last executing test programs: 21.069264891s ago: executing program 0 (id=1932): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000000), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0xf, 0x0, 0x4, 0x3735, 0x7}, 0x14) write$UHID_CREATE(r8, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000600)=""/9, 0x9, 0x20, 0x3, 0x2, 0x0, 0x8c07}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) ioctl$UFFDIO_CONTINUE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0xfffffffc, 0x10003, "944022f7f4b75e74cb2490b1ab438f7dd0e5aacfe65b9167", {0x7fffffff, 0x7}, 0x7f}) 19.023058025s ago: executing program 0 (id=1934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) write$dsp(r2, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x5d, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/187, 0xbc}, {&(0x7f0000000100)=""/11, 0x10000}], 0x2}, 0x12072) r6 = syz_open_pts(r4, 0x141601) write(r6, &(0x7f0000000000)="c5", 0x1) read$FUSE(r4, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x8a182) 12.843727576s ago: executing program 4 (id=1950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6072b2af00042f00fe80000000"], 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000240)="0021470100006724594c3c", 0xb}], 0x1, 0x80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073794f0722ed6d82c856ec43bc72be7a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a05000000000000000000000000001400"], 0xa4}}, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086603, &(0x7f0000000040)) 12.471567367s ago: executing program 3 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x20, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c00000018000109000000000000000002180000ff0000080000000208000100ac1414"], 0x2c}}, 0x0) 11.857841628s ago: executing program 3 (id=1955): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xea, 0x8001, 0xc4a, 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000002400)="cada81b7ed728ab33ee0953201da9a50", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000003a80)="5641fb06db86bd8ed6ea1ce77194ece0", 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803, [0x3e8, 0x0]}}}}}}}, 0x0) 10.52493543s ago: executing program 0 (id=1957): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xf, &(0x7f0000000280)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) r5 = memfd_create(&(0x7f0000000940)='\x00\x00\x04\x00\x1f\xd7\xdc1\x02{-3yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec>\xa2\x14\xb9\xa0\xfeA\x7f0\xee\xdeR\x94\x1f\xb8j\xc8;\x03\xfa):h\xffmkK\xef\x90\xfaC\f\x99\x18%\xaaa\b\xd8\f\xfb\xae\x0e\xb6\r\x04\x16\xb3\xdb\xf0\x97c\xddO\xceZD\xee/\xf7\xe3\xd5B\x88T\xc9\xf0\x8bJ\\\x1c\xa2&\f\xf7\x8eK\x9d\xe9\xca\x82\xd7\xa0b\xf4\xd2\xac&]\xe8&Knp\xd9\xe1\xe5F2\xf8\xa6+H\xc8\xa3\xe1[\xe3\xae\xcd\xd2\x89\xc1\x96<\xf0\xdf\xb8\xed\xa2\xb1\x9a\xf1vU9\xa9\xb9\x01\xc9\xf9\xcd\xf0]\x14I\xb4\x7f2\x84\xdb\xb7\x05\x8d\xa5\xf7{ww\xc8\xb8B\x90\xeci\x9bc{\xd0M\b%\x06\xd7\x17\xff\xc6\x8be\x9e\a\xe4\xb5 \xd9\x1c\xceM55\x99!\xcc\xac\\\b\xdc\x82\xf9\x87\x1em|\xc7\a,Fg4\x1d\xd9\xee\xd0|8\f\xcc\x7f\x15<8YW\x16zO9\xa7\x8a\xdd\xcc|\xbe\xda\x14\xf8\x8f\x94\xad\x90\xa51\xc6\xd0\xd7\x86\xb1\x15x\x12\xd2_?\xfa\xf8\xcd\xcf\xb7\x95\x1a\xd2Ue\xd5\xfb\\\x89\x11\xd0\xde\x04\x88L\x17Q\x94\x14\x0f\xc7\xdb\x86\x16|\xe9=\xee\x06U\x8a\xe8=\xe0\xf9\xce\xe4\xebM\a3\xba\x98\x9dv\xba\xfb\x7fk\xf0\x9a\xbf\x91KCC.B_:w\xff0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) 8.737690514s ago: executing program 0 (id=1961): ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x400c4150, &(0x7f0000000180)={0x0, &(0x7f0000000340)="072460f63405c4a8f1e98b2ec3b8289a06", 0x11}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200084, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 6.696313718s ago: executing program 4 (id=1963): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 6.476572828s ago: executing program 3 (id=1966): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x0, 0x22}, 0x0, 0x0}) 6.416135788s ago: executing program 0 (id=1967): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000280)=0x1) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 6.387573618s ago: executing program 1 (id=1968): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000002400)="cada81b7ed728ab33ee0953201da9a50", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000003a80)="5641fb06db86bd8ed6ea1ce77194ece0", 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803, [0x3e8, 0x0]}}}}}}}, 0x0) 4.738704161s ago: executing program 0 (id=1969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6072b2af00042f00fe8000000000000000"], 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000240)="0021470100006724594c3c", 0xb}], 0x1, 0x80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073794f0722ed6d82c856ec43bc72be7a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a05000000000000000000000000001400"], 0xa4}}, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086603, &(0x7f0000000040)) 4.719445301s ago: executing program 1 (id=1970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd, 0xb00}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x6}, {@empty}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12015002020000202505a1a440000102030109026c000201b53933e403c73ec2cc10010904000001020d000009240600010ae4770005240006000d240f0107000000030010000606241a0300200c241b0100090006fb02000109058103ff030007030904010000020d00000904010102020d000009058202ff0300060d090503"], &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xc, 0x0, 0x4, 0x10, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000280)={0x0, "5b9992bc231a14b414c11655627f7bd00ddbd106c0b1310e703877f17088dae8"}) unshare(0x6a040000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}}, 0x20004881) 4.352269932s ago: executing program 2 (id=1972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="54d5611b63a92c8daafd6f97ae941e8167e55f505a49489d1a1f773683", 0x1d}], 0x1) 4.131727232s ago: executing program 4 (id=1973): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$lock(r0, 0xe, &(0x7f0000000140)={0x2, 0x1, 0x4, 0x7}) 4.029122272s ago: executing program 2 (id=1974): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}]) 3.927704483s ago: executing program 1 (id=1975): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80000000000000000004"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.872233783s ago: executing program 4 (id=1976): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x2000, @fd_index=0x4, 0xb, 0x20000003, 0x8020, 0xa, 0x1, {0x2}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x7c2}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r4 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r4, 0x107, 0x1, 0x0, 0x0) io_uring_setup(0x2ea2, &(0x7f0000000500)={0x0, 0xafa, 0x12, 0x2, 0xc6}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) pwritev2(r2, &(0x7f0000000380), 0x0, 0x8, 0x8, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x6fc, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0xb7, 0x80, 0x5}}]}) 3.824673213s ago: executing program 2 (id=1977): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) membarrier(0x71, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0xb43}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x60}], 0x1, 0x48850) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) 2.850578964s ago: executing program 1 (id=1978): mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = inotify_init1(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x40000, 0x0, 0xfffffffc}) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0x4000112) 2.837539964s ago: executing program 3 (id=1979): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000280)=0x1) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 2.836128294s ago: executing program 2 (id=1980): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000002400)="cada81b7ed728ab33ee0953201da9a50", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000003a80)="5641fb06db86bd8ed6ea1ce77194ece0", 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803, [0x3e8, 0x0]}}}}}}}, 0x0) 994.829238ms ago: executing program 1 (id=1981): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0xc8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 877.465818ms ago: executing program 2 (id=1982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7}, @TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8040) sendmsg$nl_route(r0, 0x0, 0x4008840) r1 = socket$inet6(0xa, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x9, 0x800) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000040)={r4}) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)={0x8}, 0x8) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 876.589858ms ago: executing program 3 (id=1983): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback, 0xffffffffffffffff, 0x1d, 0x2034, 0x0, @void, @void, @value}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x4281c2, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(r0, &(0x7f0000000480)=""/4089, 0xff9) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) 659.684838ms ago: executing program 4 (id=1984): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 232.056349ms ago: executing program 1 (id=1985): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x58) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 2 (id=1986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x40, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000003b0007010000000000000000017c0000093531b517da26db96e1c3dcb7f710107ce300c16c9528b440e1d20ecc3d8cb0189e3cb6ec187dc7dd46d7ffe5c4e4c746d443789bced999ad1d48d79a059da431e401d56f795ec2e86982b772d403f540b7ff804e6781c18dd34894bf82edc49be9f8eb2b6c35b40ebeb797d0e0c1b4a286b89354c00e70fa6f13fb53b67142481687a822544e777d820367c041d730c2719e73e372eeeb5023f512d2be2fb2"], 0x14}}, 0xc000) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, 0x0) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.739713][ T4178] device veth0_vlan entered promiscuous mode [ 55.749182][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.756822][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.766565][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.775938][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.784863][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.809752][ T4171] device veth0_vlan entered promiscuous mode [ 55.836834][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.848877][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.871395][ T4178] device veth1_vlan entered promiscuous mode [ 55.888058][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.896004][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.903950][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.915101][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.923965][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.932948][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.942711][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.950487][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.962409][ T4171] device veth1_vlan entered promiscuous mode [ 55.994860][ T4178] device veth0_macvtap entered promiscuous mode [ 56.005063][ T4174] device veth0_vlan entered promiscuous mode [ 56.017960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.026956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.035962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.044950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.053750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.062477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.075042][ T4178] device veth1_macvtap entered promiscuous mode [ 56.086084][ T4174] device veth1_vlan entered promiscuous mode [ 56.094199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.104010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.112475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.120310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.128625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.136913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.145792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.158303][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.167902][ T4180] device veth0_vlan entered promiscuous mode [ 56.199701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.208722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.219999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.237292][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.254739][ T4171] device veth0_macvtap entered promiscuous mode [ 56.264357][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.276478][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.286604][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.300628][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.312094][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.320691][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.333243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.343813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.355153][ T4180] device veth1_vlan entered promiscuous mode [ 56.368205][ T4178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.377490][ T4178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.388577][ T4178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.397574][ T4178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.412094][ T4174] device veth0_macvtap entered promiscuous mode [ 56.436716][ T4171] device veth1_macvtap entered promiscuous mode [ 56.451715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.466524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.478000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.486851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.495547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.504335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.515426][ T4180] device veth0_macvtap entered promiscuous mode [ 56.531337][ T4174] device veth1_macvtap entered promiscuous mode [ 56.568622][ T4180] device veth1_macvtap entered promiscuous mode [ 