last executing test programs: 4.797307005s ago: executing program 3 (id=3125): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @exit, @alu={0x7, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00'}, 0x18) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}]}, 0x3c}}, 0x10) 4.54404108s ago: executing program 3 (id=3127): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x17) openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x4}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) write$binfmt_misc(r2, &(0x7f00000002c0)={'syz1'}, 0x4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f0000000100)=0xc) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={r6, 0xfffff000}, 0xc) 2.593805779s ago: executing program 3 (id=3142): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000004fc0)={0x0}}, 0x0) 2.436996884s ago: executing program 3 (id=3144): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close(r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0x10}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 2.127789322s ago: executing program 4 (id=3146): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x4044000) 1.833285632s ago: executing program 4 (id=3152): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x17) openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x4}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) write$binfmt_misc(r2, &(0x7f00000002c0)={'syz1'}, 0x4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f0000000100)=0xc) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={r6, 0xfffff000}, 0xc) 1.636214056s ago: executing program 1 (id=3155): rseq(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 1.616195041s ago: executing program 2 (id=3156): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.476538683s ago: executing program 1 (id=3157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x40) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r6}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@link_local, @empty, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}, 0x0) 1.475670707s ago: executing program 0 (id=3158): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0xa25, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1.365697361s ago: executing program 3 (id=3159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.361965804s ago: executing program 2 (id=3160): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @exit, @alu={0x7, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}]}, 0x3c}}, 0x10) 1.188537744s ago: executing program 2 (id=3161): r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x1210c1}, 0x18) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 1.156516284s ago: executing program 3 (id=3162): io_uring_setup(0x497c, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="c7", 0x1}], 0x1}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) creat(0x0, 0x1de) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7, 0x2c, 0x0, @remote, @mcast2, {[@routing], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300, &(0x7f0000000300)}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74}, @ramp}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x103002) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.135690038s ago: executing program 0 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x7, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.10948643s ago: executing program 2 (id=3164): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 1.020621661s ago: executing program 2 (id=3165): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x80d804}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_WRITE(r2, &(0x7f00000000c0)={0x18}, 0x200000d8) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 845.834827ms ago: executing program 0 (id=3166): chroot(&(0x7f0000000100)='.\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 727.589912ms ago: executing program 0 (id=3167): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) setresuid(0xee01, 0xee00, 0x0) r1 = io_uring_setup(0x75e3, &(0x7f0000000280)) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) close(r0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) 514.9628ms ago: executing program 1 (id=3168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 444.790205ms ago: executing program 4 (id=3169): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x81) 432.800603ms ago: executing program 0 (id=3170): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 295.336641ms ago: executing program 4 (id=3171): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @exit, @alu={0x7, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}]}, 0x3c}}, 0x10) 285.670412ms ago: executing program 1 (id=3172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 212.008026ms ago: executing program 0 (id=3173): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000540)=@req3={0x1000, 0x1000, 0x1000, 0x1000}, 0x1c) 148.684976ms ago: executing program 1 (id=3174): r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) timerfd_settime(r0, 0x3, &(0x7f0000003a80)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 129.448721ms ago: executing program 4 (id=3175): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 54.742886ms ago: executing program 4 (id=3176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x7, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 24.041671ms ago: executing program 2 (id=3177): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4000009b}]}) 0s ago: executing program 1 (id=3178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r4}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@link_local, @empty, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.2.1659'. [ 232.952823][ T9644] 9pnet_fd: Insufficient options for proto=fd [ 233.337267][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1672'. [ 233.338915][ T9671] fuse: Bad value for 'fd' [ 233.384027][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1675'. [ 233.467121][ T29] audit: type=1326 audit(1719581783.405:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.1676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a22175b29 code=0x0 [ 233.987280][ T9696] syz.0.1683[9696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.987452][ T9696] syz.0.1683[9696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.086634][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'. [ 234.263611][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1689'. [ 234.308352][ T5098] Bluetooth: hci4: command tx timeout [ 234.455583][ T9720] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 234.530694][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 234.697990][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1695'. [ 234.702426][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'. [ 234.942577][ T9746] blktrace: Concurrent blktraces are not allowed on sg0 [ 235.056365][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 235.166666][ T29] audit: type=1326 audit(1719581785.105:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9758 comm="syz.3.1707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5860575b29 code=0x0 [ 235.295950][ T9767] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 235.389277][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'. [ 236.029524][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 236.067689][ T9804] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 236.887436][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 237.319139][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 237.369119][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 237.652496][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 237.803028][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 237.845138][ T9843] team0: entered promiscuous mode [ 237.857772][ T9843] team_slave_1: entered promiscuous mode [ 237.860329][ T9842] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 237.877491][ T9841] team0: left promiscuous mode [ 237.889904][ T9841] team_slave_1: left promiscuous mode [ 237.952805][ T9846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1736'. [ 238.504259][ T9866] : renamed from bond0 (while UP) [ 238.523207][ T29] audit: type=1326 audit(1719581788.465:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.4.1746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a22175b29 code=0x0 [ 238.553655][ T29] audit: type=1326 audit(1719581788.465:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9869 comm="syz.3.1747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5860575b29 code=0x0 [ 238.603628][ T9873] netlink: 'syz.3.1747': attribute type 10 has an invalid length. [ 238.673956][ T9873] team0: Failed to send options change via netlink (err -105) [ 238.700474][ T9873] team0: Port device netdevsim0 added [ 238.732428][ T9] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 238.755738][ T9881] bond_slave_0: entered promiscuous mode [ 238.762712][ T9881] bond_slave_1: entered promiscuous mode [ 238.770404][ T9881] macsec1: entered promiscuous mode [ 238.778577][ T9881] : entered promiscuous mode [ 238.784330][ T9881] macsec1: entered allmulticast mode [ 238.799366][ T9881] : entered allmulticast mode [ 238.804596][ T9881] bond_slave_0: entered allmulticast mode [ 238.822095][ T9881] bond_slave_1: entered allmulticast mode [ 238.837281][ T9881] : left allmulticast mode [ 238.844724][ T9881] bond_slave_0: left allmulticast mode [ 238.856956][ T9881] bond_slave_1: left allmulticast mode [ 238.857088][ T9882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1749'. [ 238.862756][ T9881] : left promiscuous mode [ 238.863375][ T9881] bond_slave_0: left promiscuous mode [ 238.882713][ T9881] bond_slave_1: left promiscuous mode [ 239.349605][ T9903] fuse: Bad value for 'rootmode' [ 240.172027][ T29] audit: type=1326 audit(1719581790.115:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.4.1768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a22175b29 code=0x0 [ 240.225795][ T9944] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 240.242341][ T9940] blktrace: Concurrent blktraces are not allowed on sg0 [ 240.289318][ T9944] team0: Failed to send options change via netlink (err -105) [ 240.315759][ T9944] team0: Port device netdevsim0 added [ 240.334290][ T5141] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 240.375749][ T29] audit: type=1804 audit(1719581790.315:610): pid=9950 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1771" name="/root/syzkaller.e2C1fW/20/file0" dev="sda1" ino=1980 res=1 errno=0 [ 240.795718][ T9960] __nla_validate_parse: 3 callbacks suppressed [ 240.795739][ T9960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1774'. [ 240.965102][ T9967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1776'. [ 241.122321][ T9974] fuse: Unknown parameter 'use00000000000000000000' [ 241.143956][ T9971] blktrace: Concurrent blktraces are not allowed on sg0 [ 241.436394][ T9985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1786'. [ 241.453750][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 242.063299][T10011] fuse: Unknown parameter 'use00000000000000000000' [ 242.245404][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 242.309390][T10021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1798'. [ 242.311371][T10018] team0: entered promiscuous mode [ 242.354249][T10018] team_slave_1: entered promiscuous mode [ 242.367857][T10018] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 242.386180][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1800'. [ 242.439017][T10017] team0: left promiscuous mode [ 242.443853][T10017] team_slave_1: left promiscuous mode [ 242.487854][T10017] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 242.664565][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1804'. [ 242.754776][T10046] fuse: Unknown parameter 'use00000000000000000000' [ 242.990473][T10060] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.047466][T10055] blktrace: Concurrent blktraces are not allowed on sg0 [ 243.219207][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 243.252158][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1816'. [ 243.296499][ T5098] Bluetooth: hci2: unknown advertising packet type: 0xbc [ 243.296543][ T5098] Bluetooth: hci2: unknown advertising packet type: 0xf3 [ 243.304106][ T5098] Bluetooth: hci2: unknown advertising packet type: 0xad [ 243.311484][ T5098] Bluetooth: hci2: unknown advertising packet type: 0xb5 [ 243.318759][ T5098] Bluetooth: hci2: unknown advertising packet type: 0x4e [ 243.650180][ T5098] Bluetooth: hci5: unexpected event 0x09 length: 10 > 3 [ 243.665106][ T5098] Bluetooth: hci5: SCO packet for unknown connection handle 1039 [ 243.819797][T10085] fuse: Unknown parameter 'user_i00000000000000000000' [ 244.205991][T10099] blktrace: Concurrent blktraces are not allowed on sg0 [ 244.293631][T10105] team0: entered promiscuous mode [ 244.305737][T10105] team_slave_0: entered promiscuous mode [ 244.322752][T10105] team_slave_1: entered promiscuous mode [ 244.336998][T10105] team_slave_0: entered allmulticast mode [ 244.384727][T10105] team0: Port device team_slave_0 removed [ 244.416078][T10103] team0: left promiscuous mode [ 244.427049][T10103] team_slave_1: left promiscuous mode [ 244.897474][T10119] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 245.253187][T10131] team0: entered promiscuous mode [ 245.265941][T10131] team_slave_1: entered promiscuous mode [ 245.284370][T10131] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 245.304534][T10130] team0: left promiscuous mode [ 245.317629][T10130] team_slave_1: left promiscuous mode [ 245.330827][T10130] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 245.353414][ T5098] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 245.364679][ T5098] Bluetooth: Unexpected start frame (len 16) [ 246.537205][T10163] __nla_validate_parse: 4 callbacks suppressed [ 246.537229][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 246.595941][T10165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1854'. [ 246.760701][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1856'. [ 246.773859][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1856'. [ 246.816417][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 246.903545][ T29] audit: type=1326 audit(1719581796.845:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.1.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 246.927381][ T29] audit: type=1326 audit(1719581796.875:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.1.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 246.965289][ T29] audit: type=1326 audit(1719581796.875:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.1.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 247.017365][ T29] audit: type=1326 audit(1719581796.875:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10179 comm="syz.1.