer: syz [ 1279.037954][ T5150] usb 2-1: SerialNumber: syz [ 1279.058928][ T5150] usb 2-1: config 0 descriptor?? [ 1279.070251][ T929] usb 1-1: Using ep0 maxpacket: 32 [ 1279.094426][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.111828][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.124458][ T929] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1279.138164][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.152171][ T929] usb 1-1: config 0 descriptor?? [ 1279.709696][T19249] netem: incorrect ge model size [ 1279.717423][T19249] netem: change failed [ 1279.887369][ T929] kovaplus 0003:1E7D:2D50.0048: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1280.467407][ T5150] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected [ 1280.535163][ T5150] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1280.618167][ T5150] usb 2-1: USB disconnect, device number 61 [ 1280.656418][ T5150] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1280.748965][ T5150] cypress_m8 2-1:0.74: device disconnected [ 1280.783601][ T29] audit: type=1400 audit(2000000257.139:869): avc: denied { map } for pid=19251 comm="syz.2.3563" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1280.871683][ T9] usb 1-1: USB disconnect, device number 74 [ 1281.065680][T19264] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1281.135016][ T29] audit: type=1400 audit(2000000257.479:870): avc: denied { listen } for pid=19262 comm="syz.2.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1282.125182][T19275] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3568'. [ 1282.219489][T19281] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19281 comm=syz.2.3570 [ 1282.380022][ T29] audit: type=1326 audit(2000000258.739:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19274 comm="syz.0.3568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f2775f19 code=0x0 [ 1282.484069][ T29] audit: type=1400 audit(2000000258.849:872): avc: denied { connect } for pid=19292 comm="syz.2.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1282.526830][ T29] audit: type=1400 audit(2000000258.869:873): avc: denied { write } for pid=19292 comm="syz.2.3573" laddr=::1 lport=15 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1282.624544][T19298] netem: incorrect ge model size [ 1282.663295][T19298] netem: change failed [ 1283.755555][ T5148] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1283.955171][ T5148] usb 4-1: New USB device found, idVendor=06f8, idProduct=e031, bcdDevice=25.dd [ 1283.978774][T19313] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1283.988196][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.016721][ T5148] usb 4-1: Product: syz [ 1284.037463][ T5148] usb 4-1: Manufacturer: syz [ 1284.061940][ T5148] usb 4-1: SerialNumber: syz [ 1284.091602][ T5148] usb 4-1: config 0 descriptor?? [ 1284.129100][ T5148] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1284.160019][ T5148] usb 4-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 1284.405784][ T5148] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 1284.433429][ T5148] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1284.457999][ T5148] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1284.498774][ T5148] usb 4-1: USB disconnect, device number 46 [ 1284.622048][T11446] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1284.853876][T11446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.915153][T11446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.944758][T11446] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1285.033084][T11446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.093741][T11446] usb 5-1: config 0 descriptor?? [ 1285.863298][T11446] usb 5-1: string descriptor 0 read error: -22 [ 1286.301588][T11446] uclogic 0003:256C:006D.0049: interface is invalid, ignoring [ 1286.534638][T19318] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3580'. [ 1286.600619][T19318] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 1286.663708][T11446] usb 5-1: USB disconnect, device number 61 [ 1286.961575][T19337] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3586'. [ 1287.269738][T19344] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1287.313567][ T29] audit: type=1400 audit(2000000263.679:874): avc: denied { write } for pid=19351 comm="syz.4.3592" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 1287.338690][T19353] syz.0.3590(19353): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1287.430558][ T5148] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1287.529737][ T29] audit: type=1400 audit(2000000263.889:875): avc: denied { getopt } for pid=19354 comm="syz.4.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1287.530913][T19356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1287.566128][T19356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1287.586808][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1287.597460][T19350] macvlan0: entered promiscuous mode [ 1287.645270][ T29] audit: type=1400 audit(2000000264.009:876): avc: denied { module_load } for pid=19354 comm="syz.4.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1287.662917][T19350] macvlan0: left promiscuous mode [ 1287.669957][T19359] Invalid ELF header magic: != ELF [ 1287.677124][ T5148] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1287.691024][ T5148] usb 2-1: config 0 has no interface number 0 [ 1287.710152][ T5148] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1287.726780][ T5148] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1287.737829][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.755283][ T5148] usb 2-1: config 0 descriptor?? [ 1287.772777][ T5148] cp210x 2-1:0.255: cp210x converter detected [ 1288.210386][T11446] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1288.471444][T11446] usb 5-1: device descriptor read/64, error -71 [ 1288.478568][ T29] audit: type=1400 audit(2000000264.829:877): avc: denied { listen } for pid=19362 comm="syz.3.