56.615151][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.626135][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.638926][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.649959][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.660487][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.673342][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.687490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.696032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.705569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.713856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.723016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.731844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.740273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.749101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.758006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.768312][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.779447][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.789575][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.801773][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.813109][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.832458][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.840439][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.848930][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.871300][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.881873][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.892442][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.902502][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.913196][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.924049][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.932585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.940357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.950084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.958745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.967466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.978271][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.989270][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.999165][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.009787][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.022616][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.030944][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.039644][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.048645][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.057558][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.077843][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.088353][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.099231][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.110214][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.120203][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.130814][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.142781][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.151003][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.160264][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.170001][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.178752][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.190437][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.196399][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.199836][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.212537][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.223215][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.232057][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.257191][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.265701][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.277445][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.287467][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.295987][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.306393][ T4177] device veth0_vlan entered promiscuous mode [ 57.315122][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.324198][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.333072][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.343186][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.375890][ T4177] device veth1_vlan entered promiscuous mode [ 57.502757][ T4220] Bluetooth: hci4: command 0x040f tx timeout [ 57.508862][ T4220] Bluetooth: hci3: command 0x040f tx timeout [ 57.521790][ T4220] Bluetooth: hci0: command 0x040f tx timeout [ 57.527892][ T4220] Bluetooth: hci1: command 0x040f tx timeout [ 57.538838][ T4220] Bluetooth: hci2: command 0x040f tx timeout [ 57.623932][ T4177] device veth0_macvtap entered promiscuous mode [ 57.652886][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.671986][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.680202][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.695717][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.705507][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.739316][ T4177] device veth1_macvtap entered promiscuous mode [ 57.756092][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.773909][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.821323][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.830610][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.855798][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.869094][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.908024][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.929875][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.953313][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.974556][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.990771][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.007362][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.017965][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.030589][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.040704][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.051371][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.063418][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.075143][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.085905][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.096174][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.106778][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.116914][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.127824][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.137925][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.149216][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.160414][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.167915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.177421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.185716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.194465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.203714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.212986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.246488][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.255931][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.264984][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.275032][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.320692][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.346554][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.367295][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.409718][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.422327][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.446758][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.484492][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.513584][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.576871][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.596079][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.626041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.645598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.671451][ T4262] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.686208][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.702202][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.839904][ T4251] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.842696][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.901218][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.974891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.077320][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.100854][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 59.109928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 59.118885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 59.127884][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 59.282137][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.394741][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.581051][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.590046][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 59.599209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 59.886335][ T4217] Bluetooth: hci2: command 0x0419 tx timeout [ 60.462390][ T4217] Bluetooth: hci1: command 0x0419 tx timeout [ 60.469085][ T4217] Bluetooth: hci0: command 0x0419 tx timeout [ 60.482812][ T4217] Bluetooth: hci3: command 0x0419 tx timeout [ 60.489558][ T4217] Bluetooth: hci4: command 0x0419 tx timeout [ 60.835005][ T4251] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 60.843664][ T4251] usb 1-1: config 0 has no interface number 0 [ 60.857724][ T4251] usb 1-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 60.879268][ T4251] usb 1-1: config 0 interface 9 altsetting 132 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.898061][ T4251] usb 1-1: config 0 interface 9 has no altsetting 0 [ 62.079483][ T4251] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 62.110091][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.459339][ T4292] sched: RT throttling activated [ 63.478032][ T4251] usb 1-1: Product: syz [ 63.861023][ T4251] usb 1-1: Manufacturer: syz [ 63.878765][ T4251] usb 1-1: config 0 descriptor?? [ 63.938720][ T4251] usb 1-1: can't set config #0, error -71 [ 63.971030][ T4251] usb 1-1: USB disconnect, device number 2 [ 64.669181][ T4307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 64.731712][ T4307] sp0: Synchronizing with TNC [ 65.362697][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 66.157413][ T4312] sp0: Synchronizing with TNC [ 66.181010][ T4279] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.617585][ T4296] [U] è [ 66.651120][ T4279] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.198040][ T4279] usb 4-1: config 0 has no interface number 0 [ 68.024716][ T4279] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.650886][ T4279] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.685819][ T4279] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 69.057052][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.080710][ T4279] usb 4-1: config 0 descriptor?? [ 69.117976][ T4279] usb 4-1: can't set config #0, error -71 [ 69.164336][ T4279] usb 4-1: USB disconnect, device number 2 [ 71.690690][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.697285][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.712204][ T4279] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 74.803825][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.392610][ T7] cfg80211: failed to load regulatory.db [ 82.891411][ T4218] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 84.064649][ T4218] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.212816][ T4218] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 84.232876][ T4218] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 84.359480][ T4218] usb 1-1: config 0 descriptor?? [ 84.402659][ T4218] usb 1-1: can't set config #0, error -71 [ 84.425831][ T4218] usb 1-1: USB disconnect, device number 3 [ 89.890934][ T4218] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 90.441050][ T4218] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.137599][ T4540] syz.2.71 uses obsolete (PF_INET,SOCK_PACKET) [ 91.149157][ T4540] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 91.171066][ T4218] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 91.184453][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 91.214478][ T4218] usb 4-1: Product: syz [ 91.218758][ T4218] usb 4-1: SerialNumber: syz [ 91.227161][ T4218] usb 4-1: config 0 descriptor?? [ 91.279447][ T4546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.72'. [ 91.932576][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'. [ 91.942421][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 93.192153][ T4279] usb 4-1: USB disconnect, device number 4 [ 98.310604][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 102.158830][ T4652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.684215][ T4708] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.437380][ T4749] netlink: 9 bytes leftover after parsing attributes in process `syz.3.126'. [ 111.555125][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 111.784361][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'. [ 112.786627][ T4764] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.177690][ T4796] netlink: 9 bytes leftover after parsing attributes in process `syz.0.140'. [ 117.200375][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 117.260220][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 117.565931][ T4279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.800883][ T4279] usb 2-1: Using ep0 maxpacket: 8 [ 117.921091][ T4279] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 117.943512][ T4279] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.001826][ T4279] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.051234][ T4279] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.078899][ T4279] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.120903][ T4279] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.151211][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.294946][ T4798] loop2: detected capacity change from 0 to 32768 [ 118.404942][ T4798] ======================================================= [ 118.404942][ T4798] WARNING: The mand mount option has been deprecated and [ 118.404942][ T4798] and is ignored by this kernel. Remove the mand [ 118.404942][ T4798] option from the mount to silence this warning. [ 118.404942][ T4798] ======================================================= [ 118.439826][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.179406][ T4279] usb 2-1: GET_CAPABILITIES returned 0 [ 119.185657][ T4279] usbtmc 2-1:16.0: can't read capabilities [ 119.240652][ T4798] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 119.372376][ T4279] usb 2-1: USB disconnect, device number 2 [ 120.768047][ T4174] ocfs2: Unmounting device (7,2) on (node local) [ 121.476558][ T4842] netlink: 9 bytes leftover after parsing attributes in process `syz.4.153'. [ 121.516470][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 121.586864][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 121.638226][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.153'. [ 123.720502][ T4866] sp0: Synchronizing with TNC [ 127.293950][ T4868] loop0: detected capacity change from 0 to 32768 [ 127.476087][ T4888] netlink: 9 bytes leftover after parsing attributes in process `syz.3.166'. [ 127.476245][ T4868] (syz.0.160,4868,1):ocfs2_initialize_super:2310 ERROR: status = -12 [ 127.494488][ T4868] (syz.0.160,4868,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 127.621731][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 