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 247.357933][ T5098] Bluetooth: hci2: command tx timeout [ 247.532651][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 247.598397][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1867'. [ 247.800236][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 247.815665][T10210] fuse: Unknown parameter 'user_id00000000000000000000' [ 247.932510][T10213] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 248.161614][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'. [ 248.202582][T10223] team0: entered promiscuous mode [ 248.227916][T10223] team_slave_1: entered promiscuous mode [ 248.243227][T10223] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 248.280294][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 248.288351][T10220] team0: left promiscuous mode [ 248.314558][T10220] team_slave_1: left promiscuous mode [ 248.328060][T10220] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 248.757970][ T5141] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 248.962560][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 248.964107][T10252] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 248.980810][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.002370][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.038913][ T5141] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.057631][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.085372][ T5141] usb 3-1: config 0 descriptor?? [ 249.158241][T10258] team0: entered promiscuous mode [ 249.176409][T10258] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 249.180202][T10262] overlayfs: failed to resolve './file0': -2 [ 249.212486][T10257] team0: left promiscuous mode [ 249.237833][T10257] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 249.544055][ T5141] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 249.577942][ T5141] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 249.607259][ T5141] microsoft 0003:045E:07DA.0003: no inputs found [ 249.627755][ T5141] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 249.859336][ T5141] usb 3-1: USB disconnect, device number 5 [ 249.986365][ T29] audit: type=1804 audit(1719581799.925:615): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1897" name="/root/syzkaller.63q6KU/211/bus" dev="sda1" ino=1979 res=1 errno=0 [ 250.118005][ T5098] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 250.129323][ T5098] Bluetooth: Unexpected start frame (len 16) [ 250.147898][ T5098] Bluetooth: hci4: command tx timeout [ 250.183890][T10293] overlayfs: failed to resolve './file0': -2 [ 250.601514][T10306] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 1, id = 0 [ 250.609252][T10305] IPv6: NLM_F_REPLACE set, but no existing node found! [ 250.934589][ T29] audit: type=1800 audit(1719581800.875:616): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1906" name="bus" dev="overlay" ino=1955 res=0 errno=0 [ 251.166913][T10322] overlayfs: failed to resolve './file0': -2 [ 251.490662][ T29] audit: type=1326 audit(1719581801.435:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10334 comm="syz.0.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44e4775b29 code=0x0 [ 251.575350][T10339] netlink: 'syz.0.1917': attribute type 10 has an invalid length. [ 252.092269][T10360] __nla_validate_parse: 10 callbacks suppressed [ 252.092293][T10360] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1926'. [ 252.137934][T10360] lo: entered promiscuous mode [ 252.155799][T10360] lo: entered allmulticast mode [ 252.228044][ T5098] Bluetooth: hci4: command tx timeout [ 252.938002][ T29] audit: type=1326 audit(1719581802.865:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10397 comm="syz.3.1940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5860575b29 code=0x0 [ 253.046645][ T29] audit: type=1800 audit(1719581802.985:619): pid=10400 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1943" name="bus" dev="overlay" ino=1984 res=0 errno=0 [ 253.056889][T10406] syz.0.1941[10406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.082845][T10406] syz.0.1941[10406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.095191][T10405] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 253.496398][T10411] syzkaller0: entered promiscuous mode [ 253.527861][T10411] syzkaller0: entered allmulticast mode [ 253.729108][ T29] audit: type=1804 audit(1719581803.675:620): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1952" name="/root/syzkaller.63q6KU/225/file0" dev="sda1" ino=1966 res=1 errno=0 [ 254.147092][ T5098] Bluetooth: hci0: unexpected event 0x09 length: 10 > 3 [ 254.147262][ T5098] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 254.805054][T10463] fuse: Bad value for 'group_id' [ 254.820829][ T29] audit: type=1804 audit(1719581804.765:621): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1961" name="/root/syzkaller.9WkC3Z/405/file0" dev="sda1" ino=1980 res=1 errno=0 [ 255.160195][ T29] audit: type=1326 audit(1719581805.105:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10469 comm="syz.4.1964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a22175b29 code=0x0 [ 255.995581][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.345385][T10452] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 256.378202][T10471] netlink: 'syz.4.1964': attribute type 10 has an invalid length. [ 256.514844][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 256.538285][ T29] audit: type=1800 audit(1719581806.475:623): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1967" name="bus" dev="overlay" ino=1952 res=0 errno=0 [ 256.620089][ T29] audit: type=1804 audit(1719581806.525:624): pid=10476 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1966" name="/root/syzkaller.9klgzE/441/file0" dev="sda1" ino=1975 res=1 errno=0 [ 257.629457][T10492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1972'. [ 257.743995][ T29] audit: type=1326 audit(1719581807.685:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.3.1978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5860575b29 code=0x0 [ 257.841377][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 257.864642][T10515] netlink: 'syz.3.1978': attribute type 10 has an invalid length. [ 257.911572][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'. [ 257.999530][ T29] audit: type=1800 audit(1719581807.945:626): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1980" name="bus" dev="overlay" ino=1985 res=0 errno=0 [ 258.199078][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 258.217340][T10527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1984'. [ 258.292993][ T29] audit: type=1804 audit(1719581808.235:627): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1983" name="/root/syzkaller.63q6KU/232/file0" dev="sda1" ino=1968 res=1 errno=0 [ 259.218645][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1990'. [ 259.456600][T10560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1991'. [ 259.493521][ T29] audit: type=1800 audit(1719581809.435:628): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1994" name="bus" dev="overlay" ino=1986 res=0 errno=0 [ 260.016054][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 260.134837][ T29] audit: type=1804 audit(1719581810.075:629): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2003" name="/root/syzkaller.dlRwZu/397/file0" dev="sda1" ino=1980 res=1 errno=0 [ 260.258777][T10589] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2004'. [ 260.327983][ T29] audit: type=1800 audit(1719581810.265:630): pid=10591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2005" name="bus" dev="overlay" ino=1987 res=0 errno=0 [ 260.628714][ T5141] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 260.680195][T10604] team0: entered promiscuous mode [ 260.685849][T10604] team_slave_1: entered promiscuous mode [ 260.704934][T10604] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 260.724792][T10603] team0: left promiscuous mode [ 260.733243][T10603] team_slave_1: left promiscuous mode [ 260.744731][T10603] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 260.847109][ T5141] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 260.859468][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.901069][ T5141] usb 2-1: config 0 descriptor?? [ 260.924864][ T5141] cp210x 2-1:0.0: cp210x converter detected [ 260.966937][ T29] audit: type=1804 audit(1719581810.905:631): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2017" name="/root/syzkaller.9klgzE/450/file0" dev="sda1" ino=1981 res=1 errno=0 [ 261.013465][T10618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2015'. [ 261.131015][ T5141] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 261.146574][ T5141] cp210x 2-1:0.0: querying part number failed [ 261.161324][ T5141] usb 2-1: cp210x converter now attached to ttyUSB0 [ 261.333002][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.342286][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.804356][ T5098] Bluetooth: hci4: unknown advertising packet type: 0x34 [ 261.804392][ T5098] Bluetooth: hci4: unknown advertising packet type: 0x35 [ 261.814869][T10656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.823281][ T29] audit: type=1804 audit(1719581811.775:632): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.2032" name="/root/syzkaller.63q6KU/247/file0" dev="sda1" ino=1980 res=1 errno=0 [ 261.853273][T10656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.800554][T10685] __nla_validate_parse: 1 callbacks suppressed [ 262.800580][T10685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2043'. [ 262.877007][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.888558][ T5087] syz-executor (5087) used greatest stack depth: 18448 bytes left [ 262.903791][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.913326][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.922453][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.932325][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 262.941316][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.137688][ T5143] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 263.281883][ T5091] usb 2-1: USB disconnect, device number 7 [ 263.314238][ T5091] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.327756][ T5143] usb 5-1: Using ep0 maxpacket: 8 [ 263.344129][ T5143] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 263.351972][T10687] chnl_net:caif_netlink_parms(): no params data found [ 263.356160][ T5143] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 263.364640][ T5091] cp210x 2-1:0.0: device disconnected [ 263.384836][ T5143] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.409343][ T5143] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.428733][ T5143] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.439094][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.143886][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2046'. [ 264.350959][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2055'. [ 264.366051][ T5143] usb 5-1: GET_CAPABILITIES returned 0 [ 264.382431][ T5143] usbtmc 5-1:16.0: can't read capabilities [ 264.613037][T10687] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.635925][T10687] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.650461][T10687] bridge_slave_0: entered allmulticast mode [ 264.667047][T10687] bridge_slave_0: entered promiscuous mode [ 264.703806][T10687] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.719507][ T5091] usb 5-1: USB disconnect, device number 5 [ 264.722770][T10687] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.745937][T10687] bridge_slave_1: entered allmulticast mode [ 264.768753][T10687] bridge_slave_1: entered promiscuous mode [ 264.875188][T10687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.892782][T10687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.913965][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'. [ 264.964038][T10687] team0: Port device team_slave_0 added [ 264.984520][T10687] team0: Port device team_slave_1 added [ 265.028348][ T5098] Bluetooth: hci1: command tx timeout [ 265.050943][T10687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.058792][T10687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.085843][T10687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.105758][T10687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.133646][T10687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.178811][T10687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.319425][T10687] hsr_slave_0: entered promiscuous mode [ 265.329964][T10687] hsr_slave_1: entered promiscuous mode [ 265.342882][T10687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.365790][T10687] Cannot create hsr debugfs directory [ 266.290755][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 266.430421][T10767] syz.0.2071[10767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.430592][T10767] syz.0.2071[10767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.924511][T10687] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.109182][ T5098] Bluetooth: hci1: command tx timeout [ 267.605109][T10687] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.966782][T10687] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.257187][T10687] team0: Port device netdevsim0 removed [ 268.282018][T10687] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.397696][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 268.568589][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 268.601376][T10687] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.617867][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 268.632506][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 268.640725][T10687] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.648167][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 268.669132][ T5098] Bluetooth: hci0: unexpected event 0x09 length: 10 > 3 [ 268.670548][ T5098] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 268.677690][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.705620][T10687] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.727763][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.739246][T10810] syz.0.2084[10810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.740907][T10810] syz.0.2084[10810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.760414][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.766311][T10687] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.792506][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.108035][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'. [ 269.187973][ T5098] Bluetooth: hci1: command tx timeout [ 269.662242][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 269.670044][ T9] usbtmc 2-1:16.0: can't read capabilities [ 269.888366][T10687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.902381][ T5143] usb 2-1: USB disconnect, device number 8 [ 269.963348][T10687] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.006804][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.014084][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.035319][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 270.059808][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.067070][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.129818][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 270.165339][T10687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.616158][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 270.754489][T10687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.834952][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 