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1288.602946][ T5148] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 1288.881113][T19369] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1288.981665][ T5148] cp210x 2-1:0.255: failed to get vendor val 0x370c size 15: -121 [ 1289.031891][ T5148] cp210x 2-1:0.255: GPIO initialisation failed: -121 [ 1289.072845][ T5148] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1289.144202][T11446] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1289.331266][T11446] usb 5-1: device descriptor read/64, error -71 [ 1289.558060][T11446] usb usb5-port1: attempt power cycle [ 1290.040381][T11446] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1290.434173][T11446] usb 5-1: device descriptor read/8, error -71 [ 1290.569952][ T5147] usb 2-1: USB disconnect, device number 62 [ 1290.598611][ T5147] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1290.691540][ T5147] cp210x 2-1:0.255: device disconnected [ 1291.977359][ T29] audit: type=1400 audit(2000000268.339:878): avc: denied { bind } for pid=19418 comm="syz.4.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1292.090164][T19423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1292.561439][T14825] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1292.782286][T14825] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1292.957450][T14825] usb 1-1: config 0 has no interface number 0 [ 1293.000928][T14825] usb 1-1: config 0 interface 255 has no altsetting 0 [ 1293.008031][T14825] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1293.811593][T14825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.864584][T14825] usb 1-1: config 0 descriptor?? [ 1293.903068][T14825] cp210x 1-1:0.255: cp210x converter detected [ 1293.957841][T19439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1294.080293][ T5148] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1294.260262][ T5148] usb 5-1: Using ep0 maxpacket: 32 [ 1294.269354][ T5148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1294.279872][ T5148] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1294.294918][ T5148] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1294.304190][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 1294.312652][ T5148] usb 5-1: Product: syz [ 1294.317274][ T5148] usb 5-1: Manufacturer: syz [ 1294.323596][ T5148] usb 5-1: SerialNumber: syz [ 1294.338575][T14825] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 1294.360292][ T5218] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1294.562918][T14825] cp210x 1-1:0.255: failed to get vendor val 0x370c size 15: -121 [ 1294.582015][ T5218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1294.588734][ T5218] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1294.603825][T14825] cp210x 1-1:0.255: GPIO initialisation failed: -121 [ 1294.615607][ T5148] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1294.628365][T14825] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1294.635070][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.665206][ T5218] usb 3-1: config 0 descriptor?? [ 1295.040677][ T929] usb 5-1: USB disconnect, device number 66 [ 1295.066638][ T929] usblp0: removed [ 1295.293404][ T5218] video4linux radio32: keene_cmd_set failed (-71) [ 1295.310155][ T5218] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 1295.339674][ T5218] usb 3-1: USB disconnect, device number 59 [ 1296.015867][ T929] usb 1-1: USB disconnect, device number 75 [ 1296.079586][ T929] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1296.112989][ T929] cp210x 1-1:0.255: device disconnected [ 1296.200649][T19455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1296.235261][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1299.679969][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.686757][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.418831][T19478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3627'. [ 1301.630227][ T5147] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1301.720294][ T5218] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1301.880489][ T5147] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 1301.961790][ T5147] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.963545][ T5218] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1301.977894][ T5147] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1301.992119][ T5218] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1302.007089][ T5218] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1302.007110][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1302.016262][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.048394][T19489] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1302.069526][ T5147] usb 2-1: config 0 has no interface number 0 [ 1302.094766][ T5147] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1302.141841][ T5147] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 1302.234586][ T5147] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1302.280912][ T9] usb 3-1: device descriptor read/64, error -71 [ 1302.296693][ T5147] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1302.358301][ T5147] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1302.415495][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.480242][ T5147] usb 2-1: