last executing test programs: 25m21.197387181s ago: executing program 2 (id=136): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xa2, &(0x7f0000000000)={0x401, 0x1, 0xc}) mq_timedreceive(r8, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 25m17.542185764s ago: executing program 2 (id=140): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa10000, 0x7eeee938, 0x7f, r0, 0x0, &(0x7f0000000140)={0x9909de, 0x0, '\x00', @p_u8=0x0}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000003f40)={'veth1_to_team\x00', @ifru_names='vcan0\x00'}) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0x5, &(0x7f0000000340)=0x1002) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002240)=ANY=[@ANYBLOB="0000000000005a46f309575eed55fe21aa65a726919e81383f7860369aba80efff7ce6ceb7026c5afe8d7c799675bc0fe648a6e1721b0c5447a068f20f1b838a7af5cd301e6b6bd43caa94ae32513218ffda0b7d1c5685dccd419f48f0b9f9bb0ac226cb7c7be70e2db2414de477b342b2fa8556f542b123fb5615974c0d8bdab30b20fe28a790fd2f2b5b9d4d17fef4fe17b3e21c354b53d284267e5ee64d7dbaa21a0959cc79f0ce5426993d8a9a20eb15dbdd6998122a5b8a07428fc7c674809583b6489ff2d77935e230e51d1e29a26630dfd7e799b74d79b13f19045cbaa081da260f3e422894bfe6a4e6", @ANYRESOCT, @ANYBLOB="3b263dbc6b5e7ee6517de51606f5d51d7b1d4eaf23a2918e8d0117cd0a", @ANYRESDEC], 0x6) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='1', 0x1}], 0x1, 0x0, 0x0, 0x18000}, 0x4040880) 25m16.369570625s ago: executing program 2 (id=145): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xa2, &(0x7f0000000000)={0x401, 0x1, 0xc}) mq_timedreceive(r8, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 25m11.169430405s ago: executing program 2 (id=151): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xa2, &(0x7f0000000000)={0x401, 0x1, 0xc}) mq_timedreceive(r8, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 25m8.846945987s ago: executing program 2 (id=158): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f0000000100)=""/46) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc058560f, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) 25m4.977923307s ago: executing program 2 (id=164): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f0000000100)=""/46) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc058560f, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) 24m49.484942132s ago: executing program 32 (id=164): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f0000000100)=""/46) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc058560f, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) 18m30.466377487s ago: executing program 5 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 18m28.648849356s ago: executing program 5 (id=1100): socket$alg(0x26, 0x5, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x4) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0xb, 0x100) chdir(0x0) pipe2$9p(0x0, 0x80880) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0xc0ff) 18m25.319334452s ago: executing program 5 (id=1109): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x6576, 0xb}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x151ff000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001480)={0xfc, {"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", 0xfffffdc3}}, 0x1039) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, 0x0, 0xd0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0x47e2, 0x20, 0x843e}, 0x2f) r5 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r8, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18m23.092064556s ago: executing program 5 (id=1112): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000000), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r1 = syz_open_pts(r0, 0x801) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 18m22.908520187s ago: executing program 5 (id=1113): syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1}, 0x0) 18m19.954512087s ago: executing program 5 (id=1119): socket$alg(0x26, 0x5, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x4) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0xb, 0x100) chdir(0x0) pipe2$9p(0x0, 0x80880) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0xc0ff) 18m4.585415102s ago: executing program 33 (id=1119): socket$alg(0x26, 0x5, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x4) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0xb, 0x100) chdir(0x0) pipe2$9p(0x0, 0x80880) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0xc0ff) 3m28.740236308s ago: executing program 4 (id=3022): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x48, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = io_uring_setup(0x39fb, &(0x7f0000000040)={0x0, 0x2ae7, 0x80, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT, @ANYRESDEC=r6], 0x0) 3m24.219475374s ago: executing program 4 (id=3033): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd48", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3m23.032252595s ago: executing program 4 (id=3036): epoll_create(0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8}]}, 0x40}}, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000010c0)=0x8, 0x4) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) 3m17.743507566s ago: executing program 4 (id=3045): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045438, 0x300000000000000) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x50) readv(r3, &(0x7f0000001980), 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x20, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, 0x0, &(0x7f00000000c0)=r4}, 0x20) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) pause() 3m15.250845522s ago: executing program 4 (id=3052): epoll_create(0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8}]}, 0x40}}, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) 3m13.424391636s ago: executing program 4 (id=3055): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) 2m58.205486325s ago: executing program 34 (id=3055): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) 4.068725125s ago: executing program 3 (id=3672): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 3.768666904s ago: executing program 3 (id=3679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0xa041) 2.789509724s ago: executing program 3 (id=3688): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.288161973s ago: executing program 1 (id=3700): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 2.08824485s ago: executing program 1 (id=3702): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 2.021681388s ago: executing program 1 (id=3704): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$selinux_access(r0, &(0x7f0000000180)={'system_u:object_r:inetd_log_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x8}, 0x4d) 1.848129217s ago: executing program 1 (id=3706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 1.783552847s ago: executing program 6 (id=3708): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x58, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x5}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x58}}, 0x40800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) sendmsg$inet(r4, &(0x7f00000008c0)={&(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000740)="a9eb15ec0026f57053c0a91144f8a06beb11bd4c57b506a1164e45dff0889d96a1bf5cdf2d4ec1d25300b2c86c786e6f50921b0c95e219f32e7abdd90b4b2e5eed188581", 0x44}, {&(0x7f0000000840)="6d42d1b9005e2dab2ae4c8b02cc66002a15e57d30509fded2e101aaa7624d361a4d1f2bb236dcba937b46bb884399fb0dea2a6960f06b5f963aa016cc6e9e787c3b05af8104882296e074a0bc6910b534debe00be7782c2b79b911c63951c0322d71585929431fd66b5112fbd8cd51", 0x6f}], 0x3, &(0x7f00000007c0)=[@ip_ttl={{0x14}}], 0x18}, 0x8000) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x800}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86", 0x15}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.763570344s ago: executing program 1 (id=3709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 1.555998029s ago: executing program 1 (id=3710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.097572488s ago: executing program 0 (id=3716): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 992.132262ms ago: executing program 0 (id=3718): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_emit_ethernet(0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="ffff"], 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 924.246502ms ago: executing program 6 (id=3719): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 827.303095ms ago: executing program 6 (id=3721): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x18) dup3(r1, r0, 0x0) 748.205511ms ago: executing program 0 (id=3722): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 747.994082ms ago: executing program 7 (id=3723): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 676.052654ms ago: executing program 7 (id=3724): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) 635.490968ms ago: executing program 0 (id=3725): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 564.083695ms ago: executing program 6 (id=3726): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 563.771842ms ago: executing program 7 (id=3727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x8, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 514.891494ms ago: executing program 3 (id=3728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000440)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "09cf88f0a1"}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x8}}}}}, 0x0) 429.790213ms ago: executing program 7 (id=3729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x53a3, &(0x7f00000005c0)={0x0, 0x28d8, 0x10, 0x0, 0x390}, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 412.484528ms ago: executing program 0 (id=3730): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) 254.29826ms ago: executing program 6 (id=3731): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8001, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) 253.663545ms ago: executing program 3 (id=3732): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 177.343588ms ago: executing program 7 (id=3733): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20004000) 161.546739ms ago: executing program 3 (id=3734): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0)={{0x87, @multicast1, 0x4e21, 0x4, 'ovf\x00', 0x8, 0x4, 0x5f}, {@loopback, 0x4e20, 0x3, 0x0, 0x4, 0x9}}, 0x44) ioctl$KVM_NMI(r3, 0xae9a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 124.781205ms ago: executing program 0 (id=3735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x170, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x6}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd2d, 0x70bd25, 0x70bd2d, 0x1, [0x5]}}]}, 0x170}}, 0x4000080) sendfile(r1, r2, 0x0, 0x200) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000186300000300000000000000010000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x59, &(0x7f0000000800)=""/89, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xb, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000900)=[r2, r1, r2, r1], &(0x7f0000000940)=[{0x1, 0x1, 0x1, 0x3}, {0x5, 0x5, 0x10, 0xb}], 0x10, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='module_free\x00', r4, 0x0, 0x4}, 0x31) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000eb2bdead7e8195457b1f7f8a3d866dad2919660e63036d2e28aa32ee96bb485d321ef62c643a6c92ecc1077d2e6c2395a12b20d14e33ea0014cc350cede84eeef9b1f46a333a10c26a9c748f7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioperm(0x57, 0x7, 0x2) utimes(0x0, 0x0) setreuid(0x0, 0xee00) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="4200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000100)=r4}, 0x20) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)) 124.297305ms ago: executing program 6 (id=3736): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpc_buf_alloc\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 0s ago: executing program 7 (id=3737): io_setup(0x5, &(0x7f0000001140)) io_setup(0x7, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x3b, &(0x7f0000000280)=""/59, 0x40f00, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x6, 0x7e05}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x4, 0xa, 0x7}, {0x1, 0x3, 0x6, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x3, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r1, r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) io_setup(0x253, &(0x7f00000000c0)) io_setup(0x7bba, &(0x7f0000000080)) io_setup(0x2, &(0x7f0000001180)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x141202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000580), 0x106, 0x4}}, 0x20) kernel console output (not intermixed with test programs): isconnect, device number 31 [ 972.454254][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 972.516031][T15476] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 972.605085][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 972.630579][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 972.979004][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 972.988714][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 976.278020][T15496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 976.290265][T15500] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 976.315984][T10270] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 976.323061][T15496] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 976.485770][T15496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 977.304491][T15496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 977.310681][T15496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 977.511167][T10270] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 977.658545][T15512] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 978.039166][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 978.594789][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 978.638656][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 978.651911][T15528] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 979.363170][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 979.363191][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 979.363205][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 979.405925][T10270] Bluetooth: hci3: command 0x0c1a tx timeout [ 979.405975][T10270] Bluetooth: hci4: command 0x0406 tx timeout [ 979.406003][T10270] Bluetooth: hci2: command 0x0406 tx timeout [ 985.453488][T10270] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 985.772399][T15569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 985.803269][T15574] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 985.812462][T15569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 985.819788][T15569] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 985.825915][T15569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 985.860258][T15588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 985.965149][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 986.111443][T15588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15588 comm=syz.0.2132 [ 986.141029][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 986.174473][T15588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15588 comm=syz.0.2132 [ 986.193862][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'. [ 986.339305][T13700] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 