271.087171][T10687] veth0_vlan: entered promiscuous mode [ 271.138587][T10687] veth1_vlan: entered promiscuous mode [ 271.267910][ T5098] Bluetooth: hci1: command tx timeout [ 271.327949][T10687] veth0_macvtap: entered promiscuous mode [ 271.349036][ T29] audit: type=1326 audit(1719581821.265:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e4775b29 code=0x7ffc0000 [ 271.382345][T10687] veth1_macvtap: entered promiscuous mode [ 271.455843][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.477482][ T29] audit: type=1326 audit(1719581821.265:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e4775b29 code=0x7ffc0000 [ 271.508152][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.525360][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.567893][ T29] audit: type=1326 audit(1719581821.265:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44e4775b29 code=0x7ffc0000 [ 271.591272][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.606630][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.618793][ T29] audit: type=1326 audit(1719581821.265:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e4775b29 code=0x7ffc0000 [ 271.642183][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.653390][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.664438][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.684999][ T29] audit: type=1326 audit(1719581821.265:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44e4775b29 code=0x7ffc0000 [ 271.711079][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.721911][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.738063][ T29] audit: type=1326 audit(1719581821.275:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e4775b29 code=0x7ffc0000 [ 271.764936][ T5098] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 271.777650][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.788442][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.802028][T10687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.814658][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.825563][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.862270][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.938907][ T29] audit: type=1326 audit(1719581821.275:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44e476cba7 code=0x7ffc0000 [ 271.951196][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.004196][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.019770][ T29] audit: type=1326 audit(1719581821.275:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44e4711559 code=0x7ffc0000 [ 272.057419][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.078607][ T29] audit: type=1326 audit(1719581821.275:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44e476cba7 code=0x7ffc0000 [ 272.135598][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.177161][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.188017][ T29] audit: type=1326 audit(1719581821.275:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44e4711559 code=0x7ffc0000 [ 272.211166][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.222297][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.232707][T10687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.243385][T10687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.259746][T10687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.289639][T10687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.315070][T10687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.325414][T10687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.356882][T10687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.452938][T10897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2106'. [ 272.741521][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.763934][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.847328][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.874295][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.747793][ T5098] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.971217][T10931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2119'. [ 273.998103][T10933] Cannot find add_set index 0 as target [ 274.586820][T10953] fuse: Bad value for 'fd' [ 274.778874][ T5098] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 274.789170][ T5098] Bluetooth: Unexpected start frame (len 16) [ 276.528099][T10987] fuse: Bad value for 'fd' [ 276.787798][ T5098] Bluetooth: hci4: command tx timeout [ 276.968282][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 276.968306][ T29] audit: type=1800 audit(1719581826.915:680): pid=11001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2147" name="file2" dev="sda1" ino=1952 res=0 errno=0 [ 277.910358][ T29] audit: type=1326 audit(1719581827.855:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.3.2163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5860575b29 code=0x0 [ 277.963854][ T29] audit: type=1326 audit(1719581827.905:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.3.2163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f5860575b29 code=0x0 [ 278.031491][T11031] syzkaller0: entered promiscuous mode [ 278.053905][T11031] syzkaller0: entered allmulticast mode [ 283.289068][ T5143] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 283.497676][ T5143] usb 5-1: Using ep0 maxpacket: 8 [ 283.513796][ T5143] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 283.564208][ T5143] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 283.585831][ T5143] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.613231][ T5143] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.636543][ T5143] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.653658][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.734254][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2182'. [ 283.985909][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 284.072905][ T12] bridge_slave_1: left allmulticast mode [ 284.101302][ T12] bridge_slave_1: left promiscuous mode [ 284.133841][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.139218][ T5143] usb 5-1: GET_CAPABILITIES returned 0 [ 284.167007][ T5143] usbtmc 5-1:16.0: can't read capabilities [ 284.201018][ T12] bridge_slave_0: left allmulticast mode [ 284.215541][ T12] bridge_slave_0: left promiscuous mode [ 284.225006][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.236127][ T29] audit: type=1326 audit(1719581834.175:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11099 comm="syz.2.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 284.270150][ T29] audit: type=1326 audit(1719581834.175:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11099 comm="syz.2.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 284.319908][ T29] audit: type=1326 audit(1719581834.215:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11099 comm="syz.2.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 284.382064][ T29] audit: type=1326 audit(1719581834.215:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11099 comm="syz.2.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 284.456511][ T29] audit: type=1326 audit(1719581834.215:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11099 comm="syz.2.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 284.526437][ T29] audit: type=1326 audit(1719581834.215:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11099 comm="syz.2.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 284.576417][ T29] audit: type=1326 audit(1719581834.215:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11099 comm="syz.2.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 284.636905][ T5143] usb 5-1: USB disconnect, device number 6 [ 285.124696][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.142780][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.155544][ T12]  (unregistering): Released all slaves [ 285.333014][T11098] syzkaller0: entered promiscuous mode [ 285.348037][T11098] syzkaller0: entered allmulticast mode [ 287.632607][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 287.796538][ T29] audit: type=1326 audit(1719581837.735:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 287.886551][ T29] audit: type=1326 audit(1719581837.735:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 287.949919][ T29] audit: type=1326 audit(1719581837.745:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd24d75b29 code=0x7ffc0000 [ 288.144233][T11142] syz.3.2201 (pid 11142) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 288.304825][T11157] Driver unsupported XDP return value 0 on prog (id 799) dev N/A, expect packet loss! [ 288.334413][ T12] hsr_slave_0: left promiscuous mode [ 288.365051][ T12] hsr_slave_1: left promiscuous mode [ 288.391155][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.408451][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.420194][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.436276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.483087][ T12] veth1_macvtap: left promiscuous mode [ 288.491743][ T12] veth0_macvtap: left promiscuous mode [ 288.511095][ T12] veth1_vlan: left promiscuous mode [ 288.532367][T11174] dccp_v6_rcv: dropped packet with invalid checksum [ 289.578420][ T12] team0 (unregistering): Port device team_slave_1 removed [ 290.196904][T11193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2216'. [ 290.762224][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'. [ 291.016103][T11228] syzkaller0: entered promiscuous mode [ 291.025203][T11228] syzkaller0: entered allmulticast mode [ 291.349835][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2235'. [ 291.373570][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2235'. [ 294.921349][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2254'. [ 295.006273][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 295.131853][ T5143] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 295.350111][ T5143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.367664][ T5143] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.381699][ T5143] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 295.391950][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.406087][ T5143] usb 4-1: config 0 descriptor?? [ 295.417401][ T5143] appletouch 4-1:0.0: Could not find int-in endpoint [ 295.448607][ T5143] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 295.468863][ T5143] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 295.625386][ T5143] usb 4-1: USB disconnect, device number 4 [ 295.668311][T11333] usb usb8: usbfs: process 11333 (syz.1.2269) did not claim interface 0 before use [ 295.676167][T11332] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 295.800709][T11337] No control pipe specified [ 297.384055][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 297.408655][T11363] No control pipe specified [ 298.103618][T11396] No control pipe specified [ 298.988433][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 299.007438][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 299.007460][ T29] audit: type=1326 audit(1719581848.945:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.1.2300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x0 [ 299.887104][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 299.973043][T11436] team0: entered promiscuous mode [ 299.981005][T11438] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 299.996417][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 300.003671][T11436] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 300.039132][T11435] team0: left promiscuous mode [ 300.054527][T11435] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 300.156805][ T29] audit: type=1326 audit(1719581850.095:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11444 comm="syz.1.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 300.186093][ T29] audit: type=1326 audit(1719581850.115:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11444 comm="syz.1.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 300.225215][ T29] audit: type=1326 audit(1719581850.135:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11444 comm="syz.1.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 300.279715][ T29] audit: type=1326 audit(1719581850.205:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11444 comm="syz.1.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 300.366814][ T29] audit: type=1326 audit(1719581850.205:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11444 comm="syz.1.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 300.489726][ T29] audit: type=1326 audit(1719581850.205:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11450 comm="syz.1.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9e523a7b05 code=0x7ffc0000 [ 300.518045][ T29] audit: type=1326 audit(1719581850.385:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11450 comm="syz.1.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 300.643903][T11457] syz.2.2320[11457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.644072][T11457] syz.2.2320[11457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.674083][ T29] audit: type=1326 audit(1719581850.615:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.4.2316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a22175b29 code=0x0 [ 301.024125][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'. [ 301.250715][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2327'. [ 301.282875][T11478] team0: entered promiscuous mode [ 301.309282][T11478] team_slave_0: entered promiscuous mode [ 301.330236][T11478] team_slave_1: entered promiscuous mode [ 301.363788][T11482] team_slave_0: entered allmulticast mode [ 301.433058][T11482] team0: Port device team_slave_0 removed [ 301.502705][T11477] team0: left promiscuous mode [ 301.521812][T11477] team_slave_1: left promiscuous mode [ 301.549523][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 301.723204][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 301.767259][T11503] blktrace: Concurrent blktraces are not allowed on sg0 [ 301.837477][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 301.863459][T11509] team0: entered promiscuous mode [ 301.869068][T11509] team_slave_1: entered promiscuous mode [ 301.886133][T11507] team0: left promiscuous mode [ 301.892490][T11507] team_slave_1: left promiscuous mode [ 301.975802][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 302.152900][T11521] team0: entered promiscuous mode [ 302.169597][T11521] team_slave_1: entered promiscuous mode [ 302.185613][T11521] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 302.223011][T11519] team0: left promiscuous mode [ 302.236302][T11519] team_slave_1: left promiscuous mode [ 302.257949][T11519] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 302.409123][T11533] __nla_validate_parse: 1 callbacks suppressed [ 302.409149][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 302.788757][ T5143] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 302.841043][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2361'. [ 302.858966][T11555] team0: entered promiscuous mode [ 302.864079][T11555] team_slave_1: entered promiscuous mode [ 302.887864][T11555] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 