Product: syz [ 1302.484524][ T5147] usb 2-1: Manufacturer: syz [ 1302.489177][ T5147] usb 2-1: SerialNumber: syz [ 1302.545753][ T5147] usb 2-1: config 0 descriptor?? [ 1302.547425][T14825] usb 4-1: USB disconnect, device number 47 [ 1302.590343][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1302.714254][ T29] audit: type=1400 audit(2000000279.079:879): avc: denied { mounton } for pid=19506 comm="syz.0.3633" path="/270/file0" dev="configfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1302.752826][ T9] usb 3-1: device descriptor read/64, error -71 [ 1303.539560][ T9] usb usb3-port1: attempt power cycle [ 1303.995050][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1305.168014][ T5147] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected [ 1305.191563][ T5147] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1305.211106][ T5147] usb 2-1: USB disconnect, device number 63 [ 1305.230453][ T5147] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1305.285101][ T5147] cypress_m8 2-1:0.74: device disconnected [ 1305.334758][ T9] usb 3-1: device descriptor read/8, error -71 [ 1308.124962][T19548] overlayfs: failed to resolve '/PureAcks TCPHPAcks TCPRenoRecovery TCPSackRecovery TCPSACKReneging TCPSACKReorder TCPRenoReorder TCPTSReorder TCPFullUndo TCPPartialUndo TCPDSACKUndo TCPLossUndo TCPLostRetransmit TCPRenoFailures TCPSackFailures TCPLossFailures TCPFastRetrans TCPSlowStartRetrans TCPTimeouts TCPLossProbes TCPLossProbeRecovery TCPRenoRecoveryFail TCPSackRecoveryFail TCPRcvCollapsed TCPBacklogCoalesce TCPDSACKOldSent TCPDSACKOfoSent TCPDSACKRecv TCPDSACKOfoRecv TCPAbortOnData TCPAbortOnClose TCPAbortOnMemory TCPAbortOnTimeout TCPAbortOnLinger TCPAbortFailed TCPMemoryPressures TCPMemoryPressuresChrono TCPSACKDiscard TCPDSACKIgnoredOld TCPDSACKIgnoredNoUndo TCPSpuriousRTOs TCPMD5NotFound TCPMD5Unexpected TCPMD5Failure TCPSackShifted TCPSackMerged TCPSackShiftFallback TCPBacklogDrop PFMemallocDrop TCPMinTTLDrop TCPDeferAcceptDrop IPReversePathFilter TCPTimeWaitOverflow TCPReqQFullDoCookies TCPReqQFullDrop TCPRetransFail TCPRcvCoalesce TCPOFOQueue TCPOFODrop TCPOFOMerge TCPChallengeACK TCPSYNChallen [ 1308.937841][T19553] gretap0: mtu less than device minimum [ 1315.037074][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1315.994092][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.021796][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1316.981202][T19597] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1317.800361][T14825] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1318.082923][ T9] usb 1-1: string descriptor 0 read error: -71 [ 1318.105268][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1318.136422][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.173849][ T9] usb 1-1: can't set config #1, error -71 [ 1318.191552][ T9] usb 1-1: USB disconnect, device number 76 [ 1318.432774][T14825] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1322.524006][T17483] Bluetooth: hci4: command 0x0405 tx timeout [ 1322.580217][T14825] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1322.647375][T14825] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1322.677740][T14825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.840323][T14825] usb 4-1: can't set config #27, error -71 [ 1322.922441][T14825] usb 4-1: USB disconnect, device number 48 [ 1322.936706][ T929] IPVS: starting estimator thread 0... [ 1323.080292][T19619] IPVS: using max 16 ests per chain, 38400 per kthread [ 1324.830101][T19643] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1324.930690][T19642] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1325.830255][ T5148] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1326.063368][ T5148] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1326.083650][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.109697][ T5148] usb 4-1: config 0 descriptor?? [ 1326.126089][ T5148] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1326.220497][T14825] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1326.424828][T14825] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1326.460426][T14825] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1326.490664][T14825] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1326.507012][T19673] tipc: Started in network mode [ 1326.521861][T14825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.532615][T19648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.541232][ T5218] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1326.560753][T19648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.575071][T19673] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1326.584836][T19665] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1326.619839][ T5148] cpia1 4-1:0.0: unexpected state after lo power cmd: 99 [ 1326.624206][T19673] tipc: Enabled bearer , priority 10 [ 1326.684959][T19674] tipc: Resetting bearer [ 1326.756674][ T5218] usb 1-1: Using ep0 maxpacket: 8 [ 1326.763997][ T5218] usb 1-1: too many configurations: 220, using maximum allowed: 8 [ 1326.784196][ T5218] usb 1-1: config index 0 descriptor too short (expected 485, got 396) [ 1326.836984][ T5218] usb 1-1: config 227 has an invalid interface number: 182 but max is 0 [ 1326.879637][ T5218] usb 1-1: config 227 has an invalid descriptor of length 102, skipping remainder of the config [ 1326.938488][ T5218] usb 1-1: config 227 has no interface number 0 [ 1326.970991][ T5218] usb 1-1: config 227 interface 182 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 1327.028091][ T5218] usb 1-1: config 227 interface 182 altsetting 250 endpoint 0x7 has invalid maxpacket 1015, setting