986.447161][T15593] bond3 (unregistering): Released all slaves [ 986.509402][T13700] usb 4-1: Using ep0 maxpacket: 32 [ 986.540648][T13700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.580614][T13700] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 986.923142][T13700] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 986.938091][T13700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.978702][T13700] usb 4-1: config 0 descriptor?? [ 987.000917][T13700] usb 4-1: can't set config #0, error -71 [ 987.019910][T13700] usb 4-1: USB disconnect, device number 30 [ 988.234633][T14936] Bluetooth: hci1: command 0x0406 tx timeout [ 988.234673][T14936] Bluetooth: hci3: command 0x0c1a tx timeout [ 988.234701][T14936] Bluetooth: hci4: command 0x0406 tx timeout [ 988.234728][T14936] Bluetooth: hci2: command 0x0406 tx timeout [ 994.243902][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.250275][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.342844][ T9814] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 996.367038][T15660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 997.461466][T15671] overlayfs: failed to resolve './file0': -2 [ 1001.009169][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'. [ 1001.037007][T15684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1002.049641][T15695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15695 comm=syz.0.2155 [ 1002.844776][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'. [ 1002.895044][T15684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15684 comm=syz.0.2155 [ 1002.908994][T15684] netlink: 'syz.0.2155': attribute type 1 has an invalid length. [ 1004.835003][ T5867] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1005.717691][T15093] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1006.048916][T15093] usb 5-1: Using ep0 maxpacket: 32 [ 1006.055457][T15093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.065695][T15093] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1006.074733][T15093] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1006.083887][T15093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.233449][T15093] usb 5-1: config 0 descriptor?? [ 1008.644435][T13700] usb 5-1: USB disconnect, device number 32 [ 1011.471582][T15093] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1012.679860][T15093] usb 7-1: Using ep0 maxpacket: 32 [ 1012.689122][T15093] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.699261][T15093] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1012.708224][T15093] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1012.828955][T15093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.865373][T15093] usb 7-1: config 0 descriptor?? [ 1012.872376][T15093] usb 7-1: can't set config #0, error -71 [ 1012.878806][T15093] usb 7-1: USB disconnect, device number 15 [ 1017.751978][ T29] audit: type=1400 audit(1736032934.123:280): avc: denied { setopt } for pid=15828 comm="syz.1.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1041.298944][ T9814] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1043.883039][ T9814] usb 2-1: Using ep0 maxpacket: 32 [ 1044.240666][ T9814] usb 2-1: device descriptor read/all, error -71 [ 1052.668953][ T47] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1052.978964][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 1052.985464][ T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.002168][ T47] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1053.680598][ T47] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1053.689912][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.719058][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 1053.728735][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 1053.737477][ T47] usb 7-1: config 0 descriptor?? [ 1053.738107][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 1053.748452][ T47] usb 7-1: can't set config #0, error -71 [ 1053.861530][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 1053.889405][ T47] usb 7-1: USB disconnect, device number 16 [ 1054.740444][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 1054.771668][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.777970][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.181389][T16079] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1059.717954][T16124] syz.1.2258 uses obsolete (PF_INET,SOCK_PACKET) [ 1059.799131][ T29] audit: type=1400 audit(1736032976.123:281): avc: denied { getopt } for pid=16123 comm="syz.1.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1059.961027][ T29] audit: type=1400 audit(1736032976.123:282): avc: denied { read } for pid=16123 comm="syz.1.2258" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1060.936735][ T29] audit: type=1400 audit(1736032976.123:283): avc: denied { open } for pid=16123 comm="syz.1.2258" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1061.968937][ T5867] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1064.570752][T16161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1085.441895][T16318] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1085.956456][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 1085.967134][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 1085.976038][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 1085.990127][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 1086.002051][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 1086.009463][T10938] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1088.450653][T10938] usb 2-1: device not accepting address 18, error -71 [ 1091.255449][T16373] overlayfs: failed to resolve './file1': -2 [ 1092.587588][T16377] IPVS: stopping master sync thread 16383 ... [ 1093.929252][T16392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.608994][T10938] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1094.677303][T16398] IPVS: stopping master sync thread 16407 ... [ 1094.729005][T16408] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1094.729345][T16404] IPVS: stopping master sync thread 16408 ... [ 1095.518949][T10938] usb 2-1: Using ep0 maxpacket: 32 [ 1095.525192][T10938] usb 2-1: device descriptor read/all, error -71 [ 1095.544968][T16412] IPVS: stopping master sync thread 16413 ... [ 1095.548050][T16413] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1097.129038][T16428] overlayfs: failed to resolve './file0': -2 [ 1099.613684][T16454] overlayfs: failed to resolve './file1': -2 [ 1106.030843][T16496] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1106.309810][T16496] fuse: Invalid rootmode [ 1106.956394][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1106.988669][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1107.109336][T16493] overlayfs: failed to resolve './file1': -2 [ 1107.255419][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1107.264707][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1107.293226][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1108.000789][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1108.285898][T16505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.149136][T16514] IPVS: stopping master sync thread 16513 ... [ 1110.155334][T16513] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1111.188447][T16524] overlayfs: failed to resolve './file0': -2 [ 1113.099768][T16540] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1113.128917][T16539] IPVS: stopping master sync thread 16540 ... [ 1116.511713][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.520945][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.217739][T16583] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1119.094068][ T5867] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1119.543603][ T5867] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1119.553424][ T5867] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1119.630460][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1119.697545][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1119.728858][ T5867] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1119.828423][ T5867] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1119.844821][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1119.859004][ T5867] usb 5-1: Product: syz [ 1119.869114][ T5867] usb 5-1: Manufacturer: syz [ 1120.211379][ T5867] cdc_wdm 5-1:1.0: skipping garbage [ 1120.216614][ T5867] cdc_wdm 5-1:1.0: skipping garbage [ 1120.279077][ T5867] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1120.285001][ T5867] cdc_wdm 5-1:1.0: Unknown control protocol [ 1122.564320][ T47] usb 5-1: USB disconnect, device number 33 [ 1123.078916][ T5867] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1125.501435][T16649] IPVS: stopping master sync thread 16650 ... [ 1125.530828][ T5867] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1125.539514][ T5867] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1125.550617][ T5867] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1125.569102][ T5867] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1125.580257][ T5867] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1125.617527][ T5867] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1125.681025][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1126.699601][ T5867] usb 7-1: Product: syz [ 1126.703838][ T5867] usb 7-1: Manufacturer: syz [ 1126.731957][ T5867] usb 7-1: can't set config #1, error -71 [ 1126.926865][T16659] IPVS: stopping master sync thread 16583 ... [ 1127.702666][ T5867] usb 7-1: USB disconnect, device number 17 [ 1137.284771][T16730] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1137.390304][T16730] fuse: Unknown parameter '0x000000000000000d' [ 1137.489334][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1137.498406][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1137.527177][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1137.542252][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1138.078998][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1138.123273][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 1138.925125][T16743] IPVS: stopping master sync thread 16746 ... [ 1144.463689][T16792] IPVS: stopping master sync thread 16793 ... [ 1144.469881][T16793] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1151.768950][T16838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1152.280264][T16835] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1152.668026][T16836] fuse: Unknown parameter 'fd0x000000000000000d' [ 1152.878995][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1152.909023][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1152.917892][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1152.967769][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1153.103698][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1153.118048][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1158.488887][ T5867] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1158.822392][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 1158.846895][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.907853][ T5867] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1158.917429][ T5867] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1158.927063][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.942254][ T5867] usb 2-1: config 0 descriptor?? [ 1159.003387][T16893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1160.708785][ T9814] usb 2-1: USB disconnect, device number 22 [ 1161.732451][T16918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1161.768921][T16916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.303551][T16912] IPVS: stopping master sync thread 16921 ... [ 1163.523181][T16930] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1163.539050][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2453'. [ 1163.898915][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2453'. [ 1164.083959][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2453'. [ 1164.110512][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2453'. [ 1164.148981][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2453'. [ 1165.494778][T16952] nbd: must specify a size in bytes for the device [ 1166.080809][T16962] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1166.149046][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 1166.157946][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 1166.248276][T16966] usb usb1: usbfs: process 16966 (syz.4.2464) did not claim interface 0 before use [ 1166.561571][T16966] fuse: Bad value for 'user_id' [ 1166.651666][T16966] fuse: Bad value for 'user_id' [ 1166.688526][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 1166.705701][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 1166.742872][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 1168.901861][T16990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.243488][T17007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.539098][T17029] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1174.476509][T17047] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1176.920050][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.926433][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.731162][T17098] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1180.382732][T17107] ALSA: mixer_oss: invalid OSS volume '' [ 1181.189028][ T47] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1182.130929][ T47] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1182.155345][ T47] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1182.194816][ T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1182.204741][ T47] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1182.223988][ T47] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1182.263173][ T47] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1182.281227][ T47] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1182.293143][ T47] usb 7-1: Product: syz [ 1182.297330][ T47] usb 7-1: Manufacturer: syz [ 1182.308920][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1182.313708][ T47] cdc_wdm 7-1:1.0: skipping garbage [ 1182.329446][ T47] cdc_wdm 7-1:1.0: skipping garbage [ 1182.335661][ T47] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1182.356420][ T47] cdc_wdm 7-1:1.0: Unknown control protocol [ 1182.468945][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1182.485166][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.518966][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1182.527930][ T9] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1182.580033][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.614337][ T9] usb 4-1: config 0 descriptor?? [ 1183.709654][T17149] ALSA: mixer_oss: invalid OSS volume '' [ 1184.609618][ T5867] usb 7-1: USB disconnect, device number 18 [ 1184.669298][ T47] usb 4-1: USB disconnect, device number 32 [ 1187.430808][T17180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.487405][T17193] usb usb1: usbfs: process 17193 (syz.4.2519) did not claim interface 0 before use [ 1189.700256][T17193] fuse: Unknown parameter 'use00000000000000000000' [ 1191.665713][T17215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.164059][T17217] ALSA: mixer_oss: invalid OSS volume '' [ 1194.896668][T17247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1199.489948][ T9814] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1199.893554][T17278] ALSA: mixer_oss: invalid OSS volume '' [ 1201.449904][ T9814] usb 5-1: Using ep0 maxpacket: 32 [ 1203.131627][ T9814] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1203.139248][ T9814] usb 5-1: can't read configurations, error -71 [ 1206.746046][T17336] ALSA: mixer_oss: invalid OSS volume '' [ 1207.738869][T15093] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1207.908825][T15093] usb 7-1: Using ep0 maxpacket: 32 [ 1207.915293][T15093] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.948861][T15093] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1207.958007][T15093] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1207.967482][T15093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.127876][T15093] usb 7-1: config 0 descriptor?? [ 1209.915724][T15093] usb 7-1: USB disconnect, device number 19 [ 1210.951031][T17376] ALSA: mixer_oss: invalid OSS volume '' [ 1210.972171][T17369] ALSA: mixer_oss: invalid OSS volume '' [ 1212.560529][T17389] usb usb1: usbfs: process 17389 (syz.3.2569) did not claim interface 0 before use [ 1212.577414][T17389] fuse: Unknown parameter 'user_id00000000000000000000' [ 1218.344191][T17436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.766918][ T9814] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1219.028920][ T9814] usb 2-1: Using ep0 maxpacket: 32 [ 1219.035512][ T9814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.004751][ T9814] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1220.013793][ T9814] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1220.022887][ T9814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.650098][ T9814] usb 2-1: config 0 descriptor?? [ 1220.656371][ T9814] usb 2-1: can't set config #0, error -71 [ 1220.664453][ T9814] usb 2-1: USB disconnect, device number 23 [ 1221.888899][T10938] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1222.038888][T10938] usb 5-1: Using ep0 maxpacket: 32 [ 1222.216855][T10938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.227014][T10938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1223.183767][T10938] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1223.253222][T10938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.369604][T10938] usb 5-1: config 0 descriptor?? [ 1224.374857][T10938] usb 5-1: can't set config #0, error -71 [ 1224.381669][T10938] usb 5-1: USB disconnect, device number 36 [ 1225.774607][ T5870] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1239.194734][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.201077][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.893334][T17570] ALSA: mixer_oss: invalid OSS volume '' [ 1245.782438][T17624] ALSA: mixer_oss: invalid OSS volume '' [ 1248.071435][T17647] usb usb1: usbfs: process 17647 (syz.1.2635) did not claim interface 0 before use [ 1253.096047][T17676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1254.006062][ T5867] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1257.714235][T17702] ALSA: mixer_oss: invalid OSS volume '' [ 1262.225775][T17748] overlayfs: failed to resolve './file1': -2 [ 1262.589677][T17750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.595917][ T5870] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1263.378964][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 1263.394803][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.468165][ T5870] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1263.683997][ T5870] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1263.693256][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.798390][ T5870] usb 4-1: config 0 descriptor?? [ 1263.864703][T17765] overlayfs: failed to resolve './file1': -2 [ 1265.603842][ T9814] usb 4-1: USB disconnect, device number 34 [ 1267.402175][T15093] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1268.716432][T17795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.372934][T17803] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1273.578850][T10938] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1283.196577][T17922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1284.127859][T17929] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1284.743693][T17926] ALSA: mixer_oss: invalid OSS volume '' [ 1286.789614][ T9814] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1287.891930][T15093] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1288.237586][T17957] overlayfs: failed to resolve './file0': -2 [ 1288.267909][ T9814] usb 7-1: device not accepting address 20, error -71 [ 1293.313551][T17996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.627947][T18008] overlayfs: failed to resolve './file1': -2 [ 1298.042314][ T5870] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1298.635577][T18036] overlayfs: missing 'lowerdir' [ 1300.536834][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.543289][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.648805][ T5870] usb 5-1: device not accepting address 38, error -71 [ 1302.131845][T18056] overlayfs: failed to resolve './file0': -2 [ 1304.244571][T18067] ALSA: mixer_oss: invalid OSS volume '' [ 1307.766297][T18097] __nla_validate_parse: 1 callbacks suppressed [ 1307.766702][T18097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1307.833926][ T5870] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1310.515964][T15093] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1311.127100][T15093] usb 5-1: Using ep0 maxpacket: 32 [ 1311.133750][T15093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.269597][T15093] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1311.278580][T15093] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1311.288468][T15093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.298183][T15093] usb 5-1: config 0 descriptor?? [ 1311.378634][T18133] overlayfs: missing 'lowerdir' [ 1311.383960][T15093] usb 5-1: can't set config #0, error -71 [ 1311.415733][T15093] usb 5-1: USB disconnect, device number 40 [ 1314.415003][T15093] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1317.924327][ T5867] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1318.969301][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 1318.975962][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.986263][ T5867] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1319.211051][ T5867] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1319.220278][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.234245][ T5867] usb 5-1: config 0 descriptor?? [ 1319.309088][ T5867] usb 5-1: can't set config #0, error -71 [ 1319.316576][ T5867] usb 5-1: USB disconnect, device number 41 [ 1322.050458][T18223] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2772'. [ 1322.733085][T18230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.302591][T18242] overlayfs: failed to resolve './file0': -2 [ 1326.023109][T18260] IPVS: stopping master sync thread 18262 ... [ 1327.724065][T15093] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1327.764639][ T5867] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1327.923076][T18278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.948971][T15093] usb 7-1: Using ep0 maxpacket: 32 [ 1327.955466][T15093] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.972308][T15093] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1327.981682][T15093] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1327.991101][T15093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.163334][T15093] usb 7-1: config 0 descriptor?? [ 1328.364469][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 1328.414938][ T5867] usb 4-1: device descriptor read/all, error -71 [ 1329.841544][ T9] usb 7-1: USB disconnect, device number 22 [ 1336.444601][T18344] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1336.776539][T18344] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1337.850142][T18344] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1337.850538][T10270] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1337.856129][T18344] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1339.518852][T10270] Bluetooth: hci2: command 0x0406 tx timeout [ 1339.528791][T10270] Bluetooth: hci1: command 0x0406 tx timeout [ 1339.867765][T14936] Bluetooth: hci4: command 0x0406 tx timeout [ 1339.938815][T14936] Bluetooth: hci3: command 0x0c1a tx timeout [ 1342.412734][T18391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1348.297317][T18440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.459154][T18481] overlayfs: failed to resolve './file0': -2 [ 1355.618842][T10938] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1356.649144][T10938] usb 2-1: Using ep0 maxpacket: 32 [ 1357.082638][T10938] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1357.090367][T10938] usb 2-1: can't read configurations, error -71 [ 1359.477728][T18515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1359.483871][T18515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1359.508421][T18515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1359.514936][T18515] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1361.670022][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.676330][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.727207][T10270] Bluetooth: hci3: command 0x0c1a tx timeout [ 1361.737703][T10270] Bluetooth: hci4: command 0x0406 tx timeout [ 1361.743955][T10270] Bluetooth: hci2: command 0x0406 tx timeout [ 1361.750710][T10270] Bluetooth: hci1: command 0x0406 tx timeout [ 1364.678934][T15093] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1365.092347][T15093] usb 7-1: Using ep0 maxpacket: 32 [ 1365.207337][T15093] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.259069][T15093] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1365.268105][T15093] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1365.277569][T15093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.286984][T15093] usb 7-1: config 0 descriptor?? [ 1366.057950][T18590] overlayfs: failed to resolve './file1': -2 [ 1369.545551][ T5870] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1369.728311][T15093] usb 7-1: can't set config #0, error -71 [ 1369.735425][T15093] usb 7-1: USB disconnect, device number 23 [ 1370.872286][T18632] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1372.982750][T18652] IPVS: stopping master sync thread 18632 ... [ 1373.318672][T18655] overlayfs: failed to resolve './file1': -2 [ 1377.539067][ T5870] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1377.629124][T15093] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1377.739190][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 1377.798905][T15093] usb 7-1: Using ep0 maxpacket: 32 [ 1377.859892][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.876852][T15093] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.907419][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1377.917818][T15093] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1377.962558][ T5870] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1378.118842][T15093] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1378.131687][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.355634][T15093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.371627][ T5870] usb 5-1: config 0 descriptor?? [ 1378.380340][T15093] usb 7-1: config 0 descriptor?? [ 1378.429447][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1378.610840][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1378.624107][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1378.633298][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1378.643571][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1378.655818][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1378.659009][T18705] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1378.854310][T18708] ALSA: mixer_oss: invalid OSS volume '' [ 1379.368995][T18714] overlayfs: failed to resolve './file1': -2 [ 1379.917007][T10938] usb 5-1: USB disconnect, device number 43 [ 1380.049973][T18718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2892'. [ 1380.170170][T15093] usb 7-1: USB disconnect, device number 24 [ 1383.095380][ T5867] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1384.808788][T18758] ALSA: mixer_oss: invalid OSS volume '' [ 1385.382844][T10938] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1385.548890][T10938] usb 5-1: Using ep0 maxpacket: 32 [ 1385.555597][T10938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.515084][T10938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1386.524202][T10938] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1386.533333][T10938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.573664][T10938] usb 5-1: config 0 descriptor?? [ 1387.299465][T10938] usb 5-1: USB disconnect, device number 44 [ 1389.890157][ T5870] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1390.969805][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 1391.610685][ T5870] usb 5-1: device descriptor read/all, error -71 [ 1392.669873][T18807] ALSA: mixer_oss: invalid OSS volume '' [ 1392.837076][T18815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1393.141879][T15093] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1400.259715][T18860] ALSA: mixer_oss: invalid OSS volume '' [ 1402.378925][T15093] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1403.238837][T15093] usb 4-1: Using ep0 maxpacket: 32 [ 1403.246273][T15093] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.524738][T15093] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1403.534017][T15093] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1403.543468][T15093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.980353][T15093] usb 4-1: config 0 descriptor?? [ 1405.181929][T18913] IPVS: stopping master sync thread 18909 ... [ 1405.391324][T18918] ALSA: mixer_oss: invalid OSS volume '' [ 1409.008919][T15093] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1409.238894][T15093] usb 5-1: Using ep0 maxpacket: 32 [ 1409.245519][T15093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.266374][T15093] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1409.278085][T15093] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1409.451200][T15093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.520368][ T9] usb 4-1: USB disconnect, device number 40 [ 1409.523704][T15093] usb 5-1: config 0 descriptor?? [ 1411.561677][T15093] usb 5-1: USB disconnect, device number 47 [ 1418.691000][T14862] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1418.889057][T14862] usb 4-1: Using ep0 maxpacket: 32 [ 1419.076056][T14862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.458816][T14862] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1419.467845][T14862] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1419.477145][T14862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.525675][T14862] usb 4-1: config 0 descriptor?? [ 1419.883510][T19029] IPVS: stopping master sync thread 17029 ... [ 1421.254394][T15093] usb 4-1: USB disconnect, device number 41 [ 1423.219372][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.225690][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.399008][T14862] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1427.758957][T14862] usb 