302.909345][T11554] team0: left promiscuous mode [ 302.914404][T11554] team_slave_1: left promiscuous mode [ 302.920289][T11554] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 302.987752][ T5143] usb 5-1: Using ep0 maxpacket: 8 [ 303.000795][ T5143] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 303.022199][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 303.037088][ T5143] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 303.067837][ T5143] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.089838][ T5143] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.137673][ T5143] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.157842][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.212604][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'. [ 303.459200][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2351'. [ 303.605442][ T5143] usb 5-1: GET_CAPABILITIES returned 0 [ 303.627706][ T5132] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 303.637734][ T5143] usbtmc 5-1:16.0: can't read capabilities [ 303.847658][ T5132] usb 1-1: Using ep0 maxpacket: 16 [ 303.863604][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.897838][ T5132] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.933477][ T5132] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.963828][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.991342][ T5132] usb 1-1: config 0 descriptor?? [ 304.047949][ T5142] usb 5-1: USB disconnect, device number 7 [ 304.425896][ T5132] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 304.463960][ T5132] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 304.484003][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 304.506660][ T5132] microsoft 0003:045E:07DA.0004: no inputs found [ 304.513909][ T5132] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 304.545200][T11592] team0: entered promiscuous mode [ 304.557117][T11592] team_slave_1: entered promiscuous mode [ 304.579223][T11591] team0: left promiscuous mode [ 304.584157][T11591] team_slave_1: left promiscuous mode [ 304.755384][ T5142] usb 1-1: USB disconnect, device number 11 [ 304.847167][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 305.222188][T11603] syz.3.2375[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.222348][T11603] syz.3.2375[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.146937][ T11] bridge_slave_1: left allmulticast mode [ 309.213653][ T11] bridge_slave_1: left promiscuous mode [ 309.231131][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.296174][ T11] bridge_slave_0: left allmulticast mode [ 309.326278][ T11] bridge_slave_0: left promiscuous mode [ 309.353318][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.543443][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 309.877957][ T5142] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.107820][ T5142] usb 5-1: Using ep0 maxpacket: 8 [ 310.124390][ T5142] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 310.179418][ T5142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 310.199627][ T5142] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.216887][ T5142] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.242224][ T5142] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.273528][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.582869][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2387'. [ 311.262755][ T5142] usb 5-1: GET_CAPABILITIES returned 0 [ 311.289141][ T5142] usbtmc 5-1:16.0: can't read capabilities [ 311.495530][ T45] usb 5-1: USB disconnect, device number 8 [ 311.539080][ T11]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.569108][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.601718][ T11]  (unregistering): Released all slaves [ 311.649404][T11628] team0: entered promiscuous mode [ 311.654861][T11628] team_slave_1: entered promiscuous mode [ 311.665140][T11628] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 311.683134][T11628] team0: left promiscuous mode [ 311.709012][T11628] team_slave_1: left promiscuous mode [ 311.730241][T11628] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 311.856611][T11652] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2393'. [ 312.406266][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 312.482764][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 312.703609][ T11] hsr_slave_0: left promiscuous mode [ 312.739733][ T11] hsr_slave_1: left promiscuous mode [ 312.770063][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.790114][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.822081][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.853967][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.924258][ T11] veth1_macvtap: left promiscuous mode [ 312.960489][ T11] veth0_macvtap: left promiscuous mode [ 312.967022][ T11] veth1_vlan: left promiscuous mode [ 312.992807][T11687] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2406'. [ 313.839669][ T11] team0 (unregistering): Port device team_slave_1 removed [ 314.779280][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 314.846859][ T29] audit: type=1326 audit(1719581864.785:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11720 comm="syz.1.2418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x0 [ 314.984256][T11721] team0: entered promiscuous mode [ 314.999674][T11721] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 315.018632][T11724] netlink: 'syz.1.2418': attribute type 10 has an invalid length. [ 315.067142][T11724] team0: Port device netdevsim0 added [ 315.085691][T11714] team0: left promiscuous mode [ 315.117596][T11714] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 315.397127][T11746] netlink: 868 bytes leftover after parsing attributes in process `syz.4.2423'. [ 315.545815][T11731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'. [ 316.087123][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'. [ 316.163412][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 316.409212][T11778] netlink: 868 bytes leftover after parsing attributes in process `syz.1.2435'. [ 316.639438][T11791] overlayfs: missing 'lowerdir' [ 316.757956][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 316.857747][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 316.883581][T11807] IPVS: stopping master sync thread 11808 ... [ 316.902470][T11808] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 317.065330][ T29] audit: type=1804 audit(1719581867.005:708): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2447" name="/root/syzkaller.dlRwZu/494/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 317.108647][T11815] netlink: 868 bytes leftover after parsing attributes in process `syz.4.2450'. [ 317.190503][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.243926][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.276270][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.308528][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.323440][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 317.335177][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 317.385918][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.386705][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2451'. [ 317.413842][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 317.443926][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.459935][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.470969][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.478648][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.486247][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.488449][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2451'. [ 317.494535][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 317.513142][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.521392][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.545707][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.562281][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.585301][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.588628][T11835] fuse: Unknown parameter 'user_id00000000000000000000' [ 317.614099][ T29] audit: type=1804 audit(1719581867.555:709): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2455" name="/root/syzkaller.dlRwZu/496/file0" dev="sda1" ino=1982 res=1 errno=0 [ 317.650959][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.659796][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.679980][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.701125][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.718549][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.734506][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.750476][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.774054][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.788096][T11840] overlayfs: missing 'lowerdir' [ 317.795240][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.816564][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.872062][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.890998][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.917690][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.937789][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.962113][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.984200][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.009578][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.038935][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.046417][ T5141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 318.098258][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 318.130475][ T5141] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 318.215061][T11856] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 318.217644][T11854] IPVS: stopping master sync thread 11856 ... [ 318.355104][ T29] audit: type=1804 audit(1719581868.295:710): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2463" name="/root/syzkaller.zBfLpR/70/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 318.410525][T11855] syzkaller0: entered promiscuous mode [ 318.416069][T11855] syzkaller0: entered allmulticast mode [ 318.712739][T11881] fuse: Bad value for 'fd' [ 318.720939][T11878] overlayfs: missing 'lowerdir' [ 318.741878][ T29] audit: type=1804 audit(1719581868.675:711): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.2471" name="/root/syzkaller.63q6KU/345/file0" dev="sda1" ino=1976 res=1 errno=0 [ 319.566141][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.578529][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.586000][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.594490][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.602097][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 319.610176][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.620500][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 319.629326][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.637081][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.665095][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.683299][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.703619][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 319.716730][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.735943][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.745040][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.768005][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.775477][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.795443][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.804294][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.812306][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.821513][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.829698][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.847764][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.858823][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.873315][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.888336][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.904812][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.920311][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.931172][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.943468][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.951036][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.958660][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.966262][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.974061][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 319.981739][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 320.011939][ T5132] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 320.045100][ T5132] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 320.287335][ T29] audit: type=1804 audit(1719581870.225:712): pid=11911 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2479" name="/root/syzkaller.e2C1fW/163/memory.events" dev="sda1" ino=1984 res=1 errno=0 [ 321.545777][T11917] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 321.653622][T11919] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 321.684000][T11919] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 321.828175][T11931] __nla_validate_parse: 3 callbacks suppressed [ 321.828199][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 321.896818][T11937] overlayfs: failed to resolve './file0': -2 [ 321.897846][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 322.092113][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'. [ 322.107136][T11943] team0: entered promiscuous mode [ 322.113664][T11943] team_slave_1: entered promiscuous mode [ 322.122814][T11942] team0: left promiscuous mode [ 322.132170][T11942] team_slave_1: left promiscuous mode [ 322.218913][T11946] bond_slave_0: entered promiscuous mode [ 322.224723][T11946] bond_slave_1: entered promiscuous mode [ 322.230845][T11946] macsec1: entered promiscuous mode [ 322.236273][T11946] bond0: entered promiscuous mode [ 322.243363][T11946] macsec1: entered allmulticast mode [ 322.250928][T11946] bond0: entered allmulticast mode [ 322.259278][T11946] bond_slave_0: entered allmulticast mode [ 322.268669][T11946] bond_slave_1: entered allmulticast mode [ 322.283070][T11946] bond0: left allmulticast mode [ 322.288654][T11946] bond_slave_0: left allmulticast mode [ 322.294336][T11946] bond_slave_1: left allmulticast mode [ 322.300700][T11946] bond0: left promiscuous mode [ 322.306520][T11946] bond_slave_0: left promiscuous mode [ 322.312566][T11946] bond_slave_1: left promiscuous mode [ 322.608238][T11956] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 322.608910][T11955] IPVS: stopping master sync thread 11956 ... [ 322.704357][T11963] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2496'. [ 322.777671][ T29] audit: type=1804 audit(1719581872.715:713): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2494" name="/root/syzkaller.zBfLpR/76/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 322.789854][T11966] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 322.854412][T11966] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 322.873665][T11970] overlayfs: failed to resolve './file1': -2 [ 323.030872][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 