to 64 [ 1327.048630][ T5148] gspca_cpia1: usb_control_msg 02, error -71 [ 1327.083306][ T5148] gspca_cpia1: usb_control_msg 05, error -71 [ 1327.097340][ T5218] usb 1-1: config 227 interface 182 altsetting 250 has an endpoint descriptor with address 0x41, changing to 0x1 [ 1327.109764][ T5148] cpia1 4-1:0.0: unexpected systemstate: 99 [ 1327.149355][ T5218] usb 1-1: config 227 interface 182 altsetting 250 endpoint 0x1 has an invalid bInterval 239, changing to 7 [ 1327.163870][T19674] tipc: Disabling bearer [ 1327.196513][ T5148] usb 4-1: USB disconnect, device number 49 [ 1327.220198][ T5218] usb 1-1: config 227 interface 182 altsetting 250 endpoint 0x1 has invalid maxpacket 42828, setting to 1024 [ 1327.300006][ T5218] usb 1-1: config 227 interface 182 altsetting 250 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1327.374569][ T5218] usb 1-1: config 227 interface 182 altsetting 250 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1327.407382][ T5218] usb 1-1: config 227 interface 182 altsetting 250 endpoint 0xE has an invalid bInterval 254, changing to 7 [ 1327.458544][ T5218] usb 1-1: config 227 interface 182 altsetting 250 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 1327.520277][ T5218] usb 1-1: config 227 interface 182 has no altsetting 0 [ 1327.560441][ T5218] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 1327.568091][ T5218] usb 1-1: can't read configurations, error -71 [ 1327.953528][T17483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1327.971461][T17483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1327.984204][T17483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1327.997113][T17483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1328.006499][T17483] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1328.021217][T17483] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1328.150989][ T5148] usb 3-1: USB disconnect, device number 64 [ 1329.241000][T19692] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1329.398666][ T1064] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.736745][ T1064] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.827775][T19697] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3687'. [ 1329.873451][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3689'. [ 1330.003191][ T1064] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.070531][T15667] Bluetooth: hci4: command tx timeout [ 1330.180782][ T5148] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1330.181727][ T1064] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.362558][ T5148] usb 5-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 1330.374512][ T5148] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1330.389956][ T5148] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1330.425711][ T5148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1330.434722][ T5148] usb 5-1: SerialNumber: syz [ 1330.585009][T19681] chnl_net:caif_netlink_parms(): no params data found [ 1330.672938][T19697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3687'. [ 1330.795332][ T1064] bridge_slave_1: left allmulticast mode [ 1330.804949][ T5148] usb 5-1: 0:2 : does not exist [ 1330.826328][ T1064] bridge_slave_1: left promiscuous mode [ 1330.847433][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.885868][ T1064] bridge_slave_0: left allmulticast mode [ 1330.906892][ T5148] usb 5-1: USB disconnect, device number 67 [ 1330.908705][ T1064] bridge_slave_0: left promiscuous mode [ 1330.928126][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.385065][T19677] udevd[19677]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1331.858214][ T1064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.871750][ T1064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.883597][ T1064] bond0 (unregistering): Released all slaves [ 1331.998886][T19681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.008849][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.017183][T19681] bridge_slave_0: entered allmulticast mode [ 1332.025219][T19681] bridge_slave_0: entered promiscuous mode [ 1332.076480][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.084125][T19681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.091570][T19681] bridge_slave_1: entered allmulticast mode [ 1332.099117][T19681] bridge_slave_1: entered promiscuous mode [ 1332.162330][T15667] Bluetooth: hci4: command tx timeout [ 1332.172761][T19681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.249659][T19681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.397487][T19681] team0: Port device team_slave_0 added [ 1332.425905][ T1064] hsr_slave_0: left promiscuous mode [ 1332.438937][ T1064] hsr_slave_1: left promiscuous mode [ 1332.450873][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1332.458311][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.473414][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1332.481369][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.527886][ T1064] veth1_macvtap: left promiscuous mode [ 1332.534068][ T1064] veth0_macvtap: left promiscuous mode [ 1332.539787][ T1064] veth1_vlan: left promiscuous mode [ 1332.558578][ T1064] veth0_vlan: left promiscuous mode [ 1333.257593][ T1064] team0 (unregistering): Port device team_slave_1 removed [ 1333.316212][ T1064] team0 (unregistering): Port device team_slave_0 removed [ 1333.955899][T19681] team0: Port device team_slave_1 added [ 