2-1: Using ep0 maxpacket: 32 [ 1428.042163][T14862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.052426][T14862] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1428.061418][T14862] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1428.070572][T14862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.080820][T14862] usb 2-1: config 0 descriptor?? [ 1429.785395][ T5870] usb 2-1: USB disconnect, device number 30 [ 1432.788402][T19145] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1432.817348][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1432.855873][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1432.910876][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1432.988898][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1433.118556][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1433.169610][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1434.420986][T19163] netlink: 5128 bytes leftover after parsing attributes in process `syz.6.3002'. [ 1434.434162][T19163] netlink: 5128 bytes leftover after parsing attributes in process `syz.6.3002'. [ 1435.276747][T13700] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1435.735480][T19176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1436.154504][T13700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1436.179906][T13700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1436.366630][T13700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1436.780791][T13700] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1436.820863][T13700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.108827][T13700] usb 7-1: Product: syz [ 1437.118815][T13700] usb 7-1: Manufacturer: syz [ 1437.128875][T13700] usb 7-1: SerialNumber: syz [ 1437.140291][T13700] usb 7-1: config 0 descriptor?? [ 1437.900964][T13700] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1437.919724][T13700] usb 7-1: USB disconnect, device number 26 [ 1438.189988][T19198] IPVS: stopping master sync thread 19197 ... [ 1441.657740][T19233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1443.632646][T19247] IPVS: stopping master sync thread 17929 ... [ 1445.725396][T10938] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1445.945384][T10938] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1445.978768][T10938] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1445.999028][T10938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1446.048470][T10938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1446.078769][T10938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1446.309245][T10938] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1446.565482][T10938] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1446.588238][T10938] usb 5-1: Product: syz [ 1446.596486][T10938] usb 5-1: Manufacturer: syz [ 1447.020224][T10938] usb 5-1: can't set config #1, error -71 [ 1447.439868][T10938] usb 5-1: USB disconnect, device number 48 [ 1448.450080][T19293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1464.869034][T13700] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1465.328863][T13700] usb 4-1: Using ep0 maxpacket: 32 [ 1465.342098][T13700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.352504][T13700] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1465.746954][T13700] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1465.756227][T13700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.069758][T13700] usb 4-1: config 0 descriptor?? [ 1466.075950][T13700] usb 4-1: can't set config #0, error -71 [ 1466.088331][T13700] usb 4-1: USB disconnect, device number 42 [ 1468.629680][T14862] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1469.312777][T14862] usb 2-1: Using ep0 maxpacket: 32 [ 1469.326615][T14862] usb 2-1: device descriptor read/all, error -71 [ 1470.164651][T19489] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1470.172781][T19489] VFS: Can't find a romfs filesystem on dev nullb0. [ 1470.172781][T19489] [ 1472.012270][T14936] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1472.443681][T19515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1473.960757][T19530] overlayfs: failed to resolve './file1': -2 [ 1474.809704][T19036] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1474.818982][T19036] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1474.828335][T10270] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1474.836917][T10270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1474.844724][T10270] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1474.852278][T10270] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1474.859349][T10270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1475.087512][T19529] chnl_net:caif_netlink_parms(): no params data found [ 1476.684683][T19529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.707236][T19529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.714622][T19529] bridge_slave_0: entered allmulticast mode [ 1476.721447][T19529] bridge_slave_0: entered promiscuous mode [ 1476.728792][T19529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.735863][T19529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.743200][T19529] bridge_slave_1: entered allmulticast mode [ 1476.750026][T19529] bridge_slave_1: entered promiscuous mode [ 1476.840167][T13700] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1476.899889][T19036] Bluetooth: hci5: command tx timeout [ 1476.920789][T19529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.978215][T19564] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1476.986363][T19564] VFS: Can't find a romfs filesystem on dev nullb0. [ 1476.986363][T19564] [ 1477.503829][T19529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.574579][T13700] usb 4-1: Using ep0 maxpacket: 32 [ 1477.602058][T13700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.613819][T19529] team0: Port device team_slave_0 added [ 1477.641206][T19529] team0: Port device team_slave_1 added [ 1477.656493][T13700] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1478.062026][T13700] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1478.101429][T13700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.124572][T13700] usb 4-1: config 0 descriptor?? [ 1478.134043][T13700] usb 4-1: can't set config #0, error -71 [ 1478.163117][T13700] usb 4-1: USB disconnect, device number 43 [ 1479.048533][T19036] Bluetooth: hci5: command tx timeout [ 1479.184456][T19529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.193226][T19529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.901587][T19529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.999915][T19529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.006879][T19529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1480.089037][T19529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.139006][T19036] Bluetooth: hci5: command tx timeout [ 1482.339217][T19529] hsr_slave_0: entered promiscuous mode [ 1482.348495][T19529] hsr_slave_1: entered promiscuous mode [ 1482.355720][T19529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1482.363967][T19529] Cannot create hsr debugfs directory [ 1482.458899][ T9814] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1482.628864][ T9814] usb 7-1: Using ep0 maxpacket: 32 [ 1482.760346][ T9814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.785085][ T9814] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1482.984012][ T9814] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1482.993231][ T9814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.147116][ T9814] usb 7-1: config 0 descriptor?? [ 1483.210207][T19529] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1483.219139][T19036] Bluetooth: hci5: command tx timeout [ 1483.227064][T19529] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1483.253691][T19529] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1483.288501][T19529] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1483.516319][T19529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.581470][T19529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.620407][T19230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.627516][T19230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.664721][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.671822][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.100936][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.107332][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.141533][T19529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.436644][T14862] usb 7-1: USB disconnect, device number 27 [ 1484.897783][T19036] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 1484.905600][T19635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1484.968183][T19635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1484.974895][T19635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1484.982637][T19635] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1485.005553][T19635] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1485.017302][T19635] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1485.951186][T19529] veth0_vlan: entered promiscuous mode [ 1485.970568][T19529] veth1_vlan: entered promiscuous mode [ 1486.165527][T19529] veth0_macvtap: entered promiscuous mode [ 1486.230135][T19529] veth1_macvtap: entered promiscuous mode [ 1486.313868][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.324638][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.334594][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.345076][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.354993][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.365508][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.375400][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.385959][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.396452][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.407420][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.417271][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.427731][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.438496][T19529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.447617][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.458075][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.468424][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.497438][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.507805][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.518441][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.528263][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.538795][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.548596][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.559135][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.569105][T19529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.579619][T19529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.607117][T19529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.616686][T19529] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.625427][T19529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.635356][T19529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.644129][T19529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.819341][T19036] Bluetooth: hci1: command 0x0406 tx timeout [ 1486.982120][T19036] Bluetooth: hci3: command 0x0c1a tx timeout [ 1486.988160][T19036] Bluetooth: hci2: command 0x0406 tx timeout [ 1487.059142][T19036] Bluetooth: hci5: command 0x0c1a tx timeout [ 1487.338535][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.345850][T10098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.346436][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.358719][T10098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.461697][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1487.779003][T19685] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1487.787212][T19685] VFS: Can't find a romfs filesystem on dev nullb0. [ 1487.787212][T19685] [ 1488.089087][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1488.178088][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.212566][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1488.236209][ T9] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1488.246931][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.266069][ T9] usb 7-1: config 0 descriptor?? [ 1489.515795][T10270] Bluetooth: hci5: command 0x0c1a tx timeout [ 1489.636089][ T9] usb 7-1: USB disconnect, device number 28 [ 1491.103630][ T5867] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1491.487709][ T5867] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1491.498101][ T5867] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1491.549022][T10270] Bluetooth: hci5: command 0x0c1a tx timeout [ 1491.574090][T19720] ALSA: mixer_oss: invalid OSS volume '' [ 1491.576658][ T5867] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1491.597278][ T5867] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1491.634151][ T5867] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1491.652611][ T5867] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1491.680968][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1491.721879][ T5867] usb 8-1: Product: syz [ 1491.945277][ T5867] usb 8-1: Manufacturer: syz [ 1492.671297][ T5867] usb 8-1: can't set config #1, error -71 [ 1492.903402][T19730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1492.918781][ T5867] usb 8-1: USB disconnect, device number 2 [ 1492.984234][T19731] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1492.992482][T19731] VFS: Can't find a romfs filesystem on dev nullb0. [ 1492.992482][T19731] [ 1493.824267][T19738] binder_alloc: 19732: binder_alloc_buf, no vma [ 1495.192363][ T5867] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1495.914751][ T5867] usb 8-1: Using ep0 maxpacket: 32 [ 1495.925175][ T5867] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.153471][ T5867] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1496.608932][ T9814] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1496.691628][ T5867] usb 8-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1496.700741][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.737360][ T5867] usb 8-1: config 0 descriptor?? [ 1496.743865][ T5867] usb 8-1: can't set config #0, error -71 [ 1496.837223][ T5867] usb 8-1: USB disconnect, device number 3 [ 1496.855022][T19773] IPVS: stopping master sync thread 19774 ... [ 1496.858857][T19774] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1496.918859][ T9814] usb 2-1: Using ep0 maxpacket: 32 [ 1496.931764][ T9814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.976151][ T9814] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1497.182826][ T9814] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1497.192146][ T9814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.360283][ T9814] usb 2-1: config 0 descriptor?? [ 1498.103266][T19788] binder: 19787:19788 ioctl 4018620d 0 returned -22 [ 1499.140428][T10938] usb 2-1: USB disconnect, device number 33 [ 1500.310690][T19823] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3166'. [ 1500.320780][T19823] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3166'. [ 1501.088442][T19832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3167'. [ 