323.043902][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2501'. [ 323.069263][T11977] team0: entered promiscuous mode [ 323.078317][T11977] team_slave_1: entered promiscuous mode [ 323.079562][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 323.101005][T11977] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 323.125884][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'. [ 323.126322][T11976] team0: left promiscuous mode [ 323.157410][T11976] team_slave_1: left promiscuous mode [ 323.164543][T11976] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 323.239835][ T45] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 323.250356][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.272724][ T45] usb 1-1: config 0 descriptor?? [ 323.284289][ T45] cp210x 1-1:0.0: cp210x converter detected [ 323.665754][T12005] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 323.677587][T12005] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 323.729985][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.758967][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.800404][T12007] overlayfs: failed to resolve './file1': -2 [ 324.045517][T11967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.079525][T11967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.216648][ T45] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 324.226099][ T45] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 324.267306][ T45] usb 1-1: cp210x converter now attached to ttyUSB0 [ 324.288995][ T45] usb 1-1: USB disconnect, device number 12 [ 324.308527][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.316845][ T45] cp210x 1-1:0.0: device disconnected [ 324.322969][ T5143] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 324.517680][ T5143] usb 4-1: Using ep0 maxpacket: 8 [ 324.526335][ T5143] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 324.552301][ T5143] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 324.562798][ T5143] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.573423][ T5143] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.593997][ T5143] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.608405][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.892031][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'. [ 325.087337][T12043] overlayfs: missing 'lowerdir' [ 325.189236][T12046] overlayfs: failed to resolve './file1': -2 [ 325.445489][ T5143] usb 4-1: GET_CAPABILITIES returned 0 [ 325.457965][ T5143] usbtmc 4-1:16.0: can't read capabilities [ 325.500865][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2525'. [ 325.669613][ T5142] usb 4-1: USB disconnect, device number 5 [ 326.190176][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2533'. [ 326.218806][T12079] overlayfs: missing 'lowerdir' [ 326.772282][T12107] overlayfs: missing 'lowerdir' [ 326.860267][T12108] __nla_validate_parse: 4 callbacks suppressed [ 326.860292][T12108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2545'. [ 326.894664][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2545'. [ 326.915241][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 326.945045][T12108] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2545'. [ 326.954575][T12108] tipc: Started in network mode [ 326.960753][T12108] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 326.978619][T12108] tipc: Enabled bearer , priority 16 [ 327.222050][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2548'. [ 327.239409][T12115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2548'. [ 327.346031][ T29] audit: type=1800 audit(1719581877.285:714): pid=12122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2550" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 327.637700][ T29] audit: type=1800 audit(1719581877.575:715): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2552" name="memory.events" dev="sda1" ino=1984 res=0 errno=0 [ 327.688826][ T29] audit: type=1804 audit(1719581877.635:716): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2552" name="/root/syzkaller.dlRwZu/513/memory.events" dev="sda1" ino=1984 res=1 errno=0 [ 328.008318][ T5141] tipc: Node number set to 10922666 [ 328.067246][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'. [ 328.798838][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 328.839363][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2561'. [ 328.876839][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2562'. [ 328.988831][T12166] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 330.338899][T12224] bridge0: port 1(batadv0) entered blocking state [ 330.373332][T12224] bridge0: port 1(batadv0) entered disabled state [ 330.408558][T12224] batadv0: entered allmulticast mode [ 330.429602][T12224] batadv0: entered promiscuous mode [ 330.439279][T12224] bridge0: port 1(batadv0) entered blocking state [ 330.446423][T12224] bridge0: port 1(batadv0) entered forwarding state [ 330.473295][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 330.483195][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 330.496677][T12233] team0: entered promiscuous mode [ 330.507689][T12233] team_slave_1: entered promiscuous mode [ 330.514026][T12233] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 330.531713][T12230] team0: left promiscuous mode [ 330.546904][T12230] team_slave_1: left promiscuous mode [ 330.552974][T12230] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 331.970152][T12259] __nla_validate_parse: 9 callbacks suppressed [ 331.970176][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2600'. [ 332.187431][T12269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2602'. [ 332.270702][T12273] bridge0: port 3(batadv0) entered blocking state [ 332.277442][T12273] bridge0: port 3(batadv0) entered disabled state [ 332.294944][T12273] batadv0: entered allmulticast mode [ 332.320773][T12273] batadv0: entered promiscuous mode [ 332.338105][T12273] bridge0: port 3(batadv0) entered blocking state [ 332.344770][T12273] bridge0: port 3(batadv0) entered forwarding state [ 332.638361][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 332.648096][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 332.765259][T12290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 333.823679][T12309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2616'. [ 334.008936][ T29] audit: type=1800 audit(1719581883.945:717): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2619" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 334.087668][ T29] audit: type=1804 audit(1719581883.955:718): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2619" name="/root/syzkaller.dlRwZu/528/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 334.112178][T12324] sctp: [Deprecated]: syz.2.2621 (pid 12324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.112178][T12324] Use struct sctp_sack_info instead [ 334.142388][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'. [ 334.181426][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2620'. [ 334.208806][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2620'. [ 334.551873][T12340] fuse: Unknown parameter '0x0000000000000004' [ 334.569056][ T29] audit: type=1804 audit(1719581884.515:719): pid=12340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.2627" name="/root/syzkaller.e2C1fW/194/file0" dev="sda1" ino=1982 res=1 errno=0 [ 334.605193][T12335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2624'. [ 334.993061][T12354] sctp: [Deprecated]: syz.4.2633 (pid 12354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.993061][T12354] Use struct sctp_sack_info instead [ 335.271119][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 335.320728][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 335.680948][T12386] sctp: [Deprecated]: syz.1.2645 (pid 12386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.680948][T12386] Use struct sctp_sack_info instead [ 336.550012][ T5098] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 336.560111][ T5098] Bluetooth: hci5: Injecting HCI hardware error event [ 336.569633][ T5098] Bluetooth: hci5: hardware error 0x00 [ 336.842323][ T5100] Bluetooth: hci2: unexpected event 0x09 length: 10 > 3 [ 336.844247][ T5100] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 337.369436][T12430] __nla_validate_parse: 10 callbacks suppressed [ 337.369460][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 337.572208][T12434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2665'. [ 337.597980][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 337.617636][ T5143] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 337.635382][T12434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2665'. [ 337.666347][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2665'. [ 337.690572][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2665'. [ 337.730792][T12434] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2665'. [ 337.761362][T12434] tipc: Started in network mode [ 337.766384][T12434] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 337.789472][T12434] tipc: Enabled bearer , priority 16 [ 337.850269][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.882318][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.925643][ T5143] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.967706][ T5143] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 337.997908][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.037054][ T5143] usb 4-1: config 0 descriptor?? [ 338.094029][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'. [ 338.482771][ T5143] elecom 0003:056E:010D.0007: unknown main item tag 0x0 [ 338.506631][ T5143] elecom 0003:056E:010D.0007: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 338.637932][ T5098] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 338.683738][ T5141] usb 4-1: USB disconnect, device number 6 [ 338.819804][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 338.920329][ T5143] tipc: Node number set to 10922666 [ 338.962523][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2677'. [ 340.157902][ T5143] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 340.388577][ T5143] usb 1-1: Using ep0 maxpacket: 16 [ 340.396590][ T5143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.444851][ T5143] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.478688][ T5143] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 340.519038][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.569759][ T5143] usb 1-1: config 0 descriptor?? [ 341.013084][ T5143] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 341.058106][ T5143] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 341.096393][ T5143] microsoft 0003:045E:07DA.0008: no inputs found [ 341.137339][ T5143] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 341.318944][ T5141] usb 1-1: USB disconnect, device number 13 [ 341.900962][ T5098] Bluetooth: hci0: unexpected event 0x09 length: 10 > 3 [ 341.902813][ T5098] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 343.035758][T12523] __nla_validate_parse: 3 callbacks suppressed [ 343.035783][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 343.272158][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2697'. [ 344.516138][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2702'. [ 344.657337][ T5098] Bluetooth: hci4: unexpected event 0x09 length: 10 > 3 [ 344.658479][ T5098] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 345.058079][T12570] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2709'. [ 345.288617][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 345.336112][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2711'. [ 345.420774][ T5141] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 345.466486][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 345.643098][ T5141] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 345.659040][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.683256][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 345.701892][ T5141] usb 1-1: config 0 descriptor?? [ 345.729459][ T5141] cp210x 1-1:0.0: cp210x converter detected [ 345.957934][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 346.006500][T12556] sched: RT throttling activated [ 346.143358][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.185965][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.507053][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.588253][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.041688][ T5141] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 347.082241][ T5141] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 347.128832][ T5141] usb 1-1: cp210x converter now attached to ttyUSB0 [ 347.206059][ T5141] usb 1-1: USB disconnect, device number 14 [ 347.255739][ T5141] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 347.319787][ T5141] cp210x 1-1:0.0: device disconnected [ 347.458651][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 347.646661][T12628] bridge_slave_1: left allmulticast mode [ 347.667875][T12628] bridge_slave_1: left promiscuous mode [ 347.689606][T12628] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.710808][T12628] bridge5: port 1(bridge_slave_1) entered blocking state [ 347.734297][T12628] bridge5: port 1(bridge_slave_1) entered disabled state [ 347.752054][T12628] bridge_slave_1: entered allmulticast mode [ 347.769442][T12628] bridge_slave_1: entered promiscuous mode [ 348.445053][ T5098] Bluetooth: hci2: unexpected event 0x09 length: 10 > 3 [ 348.449284][ T5098] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 348.555776][T12659] syzkaller0: entered promiscuous mode [ 348.569309][T12659] syzkaller0: entered allmulticast mode [ 349.128965][T12674] __nla_validate_parse: 3 callbacks suppressed [ 349.128989][T12674] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2739'. [ 349.477606][ T5141] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 349.679976][ T5141] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.689364][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.709973][ T5141] usb 4-1: config 0 descriptor?? [ 349.731147][ T5141] cp210x 4-1:0.0: cp210x converter detected [ 350.152090][T12677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.173025][T12677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.443685][ T5098] Bluetooth: hci2: unknown advertising packet type: 0x37 [ 350.444590][T12683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.474817][T12683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.177408][ T29] audit: type=1326 audit(1719581901.115:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12685 comm="syz.2.2741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd24d75b29 code=0x0 [ 351.760975][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 351.786638][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2740'. [ 351.804242][T12688] netlink: 'syz.2.2741': attribute type 10 has an invalid length. [ 351.872936][T12688] team0: Port device netdevsim0 added [ 351.927367][ T5141] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 351.942089][ T5141] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 351.975447][ T5141] usb 4-1: cp210x converter now attached to ttyUSB0 [ 351.994583][ T5141] usb 4-1: USB disconnect, device number 7 [ 352.012295][ T5141] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 352.041298][ T5141] cp210x 4-1:0.0: device disconnected [ 352.050142][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2744'. [ 352.168882][T12705] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2747'. [ 352.371319][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2752'. [ 352.410992][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'. [ 352.592520][T12727] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2758'. [ 352.686232][T12732] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2759'. [ 352.908780][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 354.600820][T12798] __nla_validate_parse: 11 callbacks suppressed [ 354.600846][T12798] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2787'. [ 354.879618][T12810] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2791'. [ 355.545820][T12821] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 355.568290][T12820] IPVS: stopping master sync thread 12821 ... [ 355.610094][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.619745][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.631961][ T29] audit: type=1804 audit(1719581905.575:721): pid=12820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2796" name="/root/syzkaller.9WkC3Z/576/memory.events" dev="sda1" ino=1977 res=1 errno=0 [ 355.632847][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.697871][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.715517][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.726263][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.734166][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.742269][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.750562][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.758264][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.767938][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.775643][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.794449][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.802171][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.809959][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.817697][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.825393][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.833095][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.840840][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.850351][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.858232][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.867339][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.875146][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.888445][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.914499][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.929468][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.942194][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.950171][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.958050][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.967744][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.975458][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.983366][T12830] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2799'. [ 355.993551][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.010264][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.028105][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.035996][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.043714][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.051962][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.059631][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.067357][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.078130][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.085712][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.100789][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.118824][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 356.133700][ T45] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 356.284680][T12838] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2803'. [ 356.406578][T12843] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2804'. [ 356.571874][T12850] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 356.704989][T12855] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2810'. [ 357.077798][ T5143] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 357.163039][T12864] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2814'. [ 357.279673][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.292708][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.304578][ T5143] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.318006][ T5143] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 357.346930][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.369463][ T5143] usb 4-1: config 0 descriptor?? [ 357.482559][T12870] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2817'. [ 357.792569][ T5143] usbhid 4-1:0.0: can't add hid device: -71 [ 357.805507][ T5143] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 357.824485][ T5143] usb 4-1: USB disconnect, device number 8 [ 357.836910][T12878] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 357.974029][T12883] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2822'. [ 358.746621][T12899] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2828'. [ 359.467923][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 359.583390][ T29] audit: type=1800 audit(1719581909.525:722): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2843" name="bus" dev="sda1" ino=1982 res=0 errno=0 [ 359.645575][T12937] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 359.671716][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.687573][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.697357][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.715854][ T45] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 359.731756][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.745003][ T45] usb 1-1: config 0 descriptor?? [ 359.891355][ T29] audit: type=1800 audit(1719581909.815:723): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2848" name="file0" dev="sda1" ino=1972 res=0 errno=0 [ 360.202648][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 360.213994][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 360.228239][ T45] usb 1-1: USB disconnect, device number 15 [ 360.557968][ T5141] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 360.817813][ T5141] usb 4-1: Using ep0 maxpacket: 16 [ 360.834718][ T5141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.855204][ T5141] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 360.874864][T12961] __nla_validate_parse: 5 callbacks suppressed [ 360.874886][T12961] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2855'. [ 360.875469][ T5141] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.903403][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.913956][T12958] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2854'. [ 360.927375][ T5141] usb 4-1: config 0 descriptor?? [ 360.947101][ T5141] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 361.068099][T12967] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 361.248352][T12975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.257019][T12975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.983960][ T5141] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 361.994798][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2866'. [ 362.101000][ T5132] usb 4-1: USB disconnect, device number 9 [ 362.189716][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.209970][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.233984][ T5141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.253868][ T5141] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 362.263222][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.277004][ T5141] usb 1-1: config 0 descriptor?? [ 362.704722][ T5141] usbhid 1-1:0.0: can't add hid device: -71 [ 362.717937][ T5141] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 362.746213][ T5141] usb 1-1: USB disconnect, device number 16 [ 362.773415][T13004] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 363.087660][ T5091] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 363.319449][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.348226][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.367667][ T5091] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 363.386948][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.412452][ T5091] usb 4-1: config 0 descriptor?? [ 364.065374][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2879'. [ 364.232996][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2880'. [ 364.253119][ T5091] usb 4-1: string descriptor 0 read error: -71 [ 364.268875][ T5091] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 364.289312][ T5091] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 364.308086][ T5091] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 364.316571][ T5091] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 364.333230][ T5091] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 364.378069][ T5091] usb 4-1: USB disconnect, device number 10 [ 364.987678][ T5143] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 365.207226][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.218621][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.247601][ T5143] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.297761][ T5143] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 365.306886][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.362636][ T5143] usb 2-1: config 0 descriptor?? [ 365.378806][ T5100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.391045][ T5100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.399536][ T5100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.410129][ T5100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.419099][ T5100] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 365.426589][ T5100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.801897][ T5143] usbhid 2-1:0.0: can't add hid device: -71 [ 365.809091][ T5143] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 365.830409][ T5143] usb 2-1: USB disconnect, device number 9 [ 365.919658][T13058] chnl_net:caif_netlink_parms(): no params data found [ 366.142733][T13058] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.162245][T13058] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.187943][T13058] bridge_slave_0: entered allmulticast mode [ 366.207376][T13058] bridge_slave_0: entered promiscuous mode [ 366.226755][T13058] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.240260][T13058] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.255387][T13058] bridge_slave_1: entered allmulticast mode [ 366.266062][T13058] bridge_slave_1: entered promiscuous mode [ 366.669363][T13058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.899031][T13058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.468622][T13058] team0: Port device team_slave_0 added [ 367.480440][T13058] team0: Port device team_slave_1 added [ 367.507821][ T5098] Bluetooth: hci6: command tx timeout [ 367.567394][T13058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.584690][T13058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.663027][T13058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.685269][T13058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.702084][T13058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.757670][T13058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.938721][T13058] hsr_slave_0: entered promiscuous mode [ 367.961264][T13058] hsr_slave_1: entered promiscuous mode [ 367.989589][T13058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.997221][T13058] Cannot create hsr debugfs directory [ 368.023982][ T29] audit: type=1326 audit(1719581917.965:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13100 comm="syz.3.2902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5860575b29 code=0x0 [ 368.143514][T13104] netlink: 'syz.3.2902': attribute type 10 has an invalid length. [ 368.610810][T13058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.794367][ T29] audit: type=1326 audit(1719581918.735:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 368.860999][ T29] audit: type=1326 audit(1719581918.735:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 368.929840][ T29] audit: type=1326 audit(1719581918.765:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 369.102600][ T29] audit: type=1326 audit(1719581918.765:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 369.176112][ T29] audit: type=1326 audit(1719581918.765:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 369.192968][T13058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.217654][ T29] audit: type=1326 audit(1719581918.765:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 369.285346][ T29] audit: type=1326 audit(1719581918.765:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 369.344191][ T29] audit: type=1326 audit(1719581918.765:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 369.396925][ T29] audit: type=1326 audit(1719581918.765:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13124 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f9e52375b29 code=0x7ffc0000 [ 369.469623][T13058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.587685][ T5098] Bluetooth: hci6: command tx timeout [ 369.667910][T13058] team0: Port device netdevsim0 removed [ 369.706838][T13058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.033603][T13058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 370.085528][T13058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 370.157960][T13058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.227339][T13058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.601818][T13058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.676440][T13058] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.728449][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.735676][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.790001][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.797188][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.002170][T13167] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 371.667772][ T5098] Bluetooth: hci6: command tx timeout [ 372.996958][T13058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.131367][T13058] veth0_vlan: entered promiscuous mode [ 373.167141][T13058] veth1_vlan: entered promiscuous mode [ 373.253455][T13058] veth0_macvtap: entered promiscuous mode [ 373.285933][T13058] veth1_macvtap: entered promiscuous mode [ 373.334232][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.354042][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.364625][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.376967][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.389416][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.401049][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.412741][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.423807][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.436291][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.447831][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.459834][T13058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.468784][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 