1334.047675][T19681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.055248][T19681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.081986][T19681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.103249][T19681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.110511][T19681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.136717][T19681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.224719][T19681] hsr_slave_0: entered promiscuous mode [ 1334.230676][T15667] Bluetooth: hci4: command tx timeout [ 1334.237156][T19681] hsr_slave_1: entered promiscuous mode [ 1334.244466][T19681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1334.254484][T19681] Cannot create hsr debugfs directory [ 1335.141305][T19681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1335.161504][T19681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1335.186831][T19681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1335.204298][T19681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1335.389916][T19681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.437325][T19681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.461881][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.469073][T14825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.528835][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.536048][T14825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.849898][T19681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.970855][T19681] veth0_vlan: entered promiscuous mode [ 1336.008280][T19681] veth1_vlan: entered promiscuous mode [ 1336.098797][T19681] veth0_macvtap: entered promiscuous mode [ 1336.119836][T19681] veth1_macvtap: entered promiscuous mode [ 1336.170935][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.188116][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.199438][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.220900][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.239771][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.262034][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.278259][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.297097][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.310853][T15667] Bluetooth: hci4: command tx timeout [ 1336.319441][T19681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.350951][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.364444][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.376550][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.396120][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.409476][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.428638][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.451081][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.471818][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.487018][T19681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.507897][T19681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.521975][T19681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.562067][T19681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.579447][T19681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.597381][T19681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.609128][T19681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.806643][ T8146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.820762][ T8146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.867257][ T8146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.876952][ T8146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.148598][ T29] audit: type=1400 audit(2000000313.509:880): avc: denied { sqpoll } for pid=19818 comm="syz.0.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1337.344824][T19824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3694'. [ 1338.132429][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3694'. [ 1342.850342][ T5105] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1343.010862][ T5148] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1343.050332][ T5105] usb 5-1: Using ep0 maxpacket: 32 [ 1343.085126][ T5105] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1343.180177][ T5105] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1343.218964][ T5105] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1343.234729][ T5148] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1343.255008][ T5105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 1343.273084][ T5105] usb 5-1: Product: syz [ 1343.289518][ T5105] usb 5-1: Manufacturer: syz [ 1343.307794][ T5148] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1343.308436][ T5105] usb 5-1: SerialNumber: syz [ 1343.402038][ T5148] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1343.454475][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.545578][T19854] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1343.597937][ T5105] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1343.838376][ T5148] usb 5-1: USB disconnect, device number 68 [ 1343.882839][ T5148] usblp0: removed [ 1345.531961][ T9] usb 2-1: USB disconnect, device number 64 [ 1345.777098][T19876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3707'. [ 1345.882506][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3707'. [ 1347.188476][ C0] eth0: bad gso: type: 1, size: 1408 [ 1347.629576][T19889] tipc: Enabling of bearer rejected, failed to enable media [ 1348.872580][ T5105] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1349.094676][ T5105] usb 1-1: Using ep0 maxpacket: 16 [ 1349.155633][T19905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1349.156975][ T5105] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=22.89 [ 1349.164824][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1349.174595][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1349.217927][ T5105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.227910][ T5105] usb 1-1: Product: syz [ 1349.239995][ T5105] usb 1-1: Manufacturer: syz [ 1349.248230][ T5105] usb 1-1: SerialNumber: syz [ 1349.287155][ T5105] usb 1-1: config 0 descriptor?? [ 1349.316158][ T5105] legousbtower 1-1:0.0: interrupt endpoints not found [ 1349.400189][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1349.657983][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1349.688288][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1349.709380][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1349.720190][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 1349.729373][ T9] usb 4-1: Product: syz [ 1349.733720][ T9] usb 4-1: Manufacturer: syz [ 1349.738414][ T9] usb 4-1: SerialNumber: syz [ 1350.024738][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1350.716752][ T9] usb 4-1: USB disconnect, device number 50 [ 1350.740656][ T9] usblp0: removed [ 1351.006114][ T929] usb 1-1: USB disconnect, device number 79 [ 1351.564408][ C0] ================================================================== [ 1351.572491][ C0] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x41c/0x4e0 [ 1351.580641][ C0] Read of size 4 at addr ffffc90003317a50 by task syz.2.3720/19915 [ 1351.588516][ C0] [ 1351.590835][ C0] CPU: 0 UID: 0 PID: 19915 Comm: syz.2.3720 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 1351.601232][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1351.611291][ C0] Call Trace: [ 1351.614570][ C0] [ 1351.617404][ C0] dump_stack_lvl+0x116/0x1f0 [ 1351.622073][ C0] print_report+0xc3/0x620 [ 1351.626482][ C0] ? __virt_addr_valid+0x5e/0x590 [ 1351.631496][ C0] kasan_report+0xd9/0x110 [ 1351.635989][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 1351.641447][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 1351.646836][ C0] xdp_do_check_flushed+0x41c/0x4e0 [ 1351.652045][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 1351.657406][ C0] net_rx_action+0xa92/0x1010 [ 1351.662083][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 1351.666930][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1351.672035][ C0] ? trace_csd_function_exit+0x120/0x1f0 [ 1351.677660][ C0] ? mark_held_locks+0x9f/0xe0 [ 1351.682418][ C0] handle_softirqs+0x216/0x8f0 [ 1351.687209][ C0] ? handle_edge_irq+0x40f/0xd10 [ 1351.692135][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1351.697412][ C0] irq_exit_rcu+0xbb/0x120 [ 1351.701825][ C0] common_interrupt+0xb0/0xd0 [ 1351.706490][ C0] [ 1351.709404][ C0] [ 1351.712320][ C0] asm_common_interrupt+0x26/0x40 [ 1351.717343][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 1351.723149][ C0] Code: df 55 65 48 8b 2d 94 71 13 75 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 2f 34 6a f6 e8 8a 67 a1 f6 fb bf 01 00 00 00 4f a3 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 7d e4 69 [ 1351.742743][ C0] RSP: 0000:ffffc90003316e28 EFLAGS: 00000202 [ 1351.748796][ C0] RAX: 00000000000048fd RBX: ffffed100424e3c0 RCX: 1ffffffff285bc79 [ 1351.756756][ C0] RDX: 0000000000000000 RSI: ffffffff8b2cc580 RDI: 0000000000000001 [ 1351.764717][ C0] RBP: ffff888021271e00 R08: 0000000000000001 R09: fffffbfff28590de [ 1351.772677][ C0] R10: ffffffff942c86f7 R11: 0000000000000000 R12: 0000000000000000 [ 1351.780645][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1351.788626][ C0] ? preempt_schedule_irq+0x46/0x90 [ 1351.793838][ C0] irqentry_exit+0x36/0x90 [ 1351.798248][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1351.803700][ C0] RIP: 0010:__unwind_start+0x332/0x880 [ 1351.809148][ C0] Code: 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e b2 03 00 00 c7 03 00 00 00 00 48 83 c4 20 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 af 80 4d 00 e8 aa 80 4d 00 65 48 [ 1351.828768][ C0] RSP: 0000:ffffc90003316ef8 EFLAGS: 00000282 [ 1351.834821][ C0] RAX: 0000000000000000 RBX: ffffc90003316f38 RCX: ffffffff813d0844 [ 1351.842800][ C0] RDX: ffff888021271e00 RSI: ffffc90003316fd8 RDI: 0000000000000006 [ 1351.850758][ C0] RBP: ffffc90003316fc8 R08: 0000000000000006 R09: ffffc90003316fd8 [ 1351.858714][ C0] R10: ffffc90003316fc8 R11: 0000000000000000 R12: dffffc0000000000 [ 1351.866674][ C0] R13: fffff52000662de9 R14: fffff52000662de8 R15: ffffc90003316fd8 [ 1351.874638][ C0] ? __unwind_start+0x594/0x880 [ 1351.879482][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1351.885623][ C0] arch_stack_walk+0xb2/0x170 [ 1351.890293][ C0] ? stack_trace_save+0x95/0xd0 [ 1351.895156][ C0] stack_trace_save+0x95/0xd0 [ 1351.899826][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1351.905289][ C0] save_stack+0x162/0x1f0 [ 1351.909634][ C0] ? __pfx_save_stack+0x10/0x10 [ 1351.914489][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1351.919553][ C0] __reset_page_owner+0x8d/0x400 [ 1351.924516][ C0] free_unref_folios+0x9e9/0x1390 [ 1351.929534][ C0] folios_put_refs+0x560/0x760 [ 1351.934292][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1351.939566][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 1351.944667][ C0] ? find_held_lock+0x2d/0x110 [ 1351.949425][ C0] free_pages_and_swap_cache+0x36d/0x510 [ 1351.955048][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1351.961211][ C0] ? block_dirty_folio+0x114/0x1b0 [ 1351.966351][ C0] ? __pfx___might_resched+0x10/0x10 [ 1351.971661][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1351.977639][ C0] tlb_flush_mmu+0xe9/0x590 [ 1351.982127][ C0] unmap_page_range+0x1c88/0x3c10 [ 1351.987143][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1351.992505][ C0] ? uprobe_munmap+0x20/0x5d0 [ 1351.997185][ C0] unmap_single_vma+0x194/0x2b0 [ 1352.002039][ C0] unmap_vmas+0x22f/0x490 [ 1352.006367][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1352.011279][ C0] ? __pfx_lock_release+0x10/0x10 [ 1352.016324][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 1352.021442][ C0] exit_mmap+0x1b8/0xb20 [ 1352.025709][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1352.030472][ C0] __mmput+0x12a/0x480 [ 1352.034537][ C0] mmput+0x62/0x70 [ 1352.038252][ C0] do_exit+0x9bf/0x2bb0 [ 1352.042398][ C0] ? get_signal+0x8f2/0x2770 [ 1352.046982][ C0] ? __pfx_do_exit+0x10/0x10 [ 1352.051560][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1352.056576][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1352.061953][ C0] do_group_exit+0xd3/0x2a0 [ 1352.066481][ C0] get_signal+0x25fd/0x2770 [ 1352.071012][ C0] ? __pfx_get_signal+0x10/0x10 [ 1352.075853][ C0] ? __pfx_do_futex+0x10/0x10 [ 1352.080520][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 1352.086083][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1352.092228][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 1352.097859][ C0] do_syscall_64+0xda/0x250 [ 1352.102358][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.108243][ C0] RIP: 0033:0x7fb3b6775f19 [ 1352.112676][ C0] Code: Unable to access opcode bytes at 0x7fb3b6775eef. [ 1352.119702][ C0] RSP: 002b:00007fb3b74c30f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1352.128136][ C0] RAX: fffffffffffffe00 RBX: 00007fb3b6906118 RCX: 00007fb3b6775f19 [ 1352.136109][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb3b6906118 [ 1352.144081][ C0] RBP: 00007fb3b6906110 R08: 00007fb3b74c36c0 R09: 00007fb3b74c36c0 [ 1352.152048][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3b690611c [ 1352.160003][ C0] R13: 000000000000006e R14: 00007ffddda595b0 R15: 00007ffddda59698 [ 1352.167977][ C0] [ 1352.170990][ C0] [ 1352.173290][ C0] The buggy address belongs to stack of task syz.2.3720/19915 [ 1352.180717][ C0] and is located at offset 24 in frame: [ 1352.186319][ C0] exit_mmap+0x0/0xb20 [ 1352.190379][ C0] [ 1352.192690][ C0] This frame has 2 objects: [ 1352.197173][ C0] [32, 96) 'vmi' [ 1352.197183][ C0] [128, 256) 'tlb' [ 1352.200800][ C0] [ 1352.206887][ C0] The buggy address belongs to the virtual mapping at [ 1352.206887][ C0] [ffffc90003310000, ffffc90003319000) created by: [ 1352.206887][ C0] kernel_clone+0xfd/0x980 [ 1352.224414][ C0] [ 1352.226725][ C0] The buggy address belongs to the physical page: [ 1352.233558][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x20189 pfn:0x5b68a [ 1352.242649][ C0] memcg:ffff88801fdab902 [ 1352.246867][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1352.253964][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1352.262548][ C0] raw: 0000000000020189 0000000000000000 00000001ffffffff ffff88801fdab902 [ 1352.271126][ C0] page dumped because: kasan: bad access detected [ 1352.277524][ C0] page_owner tracks the page as allocated [ 1352.283214][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 19909, tgid 19909 (syz.2.3720), ts 1349766092543, free_ts 1342213785342 [ 1352.301864][ C0] post_alloc_hook+0x2d1/0x350 [ 1352.306613][ C0] get_page_from_freelist+0x1351/0x2e50 [ 1352.312145][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 1352.317419][ C0] alloc_pages_mpol_noprof+0x275/0x610 [ 1352.322868][ C0] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 1352.328751][ C0] copy_process+0x2f3b/0x8de0 [ 1352.333496][ C0] kernel_clone+0xfd/0x980 [ 1352.337889][ C0] __do_sys_clone3+0x1f5/0x270 [ 1352.342633][ C0] do_syscall_64+0xcd/0x250 [ 1352.347124][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.353004][ C0] page last free pid 19615 tgid 19615 stack trace: [ 1352.359479][ C0] free_unref_page+0x64a/0xe40 [ 1352.364232][ C0] tlb_finish_mmu+0x237/0x7b0 [ 1352.368891][ C0] exit_mmap+0x3d1/0xb20 [ 1352.373121][ C0] __mmput+0x12a/0x480 [ 1352.377176][ C0] mmput+0x62/0x70 [ 1352.381315][ C0] do_exit+0x9bf/0x2bb0 [ 1352.385451][ C0] do_group_exit+0xd3/0x2a0 [ 1352.389932][ C0] __x64_sys_exit_group+0x3e/0x50 [ 1352.394937][ C0] x64_sys_call+0x14a9/0x16a0 [ 1352.399600][ C0] do_syscall_64+0xcd/0x250 [ 1352.404088][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.409968][ C0] [ 1352.412273][ C0] Memory state around the buggy address: [ 1352.417883][ C0] ffffc90003317900: 00 f2 f2 f2 00 f2 f2 f2 00 00 f2 f2 00 00 00 00 [ 1352.425923][ C0] ffffc90003317980: 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 1352.433964][ C0] >ffffc90003317a00: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 [ 1352.442005][ C0] ^ [ 1352.448653][ C0] ffffc90003317a80: 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 [ 1352.456690][ C0] ffffc90003317b00: 00 00 00 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 [ 1352.464813][ C0] ================================================================== [ 1352.472974][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1352.480153][ C0] CPU: 0 UID: 0 PID: 19915 Comm: syz.2.3720 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 1352.490544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1352.500578][ C0] Call Trace: [ 1352.503839][ C0] [ 1352.506663][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1352.511243][ C0] panic+0x6f5/0x7a0 [ 1352.515120][ C0] ? __pfx_panic+0x10/0x10 [ 1352.519531][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1352.524651][ C0] check_panic_on_warn+0xab/0xb0 [ 1352.529573][ C0] end_report+0x117/0x180 [ 1352.533892][ C0] kasan_report+0xe9/0x110 [ 1352.538295][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 1352.543653][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 1352.549009][ C0] xdp_do_check_flushed+0x41c/0x4e0 [ 