127.702159][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 132.788184][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794570][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.882803][ T4929] loop3: detected capacity change from 0 to 32768 [ 134.350813][ T4929] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 134.571054][ T4222] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.950527][ T26] audit: type=1800 audit(1741242899.638:2): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.177" name="file1" dev="loop3" ino=17060 res=0 errno=0 [ 134.980871][ T4222] usb 2-1: Using ep0 maxpacket: 32 [ 135.012527][ T4929] syz.3.177 (4929) used greatest stack depth: 19360 bytes left [ 135.067305][ T4180] ocfs2: Unmounting device (7,3) on (node local) [ 135.111263][ T4222] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.125642][ T4222] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 135.168882][ T4222] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.391074][ T4222] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 135.790619][ T4222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.798693][ T4222] usb 2-1: Product: syz [ 135.850938][ T4222] usb 2-1: Manufacturer: syz [ 135.855560][ T4222] usb 2-1: SerialNumber: syz [ 135.922047][ T4222] usb 2-1: config 0 descriptor?? [ 136.475872][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 136.489177][ T4968] sp0: Synchronizing with TNC [ 136.546544][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 137.981144][ T1107] usb 2-1: USB disconnect, device number 3 [ 144.820995][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 145.577699][ T5038] capability: warning: `syz.4.207' uses deprecated v2 capabilities in a way that may be insecure [ 147.663222][ T5052] overlayfs: failed to get inode (-116) [ 147.669481][ T5052] overlayfs: failed to get inode (-116) [ 150.240345][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 150.898289][ T5086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.220'. [ 151.325804][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 152.575752][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'. [ 154.855057][ T5137] sp0: Synchronizing with TNC [ 157.352347][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 157.771875][ T5175] sp0: Synchronizing with TNC [ 161.840973][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 163.117711][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 165.586669][ T5236] futex_wake_op: syz.0.261 tries to shift op by -1; fix this program [ 170.355996][ T5301] 9pnet: Insufficient options for proto=fd [ 174.128588][ T5346] netlink: 'syz.1.289': attribute type 2 has an invalid length. [ 175.755418][ T4219] Bluetooth: hci1: command 0x0406 tx timeout [ 175.762373][ T4219] Bluetooth: hci3: command 0x0406 tx timeout [ 175.769202][ T4219] Bluetooth: hci4: command 0x0406 tx timeout [ 175.776076][ T4219] Bluetooth: hci2: command 0x0406 tx timeout [ 175.899140][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 175.928771][ T5359] sp0: Synchronizing with TNC [ 177.104327][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 180.972156][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 181.013563][ T5399] sp0: Synchronizing with TNC [ 181.878203][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 185.558548][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 186.327503][ T5458] netlink: 9 bytes leftover after parsing attributes in process `syz.3.323'. [ 186.344634][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 189.904810][ T5498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.050872][ T5305] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.380885][ T5305] usb 4-1: Using ep0 maxpacket: 8 [ 190.510977][ T5305] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 190.533458][ T5493] program syz.0.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.761460][ T5305] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 190.809127][ T5305] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.921210][ T5305] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.951090][ T5305] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.960146][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.220985][ T5305] usb 4-1: GET_CAPABILITIES returned 0 [ 192.236746][ T5305] usbtmc 4-1:16.0: can't read capabilities [ 192.564604][ T5305] usb 4-1: USB disconnect, device number 5 [ 193.644688][ T5530] Zero length message leads to an empty skb [ 194.156966][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165089][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.215612][ T5554] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 197.111720][ T5558] device bond1 entered promiscuous mode [ 197.151559][ T5558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.347186][ T5558] bond1 (unregistering): Released all slaves [ 204.407781][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 205.320959][ T5620] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 206.366904][ T5626] capability: warning: `syz.3.375' uses 32-bit capabilities (legacy support in use) [ 207.376315][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 207.450767][ T5642] sp0: Synchronizing with TNC [ 207.585593][ T5631] [U] `èè [ 209.983721][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 212.671554][ T5655] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.381'. [ 212.683809][ T5648] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.381'. [ 213.865208][ T5689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.389'. [ 213.939193][ T5690] sp0: Synchronizing with TNC [ 214.141836][ T5682] [U] è [ 217.641669][ T5687] 9pnet: Insufficient options for proto=fd [ 218.046417][ T5707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 219.128116][ T4221] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 219.394118][ T4221] usb 5-1: Using ep0 maxpacket: 8 [ 219.679119][ T4221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.043842][ T4221] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.289123][ T4221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.421760][ T5735] fuse: Bad value for 'group_id' [ 221.694115][ T4221] usb 5-1: config 0 descriptor?? [ 221.925184][ T4221] usb 5-1: can't set config #0, error -71 [ 222.099529][ T4221] usb 5-1: USB disconnect, device number 2 [ 222.259058][ T5748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 222.328562][ T5748] sp0: Synchronizing with TNC [ 222.963372][ T5744] [U] è [ 227.791123][ T5785] fuse: Bad value for 'group_id' [ 228.978616][ T5796] netlink: 'syz.3.417': attribute type 2 has an invalid length. [ 231.314557][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 235.564085][ T5849] netlink: 'syz.3.430': attribute type 2 has an invalid length. [ 236.800702][ T5855] smc: net device bond0 applied user defined pnetid SYZ0 [ 238.661258][ T5857] hub 6-0:1.0: USB hub found [ 238.667441][ T5857] hub 6-0:1.0: 1 port detected [ 239.214084][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 241.837967][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 241.864002][ T5899] sp0: Synchronizing with TNC [ 243.010829][ T5643] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 243.380867][ T5643] usb 1-1: Using ep0 maxpacket: 16 [ 243.540962][ T5643] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.558563][ T5643] usb 1-1: config 0 interface 0 has no altsetting 0 [ 243.579882][ T5643] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 243.589844][ T5643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.609737][ T5643] usb 1-1: config 0 descriptor?? [ 244.133108][ T5643] hid (null): unknown global tag 0xe [ 244.167947][ T5643] cougar 0003:060B:500A.0001: usage count exceeds max: fixing up report descriptor [ 244.207907][ T5643] cougar 0003:060B:500A.0001: unexpected long global item [ 244.226275][ T5643] cougar 0003:060B:500A.0001: parse failed [ 244.240797][ T5643] cougar: probe of 0003:060B:500A.0001 failed with error -22 [ 244.364298][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.388973][ T4279] usb 1-1: USB disconnect, device number 4 [ 244.390938][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.441018][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.479074][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.492453][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.499889][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.538099][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.558345][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.578584][ T5643] hid-generic 0020:0003:0002.0002: unknown main item tag 0x0 [ 244.638436][ T5643] hid-generic 0020:0003:0002.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 245.413353][ T5935] syz.4.456[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.413466][ T5935] syz.4.456[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.900908][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 248.960101][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 248.989729][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 249.016500][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 249.631640][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 249.897292][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 249.908306][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 249.915805][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 249.923252][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 249.930806][ T4279] hid-generic 0020:0003:0002.0003: unknown main item tag 0x0 [ 249.987364][ T4279] hid-generic 0020:0003:0002.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 253.702802][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 255.613961][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.620279][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.127262][ T1323] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 257.204584][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 257.276830][ T6071] sp0: Synchronizing with TNC [ 257.491356][ T1323] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 257.517886][ T1323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.628039][ T1323] usb 1-1: config 0 descriptor?? [ 257.732339][ T1323] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 257.924629][ T6068] [U] è [ 258.171084][ T1323] gp8psk: usb out operation failed. [ 258.176802][ T1323] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 258.291931][ T1323] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 258.339743][ T1323] usb 1-1: USB disconnect, device number 5 [ 262.361453][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 267.669694][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 267.696655][ T6162] sp0: Synchronizing with TNC [ 271.537386][ T6201] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.152904][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.165678][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.190053][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.209434][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.229189][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.391601][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.399200][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.407371][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.415097][ T6184] hid-generic 0020:0003:0002.0004: unknown main item tag 0x0 [ 272.427074][ T6184] hid-generic 0020:0003:0002.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 276.879042][ T6253] netlink: 9 bytes leftover after parsing attributes in process `syz.2.547'. [ 276.890175][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 276.966829][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 277.403547][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 277.432244][ T6258] sp0: Synchronizing with TNC [ 282.769583][ T6312] fuse: Unknown parameter 'group_i00000000000000000000' [ 285.570194][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.578711][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.866089][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.874800][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.882883][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.890274][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.898082][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.905872][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.913577][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.924124][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.933167][ T4222] hid-generic 0020:0003:0002.0005: unknown main item tag 0x0 [ 286.945992][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.947127][ T4222] hid-generic 0020:0003:0002.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 287.030055][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.862649][ T6305] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.871998][ T6305] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.886401][ T6305] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.895704][ T6305] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.414675][ T6363] fuse: Unknown parameter 'group_i00000000000000000000' [ 293.096152][ T6407] fuse: Unknown parameter 'group_i00000000000000000000' [ 295.865081][ T6434] netlink: 9 bytes leftover after parsing attributes in process `syz.0.596'. [ 295.875885][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 297.632151][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'. [ 297.749214][ T6433] sctp: failed to load transform for md5: -2 [ 298.090998][ T5305] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 298.878798][ T6469] fuse: Unknown parameter 'group_id00000000000000000000' [ 299.775573][ T5305] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 299.981406][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.989462][ T5305] usb 4-1: Product: syz [ 299.993675][ T5305] usb 4-1: Manufacturer: syz [ 299.998259][ T5305] usb 4-1: SerialNumber: syz [ 300.005609][ T5305] usb 4-1: config 0 descriptor?? [ 300.252741][ T6481] netlink: 'syz.2.610': attribute type 4 has an invalid length. [ 300.297093][ T5305] usb 4-1: ignoring: probably an ADSL modem [ 300.304246][ T6481] netlink: 'syz.2.610': attribute type 4 has an invalid length. [ 300.731511][ T5305] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 301.108437][ T5305] usb 4-1: USB disconnect, device number 6 [ 301.494808][ T6494] netlink: 9 bytes leftover after parsing attributes in process `syz.2.615'. [ 301.554208][ T6494] 0·: renamed from hsr0 [ 301.554690][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 301.579886][ T6494] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.728962][ T6494] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.730637][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 301.754137][ T6494] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 301.829073][ T6503] fuse: Unknown parameter 'group_id00000000000000000000' [ 303.061075][ T6494] syz.2.615 (6494) used greatest stack depth: 19032 bytes left [ 305.490525][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 305.830774][ T5305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 305.841597][ T6541] fuse: Unknown parameter 'group_id00000000000000000000' [ 307.218047][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.245784][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.280773][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 307.314845][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.323961][ T6553] netlink: 9 bytes leftover after parsing attributes in process `syz.4.633'. [ 307.340966][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.349523][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.385084][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 307.403181][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.410610][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.421169][ T5305] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 307.466239][ T5305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 307.491688][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.500994][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 307.518071][ T5305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.538371][ T4222] hid-generic 0020:0003:0002.0006: unknown main item tag 0x0 [ 307.568420][ T5305] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.588578][ T4222] hid-generic 0020:0003:0002.