1503.528799][T10938] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1506.036464][T10938] usb 7-1: unable to read config index 0 descriptor/all [ 1506.043590][T10938] usb 7-1: can't read configurations, error -71 [ 1507.836014][T19902] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1507.836287][T19900] IPVS: stopping master sync thread 19902 ... [ 1509.489041][ T9814] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1510.371427][ T9814] usb 8-1: Using ep0 maxpacket: 32 [ 1510.379182][ T9814] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.444994][ T9814] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1510.514392][ T9814] usb 8-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1510.584394][ T9814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.780369][ T9814] usb 8-1: config 0 descriptor?? [ 1512.354931][ T9814] usb 8-1: USB disconnect, device number 4 [ 1513.048879][T19957] IPVS: stopping master sync thread 19960 ... [ 1513.049399][T19960] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1514.368824][ T9814] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1514.558838][ T9814] usb 8-1: Using ep0 maxpacket: 32 [ 1514.718644][ T9814] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.838800][ T9814] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1514.847801][ T9814] usb 8-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1514.870452][ T9814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.902314][ T9814] usb 8-1: config 0 descriptor?? [ 1514.910326][T19979] ALSA: mixer_oss: invalid OSS volume '' [ 1516.384285][T19992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1516.703472][T13700] usb 8-1: USB disconnect, device number 5 [ 1519.001577][T20027] ALSA: mixer_oss: invalid OSS volume '' [ 1520.090649][T20044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1524.001262][T20076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3225'. [ 1524.454508][T20085] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1524.469036][T20084] IPVS: stopping master sync thread 20085 ... [ 1526.508954][T14862] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1526.758895][T14862] usb 8-1: Using ep0 maxpacket: 32 [ 1526.805225][T14862] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.038726][T14862] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1527.049104][T14862] usb 8-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1527.058152][T14862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.083559][T14862] usb 8-1: config 0 descriptor?? [ 1528.703161][T20133] binder: 20132:20133 ioctl c0306201 0 returned -14 [ 1528.908020][ T5870] usb 8-1: USB disconnect, device number 6 [ 1536.066861][T20197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 1538.256320][T20228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1538.714330][T20231] ALSA: mixer_oss: invalid OSS volume '' [ 1538.887571][T20238] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1538.907065][T20238] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1539.989710][T10938] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1540.450113][T10938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1540.463295][T10938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1540.478979][T10938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1540.491599][T10938] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1540.513307][T10938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.531724][T10938] usb 8-1: Product: syz [ 1540.543270][T10938] usb 8-1: Manufacturer: syz [ 1540.595128][T10938] usb 8-1: SerialNumber: syz [ 1540.625086][T10938] usb 8-1: config 0 descriptor?? [ 1540.759924][T20262] IPVS: stopping master sync thread 17047 ... [ 1540.897151][T10938] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1541.127002][T10938] usb 8-1: USB disconnect, device number 7 [ 1543.929991][T20295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1545.074974][T19036] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1545.083852][T19036] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1545.092360][T19036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1545.101050][T19036] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1545.108741][T19036] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1545.117094][T19036] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1545.568513][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.755344][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.797470][T20311] IPVS: stopping master sync thread 20317 ... [ 1545.797887][T20317] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1546.157287][T20306] chnl_net:caif_netlink_parms(): no params data found [ 1546.933173][T20306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.953413][T20306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.011447][T20306] bridge_slave_0: entered allmulticast mode [ 1547.220007][T19036] Bluetooth: hci4: command tx timeout [ 1547.559616][T20306] bridge_slave_0: entered promiscuous mode [ 1547.585468][T20306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.595292][T20306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.607411][T20306] bridge_slave_1: entered allmulticast mode [ 1547.624546][T20306] bridge_slave_1: entered promiscuous mode [ 1547.707631][T20306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.820597][T20306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.063276][T20306] team0: Port device team_slave_0 added [ 1548.071264][T20306] team0: Port device team_slave_1 added [ 1548.094003][T20306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.101174][T20306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.238858][T20306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.251279][T20306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.258223][T20306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.406484][T20306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.573664][T20306] hsr_slave_0: entered promiscuous mode [ 1548.613143][T20306] hsr_slave_1: entered promiscuous mode [ 1548.619857][T20306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.627429][T20306] Cannot create hsr debugfs directory [ 1548.885315][T20306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.349244][T19036] Bluetooth: hci4: command tx timeout [ 1549.468343][T20306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.552416][T20306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.578850][T15093] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1549.632575][T20306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.738139][T15093] usb 8-1: Using ep0 maxpacket: 32 [ 1549.745364][T15093] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.769104][T15093] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1549.781421][T15093] usb 8-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1549.790703][T15093] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.806980][T20306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1549.814514][T15093] usb 8-1: config 0 descriptor?? [ 1549.827092][T20306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1549.837599][T20306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1549.847783][T20306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1549.950921][T20306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.965516][T20306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.002362][T10101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.009498][T10101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.096745][T10101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.103910][T10101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.788866][T19036] Bluetooth: hci4: command tx timeout [ 1551.813884][T20306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.954434][T10938] usb 8-1: USB disconnect, device number 8 [ 1552.315599][T20306] veth0_vlan: entered promiscuous mode [ 1552.351179][T20306] veth1_vlan: entered promiscuous mode [ 1552.387179][T20306] veth0_macvtap: entered promiscuous mode [ 1552.395199][T20306] veth1_macvtap: entered promiscuous mode [ 1552.414186][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.424840][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.437319][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.447987][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.464861][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.475573][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.492217][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.505839][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.518848][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.529879][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.540804][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.551820][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.563933][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.574726][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.594356][T20306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.617922][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.629789][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.640601][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.651143][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.660962][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.672222][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.682156][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.692695][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.702795][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.713438][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.723253][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.733794][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.744148][T20306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.754727][T20306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.765249][T20306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.775239][T20306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.784084][T20306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.792905][T20306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.801623][T20306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.860625][ T7214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.868458][ T7214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.889077][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.896905][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.858988][T19036] Bluetooth: hci4: command tx timeout [ 1602.794255][T10270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1602.802880][T10270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1602.811031][T10270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1603.305688][T10270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1603.314181][T10270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1603.323629][T10270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1604.947684][T20411] chnl_net:caif_netlink_parms(): no params data found [ 1605.248495][T20411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.315079][T20411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.430001][T20418] Bluetooth: hci1: command tx timeout [ 1605.545730][T20411] bridge_slave_0: entered allmulticast mode [ 1605.565969][T20411] bridge_slave_0: entered promiscuous mode [ 1605.583321][T20411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.590698][T20411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.597986][T20411] bridge_slave_1: entered allmulticast mode [ 1605.605153][T20411] bridge_slave_1: entered promiscuous mode [ 1605.662263][T20411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.780327][T20411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.965569][T20411] team0: Port device team_slave_0 added [ 1605.966991][T20411] team0: Port device team_slave_1 added [ 1606.019973][T20411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.019989][T20411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.020009][T20411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.021317][T20411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.021330][T20411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.021351][T20411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.077955][ C1] vkms_vblank_simulate: vblank timer overrun [ 1606.264736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1607.005035][T20411] hsr_slave_0: entered promiscuous mode [ 1607.011172][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.018502][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.031962][T20411] hsr_slave_1: entered promiscuous mode [ 1607.059223][T20411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1607.076925][T20411] Cannot create hsr debugfs directory [ 1607.197167][T20411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.550389][T20418] Bluetooth: hci1: command tx timeout [ 1608.330190][T20411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.618727][T20418] Bluetooth: hci1: command tx timeout [ 1609.756977][T20411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.003103][T20411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.806277][T20505] IPVS: stopping master sync thread 20510 ... [ 1610.808680][T20510] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1610.877493][T20511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1610.918277][T20411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1611.040679][T20411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1611.508548][T20411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1611.699341][T20418] Bluetooth: hci1: command tx timeout [ 1611.727917][T20411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1612.161221][T20411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.514958][T20411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.776131][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.783300][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.895104][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.902262][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.010611][T20411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1613.818739][ T5870] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1613.898567][T20411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.021791][T20411] veth0_vlan: entered promiscuous mode [ 1614.087948][T20411] veth1_vlan: entered promiscuous mode [ 1614.118726][ T5870] usb 8-1: Using ep0 maxpacket: 32 [ 1614.125229][ T5870] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.134873][T20411] veth0_macvtap: entered promiscuous mode [ 1614.138850][ T5870] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1614.162538][ T5870] usb 8-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1614.174662][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.185911][ T5870] usb 8-1: config 0 descriptor?? [ 1614.193661][T20411] veth1_macvtap: entered promiscuous mode [ 