373.478738][T13204] evm: overlay not supported [ 373.484604][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 373.484621][ T29] audit: type=1326 audit(1719581923.425:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13207 comm="syz.1.2939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e52375b29 code=0x0 [ 373.500417][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.552204][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.565830][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.586329][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.607903][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.625655][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.636996][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.657006][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.667386][T13058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.687542][T13058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.709915][T13058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.719639][T13210] netlink: 'syz.1.2939': attribute type 10 has an invalid length. [ 373.727808][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 373.735399][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.750675][ T5098] Bluetooth: hci6: command tx timeout [ 373.750943][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.769764][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.835821][T13058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.857755][T13058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.859416][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 373.866581][T13058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.887273][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.897217][T13058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.907610][ T9] usb 5-1: config 0 descriptor?? [ 374.112933][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.139429][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.259254][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.276425][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.342374][ T9] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 374.375661][ T9] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 374.403306][ T9] ryos 0003:1E7D:31CE.000B: item fetching failed at offset 7/11 [ 374.424149][ T9] ryos 0003:1E7D:31CE.000B: parse failed [ 374.461219][ T9] ryos 0003:1E7D:31CE.000B: probe with driver ryos failed with error -22 [ 374.566385][ T29] audit: type=1326 audit(1719581924.505:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 374.652988][ T29] audit: type=1326 audit(1719581924.505:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 374.684937][ T29] audit: type=1326 audit(1719581924.565:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 374.735469][ T9] usb 5-1: USB disconnect, device number 9 [ 374.772515][ T29] audit: type=1326 audit(1719581924.565:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 374.834702][ T29] audit: type=1326 audit(1719581924.565:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 374.921171][ T29] audit: type=1326 audit(1719581924.565:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 374.984533][ T29] audit: type=1326 audit(1719581924.565:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 375.067574][ T29] audit: type=1326 audit(1719581924.565:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 375.116767][ T29] audit: type=1326 audit(1719581924.565:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce23f75b29 code=0x7ffc0000 [ 375.150259][T13242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2952'. [ 375.174958][T13242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2952'. [ 375.186333][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2952'. [ 375.196243][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 375.212383][T13242] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2952'. [ 375.225645][T13242] tipc: Started in network mode [ 375.231008][T13242] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 375.238644][T13242] tipc: Enabled bearer , priority 16 [ 375.491291][T13251] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 375.522267][T13251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.529617][T13251] IPv6: NLM_F_CREATE should be set when creating new route [ 375.536929][T13251] IPv6: NLM_F_CREATE should be set when creating new route [ 376.092191][T13269] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.357719][ T5140] tipc: Node number set to 10922666 [ 376.538975][T13291] 9pnet_fd: Insufficient options for proto=fd [ 376.571211][T13292] netlink: 'syz.0.2968': attribute type 1 has an invalid length. [ 376.595097][T13292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.602559][T13292] IPv6: NLM_F_CREATE should be set when creating new route [ 376.609906][T13292] IPv6: NLM_F_CREATE should be set when creating new route [ 377.226676][T13313] blktrace: Concurrent blktraces are not allowed on sg0 [ 377.497722][ T5140] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 377.739541][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 377.772826][ T5140] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 377.807779][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 377.876694][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.922529][ T5140] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.137568][ T5140] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 378.200185][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.232646][T13346] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2989'. [ 378.502190][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2979'. [ 378.558440][ T5091] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 378.785942][ T5091] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 378.809416][ T5091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.831264][ T5091] usb 3-1: config 0 descriptor?? [ 378.842349][ T5091] cp210x 3-1:0.0: cp210x converter detected [ 378.876504][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.197451][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 379.249175][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.266090][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.372036][ T5098] Bluetooth: hci6: unknown advertising packet type: 0x34 [ 379.372129][ T5098] Bluetooth: hci6: unknown advertising packet type: 0x35 [ 379.383875][T13373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.420648][T13373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.506494][ T5140] usb 2-1: GET_CAPABILITIES returned 0 [ 379.530836][ T5140] usbtmc 2-1:16.0: can't read capabilities [ 379.583402][ T5091] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 379.604876][ T5091] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 379.624260][ T5091] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 379.643379][ T5091] usb 3-1: cp210x converter now attached to ttyUSB0 [ 379.662426][ T5091] usb 3-1: USB disconnect, device number 6 [ 379.692911][ T5091] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 379.725473][ T5091] cp210x 3-1:0.0: device disconnected [ 379.757179][ T45] usb 2-1: USB disconnect, device number 10 [ 379.919071][ T5098] Bluetooth: hci0: unexpected event 0x09 length: 10 > 3 [ 379.921222][ T5098] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 380.998096][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 381.038132][T13420] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3015'. [ 381.227802][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 381.239441][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.251236][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3018'. [ 381.278624][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 381.297850][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.324944][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.335878][ T45] usb 4-1: config 0 descriptor?? [ 381.393402][ T5140] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 381.591456][ T5140] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 381.616275][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.636236][ T5140] usb 1-1: config 0 descriptor?? [ 381.647895][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 381.660432][ T5140] cp210x 1-1:0.0: cp210x converter detected [ 381.838030][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 381.853781][ T45] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 381.870767][ T45] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 381.891405][ T45] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.918761][ T45] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.951536][ T45] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.973974][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.068841][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.115498][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.141741][ T5140] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 382.196198][T13425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.231545][T13425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.285565][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3020'. [ 382.575275][ T5140] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 382.614669][ T5140] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 382.652273][ T5140] usb 1-1: cp210x converter now attached to ttyUSB0 [ 382.712937][ T5140] usb 1-1: USB disconnect, device number 17 [ 382.753794][ T5140] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 382.773699][ T5140] cp210x 1-1:0.0: device disconnected [ 383.077472][ T45] usb 5-1: GET_CAPABILITIES returned 0 [ 383.087343][ T45] usbtmc 5-1:16.0: can't read capabilities [ 383.314537][ T45] usb 5-1: USB disconnect, device number 10 [ 383.722029][ T5091] usb 4-1: USB disconnect, device number 11 [ 384.141750][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3046'. [ 384.978547][ T5144] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 385.188420][ T5144] usb 4-1: Using ep0 maxpacket: 8 [ 385.201409][ T5144] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 385.228165][ T5144] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 385.254966][ T5144] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.275390][ T5144] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.304029][ T5144] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 385.315988][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.507067][T13593] netlink: 'syz.0.3081': attribute type 8 has an invalid length. [ 385.613841][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3063'. [ 386.067947][T13514] Bluetooth: hci1: command 0x0406 tx timeout [ 386.201278][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 386.231654][ T5144] usb 4-1: GET_CAPABILITIES returned 0 [ 386.240433][T13623] team0: entered promiscuous mode [ 386.245539][T13623] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 386.253329][ T5144] usbtmc 4-1:16.0: can't read capabilities [ 386.274446][T13619] team0: left promiscuous mode [ 386.281004][T13619] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 386.385741][T13629] netlink: 'syz.2.3093': attribute type 8 has an invalid length. [ 386.455542][ T5091] usb 4-1: USB disconnect, device number 12 [ 387.012999][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'. [ 387.071316][T13655] team0: entered promiscuous mode [ 387.097762][T13655] team_slave_1: entered promiscuous mode [ 387.119238][T13655] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 387.148005][T13654] team0: left promiscuous mode [ 387.173912][T13654] team_slave_1: left promiscuous mode [ 387.187361][T13654] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 387.226264][T13658] netlink: 'syz.3.3106': attribute type 8 has an invalid length. [ 387.417023][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 387.756484][T13681] netlink: 'syz.4.3117': attribute type 8 has an invalid length. [ 387.834058][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3118'. [ 387.862935][T13687] team0: entered promiscuous mode [ 387.870552][T13687] team_slave_1: entered promiscuous mode [ 387.879498][T13687] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 387.922526][T13686] team0: left promiscuous mode [ 387.929032][T13686] team_slave_1: left promiscuous mode [ 387.941084][T13686] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 388.418145][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 388.620130][ T45] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.648046][ T45] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.664546][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.708104][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.719273][ T5141] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 388.738640][T13702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.950787][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 388.969231][ T5141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.007631][ T5141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.039907][ T5141] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 389.078040][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.123658][ T5141] usb 5-1: config 0 descriptor?? [ 389.369563][ T5141] usbhid 5-1:0.0: can't add hid device: -71 [ 389.375630][ T5141] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 389.458057][ T5141] usb 5-1: USB disconnect, device number 11 [ 391.179005][ T5140] usb 1-1: USB disconnect, device number 18 [ 391.678798][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3158'. [ 392.457741][ T5143] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 392.707047][ T5143] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 392.752197][ T5143] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 392.772002][ T5143] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 392.801926][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.827116][T13814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 498.047459][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 498.054474][ C1] rcu: 0-...!: (1 GPs behind) idle=d254/1/0x4000000000000000 softirq=37733/37736 fqs=1 [ 498.065526][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7184/1:b..l [ 498.073493][ C1] rcu: (detected by 1, t=10502 jiffies, g=59873, q=301 ncpus=2) [ 498.081242][ C1] Sending NMI from CPU 1 to CPUs 0: [ 498.086567][ C0] NMI backtrace for cpu 0 [ 498.086589][ C0] CPU: 0 PID: 13810 Comm: syz.3.3162 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0 [ 498.086608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 498.086619][ C0] RIP: 0010:check_preemption_disabled+0x4/0x120 [ 498.086655][ C0] Code: 8c 48 c7 c6 60 17 1f 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 <41> 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 498.086671][ C0] RSP: 0018:ffffc900000078e8 EFLAGS: 00000046 [ 498.086687][ C0] RAX: 1ffff11003d6dc9a RBX: 0000000000000046 RCX: ffffc90000007903 [ 498.086700][ C0] RDX: 0000000000000002 