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 307.617838][ T5305] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.660228][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.961072][ T5305] usb 3-1: GET_CAPABILITIES returned 0 [ 307.966582][ T5305] usbtmc 3-1:16.0: can't read capabilities [ 308.272494][ T5305] usb 3-1: USB disconnect, device number 2 [ 312.701336][ T6599] netlink: 9 bytes leftover after parsing attributes in process `syz.4.645'. [ 312.856682][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 313.594608][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 317.314141][ T6648] bridge0: port 3(syz_tun) entered blocking state [ 317.321224][ T6648] bridge0: port 3(syz_tun) entered disabled state [ 318.297411][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.306250][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.941270][ T6660] netlink: 9 bytes leftover after parsing attributes in process `syz.1.663'. [ 319.963169][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 320.638201][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'. [ 326.008184][ T6739] netlink: 9 bytes leftover after parsing attributes in process `syz.3.682'. [ 326.126343][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 326.581779][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 326.659755][ T6741] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.684'. [ 326.708960][ T6740] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.684'. [ 326.755181][ T6746] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 327.719611][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 328.051915][ T6757] sp0: Synchronizing with TNC [ 328.419228][ T6769] netem: incorrect gi model size [ 328.426938][ T6769] netem: change failed [ 329.339865][ T6782] netlink: 9 bytes leftover after parsing attributes in process `syz.1.696'. [ 329.488183][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 330.498141][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 330.771707][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 330.952326][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 331.067652][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 331.264145][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 331.272396][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 331.285379][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 331.297130][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 331.311603][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 331.316479][ T6792] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.699'. [ 331.329170][ T4251] hid-generic 0020:0003:0002.0007: unknown main item tag 0x0 [ 331.363722][ T4251] hid-generic 0020:0003:0002.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 331.490856][ T6795] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.699'. [ 335.568652][ T6840] netlink: 9 bytes leftover after parsing attributes in process `syz.4.711'. [ 335.727875][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 335.763052][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 342.258548][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 342.288583][ T6896] sp0: Synchronizing with TNC [ 343.168708][ T6903] netlink: 9 bytes leftover after parsing attributes in process `syz.3.727'. [ 343.961260][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 348.026846][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 348.038925][ T6952] sp0: Synchronizing with TNC [ 349.170871][ T6964] netlink: 9 bytes leftover after parsing attributes in process `syz.4.740'. [ 349.203397][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 349.233676][ T26] audit: type=1326 audit(1741243113.928:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 349.292419][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'. [ 349.330519][ T26] audit: type=1326 audit(1741243113.968:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 349.456337][ T26] audit: type=1326 audit(1741243113.978:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 349.478360][ T26] audit: type=1326 audit(1741243113.978:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 349.500970][ T26] audit: type=1326 audit(1741243113.978:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 349.523129][ T26] audit: type=1326 audit(1741243113.978:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 349.562011][ T26] audit: type=1326 audit(1741243113.978:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 349.640927][ T26] audit: type=1326 audit(1741243113.978:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 350.516834][ T26] audit: type=1326 audit(1741243113.978:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 351.620833][ T6981] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 351.880786][ T26] audit: type=1326 audit(1741243113.978:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7ffc0000 [ 353.121878][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 353.305011][ T6990] sp0: Synchronizing with TNC [ 353.411149][ T7003] fuse: Bad value for 'fd' [ 354.038309][ T6983] [U] è [ 354.698416][ T7012] netlink: 9 bytes leftover after parsing attributes in process `syz.2.755'. [ 355.114274][ T7025] netlink: 'syz.1.758': attribute type 4 has an invalid length. [ 357.159306][ T7048] fuse: Bad value for 'fd' [ 359.247473][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 359.302889][ T7068] sp0: Synchronizing with TNC [ 359.958201][ T7072] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 360.500817][ T7060] [U] è [ 365.273565][ T7101] fuse: Bad value for 'fd' [ 366.448296][ T7117] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 368.604014][ T7131] sp0: Synchronizing with TNC [ 368.736738][ T7122] [U] è [ 368.936412][ T7135] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 372.005451][ T7127] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.782'. [ 372.355725][ T7142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.957122][ T7177] netlink: 'syz.0.795': attribute type 2 has an invalid length. [ 377.401355][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 377.487003][ T7196] sp0: Synchronizing with TNC [ 378.197714][ T7193] [U] è [ 378.462217][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.469013][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.153491][ T7187] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.800'. [ 385.882724][ T7269] sp0: Synchronizing with TNC [ 386.151652][ T7262] [U] è [ 389.690488][ T7274] vivid-000: disconnect [ 390.523049][ T7283] fuse: Invalid rootmode [ 391.150504][ T7277] vivid-000: reconnect [ 396.586501][ T7340] sp0: Synchronizing with TNC [ 396.880881][ T7331] [U] è [ 397.861186][ T7353] fuse: Bad value for 'rootmode' [ 402.625042][ T7397] netlink: 'syz.3.844': attribute type 2 has an invalid length. [ 404.371163][ T7415] sp0: Synchronizing with TNC [ 405.216884][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 408.994062][ T7453] netlink: 'syz.1.857': attribute type 2 has an invalid length. [ 412.155893][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 412.219857][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 412.423263][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 417.139486][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 419.150992][ T4256] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 421.368205][ T7559] sp0: Synchronizing with TNC [ 422.330963][ T4256] usb 3-1: device not accepting address 3, error -71 [ 423.022753][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 423.435011][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 426.380706][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 426.810882][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 428.061870][ T7624] process 'syz.1.903' launched '/dev/fd/8' with NULL argv: empty string added [ 428.100869][ T1107] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 428.222175][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.231278][ T1107] usb 3-1: Product: syz [ 428.235453][ T1107] usb 3-1: Manufacturer: syz [ 428.240149][ T1107] usb 3-1: SerialNumber: syz [ 428.285710][ T1107] usb 3-1: config 0 descriptor?? [ 428.475170][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 429.100231][ T1107] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 429.772134][ T4335] usb 3-1: Failed to submit usb control message: -71 [ 429.779174][ T4335] usb 3-1: unable to send the bmi data to the device: -71 [ 429.816640][ T1107] usb 3-1: USB disconnect, device number 5 [ 429.877846][ T4335] usb 3-1: unable to get target info from device [ 430.204773][ T4335] usb 3-1: could not get target info (-71) [ 430.333782][ T4335] usb 3-1: could not probe fw (-71) [ 430.512981][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 431.304000][ T7668] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.913'. [ 431.329242][ T7667] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.913'. [ 432.298006][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 432.323621][ T7685] sp0: Synchronizing with TNC [ 433.234629][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 433.769634][ T7703] fuse: Bad value for 'rootmode' [ 435.344641][ T21] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 435.354154][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.370186][ T21] usb 5-1: config 0 descriptor?? [ 438.240838][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 438.250788][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 438.382219][ T21] usb 5-1: USB disconnect, device number 3 [ 439.095130][ T7740] sp0: Synchronizing with TNC [ 439.560955][ T4256] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 439.865787][ T7750] fuse: Unknown parameter 'use00000000000000000000' [ 440.092550][ T4256] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.313165][ T4256] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 440.381809][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 440.428791][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.455166][ T4256] usb 4-1: Product: syz [ 440.459355][ T4256] usb 4-1: SerialNumber: syz [ 440.491229][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.541892][ T4256] usb 4-1: config 0 descriptor?? [ 442.251368][ T1107] usb 4-1: USB disconnect, device number 7 [ 444.756790][ T7788] sp0: Synchronizing with TNC [ 446.984802][ T7806] fuse: Unknown parameter 'use00000000000000000000' [ 447.550071][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 451.653207][ T7852] sp0: Synchronizing with TNC [ 458.021425][ T7906] sp0: Synchronizing with TNC [ 458.741786][ T7910] fuse: Bad value for 'fd' [ 462.558419][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 462.962710][ T7952] fuse: Bad value for 'fd' [ 467.533160][ T7988] No such timeout policy "syz0" [ 468.317515][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'. [ 468.452292][ T7994] fuse: Bad value for 'fd' [ 468.531542][ T7995] fuse: Unknown parameter 'user_i00000000000000000000' [ 470.590380][ T8011] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 470.991235][ T8015] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1003'. [ 472.455281][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 472.880736][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 472.948949][ T8030] sp0: Synchronizing with TNC [ 473.350422][ T8025] [U] è [ 475.621501][ T8054] fuse: Unknown parameter 'user_i00000000000000000000' [ 476.731954][ T8068] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 476.948425][ T8070] sp0: Synchronizing with TNC [ 479.337485][ T8092] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1019'. [ 480.043918][ T8077] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1019'. [ 480.720825][ T4181] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 480.834488][ T8114] netlink: 'syz.1.1028': attribute type 2 has an invalid length. [ 481.797010][ T8120] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 483.514616][ T8126] sp0: Synchronizing with TNC [ 484.642487][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 484.730093][ T8139] sp0: Synchronizing with TNC [ 486.452031][ T8146] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1037'. [ 486.532950][ T8144] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1037'. [ 486.620859][ T4181] usb 5-1: device descriptor read/all, error -71 [ 486.931329][ T8161] netlink: 'syz.4.1041': attribute type 2 has an invalid length. [ 489.009314][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 489.039937][ T8186] sp0: Synchronizing with TNC [ 490.720889][ T7957] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 491.232391][ T7957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.402949][ T7957] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 491.471749][ T7957] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 491.583562][ T7957] usb 1-1: Product: syz [ 491.667269][ T7957] usb 1-1: SerialNumber: syz [ 491.808850][ T7957] usb 1-1: config 0 descriptor?? [ 491.811325][ T8195] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1050'. [ 491.844342][ T8194] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1050'. [ 492.388220][ T8210] netlink: 'syz.1.1054': attribute type 2 has an invalid length. [ 493.203382][ T8212] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 493.219963][ T5305] usb 1-1: USB disconnect, device number 6 [ 495.453461][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 495.465706][ T8234] sp0: Synchronizing with TNC [ 497.637434][ T8243] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1064'. [ 498.346171][ T8260] netlink: 'syz.4.1067': attribute type 2 has an invalid length. [ 500.411590][ T4217] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 501.345138][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.352759][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.788839][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 501.861308][ T8294] sp0: Synchronizing with TNC [ 502.900746][ T4217] usb 2-1: unable to read config index 0 descriptor/all [ 502.907898][ T4217] usb 2-1: can't read configurations, error -71 [ 503.443333][ T8306] netlink: 'syz.2.1079': attribute type 2 has an invalid length. [ 504.852555][ T8299] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1077'. [ 504.879645][ T8298] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1077'. [ 506.543184][ T6184] Bluetooth: hci4: command 0x0c1a tx timeout [ 508.000867][ T8349] netlink: 'syz.1.1090': attribute type 2 has an invalid length. [ 509.001013][ T6184] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 509.195548][ T8355] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 511.137358][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 514.175950][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 514.243759][ T8393] sp0: Synchronizing with TNC [ 514.375670][ T8386] [U] è [ 515.093607][ T8408] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 515.250862][ T13] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 520.352438][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 520.400762][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 520.442361][ T8440] sp0: Synchronizing with TNC [ 520.680861][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 520.931402][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 521.119289][ T8437] [U] è [ 521.123185][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 521.171884][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.276660][ T23] usb 3-1: Product: syz [ 521.324153][ T23] usb 3-1: Manufacturer: syz [ 521.385207][ T23] usb 3-1: SerialNumber: syz [ 522.704986][ T23] usbhid 3-1:1.0: can't add hid device: -71 [ 522.730723][ T23] usbhid: probe of 3-1:1.0 failed with error -71 [ 522.788012][ T23] usb 3-1: USB disconnect, device number 6 [ 522.942192][ T13] usb 2-1: device descriptor read/all, error -110 [ 523.165581][ T8455] netlink: 'syz.2.1119': attribute type 2 has an invalid length. [ 523.683546][ T13] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 523.940699][ T13] usb 2-1: device descriptor read/64, error -32 [ 524.071884][ T13] usb usb2-port1: attempt power cycle [ 525.305159][ T8472] fuse: Unknown parameter 'use00000000000000000000' [ 528.102392][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1128'. [ 528.195070][ T8495] sp0: Synchronizing with TNC [ 528.331340][ T8484] [U] è [ 532.019337][ T8511] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 532.300733][ T7957] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 532.702827][ T7957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.981653][ T7957] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 533.196209][ T8523] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1136'. [ 533.202947][ T7957] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 533.218608][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 533.223997][ T7957] usb 1-1: Product: syz [ 533.241246][ T7957] usb 1-1: SerialNumber: syz [ 533.252443][ T8522] sp0: Synchronizing with TNC [ 533.312571][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 533.348882][ T7957] usb 1-1: config 0 descriptor?? [ 533.428646][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 534.932640][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 534.940068][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 534.960713][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 534.968133][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 534.983541][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 535.002717][ T8534] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1140'. [ 535.042035][ T8532] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1140'. [ 535.060275][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 535.095126][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 535.266820][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 535.281573][ T4217] hid-generic 0020:0003:0002.0008: unknown main item tag 0x0 [ 535.290656][ T4217] hid-generic 0020:0003:0002.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 536.799285][ T8558] trusted_key: encrypted_key: master key parameter 'user{Úk' is invalid [ 539.563289][ T8563] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1148'. [ 539.600329][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 539.831707][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 539.865899][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 539.879185][ T8575] sp0: Synchronizing with TNC [ 540.019856][ T8579] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1151'. [ 540.069778][ T8577] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1151'. [ 540.128079][ T13] usb 1-1: USB disconnect, device number 7 [ 540.712660][ T8590] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 541.279314][ T8593] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1155'. [ 541.296441][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1155'. [ 543.336163][ T8620] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1162'. [ 544.393589][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 544.713180][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.764048][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.777843][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.790669][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.805444][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.820241][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.887286][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.895013][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 544.923493][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.940573][ T13] hid-generic 0020:0003:0002.0009: unknown main item tag 0x0 [ 544.963548][ T13] hid-generic 0020:0003:0002.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 548.866991][ T8671] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 550.449529][ T8679] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1177'. [ 550.521826][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 550.591824][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 554.664039][ T8718] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1188'. [ 554.700494][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 554.750143][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 554.800811][ T6083] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 555.280827][ T6083] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.423303][ T6083] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 555.478905][ T6083] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 555.523521][ T6083] usb 3-1: Product: syz [ 555.545249][ T6083] usb 3-1: SerialNumber: syz [ 555.578892][ T6083] usb 3-1: config 0 descriptor?? [ 555.847270][ T1107] usb 3-1: USB disconnect, device number 7 [ 559.576090][ T8750] netlink: 'syz.2.1196': attribute type 4 has an invalid length. [ 559.677731][ T8750] netlink: 'syz.2.1196': attribute type 4 has an invalid length. [ 560.077957][ T8757] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 560.138267][ T8759] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1199'. [ 560.189157][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 560.407122][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 562.911045][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.917332][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.206987][ T8787] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1206'. [ 563.228915][ T8786] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1206'. [ 563.380679][ T4251] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 564.380720][ T4251] usb 4-1: Using ep0 maxpacket: 32 [ 564.611878][ T8798] netlink: 'syz.2.1210': attribute type 2 has an invalid length. [ 565.103475][ T8803] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1211'. [ 565.376051][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 565.578033][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 565.587336][ T4251] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 566.831203][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.839692][ T4251] usb 4-1: Product: syz [ 566.846450][ T4251] usb 4-1: Manufacturer: syz [ 566.851134][ T4251] usb 4-1: SerialNumber: syz [ 566.859457][ T4251] usb 4-1: config 0 descriptor?? [ 566.930753][ T4251] usb 4-1: can't set config #0, error -71 [ 567.125249][ T4251] usb 4-1: USB disconnect, device number 9 [ 567.332935][ T8827] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1217'. [ 567.350028][ T8825] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1217'. [ 567.530866][ T4251] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 567.911899][ T4251] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.292800][ T4251] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 569.948273][ T4251] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 569.957975][ T4251] usb 4-1: Product: syz [ 569.962447][ T4251] usb 4-1: SerialNumber: syz [ 569.970075][ T4251] usb 4-1: config 0 descriptor?? [ 570.078567][ T8842] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 570.215691][ T4217] usb 4-1: USB disconnect, device number 10 [ 570.537648][ T8849] netlink: 'syz.4.1223': attribute type 2 has an invalid length. [ 572.157102][ T8862] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1227'. [ 572.604059][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 573.090416][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1227'. [ 573.105286][ T8872] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1229'. [ 573.114828][ T8874] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1229'. [ 573.406989][ T8881] fuse: Unknown parameter 'use00000000000000000000' [ 575.042426][ T8888] sp0: Synchronizing with TNC [ 575.048994][ T8887] [U] è [ 575.471043][ T4217] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 577.595331][ T4217] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.740957][ T4217] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 577.906260][ T4217] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 577.915173][ T4217] usb 1-1: Product: syz [ 577.919503][ T4217] usb 1-1: SerialNumber: syz [ 577.946440][ T4217] usb 1-1: config 0 descriptor?? [ 578.743312][ T4217] usb 1-1: USB disconnect, device number 8 [ 579.157615][ T8927] sp0: Synchronizing with TNC [ 579.769573][ T8933] No such timeout policy "syz0" [ 580.466670][ T8936] smc: net device bond0 erased user defined pnetid SYZ0 [ 581.530718][ T8939] sp0: Synchronizing with TNC [ 581.544381][ T8938] [U] è [ 582.561378][ T8947] 9pnet: Insufficient options for proto=fd [ 582.870753][ T6184] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 583.010799][ T4217] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 583.133833][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.150752][ T6184] usb 2-1: Using ep0 maxpacket: 8 [ 583.156019][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.168060][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.175673][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.184820][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.192398][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.200150][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.210603][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.218186][ T13] hid-generic 0020:0003:0002.000A: unknown main item tag 0x0 [ 583.232135][ T13] hid-generic 0020:0003:0002.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 583.272222][ T6184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.292055][ T6184] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 583.302212][ T6184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.325456][ T6184] usb 2-1: config 0 descriptor?? [ 583.410845][ T4217] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.570801][ T4217] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 583.596687][ T6184] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 583.607894][ T4217] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 583.624074][ T4217] usb 5-1: Product: syz [ 583.636734][ T4217] usb 5-1: SerialNumber: syz [ 583.658285][ T4217] usb 5-1: config 0 descriptor?? [ 583.914451][ T13] usb 5-1: USB disconnect, device number 6 [ 584.717231][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 584.805787][ T8974] team0 (unregistering): Port device team_slave_0 removed [ 584.860899][ T8974] team0 (unregistering): Port device team_slave_1 removed [ 584.926926][ T5305] usb 2-1: USB disconnect, device number 9 [ 587.640681][ T6083] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 587.952748][ T9000] sp0: Synchronizing with TNC [ 587.959313][ T8999] [U] è [ 588.011968][ T6083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 588.033369][ T6083] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 588.053712][ T6083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.072379][ T6083] usb 2-1: config 0 descriptor?? [ 588.100968][ T8987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 588.450652][ T5305] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 588.575020][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 588.585380][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 588.598163][ T9013] sp0: Synchronizing with TNC [ 588.608428][ T9014] sp1: Synchronizing with TNC [ 589.123211][ T6083] bigben 0003:146B:0902.000B: unexpected rdesc, please submit for review [ 589.137986][ T6083] bigben 0003:146B:0902.000B: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 589.149225][ T6083] bigben 0003:146B:0902.000B: not enough fields in HID_OUTPUT_REPORT 0 [ 589.157537][ T6083] bigben 0003:146B:0902.000B: no output report found [ 589.348000][ T23] usb 2-1: USB disconnect, device number 10 [ 589.757983][ T5305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.950059][ T9028] No such timeout policy "syz0" [ 589.984504][ T5305] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 590.013079][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 590.471904][ T5305] usb 1-1: Product: syz [ 590.531381][ T5305] usb 1-1: SerialNumber: syz [ 590.587639][ T5305] usb 1-1: config 0 descriptor?? [ 591.511390][ T6184] usb 1-1: USB disconnect, device number 9 [ 592.070505][ T9043] sp0: Synchronizing with TNC [ 592.089931][ T9041] [U] è [ 592.285629][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 592.298153][ T9050] sp0: Synchronizing with TNC [ 593.225407][ T9052] kvm [9051]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 593.241556][ T9052] kvm [9051]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 593.262547][ T9052] kvm [9051]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 593.348648][ T9067] mkiss: ax0: crc mode is auto. [ 593.932058][ T9052] kvm [9051]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 593.972794][ T9052] kvm [9051]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 598.179709][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 598.192055][ T9107] sp0: Synchronizing with TNC [ 603.825624][ T9160] sp0: Synchronizing with TNC [ 605.696751][ T9178] sp0: Synchronizing with TNC [ 605.862551][ T9172] [U] è [ 606.460919][ T9189] No such timeout policy "syz0" [ 610.225262][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 610.916462][ T9220] sp0: Synchronizing with TNC [ 611.457332][ T9218] [U] è [ 611.460340][ T9236] No such timeout policy "syz0" [ 613.539253][ T9263] fuse: Unknown parameter 'use00000000000000000000' [ 616.089818][ T9288] No such timeout policy "syz0" [ 616.891846][ T9293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 619.660979][ T9313] fuse: Unknown parameter 'use00000000000000000000' [ 622.144642][ T9331] No such timeout policy "syz0" [ 623.779394][ T9341] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1358'. [ 623.906367][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 624.021203][ T9348] fuse: Unknown parameter 'use00000000000000000000' [ 624.224532][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.706466][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.725384][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 624.782949][ T9353] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1359'. [ 625.682001][ T9347] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1359'. [ 626.102465][ T9362] sp0: Synchronizing with TNC [ 626.511288][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 626.719379][ T9369] sp1: Synchronizing with TNC [ 626.742582][ T9367] [U] è [ 627.230620][ T9380] No such timeout policy "syz0" [ 629.476595][ T9402] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1374'. [ 629.501889][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 629.576645][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 631.221640][ T9427] No such timeout policy "syz0" [ 632.611801][ T9425] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1382'. [ 632.629586][ T9424] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1382'. [ 633.558172][ T9438] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1386'. [ 633.719266][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 633.879842][ T9445] sp0: Synchronizing with TNC [ 634.696432][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 635.598596][ T9459] sp0: Synchronizing with TNC [ 635.848914][ T9456] [U] è [ 637.148579][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 637.172728][ T9474] sp0: Synchronizing with TNC [ 638.953088][ T9492] netlink: 'syz.0.1401': attribute type 2 has an invalid length. [ 638.986333][ T9494] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1402'. [ 639.016025][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 639.026188][ T9487] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1399'. [ 639.045157][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1402'. [ 639.456658][ T9504] fuse: Bad value for 'fd' [ 640.437937][ T9517] sp0: Synchronizing with TNC [ 641.081130][ T9515] [U] è [ 641.163832][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 641.793018][ T9535] syz.1.1411[9535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 641.793111][ T9535] syz.1.1411[9535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 641.805606][ T9535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1411'. [ 641.825994][ T9535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1411'. [ 643.217488][ T9541] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1414'. [ 643.280773][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 643.423824][ T9546] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1413'. [ 643.434680][ T9539] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1413'. [ 643.664808][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 645.341203][ T9568] sp0: Synchronizing with TNC [ 646.144237][ T9564] [U] è [ 647.362500][ T9594] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1429'. [ 647.509694][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 648.018622][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 648.022634][ T9602] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1427'. [ 648.037799][ T9603] netlink: 'syz.4.1430': attribute type 2 has an invalid length. [ 648.083471][ T9593] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1427'. [ 650.818211][ T9623] sp0: Synchronizing with TNC [ 650.952341][ T9621] [U] è [ 651.423269][ T9640] No such timeout policy "syz0" [ 652.165650][ T9643] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1442'. [ 652.210169][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 652.223818][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 652.274982][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'. [ 652.428616][ T9647] sp0: Synchronizing with TNC [ 654.347264][ T9663] netlink: 'syz.3.1446': attribute type 2 has an invalid length. [ 654.406439][ T9665] syz.1.1445[9665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.406530][ T9665] syz.1.1445[9665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.820004][ T9657] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1444'. [ 654.855657][ T9651] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1444'. [ 657.112587][ T9681] sp1: Synchronizing with TNC [ 657.854988][ T9679] [U] è [ 658.791995][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'. [ 658.861456][ T9697] sp0: Synchronizing with TNC [ 659.385051][ T9691] [U] è [ 662.925549][ T9721] sp0: Synchronizing with TNC [ 663.062218][ T9717] [U] è [ 663.813236][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 666.048580][ T9749] syz.4.1468[9749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.048818][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 666.075556][ T9749] syz.4.1468[9749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.124912][ T9759] sp0: Synchronizing with TNC [ 666.272542][ T9750] [U] è [ 666.631733][ T9765] netlink: 'syz.1.1472': attribute type 2 has an invalid length. [ 667.603073][ T9777] sp0: Synchronizing with TNC [ 669.858318][ T9772] [U] è [ 672.821047][ T9813] netlink: 'syz.0.1486': attribute type 2 has an invalid length. [ 673.118795][ T9818] sp0: Synchronizing with TNC [ 673.264718][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 673.277436][ T9820] sp1: Synchronizing with TNC [ 673.522173][ T9823] syz.3.1487[9823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 673.522267][ T9823] syz.3.1487[9823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 673.534826][ T9823] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1487'. [ 673.555236][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1487'. [ 673.757301][ T9826] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1489'. [ 673.778256][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 673.917215][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 675.081242][ T4217] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 675.212740][ T9840] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1491'. [ 675.449371][ T9838] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1491'. [ 675.504876][ T4217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.706245][ T4217] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 675.719523][ T4217] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 675.768401][ T4217] usb 4-1: Product: syz [ 675.784041][ T4217] usb 4-1: SerialNumber: syz [ 675.844600][ T4217] usb 4-1: config 0 descriptor?? [ 676.105864][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 676.168951][ T9853] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1496'. [ 676.203275][ T4217] usb 4-1: USB disconnect, device number 11 [ 677.296703][ T9864] sp0: Synchronizing with TNC [ 678.204372][ T9858] [U] è [ 679.207616][ T9874] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1503'. [ 679.372542][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 680.329770][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 680.341971][ T9883] sp0: Synchronizing with TNC [ 680.802813][ T9888] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 681.927458][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 681.939683][ T9901] netlink: 'syz.2.1507': attribute type 2 has an invalid length. [ 682.187094][ T4217] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 683.461693][ T4217] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.721846][ T4217] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 683.792843][ T4217] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 684.044061][ T4217] usb 1-1: Product: syz [ 684.048253][ T4217] usb 1-1: SerialNumber: syz [ 684.056207][ T4217] usb 1-1: config 0 descriptor?? [ 684.320885][ T4217] usb 1-1: USB disconnect, device number 10 [ 685.072634][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1516'. [ 685.142982][ T9926] sp0: Synchronizing with TNC [ 685.665474][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.672117][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.823153][ T9923] [U] è [ 687.913326][ T9921] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1515'. [ 688.484990][ T9934] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 689.191721][ T9936] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1519'. [ 689.250881][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 689.305094][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 689.861364][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 689.965595][ T9950] syz.3.1517[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.965784][ T9950] syz.3.1517[9950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.979044][ T9950] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1517'. [ 689.999653][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1517'. [ 690.954412][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 690.966687][ T9958] sp0: Synchronizing with TNC [ 691.797894][ T9966] sp0: Synchronizing with TNC [ 691.960645][ T6083] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 692.506343][ T9964] [U] è [ 693.951746][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 694.451099][ T9970] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1528'. [ 694.933176][ T9983] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 695.608882][ T9987] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1532'. [ 695.842916][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'. [ 697.274206][ T9993] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1533'. [ 697.312121][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 697.502242][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 699.610587][ T1107] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 699.833098][T10022] syz.3.1539[10022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 699.833189][T10022] syz.3.1539[10022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 699.855335][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 699.997472][T10022] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1539'. [ 700.030870][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.080881][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 700.173960][ T1107] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 700.193400][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 700.241249][ T1107] usb 2-1: Product: syz [ 700.255668][ T1107] usb 2-1: SerialNumber: syz [ 700.279673][ T1107] usb 2-1: config 0 descriptor?? [ 700.399112][T10029] sp0: Synchronizing with TNC [ 700.560737][ T1107] usb 2-1: USB disconnect, device number 11 [ 701.133988][T10027] [U] è [ 701.368906][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 701.442729][T10033] sp0: Synchronizing with TNC [ 702.126860][T10030] [U] è [ 703.726572][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 704.580699][T10045] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1548'. [ 705.069257][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 705.322599][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1548'. [ 706.594206][T10071] sp0: Synchronizing with TNC [ 706.630916][ T4181] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 707.022674][ T4181] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.201765][ T4181] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 707.255228][ T4181] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 707.305321][T10067] [U] è [ 707.387000][ T4181] usb 3-1: Product: syz [ 707.452326][ T4181] usb 3-1: SerialNumber: syz [ 707.602620][ T4181] usb 3-1: config 0 descriptor?? [ 707.924662][ T5643] usb 3-1: USB disconnect, device number 9 [ 708.416691][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 708.491329][T10079] sp0: Synchronizing with TNC [ 708.825416][T10073] [U] è [ 709.772776][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 711.453449][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 712.470900][T10111] No such timeout policy "syz0" [ 713.560847][T10116] syz.3.1561[10116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 713.560942][T10116] syz.3.1561[10116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 713.670613][ T4251] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 714.070673][ T4251] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.802856][ T4251] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 715.010595][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 715.069566][ T4251] usb 5-1: Product: syz [ 715.090604][ T4251] usb 5-1: SerialNumber: syz [ 715.273993][ T4251] usb 5-1: config 0 descriptor?? [ 715.486955][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 716.097533][ T4251] usb 5-1: USB disconnect, device number 7 [ 718.651865][T10168] No such timeout policy "syz0" [ 720.100613][ T5643] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 720.222961][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 720.350595][T10180] sp0: Synchronizing with TNC [ 720.750922][ T5643] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.910921][ T5643] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 720.930249][ T5643] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 720.961979][ T5643] usb 4-1: Product: syz [ 720.976480][ T5643] usb 4-1: SerialNumber: syz [ 720.998545][ T5643] usb 4-1: config 0 descriptor?? [ 721.244923][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 721.375354][ T4251] usb 4-1: USB disconnect, device number 12 [ 721.412812][T10190] sp1: Synchronizing with TNC [ 721.428446][T10188] [U] è [ 723.420879][T10217] No such timeout policy "syz0" [ 725.653315][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 