1614.224178][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.459660][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.232616][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.253320][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.351104][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.362069][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.372066][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.625379][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.635894][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.646589][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.656662][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.667331][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.682305][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.704737][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1615.715037][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1615.726724][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.288460][T20411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1616.321337][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.385656][ T5870] usb 8-1: USB disconnect, device number 9 [ 1616.398716][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.408817][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.419658][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.430455][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.456250][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.466108][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.476696][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.486551][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.497015][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.506949][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.517437][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.527299][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.538222][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.548941][T20411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.559525][T20411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.572255][T20411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1616.592640][T20411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.601492][T20411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.613914][T20411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.622681][T20411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.939396][T20562] IPVS: stopping master sync thread 20564 ... [ 1616.939396][T20564] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1617.201587][ T7214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.224730][ T7214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.431127][T20566] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1617.448775][T20566] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1618.705704][ T7214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.727378][ T7214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.076437][ T5867] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1619.914753][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1620.000411][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1620.010168][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1620.030340][ T5867] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1620.039454][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.048175][ T5867] usb 2-1: Product: syz [ 1620.048193][ T5867] usb 2-1: Manufacturer: syz [ 1620.048208][ T5867] usb 2-1: SerialNumber: syz [ 1620.065371][ T5867] usb 2-1: config 0 descriptor?? [ 1622.129994][T14862] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1622.245682][ T5867] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1622.260546][ T5867] usb 2-1: USB disconnect, device number 34 [ 1622.318810][T14862] usb 7-1: Using ep0 maxpacket: 32 [ 1622.326568][T14862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.367316][T14862] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1622.482492][T14862] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1622.722763][T14862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.403004][T14862] usb 7-1: config 0 descriptor?? [ 1624.842574][T13700] usb 7-1: USB disconnect, device number 31 [ 1626.670066][T20639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1626.680772][T20639] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1626.688887][T20639] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1626.694886][T20639] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1626.702939][T20639] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1626.711768][T20639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1626.717750][T20639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1626.729332][T20639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1626.791528][T14936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1626.801972][T14936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1626.817670][T14936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1626.843829][T14936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1626.864601][T14936] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1626.875397][T14936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1626.998844][ T5870] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1627.120050][T20648] chnl_net:caif_netlink_parms(): no params data found [ 1627.158820][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 1627.192542][ T5870] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.204995][ T29] audit: type=1400 audit(1736033543.593:284): avc: denied { read write } for pid=20668 comm="syz.7.3366" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1627.241798][ T5870] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1627.252534][T20648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.255337][ T5870] usb 7-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1627.260826][ T29] audit: type=1400 audit(1736033543.593:285): avc: denied { open } for pid=20668 comm="syz.7.3366" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1627.268838][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.309738][ T5870] usb 7-1: config 0 descriptor?? [ 1627.317569][T20648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.324861][T20648] bridge_slave_0: entered allmulticast mode [ 1627.331142][ T29] audit: type=1400 audit(1736033543.593:286): avc: denied { read } for pid=20668 comm="syz.7.3366" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1627.339582][T20648] bridge_slave_0: entered promiscuous mode [ 1627.377760][ T29] audit: type=1400 audit(1736033543.593:287): avc: denied { open } for pid=20668 comm="syz.7.3366" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1627.395500][T20648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.410837][T20648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.418390][T20648] bridge_slave_1: entered allmulticast mode [ 1627.429263][T20648] bridge_slave_1: entered promiscuous mode [ 1627.435093][ T29] audit: type=1400 audit(1736033543.813:288): avc: denied { mounton } for pid=20673 comm="syz.1.3367" path="/proc/65/task" dev="proc" ino=67738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1627.481513][T20648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.502762][T20648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.613621][T20648] team0: Port device team_slave_0 added [ 1627.637862][T20648] team0: Port device team_slave_1 added [ 1627.715559][T20648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.716516][ T29] audit: type=1400 audit(1736033544.093:289): avc: denied { shutdown } for pid=20679 comm="syz.7.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1627.725438][T20648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.768920][T20648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.782299][T20648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.789422][T20648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.817059][T20648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.868016][ T29] audit: type=1400 audit(1736033544.243:290): avc: denied { ioctl } for pid=20683 comm="syz.0.3371" path="socket:[67773]" dev="sockfs" ino=67773 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1627.959823][T20648] hsr_slave_0: entered promiscuous mode [ 1627.966405][T20648] hsr_slave_1: entered promiscuous mode [ 1627.972917][T20648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1627.986774][T20648] Cannot create hsr debugfs directory [ 1628.017366][ T29] audit: type=1400 audit(1736033544.393:291): avc: denied { write } for pid=20687 comm="syz.7.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1628.034120][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3373'. [ 1628.049731][ T29] audit: type=1400 audit(1736033544.393:292): avc: denied { ioctl } for pid=20687 comm="syz.7.3373" path="socket:[67783]" dev="sockfs" ino=67783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1628.084153][ T29] audit: type=1400 audit(1736033544.393:293): avc: denied { setopt } for pid=20687 comm="syz.7.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1628.121975][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1628.128565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.136381][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.144244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.152069][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.159936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.167744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.175621][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.183445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.191303][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.199130][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.206978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.214816][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.222653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.230478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.238332][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.246155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.254038][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.261848][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.269704][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.277500][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.285347][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.293173][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.301039][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.308873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.316704][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1628.324513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1628.407729][T20648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.512608][T20648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.634414][T20648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.771771][ T5870] usb 7-1: USB disconnect, device number 32 [ 1628.772062][T20418] Bluetooth: hci1: command 0x0c1a tx timeout [ 1628.783846][T20418] Bluetooth: hci4: command 0x0c1a tx timeout [ 1628.786558][T14936] Bluetooth: hci5: command 0x0c1a tx timeout [ 1628.789856][T20418] Bluetooth: hci3: command 0x0c1a tx timeout [ 1628.827967][T20699] 9pnet_virtio: no channels available for device syz [ 1628.861281][T20701] binder: 20700:20701 ioctl c0306201 20000580 returned -22 [ 1628.873518][T20703] Attempt to restore checkpoint with obsolete wellknown handles [ 1628.925408][T20648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.978975][T19036] Bluetooth: hci2: command tx timeout [ 1629.040916][T20648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1629.063338][T20648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1629.072970][T20648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1629.091237][T20648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1629.174538][T20715] XFS (nullb0): no-recovery mounts must be read-only. [ 1629.215002][T20648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.277125][T20720] 9pnet_virtio: no channels available for device syz [ 1629.289998][T20648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.313813][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.320982][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.389339][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.396405][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1629.569941][T20732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 1629.715831][T20648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.769322][T20741] smc: net device wg0 applied user defined pnetid SYZ0 [ 1629.790729][T20648] veth0_vlan: entered promiscuous mode [ 1629.808231][T20648] veth1_vlan: entered promiscuous mode [ 1629.815095][T20738] netlink: 'syz.6.3391': attribute type 39 has an invalid length. [ 1629.832220][T20648] veth0_macvtap: entered promiscuous mode [ 1629.863028][T20738] smc: removing net device wg0 with user defined pnetid SYZ0 [ 1629.875141][T20648] veth1_macvtap: entered promiscuous mode [ 1629.888413][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1629.899814][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.910014][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1629.920902][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.933010][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1629.948547][T20752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1629.954516][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.967577][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1629.978252][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.984582][T20752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1629.988137][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.007753][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.017716][T20752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1630.027321][T20752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1630.037639][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.058147][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.068411][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.079763][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.099050][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.109699][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.119632][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.130713][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.158745][T20648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.174255][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.186083][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.195969][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.206676][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.216889][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.228588][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.238607][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.249125][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.259968][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.277300][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.287184][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.302561][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.312854][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.326815][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.337178][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.352292][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.362896][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.373469][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.394976][T20648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1630.434445][T20648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.451665][T20648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.463846][T20648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.481952][T20648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.584028][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.612333][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.670405][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.683752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.818903][T19036] Bluetooth: hci5: command 0x0c1a tx timeout [ 1630.825045][T20418] Bluetooth: hci4: command 0x0c1a tx timeout [ 1630.831223][T20418] Bluetooth: hci1: command 0x0c1a tx timeout [ 1631.099864][T14936] Bluetooth: hci2: command tx timeout [ 1632.187219][T20803] 9pnet_virtio: no channels available for device syz [ 1632.227462][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 1632.227477][ T29] audit: type=1400 audit(1736033548.603:334): avc: denied { ioctl } for pid=20806 comm="syz.6.3417" path="socket:[68565]" dev="sockfs" ino=68565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1632.288991][T20805] kvm: pic: single mode not supported [ 1632.289152][T20805] kvm: pic: level sensitive irq not supported [ 1632.317405][T20805] kvm: pic: single mode not supported [ 1632.323792][T20805] kvm: pic: level sensitive irq not supported [ 1632.343578][T20805] kvm: pic: single mode not supported [ 1632.349898][T20805] kvm: pic: level sensitive irq not supported [ 1632.356072][T20805] kvm: pic: single mode not supported [ 1632.370738][T20805] kvm: pic: single mode not supported [ 1632.376474][T20805] kvm: pic: single mode not supported [ 1632.388861][T20805] kvm: pic: level sensitive irq not supported [ 1632.404562][T20805] kvm: pic: level sensitive irq not supported [ 1632.415075][T20805] kvm: pic: level sensitive irq not supported [ 1632.443363][T20805] kvm: pic: level sensitive irq not supported [ 1632.459504][T20805] kvm: pic: single mode not supported [ 1632.465590][T20805] kvm: pic: level sensitive irq not supported [ 1632.487222][T20818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1632.502990][T20805] kvm: pic: single mode not supported [ 1632.503005][T20805] kvm: pic: level sensitive irq not supported [ 1632.508576][T20805] kvm: pic: single mode not supported [ 1632.515670][T20805] kvm: pic: level sensitive irq not supported [ 1632.532413][T20818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1632.556616][T20805] kvm: pic: single mode not supported [ 1632.556907][T20818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1632.572410][T20818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1632.649082][ T29] audit: type=1400 audit(1736033549.033:335): avc: denied { execute } for pid=20823 comm="syz.3.3423" name="file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1632.671678][T20824] process 'syz.3.3423' launched './file0' with NULL argv: empty string added [ 1632.718792][ T29] audit: type=1400 audit(1736033549.083:336): avc: denied { execute_no_trans } for pid=20823 comm="syz.3.3423" path="/6/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1632.755789][T20829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3425'. [ 1632.774101][ T29] audit: type=1400 audit(1736033549.093:337): avc: denied { append } for pid=20827 comm="syz.0.3425" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1632.853066][ T29] audit: type=1404 audit(1736033549.193:338): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1632.879944][ T29] audit: type=1400 audit(1736033549.203:339): avc: denied { read } for pid=20832 comm="syz.1.3426" name="nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1632.917599][ T29] audit: type=1400 audit(1736033549.203:340): avc: denied { read } for pid=20832 comm="syz.1.3426" name="nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1632.949220][T14936] Bluetooth: hci1: command 0x0c1a tx timeout [ 1632.955278][T14936] Bluetooth: hci4: command 0x0c1a tx timeout [ 1632.962509][ T29] audit: type=1400 audit(1736033549.213:341): avc: denied { execute } for pid=20823 comm="syz.3.3423" name="file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 1632.984773][ T29] audit: type=1400 audit(1736033549.213:342): avc: denied { mounton } for pid=20832 comm="syz.1.3426" path="/39/file1" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 1633.009094][ T29] audit: type=1400 audit(1736033549.233:343): avc: denied { read write } for pid=20411 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1633.048791][T20837] 9pnet_virtio: no channels available for device syz [ 1633.068349][T20841] netlink: 'syz.3.3429': attribute type 1 has an invalid length. [ 1633.119517][T20845] 9pnet_virtio: no channels available for device syz [ 1633.149240][T14936] Bluetooth: hci2: command tx timeout [ 1633.240117][T20850] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1633.275838][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1633.311316][T20852] binder: 20851:20852 unknown command 0 [ 1633.342588][T20852] binder: 20851:20852 ioctl c0306201 20000080 returned -22 [ 1633.491428][T20860] usb usb3: usbfs: process 20860 (syz.0.3440) did not claim interface 0 before use [ 1634.018368][T20895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1634.028036][T20895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1634.067827][T20895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1634.076898][T13700] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1634.100953][T20895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1634.105132][T20898] xt_hashlimit: size too large, truncated to 1048576 [ 1634.288763][T13700] usb 8-1: Using ep0 maxpacket: 8 [ 1634.304089][T13700] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1634.317473][T13700] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1634.330460][T13700] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1634.345213][T13700] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1634.362917][T13700] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1634.375320][T13700] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.617000][T13700] usb 8-1: usb_control_msg returned -32 [ 1634.626844][T13700] usbtmc 8-1:16.0: can't read capabilities [ 1635.007777][T14936] Bluetooth: unknown link type 227 [ 1635.013719][T14936] Bluetooth: hci4: connection err: -111 [ 1635.099856][T14936] Bluetooth: hci1: ISO packet for unknown connection handle 304 [ 1635.229151][T14936] Bluetooth: hci2: command tx timeout [ 1635.275019][ T5867] usb 8-1: USB disconnect, device number 10 [ 1636.068794][T14862] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1636.351472][T14862] usb 7-1: Using ep0 maxpacket: 8 [ 1636.385497][T14862] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1636.394003][T14862] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1636.403122][T14862] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1636.412962][T14862] usb 7-1: config 250 has no interface number 0 [ 1636.419413][T14862] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1636.431148][T14862] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1636.441754][T14862] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 29753, setting to 1024 [ 1636.453537][T14862] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1636.464301][T14862] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1636.477929][T14862] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1636.492981][T14862] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1636.502111][T14862] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1636.510840][T14862] usb 7-1: Product: syz [ 1636.515001][T14862] usb 7-1: SerialNumber: syz [ 1636.524692][T14862] hub 7-1:250.228: bad descriptor, ignoring hub [ 1636.531448][T14862] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1636.729731][T14862] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1636.783680][T14936] Bluetooth: unknown link type 227 [ 1636.789012][T14936] Bluetooth: hci4: connection err: -111 [ 1636.801810][T14936] Bluetooth: hci1: unexpected event for opcode 0x040e [ 1637.041609][ C0] usblp0: nonzero read bulk status received: -71 [ 1637.069787][ T5867] usb 7-1: USB disconnect, device number 33 [ 1637.084590][ T5867] usblp0: removed [ 1637.316026][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 1637.316040][ T29] audit: type=1400 audit(1736033553.693:426): avc: denied { unmount } for pid=19529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1637.345038][ T29] audit: type=1400 audit(1736033553.723:427): avc: denied { create } for pid=20969 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1637.367370][ T29] audit: type=1400 audit(1736033553.743:428): avc: denied { setopt } for pid=20969 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1637.449994][ T29] audit: type=1400 audit(1736033553.773:429): avc: denied { ioctl } for pid=20969 comm="syz.1.3480" path="socket:[69192]" dev="sockfs" ino=69192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1637.502180][ T29] audit: type=1400 audit(1736033553.773:430): avc: denied { write } for pid=20969 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1637.582635][ T29] audit: type=1400 audit(1736033553.803:431): avc: denied { mount } for pid=20973 comm="syz.7.3482" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1637.589322][T14936] Bluetooth: hci5: unexpected subevent 0x1a length: 10 > 6 [ 1637.662367][T14936] Bluetooth: unknown link type 227 [ 1637.667531][T14936] Bluetooth: hci1: connection err: -111 [ 1637.879053][ T29] audit: type=1400 audit(1736033554.253:432): avc: denied { create } for pid=20995 comm="syz.1.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1637.927853][T20996] netlink: 'syz.1.3491': attribute type 46 has an invalid length. [ 1637.956759][T20996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1638.204057][ T29] audit: type=1400 audit(1736033554.583:433): avc: denied { ioctl } for pid=21010 comm="syz.0.3497" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1638.298751][ T29] audit: type=1400 audit(1736033554.613:434): avc: denied { unlink } for pid=21009 comm="syz.1.3499" name="#22c" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1638.359759][ T29] audit: type=1400 audit(1736033554.613:435): avc: denied { mount } for pid=21009 comm="syz.1.3499" name="/" dev="overlay" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1638.399174][T21006] kvm: kvm [21005]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1638.413039][T21006] kvm: kvm [21005]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4500000044 [ 1638.431557][T21006] kvm_intel: kvm [21005]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0xf50000004e [ 1638.459632][T21022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1638.477909][T21022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1638.689365][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1639.477283][T21060] netlink: 'syz.6.3521': attribute type 6 has an invalid length. [ 1639.830334][T21068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3523'. [ 1640.102637][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1640.280923][T21103] warning: `syz.1.3539' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1640.392846][T21110] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3542'. [ 1640.456384][T21113] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1640.468944][T21113] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1640.489610][T21113] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1640.499206][T15093] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 1640.637846][T21123] Illegal XDP return value 4220791471 on prog (id 802) dev N/A, expect packet loss! [ 1640.651926][T15093] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1640.662714][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1640.683745][T21125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1640.696866][T15093] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1640.709769][T21125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1640.727379][T21125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1640.736697][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1640.768959][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1640.789606][T15093] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1640.797431][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1640.824465][T15093] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1640.847618][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1640.849345][T21131] netlink: 'syz.6.3553': attribute type 29 has an invalid length. [ 1640.866563][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1640.887210][T15093] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1640.902629][T21131] netlink: 'syz.6.3553': attribute type 29 has an invalid length. [ 1640.912904][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1640.943765][T15093] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1640.983945][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1641.009190][T15093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1641.053110][T15093] usb 8-1: string descriptor 0 read error: -22 [ 1641.070083][T15093] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1641.084136][T15093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.113513][T21144] netlink: 'syz.3.3560': attribute type 29 has an invalid length. [ 1641.140332][T21144] netlink: 'syz.3.3560': attribute type 29 has an invalid length. [ 1641.179097][T15093] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1641.544553][T15093] usb 8-1: USB disconnect, device number 11 [ 1641.617261][T21167] netlink: 'syz.3.3569': attribute type 3 has an invalid length. [ 1641.630867][T21167] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 1642.575364][T21214] netlink: 'syz.6.3589': attribute type 2 has an invalid length. [ 1642.589076][T21214] netlink: 'syz.6.3589': attribute type 8 has an invalid length. [ 1642.598022][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1642.598259][ T29] audit: type=1400 audit(1736033558.973:478): avc: denied { write } for pid=21212 comm="syz.7.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1642.669065][ T29] audit: type=1400 audit(1736033559.013:479): avc: denied { ioctl } for pid=21212 comm="syz.7.3588" path="socket:[71924]" dev="sockfs" ino=71924 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1642.697152][T21219] syzkaller0: refused to change device tx_queue_len [ 1643.050317][T21232] overlayfs: failed to get inode (-116) [ 1643.108866][T21232] overlayfs: failed to look up (file0) for ino (-116) [ 1643.397877][ T29] audit: type=1400 audit(1736033559.773:480): avc: denied { setopt } for pid=21257 comm="syz.1.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1643.464501][T21262] netlink: 'syz.3.3610': attribute type 2 has an invalid length. [ 1643.491080][T21262] netlink: 'syz.3.3610': attribute type 4 has an invalid length. [ 1643.502331][ T29] audit: type=1400 audit(1736033559.773:481): avc: denied { write } for pid=21257 comm="syz.1.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1643.535978][ T29] audit: type=1400 audit(1736033559.773:482): avc: denied { connect } for pid=21257 comm="syz.1.