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f1780 [ 498.086713][ C0] RBP: ffffc90000007a30 R08: ffffffff8fac242f R09: 1ffffffff1f58485 [ 498.086727][ C0] R10: dffffc0000000000 R11: fffffbfff1f58486 R12: 1ffff92000000f2c [ 498.086740][ C0] R13: 0000000000000046 R14: ffffc90000007990 R15: dffffc0000000000 [ 498.086753][ C0] FS: 00007f58614196c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 498.086770][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.086782][ C0] CR2: 0000000020108000 CR3: 000000005871c000 CR4: 00000000003506f0 [ 498.086797][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.086808][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 498.086819][ C0] Call Trace: [ 498.086828][ C0] [ 498.086837][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 498.086857][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 498.086884][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 498.086912][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 498.086933][ C0] ? nmi_handle+0x14f/0x5a0 [ 498.086959][ C0] ? nmi_handle+0x2a/0x5a0 [ 498.086986][ C0] ? check_preemption_disabled+0x4/0x120 [ 498.087013][ C0] ? default_do_nmi+0x63/0x160 [ 498.087033][ C0] ? exc_nmi+0x123/0x1f0 [ 498.087051][ C0] ? end_repeat_nmi+0xf/0x53 [ 498.087082][ C0] ? check_preemption_disabled+0x4/0x120 [ 498.087110][ C0] ? check_preemption_disabled+0x4/0x120 [ 498.087138][ C0] ? check_preemption_disabled+0x4/0x120 [ 498.087165][ C0] [ 498.087171][ C0] [ 498.087178][ C0] lock_release+0x5c4/0x9f0 [ 498.087198][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 498.087216][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 498.087242][ C0] ? __pfx_lock_release+0x10/0x10 [ 498.087266][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 498.087289][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 498.087315][ C0] debug_objects_fill_pool+0xc0/0x9b0 [ 498.087342][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 498.087365][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 498.087396][ C0] ? advance_sched+0xa02/0xca0 [ 498.087428][ C0] debug_object_activate+0x135/0x510 [ 498.087455][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 498.087480][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 498.087505][ C0] ? advance_sched+0xa02/0xca0 [ 498.087534][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 498.087561][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 498.087589][ C0] enqueue_hrtimer+0x30/0x3c0 [ 498.087617][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 498.087643][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 498.087671][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 498.087697][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 498.087719][ C0] hrtimer_interrupt+0x396/0x990 [ 498.087755][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 498.087783][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 498.087808][ C0] [ 498.087814][ C0] [ 498.087821][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.087848][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 498.087881][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 5a 6f ea f5 48 89 df e8 f2 b1 eb f5 e8 0d 70 15 f6 fb bf 01 00 00 00 02 7f dd f5 65 8b 05 43 b7 7b 74 85 c0 74 06 5b c3 cc cc cc cc [ 498.087896][ C0] RSP: 0018:ffffc900114c7930 EFLAGS: 00000286 [ 498.087911][ C0] RAX: 778239746662db00 RBX: ffff88801f5c1d40 RCX: ffffffff8172d8fa [ 498.087925][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 498.087937][ C0] RBP: ffffc900114c7aa0 R08: ffffffff92f715d7 R09: 1ffffffff25ee2ba [ 498.087950][ C0] R10: dffffc0000000000 R11: fffffbfff25ee2bb R12: 1ffff92002298f3c [ 498.087964][ C0] R13: ffffffff8b86bc88 R14: ffffc900114c7a08 R15: ffff88801f5c1d38 [ 498.087978][ C0] ? wait_for_completion_killable+0x458/0x730 [ 498.088001][ C0] ? mark_lock+0x9a/0x350 [ 498.088024][ C0] wait_for_completion_killable+0x638/0x730 [ 498.088053][ C0] ? __pfx_wait_for_completion_killable+0x10/0x10 [ 498.088075][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 498.088099][ C0] virtio_read+0x102/0x200 [ 498.088127][ C0] ? __pfx_virtio_read+0x10/0x10 [ 498.088151][ C0] rng_dev_read+0x248/0x6d0 [ 498.088174][ C0] ? mark_lock+0x9a/0x350 [ 498.088196][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 498.088222][ C0] ? security_file_permission+0x7f/0xa0 [ 498.088242][ C0] ? rw_verify_area+0x51b/0x6b0 [ 498.088271][ C0] vfs_readv+0x6c6/0xa90 [ 498.088297][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 498.088320][ C0] ? __pfx_vfs_readv+0x10/0x10 [ 498.088348][ C0] ? __fget_files+0x29/0x470 [ 498.088375][ C0] __x64_sys_preadv+0x1c7/0x2d0 [ 498.088394][ C0] ? __pfx___x64_sys_preadv+0x10/0x10 [ 498.088412][ C0] ? do_syscall_64+0x100/0x230 [ 498.088439][ C0] ? do_syscall_64+0xb6/0x230 [ 498.088467][ C0] do_syscall_64+0xf3/0x230 [ 498.088493][ C0] ? clear_bhb_loop+0x35/0x90 [ 498.088519][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.088544][ C0] RIP: 0033:0x7f5860575b29 [ 498.088565][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.088578][ C0] RSP: 002b:00007f5861419048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 498.088595][ C0] RAX: ffffffffffffffda RBX: 00007f5860703fa0 RCX: 00007f5860575b29 [ 498.088608][ C0] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000007 [ 498.088619][ C0] RBP: 00007f58605f6756 R08: 0000000000000000 R09: 0000000000000000 [ 498.088631][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.088642][ C0] R13: 000000000000000b R14: 00007f5860703fa0 R15: 00007fffb81df7d8 [ 498.088661][ C0] [ 498.089561][ C1] task:syz-executor state:R running task stack:20128 pid:7184 tgid:7184 ppid:7171 flags:0x00000000 [ 498.718363][ C1] Call Trace: [ 498.721749][ C1] [ 498.724707][ C1] __schedule+0x1796/0x49d0 [ 498.729260][ C1] ? __pfx___schedule+0x10/0x10 [ 498.734135][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.740148][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 498.745386][ C1] ? preempt_schedule+0xe1/0xf0 [ 498.750261][ C1] preempt_schedule_common+0x84/0xd0 [ 498.755577][ C1] preempt_schedule+0xe1/0xf0 [ 498.760273][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 498.765667][ C1] ? __page_table_check_ptes_set+0x30f/0x410 [ 498.771678][ C1] ? copy_pmd_range+0x7a46/0x84c0 [ 498.776731][ C1] preempt_schedule_thunk+0x1a/0x30 [ 498.781979][ C1] _raw_spin_unlock+0x3e/0x50 [ 498.786683][ C1] copy_pmd_range+0x7aa1/0x84c0 [ 498.791575][ C1] ? 0xffffffffa0003b40 [ 498.795775][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 498.801030][ C1] ? look_up_lock_class+0x77/0x160 [ 498.806173][ C1] ? register_lock_class+0x102/0x980 [ 498.811571][ C1] ? mark_lock+0x9a/0x350 [ 498.815930][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 498.821582][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.827595][ C1] ? mark_lock+0x9a/0x350 [ 498.831955][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 498.837024][ C1] copy_page_range+0x99f/0xe90 [ 498.841834][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 498.847147][ C1] ? __pfx_up_write+0x10/0x10 [ 498.851853][ C1] ? __asan_memset+0x23/0x50 [ 498.856473][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 498.863257][ C1] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 498.869526][ C1] copy_mm+0x128d/0x2020 [ 498.873822][ C1] ? __pfx_copy_mm+0x10/0x10 [ 498.878449][ C1] ? __init_rwsem+0x122/0x160 [ 498.883153][ C1] ? copy_signal+0x549/0x670 [ 498.887771][ C1] copy_process+0x187a/0x3dc0 [ 498.892502][ C1] ? copy_process+0xa03/0x3dc0 [ 498.897307][ C1] ? __pfx_copy_process+0x10/0x10 [ 498.902401][ C1] kernel_clone+0x223/0x870 [ 498.906941][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 498.912011][ C1] __x64_sys_clone+0x258/0x2a0 [ 498.916909][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 498.922241][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.928275][ C1] ? exc_page_fault+0x590/0x8c0 [ 498.933167][ C1] ? do_syscall_64+0xb6/0x230 [ 498.937888][ C1] do_syscall_64+0xf3/0x230 [ 498.942446][ C1] ? clear_bhb_loop+0x35/0x90 [ 498.947185][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.953126][ C1] RIP: 0033:0x7f44e476c453 [ 498.957577][ C1] RSP: 002b:00007ffd7219dbd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 498.966022][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44e476c453 [ 498.974017][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 498.982024][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 498.990037][ C1] R10: 000055558c2f37d0 R11: 0000000000000246 R12: 0000000000000000 [ 498.998046][ C1] R13: 0000000000001388 R14: 0000000000000001 R15: 00007ffd7219dd90 [ 499.006066][ C1] [ 499.009104][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g59873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 499.020324][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 499.030311][ C1] rcu: RCU grace-period kthread stack dump: [ 499.036222][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 499.047989][ C1] Call Trace: [ 499.051387][ C1] [ 499.054344][ C1] __schedule+0x1796/0x49d0 [ 499.058903][ C1] ? __pfx___schedule+0x10/0x10 [ 499.063782][ C1] ? __pfx_lock_release+0x10/0x10 [ 499.068831][ C1] ? __asan_memset+0x23/0x50 [ 499.073455][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 499.079380][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.085733][ C1] ? schedule+0x90/0x320 [ 499.089996][ C1] schedule+0x14b/0x320 [ 499.094177][ C1] schedule_timeout+0x1be/0x310 [ 499.099059][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 499.104466][ C1] ? __pfx_process_timeout+0x10/0x10 [ 499.109786][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 499.115385][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 499.120707][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 499.127231][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 499.132534][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 499.138466][ C1] ? finish_swait+0xd4/0x1e0 [ 499.143088][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 499.147708][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 499.152926][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 499.158858][ C1] ? __kthread_parkme+0x169/0x1d0 [ 499.163910][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 499.169139][ C1] kthread+0x2f0/0x390 [ 499.173233][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 499.178450][ C1] ? __pfx_kthread+0x10/0x10 [ 499.183075][ C1] ret_from_fork+0x4b/0x80 [ 499.187518][ C1] ? __pfx_kthread+0x10/0x10 [ 499.192135][ C1] ret_from_fork_asm+0x1a/0x30 [ 499.196948][ C1] [ 499.199983][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 499.206318][ C1] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0 [ 499.216493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 499.226564][ C1] Workqueue: events_unbound toggle_allocation_gate [ 499.233094][ C1] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 499.239887][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 c9 0c 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 74 08 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 58 08 [ 499.259534][ C1] RSP: 0018:ffffc90000107700 EFLAGS: 00000293 [ 499.265634][ C1] RAX: ffffffff818a20f8 RBX: 1ffff11017288c01 RCX: ffff8880172b3c00 [ 499.273717][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 499.281706][ C1] RBP: ffffc900001078e0 R08: ffffffff818a20c7 R09: 1ffffffff25ee2b0 [ 499.289697][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: dffffc0000000000 [ 499.297691][ C1] R13: ffff8880b9446008 R14: ffff8880b953f880 R15: 0000000000000000 [ 499.305703][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 499.314762][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.321376][ C1] CR2: 0000001b31c1eff8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 499.329378][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.337464][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.345455][ C1] Call Trace: [ 499.348755][ C1] [ 499.351620][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 499.357983][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 499.363656][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 499.369493][ C1] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 499.375783][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 499.382229][ C1] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 499.387639][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 499.393477][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 499.398706][ C1] ? acct_account_cputime+0x207/0x210 [ 499.404194][ C1] ? update_process_times+0x1ce/0x230 [ 499.409597][ C1] ? tick_nohz_handler+0x37c/0x500 [ 499.414749][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 499.420245][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 499.425645][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 499.431668][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 499.437417][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 499.443524][ C1] ? hrtimer_interrupt+0x396/0x990 [ 499.448695][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 499.454885][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 499.460730][ C1] [ 499.463767][ C1] [ 499.466896][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 499.473092][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 499.479280][ C1] ? smp_call_function_many_cond+0x1878/0x29d0 [ 499.485472][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 499.491661][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 499.497764][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 499.502824][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 499.508940][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 499.515298][ C1] ? __pfx___might_resched+0x10/0x10 [ 499.520696][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 499.526270][ C1] ? __pfx___might_resched+0x10/0x10 [ 499.531588][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 499.536637][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 499.541781][ C1] text_poke_bp_batch+0x352/0xb30 [ 499.546846][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 499.552420][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 499.557492][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 499.563946][ C1] text_poke_finish+0x30/0x50 [ 499.568646][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 499.575003][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 499.581024][ C1] static_key_enable+0x1a/0x20 [ 499.585818][ C1] toggle_allocation_gate+0xb5/0x250 [ 499.591388][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 499.597319][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.603689][ C1] ? process_scheduled_works+0x945/0x1830 [ 499.609439][ C1] process_scheduled_works+0xa2c/0x1830 [ 499.615038][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.621052][ C1] ? assign_work+0x364/0x3d0 [ 499.625672][ C1] worker_thread+0x86d/0xd50 [ 499.630305][ C1] ? __kthread_parkme+0x169/0x1d0 [ 499.635360][ C1] ? __pfx_worker_thread+0x10/0x10 [ 499.640501][ C1] kthread+0x2f0/0x390 [ 499.644605][ C1] ? __pfx_worker_thread+0x10/0x10 [ 499.649744][ C1] ? __pfx_kthread+0x10/0x10 [ 499.654372][ C1] ret_from_fork+0x4b/0x80 [ 499.658825][ C1] ? __pfx_kthread+0x10/0x10 [ 499.663441][ C1] ret_from_fork_asm+0x1a/0x30 [ 499.668338][ C1]