1352.554194][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 1352.559549][ C0] net_rx_action+0xa92/0x1010 [ 1352.564209][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 1352.569044][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1352.574139][ C0] ? trace_csd_function_exit+0x120/0x1f0 [ 1352.579850][ C0] ? mark_held_locks+0x9f/0xe0 [ 1352.584637][ C0] handle_softirqs+0x216/0x8f0 [ 1352.589481][ C0] ? handle_edge_irq+0x40f/0xd10 [ 1352.594406][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1352.599682][ C0] irq_exit_rcu+0xbb/0x120 [ 1352.604103][ C0] common_interrupt+0xb0/0xd0 [ 1352.608766][ C0] [ 1352.611680][ C0] [ 1352.614590][ C0] asm_common_interrupt+0x26/0x40 [ 1352.619603][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 1352.625424][ C0] Code: df 55 65 48 8b 2d 94 71 13 75 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 2f 34 6a f6 e8 8a 67 a1 f6 fb bf 01 00 00 00 4f a3 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 7d e4 69 [ 1352.645022][ C0] RSP: 0000:ffffc90003316e28 EFLAGS: 00000202 [ 1352.651078][ C0] RAX: 00000000000048fd RBX: ffffed100424e3c0 RCX: 1ffffffff285bc79 [ 1352.659033][ C0] RDX: 0000000000000000 RSI: ffffffff8b2cc580 RDI: 0000000000000001 [ 1352.666990][ C0] RBP: ffff888021271e00 R08: 0000000000000001 R09: fffffbfff28590de [ 1352.674946][ C0] R10: ffffffff942c86f7 R11: 0000000000000000 R12: 0000000000000000 [ 1352.682900][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1352.690860][ C0] ? preempt_schedule_irq+0x46/0x90 [ 1352.696050][ C0] irqentry_exit+0x36/0x90 [ 1352.700459][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1352.705904][ C0] RIP: 0010:__unwind_start+0x332/0x880 [ 1352.711349][ C0] Code: 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e b2 03 00 00 c7 03 00 00 00 00 48 83 c4 20 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 af 80 4d 00 e8 aa 80 4d 00 65 48 [ 1352.730942][ C0] RSP: 0000:ffffc90003316ef8 EFLAGS: 00000282 [ 1352.736990][ C0] RAX: 0000000000000000 RBX: ffffc90003316f38 RCX: ffffffff813d0844 [ 1352.744947][ C0] RDX: ffff888021271e00 RSI: ffffc90003316fd8 RDI: 0000000000000006 [ 1352.752903][ C0] RBP: ffffc90003316fc8 R08: 0000000000000006 R09: ffffc90003316fd8 [ 1352.760859][ C0] R10: ffffc90003316fc8 R11: 0000000000000000 R12: dffffc0000000000 [ 1352.768813][ C0] R13: fffff52000662de9 R14: fffff52000662de8 R15: ffffc90003316fd8 [ 1352.776786][ C0] ? __unwind_start+0x594/0x880 [ 1352.781633][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1352.787775][ C0] arch_stack_walk+0xb2/0x170 [ 1352.792441][ C0] ? stack_trace_save+0x95/0xd0 [ 1352.797274][ C0] stack_trace_save+0x95/0xd0 [ 1352.801937][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1352.807292][ C0] save_stack+0x162/0x1f0 [ 1352.811612][ C0] ? __pfx_save_stack+0x10/0x10 [ 1352.816446][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1352.821459][ C0] __reset_page_owner+0x8d/0x400 [ 1352.826496][ C0] free_unref_folios+0x9e9/0x1390 [ 1352.831515][ C0] folios_put_refs+0x560/0x760 [ 1352.836270][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1352.841547][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 1352.846650][ C0] ? find_held_lock+0x2d/0x110 [ 1352.851406][ C0] free_pages_and_swap_cache+0x36d/0x510 [ 1352.857024][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1352.863194][ C0] ? block_dirty_folio+0x114/0x1b0 [ 1352.868294][ C0] ? __pfx___might_resched+0x10/0x10 [ 1352.873572][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1352.879556][ C0] tlb_flush_mmu+0xe9/0x590 [ 1352.884047][ C0] unmap_page_range+0x1c88/0x3c10 [ 1352.889092][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1352.894454][ C0] ? uprobe_munmap+0x20/0x5d0 [ 1352.899124][ C0] unmap_single_vma+0x194/0x2b0 [ 1352.903960][ C0] unmap_vmas+0x22f/0x490 [ 1352.908293][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1352.913128][ C0] ? __pfx_lock_release+0x10/0x10 [ 1352.918138][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 1352.923239][ C0] exit_mmap+0x1b8/0xb20 [ 1352.927489][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1352.932248][ C0] __mmput+0x12a/0x480 [ 1352.936329][ C0] mmput+0x62/0x70 [ 1352.940054][ C0] do_exit+0x9bf/0x2bb0 [ 1352.944233][ C0] ? get_signal+0x8f2/0x2770 [ 1352.948816][ C0] ? __pfx_do_exit+0x10/0x10 [ 1352.953393][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1352.958406][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1352.963768][ C0] do_group_exit+0xd3/0x2a0 [ 1352.968263][ C0] get_signal+0x25fd/0x2770 [ 1352.972778][ C0] ? __pfx_get_signal+0x10/0x10 [ 1352.977619][ C0] ? __pfx_do_futex+0x10/0x10 [ 1352.982283][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 1352.987820][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1352.993964][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 1352.999586][ C0] do_syscall_64+0xda/0x250 [ 1353.004080][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.009961][ C0] RIP: 0033:0x7fb3b6775f19 [ 1353.014360][ C0] Code: Unable to access opcode bytes at 0x7fb3b6775eef. [ 1353.021357][ C0] RSP: 002b:00007fb3b74c30f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1353.029756][ C0] RAX: fffffffffffffe00 RBX: 00007fb3b6906118 RCX: 00007fb3b6775f19 [ 1353.037728][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb3b6906118 [ 1353.045693][ C0] RBP: 00007fb3b6906110 R08: 00007fb3b74c36c0 R09: 00007fb3b74c36c0 [ 1353.053661][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3b690611c [ 1353.061620][ C0] R13: 000000000000006e R14: 00007ffddda595b0 R15: 00007ffddda59698 [ 1353.069581][ C0] [ 1353.072816][ C0] Kernel Offset: disabled [ 1353.077130][ C0] Rebooting in 86400 seconds..