725.772898][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 727.620616][ T4251] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 727.939024][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 728.121594][ T4251] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.861672][ T4251] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 728.872306][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 728.881556][ T4251] usb 5-1: Product: syz [ 728.885732][ T4251] usb 5-1: SerialNumber: syz [ 728.892509][ T4251] usb 5-1: config 0 descriptor?? [ 729.249258][ T21] usb 5-1: USB disconnect, device number 8 [ 729.936487][T10272] 9pnet: Insufficient options for proto=fd [ 730.077999][T10275] syz.1.1608[10275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 730.078093][T10275] syz.1.1608[10275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 730.093398][T10275] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1608'. [ 730.114379][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1608'. [ 731.300707][ T4251] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 731.373544][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 731.562798][ T4251] usb 3-1: Using ep0 maxpacket: 8 [ 731.683081][ T4251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.705466][ T4251] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 731.736332][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.779668][ T4251] usb 3-1: config 0 descriptor?? [ 732.052257][ T4251] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 733.684380][ T5643] usb 3-1: USB disconnect, device number 10 [ 733.802315][T10312] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1618'. [ 733.845145][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 733.950761][ T1107] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 734.371482][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.698544][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 734.851602][ T1107] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 734.861267][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 734.869434][ T1107] usb 4-1: Product: syz [ 734.874068][ T1107] usb 4-1: SerialNumber: syz [ 734.891007][ T1107] usb 4-1: config 0 descriptor?? [ 734.993243][T10325] syz.2.1622[10325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 734.993602][T10325] syz.2.1622[10325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 735.012380][T10325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1622'. [ 735.033659][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1622'. [ 735.159896][ T1107] usb 4-1: USB disconnect, device number 13 [ 735.977273][T10333] fuse: Unknown parameter 'use00000000000000000000' [ 737.681581][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 741.930601][ T4181] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 742.600746][ T4181] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.730774][ T4181] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 742.745167][ T4181] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 742.774502][ T4181] usb 1-1: Product: syz [ 742.788171][ T4181] usb 1-1: SerialNumber: syz [ 742.807920][ T4181] usb 1-1: config 0 descriptor?? [ 743.064934][ T21] usb 1-1: USB disconnect, device number 11 [ 743.496766][T10406] No such timeout policy "syz0" [ 744.227734][T10415] syz.0.1645[10415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 744.228222][T10415] syz.0.1645[10415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 744.247680][T10415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1645'. [ 744.268586][T10415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1645'. [ 745.223602][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 745.277686][T10414] sp0: Synchronizing with TNC [ 745.435384][T10413] [U] è [ 747.104790][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.105213][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.210733][ T4222] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 748.495174][T10453] No such timeout policy "syz0" [ 748.781914][ T4222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.010832][ T4222] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 749.031450][ T4222] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 749.201497][ T4222] usb 2-1: Product: syz [ 749.206120][ T4222] usb 2-1: SerialNumber: syz [ 749.221457][ T4222] usb 2-1: config 0 descriptor?? [ 749.482192][T10469] syz.4.1658[10469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.482500][T10469] syz.4.1658[10469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.499797][T10469] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1658'. [ 749.520791][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 750.120965][ T4181] usb 2-1: USB disconnect, device number 12 [ 751.887329][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 753.604153][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 754.912747][T10520] syz.2.1672[10520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.912833][T10520] syz.2.1672[10520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.929257][T10520] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1672'. [ 754.950049][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1672'. [ 756.150550][ T13] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 757.480842][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.126074][T10543] fuse: Unknown parameter 'use00000000000000000000' [ 758.940732][ T13] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 759.083952][ T13] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 759.104103][ T13] usb 1-1: config 0 descriptor?? [ 759.131429][ T13] usb 1-1: can't set config #0, error -71 [ 759.160896][ T13] usb 1-1: USB disconnect, device number 12 [ 759.252239][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 762.313790][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 762.375311][T10576] sp0: Synchronizing with TNC [ 762.397707][T10574] [U] è [ 762.592682][T10578] syz.4.1686[10578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 762.592781][T10578] syz.4.1686[10578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 762.630434][T10578] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1686'. [ 763.437610][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1686'. [ 764.431489][T10595] fuse: Unknown parameter 'use00000000000000000000' [ 766.056352][ T4222] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 766.591877][ T4222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.814982][ T4222] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 766.924753][ T4222] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 767.101401][ T4222] usb 2-1: Product: syz [ 767.105591][ T4222] usb 2-1: SerialNumber: syz [ 767.161525][T10612] sp0: Synchronizing with TNC [ 767.193436][T10611] [U] è [ 767.201954][ T4222] usb 2-1: config 0 descriptor?? [ 767.464921][ T7] usb 2-1: USB disconnect, device number 13 [ 769.067230][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 772.302191][T10658] sp0: Synchronizing with TNC [ 772.332952][T10657] [U] è [ 773.033817][ T21] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 773.557734][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 773.621361][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.633341][T10670] sp0: Synchronizing with TNC [ 773.686449][T10667] [U] è [ 773.819380][ T21] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 773.841582][ T21] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 773.867126][ T21] usb 4-1: Product: syz [ 774.269864][ T21] usb 4-1: SerialNumber: syz [ 774.333448][ T21] usb 4-1: config 0 descriptor?? [ 774.578269][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 774.590671][T10679] sp0: Synchronizing with TNC [ 774.651393][ T6184] usb 4-1: USB disconnect, device number 14 [ 776.090930][T10692] No such timeout policy "syz0" [ 778.084396][T10706] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 779.276966][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 780.454538][T10726] fuse: Unknown parameter 'use00000000000000000000' [ 786.926090][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 786.938779][T10767] sp0: Synchronizing with TNC [ 787.844165][T10778] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 788.603611][T10780] sp0: Synchronizing with TNC [ 791.055474][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 791.075944][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1747'. [ 791.378771][T10806] sp1: Synchronizing with TNC [ 791.386595][T10801] [U] è [ 792.638934][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 792.763507][T10819] No such timeout policy "syz0" [ 794.951549][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 797.113830][T10844] fuse: Unknown parameter 'grou00000000000000000000' [ 797.242963][T10848] loop6: detected capacity change from 0 to 524287999 [ 797.430960][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 797.442443][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 797.450924][ C0] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 798.031203][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 798.042437][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 798.900081][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 798.900117][ T26] audit: type=1326 audit(1741243563.588:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 798.972363][ T26] audit: type=1326 audit(1741243563.628:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 798.994531][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.037696][ T26] audit: type=1326 audit(1741243563.628:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 799.432568][T10868] No such timeout policy "syz0" [ 799.449281][ T26] audit: type=1326 audit(1741243563.638:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 799.486877][ T26] audit: type=1326 audit(1741243563.638:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 800.206300][ T26] audit: type=1326 audit(1741243563.638:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 800.228563][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.240566][ T26] audit: type=1326 audit(1741243563.638:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 800.262813][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.436803][ T26] audit: type=1326 audit(1741243563.638:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 800.551222][ T26] audit: type=1326 audit(1741243563.638:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 801.173806][ T26] audit: type=1326 audit(1741243563.638:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5253e23169 code=0x7fc00000 [ 801.196048][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.257641][T10884] fuse: Unknown parameter 'grou00000000000000000000' [ 801.889750][T10894] mkiss: ax0: crc mode is auto. [ 806.425048][T10933] fuse: Unknown parameter 'group_i00000000000000000000' [ 806.449268][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'. [ 807.417300][T10935] sp0: Synchronizing with TNC [ 807.465280][T10931] [U] è [ 807.876461][ T4217] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 809.558293][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.573490][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.850554][ T4217] usb 5-1: Using ep0 maxpacket: 16 [ 809.958143][T10965] syz.1.1791[10965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.958574][T10965] syz.1.1791[10965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.976494][T10965] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1791'. [ 810.590718][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1791'. [ 810.978150][T10970] tipc: Invalid UDP bearer configuration [ 810.978194][T10970] tipc: Enabling of bearer rejected, failed to enable media [ 811.018425][T10971] IPv4: Oversized IP packet from 172.20.20.24 [ 811.026311][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 811.033679][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 811.041184][ T4217] usb 5-1: device descriptor read/all, error -71 [ 811.080673][T10974] fuse: Unknown parameter 'group_i00000000000000000000' [ 811.240621][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 812.630678][T10993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.699863][T10993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.230574][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 814.604386][T11007] syz.1.1805[11007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.604479][T11007] syz.1.1805[11007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.617084][T11007] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1805'. [ 814.637654][T11007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1805'. [ 814.720750][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.310583][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.483391][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 815.510570][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 815.518704][T11014] fuse: Unknown parameter 'group_i00000000000000000000' [ 815.519664][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.616499][T11016] mkiss: ax0: crc mode is auto. [ 816.150394][ T7] usb 3-1: config 0 descriptor?? [ 816.624506][ T7] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 816.702233][ T7] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 816.904005][ T7] usb 3-1: USB disconnect, device number 11 [ 817.146103][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 817.155174][ T5643] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 817.430536][ T5643] usb 5-1: Using ep0 maxpacket: 8 [ 817.580933][ T5643] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.603748][ T5643] usb 5-1: config 0 has no interfaces? [ 817.710840][ T5643] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.739974][ T5643] usb 5-1: config 0 has no interfaces? [ 817.808521][T11056] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 817.861049][ T5643] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.932598][ T5643] usb 5-1: config 0 has no interfaces? [ 818.022714][T11059] mkiss: ax0: crc mode is auto. [ 818.131204][ T5643] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 818.307642][ T5643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.512752][ T5643] usb 5-1: Product: syz [ 818.614375][ T5643] usb 5-1: Manufacturer: syz [ 818.650516][ T5643] usb 5-1: SerialNumber: syz [ 818.691251][ T5643] usb 5-1: config 0 descriptor?? [ 818.957253][ T5643] usb 5-1: USB disconnect, device number 11 [ 819.440552][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 819.854199][T11078] mkiss: ax0: crc mode is auto. [ 819.980980][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.092487][ T7] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 820.315250][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.454806][ T7] usb 3-1: config 0 descriptor?? [ 820.531164][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'. [ 