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1643.557413][ T29] audit: type=1400 audit(1736033559.773:483): avc: denied { name_connect } for pid=21257 comm="syz.1.3609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1643.690359][ T29] audit: type=1400 audit(1736033560.073:484): avc: denied { execute } for pid=21271 comm="syz.6.3614" path="/479/cpu.stat" dev="tmpfs" ino=2859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1643.739123][T21275] __nla_validate_parse: 9 callbacks suppressed [ 1643.739141][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1643.760784][T21275] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1643.805201][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1643.827731][ T29] audit: type=1400 audit(1736033560.203:485): avc: denied { create } for pid=21276 comm="syz.3.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1643.848976][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1643.874319][ T29] audit: type=1400 audit(1736033560.203:486): avc: denied { write } for pid=21276 comm="syz.3.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1643.881800][T21282] syz.6.3620[21282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1643.931494][T21282] syz.6.3620[21282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1643.936363][ T29] audit: type=1400 audit(1736033560.203:487): avc: denied { nlmsg_write } for pid=21276 comm="syz.3.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1643.966310][T21282] syz.6.3620[21282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1644.044019][T21284] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 1646.405164][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3649'. [ 1646.665057][T21364] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3654'. [ 1647.409068][T21413] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3674'. [ 1647.615300][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1647.615316][ T29] audit: type=1400 audit(1736033563.993:503): avc: denied { mount } for pid=21412 comm="syz.1.3676" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1647.708185][ T29] audit: type=1400 audit(1736033564.033:504): avc: denied { write } for pid=21412 comm="syz.1.3676" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1647.743974][ T29] audit: type=1400 audit(1736033564.063:505): avc: denied { open } for pid=21412 comm="syz.1.3676" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1647.797423][T21424] syzkaller0: entered allmulticast mode [ 1647.840133][T21424] syzkaller0 (unregistering): left allmulticast mode [ 1647.861490][ T29] audit: type=1400 audit(1736033564.123:506): avc: denied { unmount } for pid=20306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1648.088765][ T29] audit: type=1326 audit(1736033564.453:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21428 comm="syz.7.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8b585d29 code=0x7ffc0000 [ 1648.121575][ T29] audit: type=1326 audit(1736033564.453:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21428 comm="syz.7.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8b585d29 code=0x7ffc0000 [ 1648.202154][ T29] audit: type=1326 audit(1736033564.453:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21428 comm="syz.7.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8b585d29 code=0x7ffc0000 [ 1648.253468][ T29] audit: type=1326 audit(1736033564.453:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21428 comm="syz.7.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f6c8b585d29 code=0x7ffc0000 [ 1648.308896][ T29] audit: type=1326 audit(1736033564.463:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21428 comm="syz.7.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8b585d29 code=0x7ffc0000 [ 1648.352909][ T29] audit: type=1400 audit(1736033564.693:512): avc: denied { read } for pid=21437 comm="syz.0.3686" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1648.808917][T15093] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1648.851074][T21463] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3695'. [ 1648.855399][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3695'. [ 1648.961938][T15093] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1648.979992][T15093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1648.995893][T15093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1649.018956][T15093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.036796][T15093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1649.046285][T15093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1649.067872][T15093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.109772][T15093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1649.130966][T15093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1649.166590][T15093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.219963][T15093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1649.232006][T15093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1649.260639][T15093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.279809][T15093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1649.318456][T15093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1649.358529][T15093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.376505][T15093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1649.391543][T15093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1649.437141][T15093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.459771][T15093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1649.476712][T15093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1649.527953][T15093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.554423][T15093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1649.564357][T15093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1649.585821][T15093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.586466][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3708'. [ 1649.597542][T15093] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1649.611030][T15093] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1649.628769][T15093] usb 4-1: Product: syz [ 1649.643148][T15093] usb 4-1: Manufacturer: syz [ 1649.653449][T15093] usb 4-1: SerialNumber: syz [ 1649.672962][T15093] usb 4-1: config 0 descriptor?? [ 1649.724444][T15093] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1650.052240][T15093] usb 4-1: USB disconnect, device number 44 [ 1650.076155][T15093] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1651.274749][T21557] ------------[ cut here ]------------ [ 1651.280312][T21557] Please remove unsupported % in format string [ 1651.287350][T21557] WARNING: CPU: 1 PID: 21557 at lib/vsprintf.c:2704 format_decode+0xa07/0xba0 [ 1651.296286][T21557] Modules linked in: [ 1651.300213][T21557] CPU: 1 UID: 0 PID: 21557 Comm: syz.7.3737 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 1651.311038][T21557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1651.321138][T21557] RIP: 0010:format_decode+0xa07/0xba0 [ 1651.326538][T21557] Code: f6 41 c6 44 24 05 08 e9 c4 fa ff ff e8 82 c6 73 f6 c6 05 80 a6 21 05 01 90 48 c7 c7 60 25 cd 8c 40 0f b6 f5 e8 fa ff 33 f6 90 <0f> 0b 90 90 e9 17 fc ff ff 48 8b 3c 24 e8 17 72 d6 f6 e9 0f f7 ff [ 1651.346213][T21557] RSP: 0018:ffffc9000ca676e0 EFLAGS: 00010282 [ 1651.352350][T21557] RAX: 0000000000000000 RBX: ffffc9000ca67954 RCX: ffffc9000d80b000 [ 1651.360367][T21557] RDX: 0000000000080000 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 1651.368351][T21557] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1651.376390][T21557] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9000ca677e0 [ 1651.384429][T21557] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000ffffffd0 [ 1651.392470][T21557] FS: 00007f6c8c39f6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1651.401429][T21557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.408030][T21557] CR2: 0000001b2e1f9ff8 CR3: 00000000816c8000 CR4: 00000000003526f0 [ 1651.416059][T21557] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 1651.424083][T21557] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1651.432093][T21557] Call Trace: [ 1651.435372][T21557] [ 1651.438305][T21557] ? __warn+0xea/0x3c0 [ 1651.442414][T21557] ? mark_lock+0xb5/0xc60 [ 1651.446754][T21557] ? format_decode+0xa07/0xba0 [ 1651.451551][T21557] ? report_bug+0x3c0/0x580 [ 1651.456081][T21557] ? handle_bug+0x54/0xa0 [ 1651.460485][T21557] ? exc_invalid_op+0x17/0x50 [ 1651.465193][T21557] ? asm_exc_invalid_op+0x1a/0x20 [ 1651.470285][T21557] ? __warn_printk+0x1a6/0x350 [ 1651.475079][T21557] ? format_decode+0xa07/0xba0 [ 1651.479913][T21557] ? __pfx_format_decode+0x10/0x10 [ 1651.485040][T21557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1651.491003][T21557] ? bpf_bprintf_prepare+0x5ea/0x1490 [ 1651.496404][T21557] bstr_printf+0x137/0x1090 [ 1651.500968][T21557] ? __pfx_bstr_printf+0x10/0x10 [ 1651.505928][T21557] ? find_held_lock+0x2d/0x110 [ 1651.510777][T21557] bpf_trace_printk+0x10b/0x190 [ 1651.515637][T21557] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1651.521057][T21557] ? trace_lock_acquire+0x14e/0x1f0 [ 1651.526284][T21557] ? bpf_test_timer_enter+0x9d/0x180 [ 1651.531612][T21557] ? ktime_get+0x206/0x300 [ 1651.536044][T21557] ? lockdep_hardirqs_on+0x7c/0x110 [ 1651.541310][T21557] ? read_tsc+0x9/0x20 [ 1651.545402][T21557] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 1651.550919][T21557] bpf_test_run+0x49d/0xa90 [ 1651.555456][T21557] ? __pfx_bpf_test_run+0x10/0x10 [ 1651.560552][T21557] ? __asan_memset+0x23/0x50 [ 1651.565155][T21557] bpf_prog_test_run_skb+0xb8d/0x2270 [ 1651.570594][T21557] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1651.576425][T21557] ? fput+0x67/0x440 [ 1651.580366][T21557] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1651.586185][T21557] __sys_bpf+0xfc6/0x49c0 [ 1651.590568][T21557] ? __pfx___sys_bpf+0x10/0x10 [ 1651.595353][T21557] ? __pfx___lock_acquire+0x10/0x10 [ 1651.600592][T21557] ? handle_mm_fault+0x497/0xaa0 [ 1651.605545][T21557] ? do_futex+0x123/0x350 [ 1651.609908][T21557] ? __pfx_do_futex+0x10/0x10 [ 1651.614601][T21557] ? xfd_validate_state+0x5d/0x180 [ 1651.619776][T21557] ? rcu_is_watching+0x12/0xc0 [ 1651.624575][T21557] __x64_sys_bpf+0x78/0xc0 [ 1651.629053][T21557] ? lockdep_hardirqs_on+0x7c/0x110 [ 1651.634268][T21557] do_syscall_64+0xcd/0x250 [ 1651.638813][T21557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.644719][T21557] RIP: 0033:0x7f6c8b585d29 [ 1651.649170][T21557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1651.668842][T21557] RSP: 002b:00007f6c8c39f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1651.677276][T21557] RAX: ffffffffffffffda RBX: 00007f6c8b775fa0 RCX: 00007f6c8b585d29 [ 1651.685292][T21557] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 1651.693300][T21557] RBP: 00007f6c8b601b08 R08: 0000000000000000 R09: 0000000000000000 [ 1651.701291][T21557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1651.709287][T21557] R13: 0000000000000000 R14: 00007f6c8b775fa0 R15: 00007ffde84b4378 [ 1651.717277][T21557] [ 1651.720336][T21557] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1651.727626][T21557] CPU: 1 UID: 0 PID: 21557 Comm: syz.7.3737 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 1651.738399][T21557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1651.748462][T21557] Call Trace: [ 1651.751745][T21557] [ 1651.754682][T21557] dump_stack_lvl+0x3d/0x1f0 [ 1651.759297][T21557] panic+0x71d/0x800 [ 1651.763214][T21557] ? __pfx_panic+0x10/0x10 [ 1651.767654][T21557] ? show_trace_log_lvl+0x29d/0x3d0 [ 1651.772839][T21557] ? format_decode+0xa07/0xba0 [ 1651.777579][T21557] check_panic_on_warn+0xab/0xb0 [ 1651.782507][T21557] __warn+0xf6/0x3c0 [ 1651.786401][T21557] ? mark_lock+0xb5/0xc60 [ 1651.790738][T21557] ? format_decode+0xa07/0xba0 [ 1651.795501][T21557] report_bug+0x3c0/0x580 [ 1651.799813][T21557] handle_bug+0x54/0xa0 [ 1651.803950][T21557] exc_invalid_op+0x17/0x50 [ 1651.808448][T21557] asm_exc_invalid_op+0x1a/0x20 [ 1651.813285][T21557] RIP: 0010:format_decode+0xa07/0xba0 [ 1651.818636][T21557] Code: f6 41 c6 44 24 05 08 e9 c4 fa ff ff e8 82 c6 73 f6 c6 05 80 a6 21 05 01 90 48 c7 c7 60 25 cd 8c 40 0f b6 f5 e8 fa ff 33 f6 90 <0f> 0b 90 90 e9 17 fc ff ff 48 8b 3c 24 e8 17 72 d6 f6 e9 0f f7 ff [ 1651.838244][T21557] RSP: 0018:ffffc9000ca676e0 EFLAGS: 00010282 [ 1651.844299][T21557] RAX: 0000000000000000 RBX: ffffc9000ca67954 RCX: ffffc9000d80b000 [ 1651.852255][T21557] RDX: 0000000000080000 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 1651.860209][T21557] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1651.868165][T21557] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9000ca677e0 [ 1651.876122][T21557] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000ffffffd0 [ 1651.884090][T21557] ? __warn_printk+0x1a6/0x350 [ 1651.888856][T21557] ? __pfx_format_decode+0x10/0x10 [ 1651.893955][T21557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1651.899836][T21557] ? bpf_bprintf_prepare+0x5ea/0x1490 [ 1651.905203][T21557] bstr_printf+0x137/0x1090 [ 1651.909696][T21557] ? __pfx_bstr_printf+0x10/0x10 [ 1651.914619][T21557] ? find_held_lock+0x2d/0x110 [ 1651.919375][T21557] bpf_trace_printk+0x10b/0x190 [ 1651.924209][T21557] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1651.929563][T21557] ? trace_lock_acquire+0x14e/0x1f0 [ 1651.934753][T21557] ? bpf_test_timer_enter+0x9d/0x180 [ 1651.940027][T21557] ? ktime_get+0x206/0x300 [ 1651.944425][T21557] ? lockdep_hardirqs_on+0x7c/0x110 [ 1651.949610][T21557] ? read_tsc+0x9/0x20 [ 1651.953673][T21557] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 1651.959114][T21557] bpf_test_run+0x49d/0xa90 [ 1651.963614][T21557] ? __pfx_bpf_test_run+0x10/0x10 [ 1651.968642][T21557] ? __asan_memset+0x23/0x50 [ 1651.973229][T21557] bpf_prog_test_run_skb+0xb8d/0x2270 [ 1651.978596][T21557] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1651.984391][T21557] ? fput+0x67/0x440 [ 1651.988276][T21557] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1651.994070][T21557] __sys_bpf+0xfc6/0x49c0 [ 1651.998391][T21557] ? __pfx___sys_bpf+0x10/0x10 [ 1652.003149][T21557] ? __pfx___lock_acquire+0x10/0x10 [ 1652.008330][T21557] ? handle_mm_fault+0x497/0xaa0 [ 1652.013258][T21557] ? do_futex+0x123/0x350 [ 1652.017573][T21557] ? __pfx_do_futex+0x10/0x10 [ 1652.022244][T21557] ? xfd_validate_state+0x5d/0x180 [ 1652.027342][T21557] ? rcu_is_watching+0x12/0xc0 [ 1652.032102][T21557] __x64_sys_bpf+0x78/0xc0 [ 1652.036511][T21557] ? lockdep_hardirqs_on+0x7c/0x110 [ 1652.041702][T21557] do_syscall_64+0xcd/0x250 [ 1652.046200][T21557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.052086][T21557] RIP: 0033:0x7f6c8b585d29 [ 1652.056485][T21557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1652.076077][T21557] RSP: 002b:00007f6c8c39f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1652.084481][T21557] RAX: ffffffffffffffda RBX: 00007f6c8b775fa0 RCX: 00007f6c8b585d29 [ 1652.092438][T21557] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 1652.100394][T21557] RBP: 00007f6c8b601b08 R08: 0000000000000000 R09: 0000000000000000 [ 1652.108349][T21557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1652.116302][T21557] R13: 0000000000000000 R14: 00007f6c8b775fa0 R15: 00007ffde84b4378 [ 1652.124268][T21557] [ 1652.127460][T21557] Kernel Offset: disabled [ 1652.131761][T21557] Rebooting in 86400 seconds..