820.648083][T11086] sp0: Synchronizing with TNC [ 820.701059][T11082] [U] è [ 820.820662][T11092] program syz.3.1830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.965935][ T7] itetech 0003:258A:6A88.000D: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 821.198140][ T7] usb 3-1: USB disconnect, device number 12 [ 821.398639][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'. [ 821.666017][T11105] sp0: Synchronizing with TNC [ 826.127893][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 826.479927][T11194] mkiss: ax0: crc mode is auto. [ 829.926036][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1876'. [ 831.213273][T11258] mkiss: ax0: crc mode is auto. [ 832.410620][ T6083] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 832.660641][ T6083] usb 2-1: Using ep0 maxpacket: 8 [ 833.010955][ T6083] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 833.030289][ T6083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.199302][ T6083] usb 2-1: Product: syz [ 833.204009][ T6083] usb 2-1: Manufacturer: syz [ 833.208626][ T6083] usb 2-1: SerialNumber: syz [ 833.222059][ T6083] usb 2-1: config 0 descriptor?? [ 833.262643][ T6083] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 834.387454][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 834.420717][ T6083] gspca_sonixj: reg_w1 err -71 [ 834.425569][ T6083] sonixj: probe of 2-1:0.0 failed with error -71 [ 834.477444][ T6083] usb 2-1: USB disconnect, device number 14 [ 834.503982][T11297] sp0: Synchronizing with TNC [ 834.529363][T11293] [U] è [ 834.899509][T11305] mkiss: ax0: crc mode is auto. [ 836.571869][T11323] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 839.396583][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 839.546133][T11345] sp0: Synchronizing with TNC [ 839.566904][T11335] [U] è [ 839.634836][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 843.253215][T11391] syz.2.1915[11391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.253307][T11391] syz.2.1915[11391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.266391][T11391] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1915'. [ 843.286925][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 843.680612][T11164] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 843.936038][T11164] usb 3-1: Using ep0 maxpacket: 16 [ 844.067881][T11164] usb 3-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.088765][T11164] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.112012][T11164] usb 3-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 844.134822][T11164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.195506][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1919'. [ 844.296345][T11164] usb 3-1: config 0 descriptor?? [ 845.079111][T11403] sp0: Synchronizing with TNC [ 845.090161][T11402] [U] è [ 846.351914][T11164] logitech-djreceiver 0003:046D:C53F.000E: item fetching failed at offset 0/5 [ 846.362173][T11164] logitech-djreceiver 0003:046D:C53F.000E: logi_dj_probe: parse failed [ 846.375054][T11164] logitech-djreceiver: probe of 0003:046D:C53F.000E failed with error -22 [ 846.386570][T11164] usb 3-1: USB disconnect, device number 13 [ 846.602346][T11434] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 846.729638][T11436] syz.3.1927[11436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.729698][T11436] syz.3.1927[11436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.742277][T11436] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1927'. [ 846.762726][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1927'. [ 849.917331][T11164] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 852.165499][T11481] syz.3.1939[11481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.165591][T11481] syz.3.1939[11481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 852.177926][T11481] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1939'. [ 852.198433][T11481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1939'. [ 853.489690][T11492] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 856.795187][T11522] syz.1.1951[11522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 856.795279][T11522] syz.1.1951[11522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 856.807911][T11522] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1951'. [ 856.828465][T11522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1951'. [ 858.326363][T11541] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 862.276407][T11566] netlink: 'syz.4.1963': attribute type 7 has an invalid length. [ 863.275197][T11584] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 864.202699][T11571] syz.2.1964[11571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 864.202799][T11571] syz.2.1964[11571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 864.215331][T11571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1964'. [ 864.235849][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1964'. [ 864.490565][T11164] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 864.840653][T11164] usb 4-1: Using ep0 maxpacket: 8 [ 865.120948][T11164] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 865.153072][T11164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.176655][T11164] usb 4-1: Product: syz [ 865.188417][T11164] usb 4-1: Manufacturer: syz [ 865.201135][T11164] usb 4-1: SerialNumber: syz [ 865.234016][T11164] usb 4-1: config 0 descriptor?? [ 866.090750][T11164] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 866.141054][T11164] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 866.320910][T11164] usb 4-1: USB disconnect, device number 16 [ 868.143447][T11632] mmap: syz.2.1982 (11632) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 868.576904][T11630] syz.1.1981[11630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.576998][T11630] syz.1.1981[11630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.589702][T11630] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1981'. [ 868.610200][T11630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1981'. [ 868.942030][T11639] [ 868.944386][T11639] ====================================================== [ 868.951397][T11639] WARNING: possible circular locking dependency detected [ 868.958412][T11639] 5.15.178-syzkaller #0 Not tainted [ 868.963600][T11639] ------------------------------------------------------ [ 868.970614][T11639] syz.1.1985/11639 is trying to acquire lock: [ 868.976676][T11639] ffff88807dad8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 868.987762][T11639] [ 868.987762][T11639] but task is already holding lock: [ 868.995121][T11639] ffffffff8ded0008 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 869.004785][T11639] [ 869.004785][T11639] which lock already depends on the new lock. [ 869.004785][T11639] [ 869.015186][T11639] [ 869.015186][T11639] the existing dependency chain (in reverse order) is: [ 869.024305][T11639] [ 869.024305][T11639] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 869.032310][T11639] lock_acquire+0x1db/0x4f0 [ 869.037344][T11639] __mutex_lock_common+0x1da/0x25a0 [ 869.043071][T11639] mutex_lock_nested+0x17/0x20 [ 869.048367][T11639] rfkill_register+0x30/0x880 [ 869.053579][T11639] hci_register_dev+0x4dd/0xa50 [ 869.058966][T11639] vhci_create_device+0x310/0x590 [ 869.064523][T11639] vhci_write+0x382/0x430 [ 869.069576][T11639] vfs_write+0xacd/0xe50 [ 869.074346][T11639] ksys_write+0x1a2/0x2c0 [ 869.079240][T11639] do_syscall_64+0x3b/0xb0 [ 869.084194][T11639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 869.090622][T11639] [ 869.090622][T11639] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 869.098469][T11639] lock_acquire+0x1db/0x4f0 [ 869.103501][T11639] __mutex_lock_common+0x1da/0x25a0 [ 869.109233][T11639] mutex_lock_nested+0x17/0x20 [ 869.114524][T11639] vhci_send_frame+0x8a/0xf0 [ 869.119651][T11639] hci_send_frame+0x1af/0x2f0 [ 869.124857][T11639] hci_tx_work+0xb2e/0x1a30 [ 869.129888][T11639] process_one_work+0x8a1/0x10c0 [ 869.135359][T11639] worker_thread+0xaca/0x1280 [ 869.140568][T11639] kthread+0x3f6/0x4f0 [ 869.145182][T11639] ret_from_fork+0x1f/0x30 [ 869.150126][T11639] [ 869.150126][T11639] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 869.159340][T11639] lock_acquire+0x1db/0x4f0 [ 869.164374][T11639] __flush_work+0xeb/0x1a0 [ 869.169408][T11639] hci_dev_do_close+0x20a/0x1070 [ 869.174873][T11639] hci_dev_close+0xe5/0x190 [ 869.179905][T11639] sock_do_ioctl+0x11d/0x5a0 [ 869.185024][T11639] sock_ioctl+0x47f/0x770 [ 869.189882][T11639] __se_sys_ioctl+0xf1/0x160 [ 869.195000][T11639] do_syscall_64+0x3b/0xb0 [ 869.199942][T11639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 869.206367][T11639] [ 869.206367][T11639] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 869.214024][T11639] lock_acquire+0x1db/0x4f0 [ 869.219060][T11639] __mutex_lock_common+0x1da/0x25a0 [ 869.224790][T11639] mutex_lock_nested+0x17/0x20 [ 869.230080][T11639] bg_scan_update+0xa1/0x4a0 [ 869.235195][T11639] process_one_work+0x8a1/0x10c0 [ 869.240657][T11639] worker_thread+0xaca/0x1280 [ 869.245863][T11639] kthread+0x3f6/0x4f0 [ 869.250501][T11639] ret_from_fork+0x1f/0x30 [ 869.255462][T11639] [ 869.255462][T11639] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 869.265290][T11639] validate_chain+0x1649/0x5930 [ 869.270680][T11639] __lock_acquire+0x1295/0x1ff0 [ 869.276062][T11639] lock_acquire+0x1db/0x4f0 [ 869.281092][T11639] __flush_work+0xeb/0x1a0 [ 869.286034][T11639] __cancel_work_timer+0x519/0x6a0 [ 869.291674][T11639] hci_request_cancel_all+0xcb/0x300 [ 869.297483][T11639] hci_dev_do_close+0x51/0x1070 [ 869.302868][T11639] hci_rfkill_set_block+0x114/0x1a0 [ 869.308594][T11639] rfkill_set_block+0x1e7/0x430 [ 869.313980][T11639] rfkill_fop_write+0x5b7/0x790 [ 869.319354][T11639] vfs_write+0x30c/0xe50 [ 869.324120][T11639] ksys_write+0x1a2/0x2c0 [ 869.328977][T11639] do_syscall_64+0x3b/0xb0 [ 869.333915][T11639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 869.340339][T11639] [ 869.340339][T11639] other info that might help us debug this: [ 869.340339][T11639] [ 869.350558][T11639] Chain exists of: [ 869.350558][T11639] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 869.350558][T11639] [ 869.366276][T11639] Possible unsafe locking scenario: [ 869.366276][T11639] [ 869.373708][T11639] CPU0 CPU1 [ 869.379055][T11639] ---- ---- [ 869.384398][T11639] lock(rfkill_global_mutex); [ 869.389144][T11639] lock(&data->open_mutex); [ 869.396233][T11639] lock(rfkill_global_mutex); [ 869.403500][T11639] lock((work_completion)(&hdev->bg_scan_update)); [ 869.410081][T11639] [ 869.410081][T11639] *** DEADLOCK *** [ 869.410081][T11639] [ 869.418217][T11639] 1 lock held by syz.1.1985/11639: [ 869.423401][T11639] #0: ffffffff8ded0008 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 869.433489][T11639] [ 869.433489][T11639] stack backtrace: [ 869.439355][T11639] CPU: 1 PID: 11639 Comm: syz.1.1985 Not tainted 5.15.178-syzkaller #0 [ 869.447574][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 869.457616][T11639] Call Trace: [ 869.460877][T11639] [ 869.463792][T11639] dump_stack_lvl+0x1e3/0x2d0 [ 869.468465][T11639] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 869.474081][T11639] ? print_circular_bug+0x12b/0x1a0 [ 869.479267][T11639] check_noncircular+0x2f8/0x3b0 [ 869.484191][T11639] ? add_chain_block+0x850/0x850 [ 869.489108][T11639] ? lockdep_lock+0x11f/0x2a0 [ 869.493768][T11639] validate_chain+0x1649/0x5930 [ 869.498611][T11639] ? __lock_acquire+0x1295/0x1ff0 [ 869.503624][T11639] ? reacquire_held_locks+0x660/0x660 [ 869.508981][T11639] ? mark_lock+0x98/0x340 [ 869.513290][T11639] ? __lock_acquire+0x1295/0x1ff0 [ 869.518300][T11639] ? mark_lock+0x98/0x340 [ 869.522611][T11639] ? __lock_acquire+0x1295/0x1ff0 [ 869.527618][T11639] ? mark_lock+0x98/0x340 [ 869.531927][T11639] __lock_acquire+0x1295/0x1ff0 [ 869.536768][T11639] lock_acquire+0x1db/0x4f0 [ 869.541253][T11639] ? __flush_work+0xcf/0x1a0 [ 869.545831][T11639] ? rcu_lock_release+0x5/0x20 [ 869.550583][T11639] ? read_lock_is_recursive+0x10/0x10 [ 869.555941][T11639] ? start_flush_work+0x776/0x820 [ 869.562348][T11639] __flush_work+0xeb/0x1a0 [ 869.566769][T11639] ? __flush_work+0xcf/0x1a0 [ 869.571349][T11639] ? flush_work+0x20/0x20 [ 869.575672][T11639] ? print_irqtrace_events+0x210/0x210 [ 869.581119][T11639] ? lock_timer_base+0x260/0x260 [ 869.586049][T11639] ? __cancel_work_timer+0x467/0x6a0 [ 869.591323][T11639] __cancel_work_timer+0x519/0x6a0 [ 869.596430][T11639] ? cancel_work_sync+0x20/0x20 [ 869.601268][T11639] ? lockdep_hardirqs_on+0x94/0x130 [ 869.606451][T11639] ? __cancel_work+0x2ef/0x380 [ 869.611199][T11639] ? cancel_work+0x20/0x20 [ 869.615598][T11639] ? print_irqtrace_events+0x210/0x210 [ 869.621039][T11639] hci_request_cancel_all+0xcb/0x300 [ 869.626313][T11639] hci_dev_do_close+0x51/0x1070 [ 869.631413][T11639] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 869.637289][T11639] ? _raw_spin_unlock+0x40/0x40 [ 869.642121][T11639] ? kmem_cache_alloc_trace+0x143/0x290 [ 869.647748][T11639] hci_rfkill_set_block+0x114/0x1a0 [ 869.652931][T11639] ? rcu_lock_release+0x20/0x20 [ 869.657760][T11639] rfkill_set_block+0x1e7/0x430 [ 869.662597][T11639] rfkill_fop_write+0x5b7/0x790 [ 869.667430][T11639] ? rfkill_fop_read+0x470/0x470 [ 869.672351][T11639] ? fsnotify_perm+0x64/0x590 [ 869.677018][T11639] ? security_file_permission+0x75/0xa0 [ 869.682545][T11639] ? rfkill_fop_read+0x470/0x470 [ 869.687472][T11639] vfs_write+0x30c/0xe50 [ 869.691701][T11639] ? file_end_write+0x250/0x250 [ 869.696539][T11639] ? __fget_files+0x413/0x480 [ 869.701207][T11639] ? __fdget_pos+0x1e9/0x380 [ 869.705777][T11639] ? ksys_write+0x77/0x2c0 [ 869.710175][T11639] ksys_write+0x1a2/0x2c0 [ 869.714489][T11639] ? print_irqtrace_events+0x210/0x210 [ 869.719930][T11639] ? __ia32_sys_read+0x80/0x80 [ 869.724680][T11639] ? syscall_enter_from_user_mode+0x2e/0x240 [ 869.730654][T11639] ? lockdep_hardirqs_on+0x94/0x130 [ 869.735849][T11639] ? syscall_enter_from_user_mode+0x2e/0x240 [ 869.741831][T11639] do_syscall_64+0x3b/0xb0 [ 869.746250][T11639] ? clear_bhb_loop+0x15/0x70 [ 869.750911][T11639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 869.756793][T11639] RIP: 0033:0x7fc730e2a169 [ 869.761192][T11639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.780801][T11639] RSP: 002b:00007fc72ec93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 869.789199][T11639] RAX: ffffffffffffffda RBX: 00007fc731042fa0 RCX: 00007fc730e2a169 [ 869.797153][T11639] RDX: 0000000000000008 RSI: 0000400000000080 RDI: 0000000000000003 [ 869.805119][T11639] RBP: 00007fc730eab2a0 R08: 0000000000000000 R09: 0000000000000000 [ 869.813285][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.821251][T11639] R13: 0000000000000000 R14: 00007fc731042fa0 R15: 00007ffc76905388 [ 869.829220][T11639] [ 870.212353][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.218654][ T1420] ieee802154 phy1 wpan1: encryption failed: -22